last executing test programs: 8.043307781s ago: executing program 3 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x22, {0x22, 0x3, "d2e793385b8540e9885840d0b1eebd2854693d4bfc4e487cbbb1687a69ffcdad"}}, &(0x7f0000000180)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "a6f0890d2d441eae6cbc731b720ea7a45c974b00e24e41eab4218144ce4b19a0c56048ae46c8eeb3a403ed717f4ff905ebcb3c3d783790bb1465d2f22176e56e3cc00fce8bfe520758429661ca972fe973573cdbf533a6703944beb20f5a9249c2d3bba65b5bbb312163887c55e9754c7758c30f5d0c2b8b3c88653b38b1df28d453d0868311b7345de44434"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x16, 0x9c, "a9346ae0ff5b2a34eeaa7bfd83ef86eda103e61e979a1d7846bfbe4195179859c0ef95adddf3ff110b8954461cdac36ab43606be8a08386f1c2fce66c7be399d95070cee771f58d987abbd2366ab9e84969d981c55e20e8fd22d41fca850fc592a7f62ecc75b0eb39a5f6aa8ed0eda372991ee8ad51a72b7fdc56fc048bfd490367a04e03f05fc9ad623847f4b9598293d1842bf0b66e3251f927d73"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000480)={0xc0, 0x5, 0x5, "821370c4a0"}, &(0x7f00000004c0)={0x40, 0x5, 0x6, "94961a73d623"}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 7.958185599s ago: executing program 0 (id=470): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40), 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x73}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0xffffffffffffff3c}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) userfaultfd(0x80801) 6.377690993s ago: executing program 2 (id=474): getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000e900000000000000000000000000000000000006000000308bf5da"], &(0x7f0000000340)=0x2a) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r4 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000380)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000180)=0x10, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x4, 0xfffff001, 0x2, 0x53}}, {0x4}}]}]}, 0x58}}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x101, @private1={0xfc, 0x1, '\x00', 0x2}, 0x8}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x40004) fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x2c, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3079cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x5, 0x0, [{0x2f5, 0x0, 0x8}, {0x981, 0x0, 0x80}, {0xb56, 0x0, 0x3}, {0x904, 0x0, 0x76}, {0x73b}]}) setns(0xffffffffffffffff, 0x20000) socket$packet(0x11, 0x3, 0x300) 5.96894765s ago: executing program 2 (id=475): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x0, 0x0, 0x400004, 0x10003, 0x0, 0x400200cc4, 0x8, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0x4, 0xc, 0x9e55, 0x101, 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.610592064s ago: executing program 1 (id=476): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) readv(r5, &(0x7f0000000400), 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x80, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008884}, 0x4048007) r8 = userfaultfd(0x1) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="00e476e34fb7"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.594292475s ago: executing program 0 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180", @ANYRESOCT=r1], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x0, 0x23, 0x78, {0x78, 0xb, "e30e2ec4970dfc68cd1b23cac3cbabc1eff191aa1a034516819a2b752949e1aeaad9873dc646b8cf592ee181199567254975bc4751708b1c26168e19dc0344c218b9331bdfcdbced2bbf6066412e6d422df519aa9592dd7be9d0b36615862ffc03861d4ffa835fcb2a6913af4c293f64d7f112e41075"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x20, 0xacaca3823b7c8535, 0xdf, "77ada20e2fbade252b67c82c96f9bc6019926e3dc93c877a90997dbc36d33389a2807e1ce1d615f30adc1b01f84e709c815ac2100bbfc4eceb7517bc24724a59821f9bd99174b862c5a621d5be8525550d32f0c5996507fd27767b5a9970873ff58c85570db14895e616cc75ddd4c04769519ffdaa0b9387e39540476dc86ee28c9f451a5df0d0468ab48476f7fb3842a678fedf50feb4da6f043e71bfb09319c84019d6f09dc84a1c7b1349a38c9a00dabd36e44f38f6fd756dd8f11f805145bc9d4f592bf5b0e500c6ac4cd9513efdf552e8bd499395480ac9a63158ff10"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x7, 0x2, 0x0, 0x8, 0xde00, 0x0, 0x1, 0x0, 0x0, 0xf, 0x7f, 0x7}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180", @ANYRESOCT=r1], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x0, 0x23, 0x78, {0x78, 0xb, "e30e2ec4970dfc68cd1b23cac3cbabc1eff191aa1a034516819a2b752949e1aeaad9873dc646b8cf592ee181199567254975bc4751708b1c26168e19dc0344c218b9331bdfcdbced2bbf6066412e6d422df519aa9592dd7be9d0b36615862ffc03861d4ffa835fcb2a6913af4c293f64d7f112e41075"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x20, 0xacaca3823b7c8535, 0xdf, "77ada20e2fbade252b67c82c96f9bc6019926e3dc93c877a90997dbc36d33389a2807e1ce1d615f30adc1b01f84e709c815ac2100bbfc4eceb7517bc24724a59821f9bd99174b862c5a621d5be8525550d32f0c5996507fd27767b5a9970873ff58c85570db14895e616cc75ddd4c04769519ffdaa0b9387e39540476dc86ee28c9f451a5df0d0468ab48476f7fb3842a678fedf50feb4da6f043e71bfb09319c84019d6f09dc84a1c7b1349a38c9a00dabd36e44f38f6fd756dd8f11f805145bc9d4f592bf5b0e500c6ac4cd9513efdf552e8bd499395480ac9a63158ff10"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x7, 0x2, 0x0, 0x8, 0xde00, 0x0, 0x1, 0x0, 0x0, 0xf, 0x7f, 0x7}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 5.580421661s ago: executing program 4 (id=478): r0 = getpid() getpriority(0x1, r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84440, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x4, 0x40, 0x6, 0x6, 0x2, 0xa98e, 0x7fffffffffffffff, 0x81, 0x7fffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$netlink(0x10, 0x3, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x201, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000400)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b182cc4c3705dc9f253d21fba2eace93b558c750cfba810dc7a19dbb15a5a39c850a7541d5e27", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r8, 0x1, &(0x7f00000001c0)=0x83) fgetxattr(r7, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', 0x0, 0xffffffffffffff80) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000eb0900"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 5.465546174s ago: executing program 2 (id=479): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) r1 = socket(0x22, 0x2, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x80000000, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @rand_addr=0x64010102}, "9e10ca7a9ffbf5df"}}}}}, 0x0) 5.422061573s ago: executing program 3 (id=480): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0xc}, 0x1b) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x5608, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000030d28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8621020000800200400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff0000000014000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570970880) 5.072442655s ago: executing program 0 (id=481): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e0001002abd"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, 0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r5, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08", 0x2) r7 = socket(0x28, 0x1, 0x0) connect$packet(r7, &(0x7f0000000100)={0x28, 0xf5, 0x0, 0x1, 0x2, 0x6, @link_local}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.007820587s ago: executing program 2 (id=482): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020200"/16], 0x10}, 0x1, 0x400000000000000}, 0x0) syz_io_uring_setup(0x5c5b, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x64000600) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee00000041090224"], 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r10, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB='security'], &(0x7f0000000080)=0x28) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 4.334123287s ago: executing program 4 (id=483): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r3, r1, 0x0, 0x0, 0xdead, 0x4}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x4000}) 3.841420989s ago: executing program 4 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x406026) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x8001, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0x3000, 0xc, 0xbd, 0xc, 0x5, 0x8f, 0x4, 0xfa, 0xd9, 0x8, 0x2}, {0xfec00000, 0x41000, 0x4, 0x8, 0x1, 0x3e, 0xb9, 0x7, 0x80, 0x0, 0x2, 0x8f}, {0x8000000, 0xfec00000, 0x0, 0xff, 0xa, 0x74, 0x4, 0x5, 0x3, 0x7, 0x8, 0x6}, {0xb000, 0x41000, 0x8, 0x6, 0xff, 0xb, 0x4, 0x3, 0x89, 0x4, 0x1, 0x1e}, {0xffffffff, 0x9000, 0x8, 0x1, 0x0, 0xb, 0xff, 0x1, 0xc7, 0xf, 0x0, 0x1a}, {0xeeef0000, 0xd000, 0x0, 0x7, 0x7b, 0x0, 0x3, 0x2, 0x0, 0x0, 0x9, 0x6}, {0x2, 0xdddd1000, 0x3, 0xf7, 0xff, 0x4, 0x0, 0x4, 0x9, 0x7, 0xa, 0x8}, {0x832f791ab774b882, 0xeeef0000, 0xa, 0x8, 0xf, 0x50, 0x0, 0x8, 0x13, 0x6, 0x0, 0x2}, {0x7000, 0x4}, {0x25000, 0xa}, 0x80000000, 0x0, 0x70000, 0x6, 0xf, 0x101, 0x207000, [0x5, 0x9, 0x80000000, 0x800]}) 3.598525039s ago: executing program 3 (id=485): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 3.32960551s ago: executing program 4 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) socket(0x29, 0x803, 0x7ffffffe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x7, 0x1, 0x4, "3bd9d3fe5076497abdf5b50000001000000000000c00", 0x32315241}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.282162296s ago: executing program 0 (id=487): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40), 0x6}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x73}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0xffffffffffffff3c}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) userfaultfd(0x80801) 3.277465045s ago: executing program 3 (id=488): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000612000/0x2000)=nil, 0x2000, 0x2, 0x80010, r2, 0xb2c9000) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x0) r10 = syz_clone(0x22029400, &(0x7f0000000780)="aba8f03e1a", 0x5, &(0x7f0000000880), 0x0, 0x0) ptrace(0x10, r10) connect$unix(r7, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0xa175) 2.751468658s ago: executing program 1 (id=489): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200003100000058007a801c000200579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a1c00020024cf4713299967bde5133269e4e923d9e11c51ac3d3515bf44cad1f4d266b29e2a4135a412b21c0002007282cdb224050171ea757aea781d4160e9223cc0312d38d668007a801c0002235f3b5d542091777612684837dbc0ec47ea67acb692453dd20c0003005bd58c80a1143827140002009811fc13fbf66d28b02a7f7bff7ddc3414000100204183f74d05c8ba801d20a2488d3fd41400020032c5877eef25d1d5a4dd14ad077490051c007a800c000300b27375be0344008efa783bc2179e96494ba48ea1996f8ef8f60814354774cbc18eea2afaf6cae3687cacf919acdaa8864871d576eb1cb814f22a94ad1999112af0e929"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x2c020400) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000020c0)=""/156, &(0x7f0000000040)=0x9c) 2.282669433s ago: executing program 3 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x22, {0x22, 0x3, "d2e793385b8540e9885840d0b1eebd2854693d4bfc4e487cbbb1687a69ffcdad"}}, &(0x7f0000000180)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "a6f0890d2d441eae6cbc731b720ea7a45c974b00e24e41eab4218144ce4b19a0c56048ae46c8eeb3a403ed717f4ff905ebcb3c3d783790bb1465d2f22176e56e3cc00fce8bfe520758429661ca972fe973573cdbf533a6703944beb20f5a9249c2d3bba65b5bbb312163887c55e9754c7758c30f5d0c2b8b3c88653b38b1df28d453d0868311b7345de44434"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x16, 0x9c, "a9346ae0ff5b2a34eeaa7bfd83ef86eda103e61e979a1d7846bfbe4195179859c0ef95adddf3ff110b8954461cdac36ab43606be8a08386f1c2fce66c7be399d95070cee771f58d987abbd2366ab9e84969d981c55e20e8fd22d41fca850fc592a7f62ecc75b0eb39a5f6aa8ed0eda372991ee8ad51a72b7fdc56fc048bfd490367a04e03f05fc9ad623847f4b9598293d1842bf0b66e3251f927d73"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000480)={0xc0, 0x5, 0x5, "821370c4a0"}, &(0x7f00000004c0)={0x40, 0x5, 0x6, "94961a73d623"}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 2.190187982s ago: executing program 1 (id=491): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d0471200000e276000000070000", 0x16}], 0x1, 0xee, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x5, 0x2000, 0x2000, &(0x7f0000015000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.730885179s ago: executing program 1 (id=492): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) r1 = socket(0x22, 0x2, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x80000000, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @rand_addr=0x64010102}, "9e10ca7a9ffbf5df"}}}}}, 0x0) 1.52562128s ago: executing program 2 (id=493): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0xf8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1002}, [@CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000300)='dvmrp0\x00') sendto(r0, &(0x7f0000000bc0)="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"/437, 0x1b5, 0x4000040, 0x0, 0x0) open(0x0, 0x143fc2, 0x1d8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.491446508s ago: executing program 0 (id=494): syz_open_dev$rtc(0x0, 0x0, 0x20200) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) (async) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80800) fcntl$notify(r2, 0x402, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.152144522s ago: executing program 1 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf84, 0x3010, 0x2, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000005c0)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, {&(0x7f0000000400)=""/136, 0x88}, &(0x7f00000004c0), 0x32}, 0xa0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f00000003c0)={0x28, 0x1}) syz_open_dev$sg(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x69, 0x1, 0x0, 0xfffffffd, {0x1, 0x3, 0x2}}, 0x14}}, 0x4) time(0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@name, &(0x7f0000000300)=0x10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) 1.08352681s ago: executing program 4 (id=496): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0xb4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) 808.79583ms ago: executing program 1 (id=497): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = getpid() sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x24, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="ba"]}]}, 0x24}], 0x1}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601040000001f000000000200000505000100070000002c196d659ee69b8811835beb5bb99069a07c647159a13b7ef3bfeb7bb5a10630bdaef92edcf9f424ace09cb15312ae61b76f0f7db519edab3a2f4728cfd52fb006142a2e76b37b9e5be3092338eb49def3520746664f484dcc4341487fe04bf7d0491097a08d47ea870298fcbc6e7d2c4e4a5c1c784679e1305294fe1b3837be26361cbe6ef7334ab747a20d8fd7c6e36cba6f66144ccb23f9412b6a97d6bda3e1d432ea5df1dd665b2a0f2cbee636717a4e0cf4b6"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f00000003c0)={&(0x7f0000000380), 0x7, 0x0, 0x4}) 797.435747ms ago: executing program 4 (id=498): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = getpid() sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x24, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="ba"]}]}, 0x24}], 0x1}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601040000001f000000000200000505000100070000002c196d659ee69b8811835beb5bb99069a07c647159a13b7ef3bfeb7bb5a10630bdaef92edcf9f424ace09cb15312ae61b76f0f7db519edab3a2f4728cfd52fb006142a2e76b37b9e5be3092338eb49def3520746664f484dcc4341487fe04bf7d0491097a08d47ea870298fcbc6e7d2c4e4a5c1c784679e1305294fe1b3837be26361cbe6ef7334ab747a20d8fd7c6e36cba6f66144ccb23f9412b6a97d6bda3e1d432ea5df1dd665b2a0f2cbee636717a4e0cf4b6"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f00000003c0)={&(0x7f0000000380), 0x7, 0x0, 0x4}) 203.723614ms ago: executing program 2 (id=499): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) readv(r5, &(0x7f0000000400), 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x80, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008884}, 0x4048007) r8 = userfaultfd(0x1) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @random="00e476e34fb7"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 203.242377ms ago: executing program 0 (id=500): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}}, 0x14}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x7e}], 0x1}}], 0x1, 0xc0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000c00)={0x18, r2, 0x0, 0x200000000000000}) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000001, 0x20010, r4, 0xce615000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x2005836, 0x8, 0x7, 0x4000000000000e51, 0x9, 0x5479, 0x1036, 0x4, 0x0, 0x327, 0x0, 0xffffffff, 0xbf4, 0xfff, 0x68000000, 0x800000064], 0x2000, 0x84cd4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) (fail_nth: 9) kernel console output (not intermixed with test programs): -1: SerialNumber: syz [ 158.815512][ T30] audit: type=1326 audit(1771030362.693:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 158.857103][ T6762] netlink: 7 bytes leftover after parsing attributes in process `syz.1.200'. [ 158.890205][ T30] audit: type=1326 audit(1771030362.693:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 158.923056][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 158.960300][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 158.977394][ T30] audit: type=1326 audit(1771030362.693:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.011445][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 159.042345][ T24] usb 2-1: Decoder not found [ 159.047009][ T24] em28xx 2-1:0.132: failed to create media graph [ 159.062397][ T30] audit: type=1326 audit(1771030362.693:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.087992][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 159.098864][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 159.124588][ T2149] em28xx 2-1:0.132: Closing input extension [ 159.131950][ T30] audit: type=1326 audit(1771030362.693:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.165177][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.180769][ T2149] em28xx 2-1:0.132: Freeing device [ 159.196696][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.243041][ T30] audit: type=1326 audit(1771030362.723:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.280936][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.317733][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.371461][ T30] audit: type=1326 audit(1771030362.733:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.409849][ T6757] syz.2.199 (6757): attempted to duplicate a private mapping with mremap. This is not supported. [ 159.438999][ T30] audit: type=1326 audit(1771030362.793:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.520726][ T794] usbhid 3-1:1.0: can't add hid device: -71 [ 159.524817][ T30] audit: type=1326 audit(1771030362.793:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 159.548045][ T794] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 159.601831][ T794] usb 3-1: USB disconnect, device number 6 [ 160.846108][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'. [ 161.291957][ T6793] batadv_slave_1: entered promiscuous mode [ 162.093527][ T6788] batadv_slave_1: left promiscuous mode [ 162.407395][ T30] audit: type=1326 audit(1771030366.273:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702019bf79 code=0x7ffc0000 [ 162.443177][ T24] IPVS: starting estimator thread 0... [ 162.537438][ T6818] IPVS: using max 27 ests per chain, 64800 per kthread [ 163.920124][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 163.920143][ T30] audit: type=1326 audit(1771030367.783:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.041427][ T30] audit: type=1326 audit(1771030367.783:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56a35c84e code=0x7ffc0000 [ 164.122071][ T30] audit: type=1326 audit(1771030367.783:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.246872][ T30] audit: type=1326 audit(1771030367.783:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.269472][ T30] audit: type=1326 audit(1771030367.793:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.466500][ T30] audit: type=1326 audit(1771030367.793:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.638144][ T30] audit: type=1326 audit(1771030367.793:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 164.708829][ T6851] fuse: Bad value for 'rootmode' [ 165.077472][ T30] audit: type=1326 audit(1771030367.853:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 165.099787][ T30] audit: type=1326 audit(1771030367.853:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 165.122151][ T30] audit: type=1326 audit(1771030367.853:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 166.270083][ T6855] bridge1: entered promiscuous mode [ 166.698497][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.894426][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.013361][ T24] usb 3-1: config 1 has an invalid interface number: 50 but max is 0 [ 167.021813][ T24] usb 3-1: config 1 has no interface number 0 [ 167.030895][ T24] usb 3-1: config 1 interface 50 has no altsetting 0 [ 167.042395][ T24] usb 3-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 167.055236][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.075868][ T24] usb 3-1: Product: syz [ 167.136671][ T24] usb 3-1: Manufacturer: syz [ 167.165543][ T24] usb 3-1: SerialNumber: syz [ 167.239341][ T24] ipaq 3-1:1.50: PocketPC PDA converter detected [ 167.425074][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.464505][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.539786][ T24] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 167.729449][ T6861] xt_hashlimit: size too large, truncated to 1048576 [ 167.841867][ T6870] syzkaller0: entered promiscuous mode [ 167.864863][ T6870] syzkaller0: entered allmulticast mode [ 168.191206][ T24] usb 3-1: USB disconnect, device number 7 [ 168.202148][ T24] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 168.210579][ T5885] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.234668][ T24] ipaq 3-1:1.50: device disconnected [ 168.336189][ T6883] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.388382][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 168.395563][ T5885] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 168.405644][ T5885] usb 1-1: config 0 has no interface number 0 [ 168.412177][ T5885] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 168.421940][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.441664][ T5885] usb 1-1: config 0 descriptor?? [ 168.563166][ T5885] viperboard 1-1:0.143: version 0.00 found at bus 001 address 009 [ 168.640602][ T5885] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 168.651439][ T5885] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 168.711892][ T5885] usb 1-1: USB disconnect, device number 9 [ 168.850451][ T6887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 169.672744][ T6881] FAULT_INJECTION: forcing a failure. [ 169.672744][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 169.700665][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.3.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.700697][ T6881] Tainted: [L]=SOFTLOCKUP [ 169.700704][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.700716][ T6881] Call Trace: [ 169.700723][ T6881] [ 169.700731][ T6881] dump_stack_lvl+0xe8/0x150 [ 169.700765][ T6881] should_fail_ex+0x412/0x560 [ 169.700794][ T6881] should_failslab+0xa8/0x100 [ 169.700813][ T6881] ? skb_clone+0x212/0x3a0 [ 169.700838][ T6881] kmem_cache_alloc_noprof+0x87/0x650 [ 169.700872][ T6881] skb_clone+0x212/0x3a0 [ 169.700900][ T6881] __netlink_deliver_tap+0x404/0x850 [ 169.700951][ T6881] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.700983][ T6881] netlink_deliver_tap+0x19c/0x1b0 [ 169.701013][ T6881] netlink_sendskb+0x68/0x140 [ 169.701042][ T6881] netlink_unicast+0x3a3/0x9b0 [ 169.701077][ T6881] ? __pfx_netlink_unicast+0x10/0x10 [ 169.701114][ T6881] netlink_rcv_skb+0x2b6/0x4b0 [ 169.701145][ T6881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.701167][ T6881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.701209][ T6881] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.701246][ T6881] netlink_unicast+0x80f/0x9b0 [ 169.701282][ T6881] ? __pfx_netlink_unicast+0x10/0x10 [ 169.701312][ T6881] ? netlink_sendmsg+0x650/0xb40 [ 169.701329][ T6881] ? skb_put+0x11b/0x210 [ 169.701354][ T6881] netlink_sendmsg+0x813/0xb40 [ 169.701382][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.701404][ T6881] ? aa_sock_msg_perm+0xf1/0x1b0 [ 169.701428][ T6881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.701460][ T6881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.701478][ T6881] ____sys_sendmsg+0xa68/0xad0 [ 169.701501][ T6881] ? __might_fault+0xaf/0x130 [ 169.701532][ T6881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.701565][ T6881] ? import_iovec+0x73/0xa0 [ 169.701597][ T6881] ___sys_sendmsg+0x2a5/0x360 [ 169.701620][ T6881] ? __lock_acquire+0x6b5/0x2cf0 [ 169.701654][ T6881] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.701715][ T6881] ? __fget_files+0x2a/0x420 [ 169.701738][ T6881] ? __fget_files+0x3a0/0x420 [ 169.701771][ T6881] __x64_sys_sendmsg+0x1bd/0x2a0 [ 169.701799][ T6881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.701833][ T6881] ? __pfx_ksys_write+0x10/0x10 [ 169.701873][ T6881] do_syscall_64+0x14d/0xf80 [ 169.701898][ T6881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.701925][ T6881] ? trace_irq_disable+0x37/0x100 [ 169.701949][ T6881] ? clear_bhb_loop+0x40/0x90 [ 169.701974][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.701994][ T6881] RIP: 0033:0x7fa45079bf79 [ 169.702013][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.702029][ T6881] RSP: 002b:00007fa45162c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.702050][ T6881] RAX: ffffffffffffffda RBX: 00007fa450a15fa0 RCX: 00007fa45079bf79 [ 169.702064][ T6881] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 169.702075][ T6881] RBP: 00007fa45162c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.702087][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.702098][ T6881] R13: 00007fa450a16038 R14: 00007fa450a15fa0 R15: 00007fa450b3fa48 [ 169.702129][ T6881] [ 170.346668][ T6899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.555080][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 170.555100][ T30] audit: type=1326 audit(1771030374.353:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 170.708287][ T30] audit: type=1326 audit(1771030374.353:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45075c84e code=0x7ffc0000 [ 170.774418][ T30] audit: type=1326 audit(1771030374.353:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.065327][ T30] audit: type=1326 audit(1771030374.353:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.234304][ T30] audit: type=1326 audit(1771030374.353:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.327522][ T30] audit: type=1326 audit(1771030374.353:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.537353][ T794] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.558272][ T30] audit: type=1326 audit(1771030374.353:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.699720][ T30] audit: type=1326 audit(1771030374.353:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.747631][ T794] usb 2-1: Using ep0 maxpacket: 32 [ 171.759375][ T794] usb 2-1: config 1 has an invalid interface number: 50 but max is 0 [ 171.777427][ T30] audit: type=1326 audit(1771030374.353:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.799840][ T794] usb 2-1: config 1 has no interface number 0 [ 171.817732][ T794] usb 2-1: config 1 interface 50 has no altsetting 0 [ 171.887404][ T30] audit: type=1326 audit(1771030374.353:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 171.942587][ T794] usb 2-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 171.957304][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.027688][ T794] usb 2-1: Product: syz [ 172.037843][ T794] usb 2-1: Manufacturer: syz [ 172.042498][ T794] usb 2-1: SerialNumber: syz [ 172.170204][ T794] ipaq 2-1:1.50: PocketPC PDA converter detected [ 172.417467][ T5899] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.460469][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.510896][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.574481][ T794] usb 2-1: PocketPC PDA converter now attached to ttyUSB0 [ 172.658733][ T5899] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 172.669181][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.681187][ T5899] usb 1-1: config 0 has no interfaces? [ 172.694761][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.720580][ T5899] usb 1-1: config 0 has no interfaces? [ 172.733595][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.746711][ T5899] usb 1-1: config 0 has no interfaces? [ 172.760730][ T6924] xt_hashlimit: size too large, truncated to 1048576 [ 172.784068][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.800723][ T5899] usb 1-1: config 0 has no interfaces? [ 172.811787][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.837301][ T5899] usb 1-1: config 0 has no interfaces? [ 172.851027][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.883122][ T5899] usb 1-1: config 0 has no interfaces? [ 172.901707][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.926148][ T5899] usb 1-1: config 0 has no interfaces? [ 172.949539][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.012243][ T794] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.032553][ T5899] usb 1-1: config 0 has no interfaces? [ 173.045409][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 173.068623][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.088065][ T5899] usb 1-1: config 0 descriptor?? [ 173.177546][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 173.190722][ T794] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 173.199862][ T794] usb 4-1: config 0 has no interface number 0 [ 173.214086][ T794] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.244778][ T794] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 173.254319][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.266749][ T794] usb 4-1: Product: syz [ 173.281218][ T794] usb 4-1: Manufacturer: syz [ 173.291517][ T794] usb 4-1: SerialNumber: syz [ 173.342633][ T794] usb 4-1: config 0 descriptor?? [ 173.386169][ T794] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 173.413861][ T794] em28xx 4-1:0.132: Video interface 132 found: [ 173.632254][ T5885] usb 2-1: USB disconnect, device number 10 [ 173.669193][ T5885] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 173.686437][ T5885] ipaq 2-1:1.50: device disconnected [ 173.793729][ T794] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 174.242409][ T794] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 174.300729][ T794] em28xx 4-1:0.132: board has no eeprom [ 174.377617][ T794] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 174.389919][ T794] em28xx 4-1:0.132: analog set to bulk mode. [ 174.414107][ T794] usb 4-1: USB disconnect, device number 9 [ 174.434619][ T5899] em28xx 4-1:0.132: Registering V4L2 extension [ 174.448399][ T794] em28xx 4-1:0.132: Disconnecting em28xx [ 174.515008][ T6959] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 174.556322][ T5900] usb 1-1: USB disconnect, device number 10 [ 174.853665][ T5899] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 174.891093][ T5899] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 174.920330][ T5899] em28xx 4-1:0.132: No AC97 audio processor [ 175.057284][ T5899] usb 4-1: Decoder not found [ 175.061956][ T5899] em28xx 4-1:0.132: failed to create media graph [ 175.086608][ T5899] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 175.115955][ T5899] em28xx 4-1:0.132: Remote control support is not available for this card. [ 175.174654][ T794] em28xx 4-1:0.132: Closing input extension [ 175.230272][ T794] em28xx 4-1:0.132: Freeing device [ 175.474566][ T6980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.696743][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.257'. [ 175.707744][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 176.211410][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 176.828102][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.866553][ T6995] kvm: pic: non byte write [ 176.907619][ T6996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.937902][ T6996] bond1: (slave bond2): Enslaving as an active interface with an up link [ 176.989898][ T6990] vlan2: entered promiscuous mode [ 176.995117][ T6990] bond1: entered promiscuous mode [ 177.000689][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 177.009841][ T6990] bond2: entered promiscuous mode [ 177.018395][ T24] usb 5-1: config 1 has an invalid interface number: 50 but max is 0 [ 177.026879][ T24] usb 5-1: config 1 has no interface number 0 [ 177.033352][ T24] usb 5-1: config 1 interface 50 has no altsetting 0 [ 177.042594][ T24] usb 5-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 177.052183][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.062120][ T24] usb 5-1: Product: syz [ 177.066501][ T24] usb 5-1: Manufacturer: syz [ 177.078365][ T24] usb 5-1: SerialNumber: syz [ 177.094140][ T24] ipaq 5-1:1.50: PocketPC PDA converter detected [ 177.157429][ T794] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.298223][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.327327][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 177.348036][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.370748][ T794] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.406252][ T24] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 177.416363][ T794] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 177.446346][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.498515][ T794] usb 1-1: config 0 descriptor?? [ 177.528885][ T794] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 177.636661][ T6991] xt_hashlimit: size too large, truncated to 1048576 [ 177.747547][ T5899] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.814546][ T6994] kvm: pic: non byte read [ 177.824183][ T6994] kvm: pic: non byte read [ 177.832228][ T6994] kvm: pic: non byte read [ 177.838179][ T6994] kvm: pic: single mode not supported [ 177.838371][ T6994] kvm: pic: level sensitive irq not supported [ 177.844304][ T6994] kvm: pic: non byte read [ 177.855555][ T6994] kvm: pic: single mode not supported [ 177.855573][ T6994] kvm: pic: level sensitive irq not supported [ 177.861274][ T6994] kvm: pic: non byte read [ 177.879403][ T6994] kvm: pic: non byte read [ 177.884084][ T6994] kvm: pic: non byte read [ 177.889048][ T6994] kvm: pic: single mode not supported [ 177.889065][ T6994] kvm: pic: level sensitive irq not supported [ 177.895942][ T6994] kvm: pic: non byte read [ 177.907089][ T6994] kvm: pic: single mode not supported [ 177.907108][ T6994] kvm: pic: level sensitive irq not supported [ 177.913829][ T6994] kvm: pic: non byte read [ 177.958258][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 177.965168][ T5899] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 177.973699][ T5899] usb 2-1: config 0 has no interface number 0 [ 177.983447][ T5899] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.023155][ T5899] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 178.032748][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.044589][ T5899] usb 2-1: Product: syz [ 178.051242][ T5899] usb 2-1: Manufacturer: syz [ 178.055883][ T5899] usb 2-1: SerialNumber: syz [ 178.071710][ T5899] usb 2-1: config 0 descriptor?? [ 178.079561][ T5175] bcm5974 1-1:0.0: could not read from device [ 178.105979][ T5175] bcm5974 1-1:0.0: could not read from device [ 178.117793][ T5899] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 178.135190][ T5899] em28xx 2-1:0.132: Video interface 132 found: [ 178.152265][ T5175] bcm5974 1-1:0.0: could not read from device [ 178.160512][ T5878] usb 5-1: USB disconnect, device number 15 [ 178.170036][ T794] usb 1-1: USB disconnect, device number 11 [ 178.182308][ T5175] bcm5974 1-1:0.0: could not read from device [ 178.208833][ T5878] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 178.222280][ T5828] udevd[5828]: Error opening device "/dev/input/event4": No such file or directory [ 178.233686][ T5878] ipaq 5-1:1.50: device disconnected [ 178.240642][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 178.250111][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 178.264559][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 178.277527][ T5828] udevd[5828]: Unable to EVIOCGABS device "/dev/input/event4" [ 178.437169][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 178.448930][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 178.479941][ T7026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.267'. [ 178.491146][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 178.507204][ T5899] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 178.688446][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.268'. [ 178.727481][ T5899] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 178.760251][ T5899] em28xx 2-1:0.132: board has no eeprom [ 178.837414][ T5899] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 178.846830][ T5899] em28xx 2-1:0.132: analog set to bulk mode. [ 178.853416][ T5878] em28xx 2-1:0.132: Registering V4L2 extension [ 178.872201][ T5899] usb 2-1: USB disconnect, device number 11 [ 178.888126][ T5899] em28xx 2-1:0.132: Disconnecting em28xx [ 179.068919][ T5878] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 179.076222][ T5878] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 179.084838][ T5878] em28xx 2-1:0.132: No AC97 audio processor [ 179.094893][ T5878] usb 2-1: Decoder not found [ 179.099637][ T5878] em28xx 2-1:0.132: failed to create media graph [ 179.106135][ T5878] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 179.115451][ T5878] em28xx 2-1:0.132: Remote control support is not available for this card. [ 179.124247][ T5899] em28xx 2-1:0.132: Closing input extension [ 179.135727][ T5899] em28xx 2-1:0.132: Freeing device [ 179.288423][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.477370][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 179.484720][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 179.661188][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.692350][ T24] usb 4-1: config 0 descriptor?? [ 179.714077][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 179.977327][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.147348][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 180.154610][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.168962][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.179407][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.189007][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.216995][ T5885] usb 1-1: config 0 descriptor?? [ 180.233733][ T5885] hub 1-1:0.0: USB hub found [ 180.438640][ T5885] hub 1-1:0.0: 1 port detected [ 180.705807][ T5858] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 180.908489][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 180.919701][ T5858] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.939818][ T5858] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.959236][ T5858] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 180.995314][ T5858] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 181.024483][ T5858] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.127083][ T24] gspca_sonixj: reg_w1 err -110 [ 181.135277][ T5858] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.144839][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.256012][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.276653][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 181.284797][ T5885] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 181.301926][ T5885] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 181.330872][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 181.341003][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.392022][ T5899] usb 4-1: USB disconnect, device number 10 [ 181.430337][ T5885] usb 1-1: USB disconnect, device number 12 [ 181.626657][ T5858] usb 2-1: GET_CAPABILITIES returned 0 [ 181.650009][ T5858] usbtmc 2-1:16.0: can't read capabilities [ 182.457791][ T794] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.007396][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 183.022634][ T794] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 183.138612][ T794] usb 5-1: config 0 has no interface number 0 [ 183.163698][ T794] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.219075][ T794] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 183.282623][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.291229][ T794] usb 5-1: Product: syz [ 183.295467][ T794] usb 5-1: Manufacturer: syz [ 183.300590][ T794] usb 5-1: SerialNumber: syz [ 183.309206][ T794] usb 5-1: config 0 descriptor?? [ 183.369630][ T794] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 183.424064][ T794] em28xx 5-1:0.132: Video interface 132 found: [ 183.432207][ T5885] usb 2-1: USB disconnect, device number 12 [ 183.490292][ T7080] FAULT_INJECTION: forcing a failure. [ 183.490292][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 183.548554][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.2.284 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.548584][ T7080] Tainted: [L]=SOFTLOCKUP [ 183.548592][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.548603][ T7080] Call Trace: [ 183.548611][ T7080] [ 183.548620][ T7080] dump_stack_lvl+0xe8/0x150 [ 183.548653][ T7080] should_fail_ex+0x412/0x560 [ 183.548680][ T7080] should_failslab+0xa8/0x100 [ 183.548702][ T7080] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 183.548729][ T7080] ? __alloc_skb+0x186/0x7d0 [ 183.548748][ T7080] ? __alloc_skb+0x1d0/0x7d0 [ 183.548764][ T7080] ? __local_bh_enable_ip+0xd0/0x130 [ 183.548790][ T7080] __alloc_skb+0x1d0/0x7d0 [ 183.548814][ T7080] netlink_sendmsg+0x5d4/0xb40 [ 183.548841][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.548863][ T7080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 183.548886][ T7080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.548916][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.548961][ T7080] ____sys_sendmsg+0xa68/0xad0 [ 183.548984][ T7080] ? __might_fault+0xaf/0x130 [ 183.549016][ T7080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.549049][ T7080] ? import_iovec+0x73/0xa0 [ 183.549079][ T7080] ___sys_sendmsg+0x2a5/0x360 [ 183.549102][ T7080] ? __lock_acquire+0x6b5/0x2cf0 [ 183.549128][ T7080] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.549155][ T7080] ? kstrtouint+0x6e/0xe0 [ 183.549200][ T7080] ? __fget_files+0x2a/0x420 [ 183.549222][ T7080] ? __fget_files+0x3a0/0x420 [ 183.549256][ T7080] __sys_sendmmsg+0x27c/0x4e0 [ 183.549286][ T7080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 183.549308][ T7080] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 183.549359][ T7080] ? ksys_write+0x242/0x270 [ 183.549402][ T7080] ? __pfx_ksys_write+0x10/0x10 [ 183.549436][ T7080] __x64_sys_sendmmsg+0xa0/0xc0 [ 183.549463][ T7080] do_syscall_64+0x14d/0xf80 [ 183.549486][ T7080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.549507][ T7080] ? trace_irq_disable+0x37/0x100 [ 183.549531][ T7080] ? clear_bhb_loop+0x40/0x90 [ 183.549563][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.549583][ T7080] RIP: 0033:0x7fa56a39bf79 [ 183.549602][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.549619][ T7080] RSP: 002b:00007fa56b19c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.549639][ T7080] RAX: ffffffffffffffda RBX: 00007fa56a615fa0 RCX: 00007fa56a39bf79 [ 183.549653][ T7080] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 183.549666][ T7080] RBP: 00007fa56b19c090 R08: 0000000000000000 R09: 0000000000000000 [ 183.549678][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.549689][ T7080] R13: 00007fa56a616038 R14: 00007fa56a615fa0 R15: 00007fa56a73fa48 [ 183.549720][ T7080] [ 183.909008][ T794] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 183.991939][ T794] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 184.021277][ T794] em28xx 5-1:0.132: board has no eeprom [ 184.162693][ T794] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 184.197341][ T794] em28xx 5-1:0.132: analog set to bulk mode. [ 184.203539][ T5878] em28xx 5-1:0.132: Registering V4L2 extension [ 184.293465][ T794] usb 5-1: USB disconnect, device number 16 [ 184.307339][ T5899] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 184.330010][ T794] em28xx 5-1:0.132: Disconnecting em28xx [ 184.472557][ T5899] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 184.482420][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.505750][ T5899] usb 4-1: config 0 descriptor?? [ 184.605544][ T5899] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 184.647379][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.702209][ T5878] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 184.731181][ T5878] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 184.757355][ T5878] em28xx 5-1:0.132: No AC97 audio processor [ 184.789551][ T5878] usb 5-1: Decoder not found [ 184.803947][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 184.809519][ T5878] em28xx 5-1:0.132: failed to create media graph [ 184.815972][ T5878] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 184.835939][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.856484][ T5878] em28xx 5-1:0.132: Remote control support is not available for this card. [ 184.878530][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.891108][ T794] em28xx 5-1:0.132: Closing input extension [ 184.899151][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.914430][ T794] em28xx 5-1:0.132: Freeing device [ 184.919909][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.937463][ T5899] gp8psk: usb out operation failed. [ 184.947369][ T5899] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 184.980915][ T9] usb 1-1: config 0 descriptor?? [ 184.996260][ T5899] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 185.031684][ T9] hub 1-1:0.0: USB hub found [ 185.045194][ T5899] usb 4-1: USB disconnect, device number 11 [ 185.223671][ T9] hub 1-1:0.0: 1 port detected [ 185.279179][ T7115] fuse: root generation should be zero [ 185.428795][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 185.528520][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 185.547625][ T3430] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.574688][ T3430] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.614470][ T3430] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.657998][ T3430] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.688044][ T7126] syzkaller1: entered promiscuous mode [ 185.699819][ T7126] syzkaller1: entered allmulticast mode [ 185.880578][ T7098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.895921][ T7130] FAULT_INJECTION: forcing a failure. [ 185.895921][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.918236][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 185.924645][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 185.957775][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.3.297 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.957807][ T7130] Tainted: [L]=SOFTLOCKUP [ 185.957814][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.957826][ T7130] Call Trace: [ 185.957834][ T7130] [ 185.957842][ T7130] dump_stack_lvl+0xe8/0x150 [ 185.957876][ T7130] should_fail_ex+0x412/0x560 [ 185.957904][ T7130] _copy_to_user+0x31/0xb0 [ 185.957934][ T7130] simple_read_from_buffer+0xe1/0x170 [ 185.957962][ T7130] proc_fail_nth_read+0x1bb/0x230 [ 185.957996][ T7130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.958030][ T7130] ? rw_verify_area+0x2a6/0x4d0 [ 185.958056][ T7130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.958088][ T7130] vfs_read+0x20c/0xa70 [ 185.958111][ T7130] ? fdget_pos+0x246/0x320 [ 185.958140][ T7130] ? __pfx___mutex_lock+0x10/0x10 [ 185.958167][ T7130] ? __pfx_vfs_read+0x10/0x10 [ 185.958196][ T7130] ? __fget_files+0x2a/0x420 [ 185.958223][ T7130] ? __fget_files+0x3a0/0x420 [ 185.958245][ T7130] ? __fget_files+0x2a/0x420 [ 185.958277][ T7130] ksys_read+0x150/0x270 [ 185.958327][ T7130] ? __pfx_ksys_read+0x10/0x10 [ 185.958366][ T7130] do_syscall_64+0x14d/0xf80 [ 185.958390][ T7130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.958409][ T7130] ? trace_irq_disable+0x37/0x100 [ 185.958434][ T7130] ? clear_bhb_loop+0x40/0x90 [ 185.958459][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.958487][ T7130] RIP: 0033:0x7fa45075c84e [ 185.958506][ T7130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.958524][ T7130] RSP: 002b:00007fa45160afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.958545][ T7130] RAX: ffffffffffffffda RBX: 00007fa45160b6c0 RCX: 00007fa45075c84e [ 185.958559][ T7130] RDX: 000000000000000f RSI: 00007fa45160b0a0 RDI: 0000000000000004 [ 185.958572][ T7130] RBP: 00007fa45160b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.958585][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.958596][ T7130] R13: 00007fa450a16128 R14: 00007fa450a16090 R15: 00007fa450b3fa48 [ 185.958629][ T7130] [ 186.198407][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 186.204459][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 186.438343][ T9] usb 1-1: USB disconnect, device number 13 [ 186.687256][ T7141] veth0: entered promiscuous mode [ 186.703552][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 186.842945][ T794] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.996093][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 187.009499][ T794] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 187.043022][ T794] usb 4-1: config 0 has no interface number 0 [ 187.071766][ T794] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.252338][ T794] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 187.271677][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.303867][ T794] usb 4-1: Product: syz [ 187.313988][ T794] usb 4-1: Manufacturer: syz [ 187.428803][ T794] usb 4-1: SerialNumber: syz [ 187.480364][ T5885] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 187.491667][ T794] usb 4-1: config 0 descriptor?? [ 187.517189][ T794] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 187.547785][ T794] em28xx 4-1:0.132: Video interface 132 found: [ 187.727441][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 187.923937][ T794] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 188.478361][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.503250][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.543485][ T7162] binder: 7161:7162 ioctl c0306201 200000000540 returned -14 [ 188.574211][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 188.609917][ T794] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 188.627502][ T794] em28xx 4-1:0.132: board has no eeprom [ 188.657324][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.687334][ T794] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 188.697467][ T794] em28xx 4-1:0.132: analog set to bulk mode. [ 188.703645][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 188.745528][ T5885] usb 1-1: config 0 descriptor?? [ 188.801616][ T794] usb 4-1: USB disconnect, device number 12 [ 188.874144][ T794] em28xx 4-1:0.132: Disconnecting em28xx [ 189.329802][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 189.361371][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 189.412571][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 189.431930][ T5885] logitech 0003:046D:C29C.0005: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 189.441985][ T9] usb 4-1: Decoder not found [ 189.477333][ T9] em28xx 4-1:0.132: failed to create media graph [ 189.507508][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 189.553347][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 189.676802][ T794] em28xx 4-1:0.132: Closing input extension [ 190.086417][ T794] em28xx 4-1:0.132: Freeing device [ 191.299745][ T5885] logitech 0003:046D:C29C.0005: no inputs found [ 191.404301][ T5885] usb 1-1: USB disconnect, device number 14 [ 191.751091][ T7194] veth0: entered promiscuous mode [ 191.802214][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 191.959425][ T5885] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 192.127380][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 192.235152][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.263434][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.287183][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.305669][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.349699][ T5885] usb 1-1: config 0 descriptor?? [ 192.372608][ T7205] veth0: entered promiscuous mode [ 192.404757][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 192.434040][ T5885] hub 1-1:0.0: USB hub found [ 192.635893][ T5885] hub 1-1:0.0: 1 port detected [ 192.765574][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.920468][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 192.963565][ T5899] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 192.982145][ T5899] usb 3-1: config 0 has no interface number 0 [ 193.015813][ T5899] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.042822][ T5899] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 193.057928][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.070748][ T5899] usb 3-1: Product: syz [ 193.075041][ T5899] usb 3-1: Manufacturer: syz [ 193.091516][ T5899] usb 3-1: SerialNumber: syz [ 193.121745][ T5899] usb 3-1: config 0 descriptor?? [ 193.136199][ T5899] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 193.238676][ T5899] em28xx 3-1:0.132: Video interface 132 found: [ 194.030834][ T5885] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 194.055714][ T5899] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 194.065434][ T5885] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 194.120503][ T5899] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 194.131065][ T5885] usbhid 1-1:0.0: can't add hid device: -32 [ 194.134519][ T5899] em28xx 3-1:0.132: board has no eeprom [ 194.163605][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 194.217439][ T5899] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 194.235556][ T5899] em28xx 3-1:0.132: analog set to bulk mode. [ 194.259124][ T794] em28xx 3-1:0.132: Registering V4L2 extension [ 194.286311][ T5899] usb 3-1: USB disconnect, device number 8 [ 194.321038][ T5899] em28xx 3-1:0.132: Disconnecting em28xx [ 194.473093][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.621880][ T9] usb 1-1: USB disconnect, device number 15 [ 194.812998][ T794] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 194.822400][ T794] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 194.837648][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.863140][ T794] em28xx 3-1:0.132: No AC97 audio processor [ 194.871317][ T7230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 194.881226][ T794] usb 3-1: Decoder not found [ 194.885877][ T794] em28xx 3-1:0.132: failed to create media graph [ 194.928314][ T794] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 194.956731][ T794] em28xx 3-1:0.132: Remote control support is not available for this card. [ 194.969431][ T5899] em28xx 3-1:0.132: Closing input extension [ 195.006811][ T5899] em28xx 3-1:0.132: Freeing device [ 195.012295][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 195.044806][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.094224][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.160875][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 195.214629][ T5885] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 195.270600][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.304735][ T5885] usb 4-1: Product: syz [ 195.331863][ T7235] fuse: Unknown parameter '01777777777777777777777ÿßy㕦Œ'à öfÚyÁw{’Q˜”^ž² ׌îí&lÑ@Õ¤Ö³–CÆÜÑ×4ç·4í¦´æ [ 195.331863][ T7235] Î×Ø' [ 195.346492][ T5885] usb 4-1: Manufacturer: syz [ 195.363322][ T5885] usb 4-1: SerialNumber: syz [ 195.390479][ T5885] usb 4-1: config 0 descriptor?? [ 195.724974][ T5885] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 195.966057][ T29] usb 4-1: USB disconnect, device number 13 [ 196.284165][ T7232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 196.949006][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 196.990907][ T7250] veth0: entered promiscuous mode [ 198.127352][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.927661][ T29] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 199.037337][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.052028][ T29] usb 4-1: config 0 has no interfaces? [ 199.154031][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.212806][ T29] usb 4-1: config 0 has no interfaces? [ 199.365866][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.443007][ T29] usb 4-1: config 0 has no interfaces? [ 199.474674][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.485113][ T29] usb 4-1: config 0 has no interfaces? [ 199.523699][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.537414][ T29] usb 4-1: config 0 has no interfaces? [ 199.568342][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.575118][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.645545][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.677303][ T29] usb 4-1: config 0 has no interfaces? [ 199.697752][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.714362][ T7283] usb usb7: usbfs: process 7283 (syz.4.335) did not claim interface 0 before use [ 199.727518][ T794] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.928109][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 199.940295][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 199.948811][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 199.960880][ T9] usb 2-1: config 0 has no interface number 0 [ 199.975433][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.009897][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.020162][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.059242][ T794] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.113595][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 200.131663][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.155191][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.181557][ T9] usb 2-1: Product: syz [ 200.185785][ T9] usb 2-1: Manufacturer: syz [ 200.245428][ T794] usb 3-1: config 0 descriptor?? [ 200.253682][ T9] usb 2-1: SerialNumber: syz [ 200.275812][ T794] hub 3-1:0.0: USB hub found [ 200.298264][ T9] usb 2-1: config 0 descriptor?? [ 200.348681][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 200.395284][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 200.475650][ T794] hub 3-1:0.0: 1 port detected [ 200.637645][ T29] usb 4-1: unable to read config index 6 descriptor/all [ 200.666930][ T29] usb 4-1: can't read configurations, error -71 [ 200.746460][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 200.843836][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 200.902551][ T9] em28xx 2-1:0.132: board has no eeprom [ 200.985650][ T7297] netlink: 'syz.3.339': attribute type 2 has an invalid length. [ 200.997447][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 201.028528][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 201.037829][ T5899] em28xx 2-1:0.132: Registering V4L2 extension [ 201.072958][ T9] usb 2-1: USB disconnect, device number 13 [ 201.092034][ T7297] hmac(sha224: entered promiscuous mode [ 201.104306][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 201.312350][ T7306] veth0: entered promiscuous mode [ 201.341665][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 201.478512][ T5899] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 201.492134][ T5899] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 201.507369][ T5899] em28xx 2-1:0.132: No AC97 audio processor [ 201.538598][ T5899] usb 2-1: Decoder not found [ 201.543283][ T5899] em28xx 2-1:0.132: failed to create media graph [ 201.550270][ T5899] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 201.561455][ T5899] em28xx 2-1:0.132: Remote control support is not available for this card. [ 201.596073][ T9] em28xx 2-1:0.132: Closing input extension [ 201.603579][ T7315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.621532][ T9] em28xx 2-1:0.132: Freeing device [ 201.834590][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.887885][ T794] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 201.895151][ T794] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 201.957179][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 201.980696][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 202.238184][ T794] usb 3-1: USB disconnect, device number 9 [ 204.424440][ T7347] netlink: 104 bytes leftover after parsing attributes in process `syz.4.351'. [ 204.594506][ T7351] loop2: detected capacity change from 0 to 7 [ 204.635740][ T5820] Dev loop2: unable to read RDB block 7 [ 204.657384][ T5820] loop2: AHDI p2 p3 [ 204.661336][ T5820] loop2: partition table partially beyond EOD, truncated [ 204.779125][ T5820] loop2: p2 start 1702059890 is beyond EOD, truncated [ 205.320295][ T7351] Dev loop2: unable to read RDB block 7 [ 205.325958][ T7351] loop2: AHDI p2 p3 [ 205.347647][ T7351] loop2: partition table partially beyond EOD, truncated [ 205.355020][ T7351] loop2: p2 start 1702059890 is beyond EOD, truncated [ 205.551275][ T5190] Dev loop2: unable to read RDB block 7 [ 205.557001][ T5190] loop2: AHDI p2 p3 [ 205.567415][ T5190] loop2: partition table partially beyond EOD, truncated [ 205.574695][ T5190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 205.717620][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.947538][ T5885] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 206.027419][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.038942][ T5885] usb 3-1: config 0 has no interfaces? [ 206.047372][ T794] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.095056][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.105521][ T5885] usb 3-1: config 0 has no interfaces? [ 206.108217][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 206.136102][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.156747][ T5885] usb 3-1: config 0 has no interfaces? [ 206.201202][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.229628][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 206.232110][ T5885] usb 3-1: config 0 has no interfaces? [ 206.261203][ T794] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 206.266766][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.318102][ T5885] usb 3-1: config 0 has no interfaces? [ 206.318383][ T794] usb 5-1: config 0 has no interface number 0 [ 206.334116][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.372552][ T5885] usb 3-1: config 0 has no interfaces? [ 206.377507][ T794] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.408669][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.436053][ T794] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 206.461094][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.465956][ T5885] usb 3-1: config 0 has no interfaces? [ 206.492829][ T794] usb 5-1: Product: syz [ 206.510876][ T794] usb 5-1: Manufacturer: syz [ 206.527709][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 206.557584][ T794] usb 5-1: SerialNumber: syz [ 206.625689][ T794] usb 5-1: config 0 descriptor?? [ 206.654541][ T794] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 206.694910][ T794] em28xx 5-1:0.132: Video interface 132 found: [ 206.725995][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.787967][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.836254][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.869592][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.914741][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.971864][ T9] usb 2-1: config 0 descriptor?? [ 207.011505][ T9] hub 2-1:0.0: USB hub found [ 207.058924][ T794] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 207.167462][ T794] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 207.176264][ T794] em28xx 5-1:0.132: board has no eeprom [ 207.221266][ T9] hub 2-1:0.0: 1 port detected [ 207.246859][ T5885] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 207.272205][ T794] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 207.282496][ T5885] usb 3-1: can't read configurations, error -71 [ 207.292942][ T794] em28xx 5-1:0.132: analog set to bulk mode. [ 207.310976][ T5899] em28xx 5-1:0.132: Registering V4L2 extension [ 207.355413][ T794] usb 5-1: USB disconnect, device number 17 [ 207.396925][ T794] em28xx 5-1:0.132: Disconnecting em28xx [ 207.661846][ T5899] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 207.693065][ T5899] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 207.840822][ T5899] em28xx 5-1:0.132: No AC97 audio processor [ 207.848730][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.862326][ T5899] usb 5-1: Decoder not found [ 207.869519][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 207.883265][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 207.891276][ T5899] em28xx 5-1:0.132: failed to create media graph [ 207.931567][ T5899] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 207.945524][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 207.952094][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.962293][ T5899] em28xx 5-1:0.132: Remote control support is not available for this card. [ 207.997448][ T794] em28xx 5-1:0.132: Closing input extension [ 208.018520][ T794] em28xx 5-1:0.132: Freeing device [ 208.024777][ T9] usb 2-1: USB disconnect, device number 14 [ 208.256993][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 208.289474][ T7374] openvswitch: netlink: Flow key attr not present in new flow. [ 208.645886][ T7382] batadv_slave_1: entered promiscuous mode [ 209.183050][ T7375] batadv_slave_1: left promiscuous mode [ 209.784113][ T7397] usb usb8: usbfs: process 7397 (syz.3.365) did not claim interface 0 before use [ 209.797879][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 209.888461][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 209.957704][ T9] usb 1-1: device descriptor read/64, error -71 [ 209.970218][ T7397] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.059107][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.073613][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.086611][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.173902][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.225211][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.237525][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 210.310933][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.496906][ T9] usb 1-1: device descriptor read/64, error -71 [ 210.602609][ T29] usb 2-1: config 0 descriptor?? [ 210.638609][ T9] usb usb1-port1: attempt power cycle [ 211.037336][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 211.075801][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.088369][ T9] usb 1-1: device descriptor read/8, error -71 [ 211.093794][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.337331][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 211.398258][ T9] usb 1-1: device descriptor read/8, error -71 [ 211.510569][ T9] usb usb1-port1: unable to enumerate USB device [ 211.697771][ T794] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.721563][ T29] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 211.815084][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 211.869524][ T7400] Bluetooth: hci1: command 0x0406 tx timeout [ 211.897661][ T794] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 211.950951][ T7400] Bluetooth: hci2: command 0x0406 tx timeout [ 211.957471][ T7400] Bluetooth: hci3: command 0x0406 tx timeout [ 211.959489][ T7399] Bluetooth: hci4: command 0x0406 tx timeout [ 211.964355][ T7400] Bluetooth: hci0: command 0x0406 tx timeout [ 212.020568][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.047395][ T794] usb 5-1: config 0 has no interfaces? [ 212.130168][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.177345][ T794] usb 5-1: config 0 has no interfaces? [ 212.235558][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.277862][ T794] usb 5-1: config 0 has no interfaces? [ 212.310439][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.324947][ T794] usb 5-1: config 0 has no interfaces? [ 212.343483][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.384247][ T794] usb 5-1: config 0 has no interfaces? [ 212.417334][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.431987][ T7424] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 212.467440][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.488783][ T7424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 212.518019][ T794] usb 5-1: config 0 has no interfaces? [ 212.586354][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.662295][ T794] usb 5-1: config 0 has no interfaces? [ 212.677511][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 212.685003][ T5885] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 212.697679][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.706371][ T5885] usb 4-1: config 0 has no interface number 0 [ 212.726079][ T5885] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.751057][ T794] usb 5-1: config 0 has no interfaces? [ 212.774814][ T794] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 212.797691][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.809077][ T5885] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 212.827495][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.845829][ T5885] usb 4-1: Product: syz [ 212.857300][ T5885] usb 4-1: Manufacturer: syz [ 212.876652][ T5885] usb 4-1: SerialNumber: syz [ 212.876942][ T794] usb 5-1: config 0 descriptor?? [ 212.907387][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 212.916516][ T5899] usb 2-1: USB disconnect, device number 15 [ 213.088415][ T5885] usb 4-1: config 0 descriptor?? [ 213.365842][ T5885] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 213.377953][ T5885] em28xx 4-1:0.132: Video interface 132 found: [ 213.478093][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.491737][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.505281][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 213.519461][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.536357][ T24] usb 1-1: config 0 descriptor?? [ 213.591386][ T5885] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 213.680460][ T5885] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 213.689427][ T5885] em28xx 4-1:0.132: board has no eeprom [ 213.759812][ T5885] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 213.952493][ T7424] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 213.960597][ T5885] em28xx 4-1:0.132: analog set to bulk mode. [ 213.970199][ T2149] em28xx 4-1:0.132: Registering V4L2 extension [ 214.016338][ T24] hid_parser_main: 7 callbacks suppressed [ 214.016362][ T24] itetech 0003:06CB:2968.0007: unknown main item tag 0x1 [ 214.047078][ T24] itetech 0003:06CB:2968.0007: unbalanced delimiter at end of report description [ 214.088517][ T5885] usb 4-1: USB disconnect, device number 16 [ 214.114512][ T24] itetech 0003:06CB:2968.0007: probe with driver itetech failed with error -22 [ 214.146044][ T5885] em28xx 4-1:0.132: Disconnecting em28xx [ 214.578163][ T7441] tipc: Enabled bearer , priority 0 [ 214.591917][ T7441] tipc: Resetting bearer [ 214.652447][ T794] usb 5-1: USB disconnect, device number 18 [ 214.787668][ T9] usb 1-1: USB disconnect, device number 20 [ 215.002440][ T2149] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 215.053467][ T2149] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 215.093376][ T2149] em28xx 4-1:0.132: No AC97 audio processor [ 215.170759][ T2149] usb 4-1: Decoder not found [ 215.211057][ T2149] em28xx 4-1:0.132: failed to create media graph [ 215.380514][ T2149] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 215.468072][ T2149] em28xx 4-1:0.132: Remote control support is not available for this card. [ 215.504885][ T5885] em28xx 4-1:0.132: Closing input extension [ 215.515677][ T7438] tipc: Disabling bearer [ 215.576521][ T5885] em28xx 4-1:0.132: Freeing device [ 215.737788][ T2149] tipc: Node number set to 750624956 [ 215.823886][ T7460] vlan0: entered promiscuous mode [ 215.848318][ T7460] vlan0: entered allmulticast mode [ 215.871623][ T7460] hsr_slave_1: entered allmulticast mode [ 217.269919][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 217.320958][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 218.515941][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 218.515963][ T30] audit: type=1326 audit(1771030422.353:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 218.545224][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.599375][ T30] audit: type=1326 audit(1771030422.353:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6c2b5c84e code=0x7ffc0000 [ 218.622075][ T30] audit: type=1326 audit(1771030422.353:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 218.646723][ T980] IPVS: starting estimator thread 0... [ 218.665330][ T30] audit: type=1326 audit(1771030422.353:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 218.763402][ T7500] IPVS: using max 28 ests per chain, 67200 per kthread [ 218.895117][ T30] audit: type=1326 audit(1771030422.353:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 218.956859][ T9] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 219.143046][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.198941][ T9] usb 4-1: config 0 has no interfaces? [ 219.244580][ T5885] IPVS: starting estimator thread 0... [ 219.275773][ T30] audit: type=1326 audit(1771030422.353:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 219.311172][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.327253][ T9] usb 4-1: config 0 has no interfaces? [ 219.372339][ T7514] IPVS: using max 39 ests per chain, 93600 per kthread [ 219.391578][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.405584][ T30] audit: type=1326 audit(1771030422.353:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 219.428839][ T9] usb 4-1: config 0 has no interfaces? [ 219.447546][ T980] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 219.458921][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.471493][ T9] usb 4-1: config 0 has no interfaces? [ 219.484567][ T30] audit: type=1326 audit(1771030422.353:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 219.527813][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.542614][ T9] usb 4-1: config 0 has no interfaces? [ 219.577962][ T30] audit: type=1326 audit(1771030422.353:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 219.633235][ T980] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 219.644055][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.658984][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.667727][ T9] usb 4-1: config 0 has no interfaces? [ 219.673410][ T980] usb 1-1: Product: syz [ 219.678248][ T30] audit: type=1326 audit(1771030422.353:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c2b9bf79 code=0x7ffc0000 [ 219.701682][ T980] usb 1-1: Manufacturer: syz [ 219.706315][ T980] usb 1-1: SerialNumber: syz [ 219.711857][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.725876][ T9] usb 4-1: config 0 has no interfaces? [ 219.733015][ T980] usb 1-1: config 0 descriptor?? [ 219.740356][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.755406][ T980] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.762865][ T980] hub 1-1:0.0: probe with driver hub failed with error -5 [ 219.770474][ T9] usb 4-1: config 0 has no interfaces? [ 219.776994][ T980] f81232 1-1:0.0: f81534a converter detected [ 219.784011][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 219.795968][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.831606][ T9] usb 4-1: config 0 descriptor?? [ 219.969923][ T980] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 219.986968][ T980] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 220.073360][ T980] usb 1-1: USB disconnect, device number 21 [ 220.121377][ T980] f81232 1-1:0.0: device disconnected [ 220.717602][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.882449][ T7528] netlink: 160 bytes leftover after parsing attributes in process `syz.0.400'. [ 220.898235][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 220.923276][ T5885] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.953762][ T5885] usb 3-1: config 0 has no interface number 0 [ 220.978963][ T5885] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.008189][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.042393][ T5885] usb 3-1: Product: syz [ 221.065857][ T5885] usb 3-1: Manufacturer: syz [ 221.078249][ T5885] usb 3-1: SerialNumber: syz [ 221.104380][ T980] usb 4-1: USB disconnect, device number 17 [ 221.317701][ T5885] usb 3-1: config 0 descriptor?? [ 221.405650][ T5885] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.628701][ T7541] batadv_slave_1: entered promiscuous mode [ 221.713422][ T7543] batadv_slave_1: entered promiscuous mode [ 222.301480][ T2149] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 222.348980][ T7536] batadv_slave_1: left promiscuous mode [ 222.527643][ T2149] usb 5-1: Using ep0 maxpacket: 32 [ 222.535485][ T2149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.585027][ T2149] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 222.626741][ T2149] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.728518][ T7552] FAULT_INJECTION: forcing a failure. [ 222.728518][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.756977][ T7538] batadv_slave_1: left promiscuous mode [ 222.767417][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.0.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.767453][ T7552] Tainted: [L]=SOFTLOCKUP [ 222.767458][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 222.767467][ T7552] Call Trace: [ 222.767473][ T7552] [ 222.767480][ T7552] dump_stack_lvl+0xe8/0x150 [ 222.767506][ T7552] should_fail_ex+0x412/0x560 [ 222.767527][ T7552] _copy_to_user+0x31/0xb0 [ 222.767549][ T7552] simple_read_from_buffer+0xe1/0x170 [ 222.767569][ T7552] proc_fail_nth_read+0x1bb/0x230 [ 222.767593][ T7552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.767618][ T7552] ? rw_verify_area+0x2a6/0x4d0 [ 222.767637][ T7552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.767659][ T7552] vfs_read+0x20c/0xa70 [ 222.767677][ T7552] ? fdget_pos+0x246/0x320 [ 222.767697][ T7552] ? __pfx___mutex_lock+0x10/0x10 [ 222.767716][ T7552] ? __pfx_vfs_read+0x10/0x10 [ 222.767736][ T7552] ? __fget_files+0x2a/0x420 [ 222.767755][ T7552] ? __fget_files+0x3a0/0x420 [ 222.767770][ T7552] ? __fget_files+0x2a/0x420 [ 222.767793][ T7552] ksys_read+0x150/0x270 [ 222.767814][ T7552] ? __pfx_ksys_read+0x10/0x10 [ 222.767837][ T7552] ? __secure_computing+0xe1/0x2a0 [ 222.767865][ T7552] do_syscall_64+0x14d/0xf80 [ 222.767883][ T7552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767897][ T7552] ? trace_irq_disable+0x37/0x100 [ 222.767915][ T7552] ? clear_bhb_loop+0x40/0x90 [ 222.767932][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767947][ T7552] RIP: 0033:0x7f702015c84e [ 222.767961][ T7552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.767973][ T7552] RSP: 002b:00007f701e3ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.767988][ T7552] RAX: ffffffffffffffda RBX: 00007f701e3cd6c0 RCX: 00007f702015c84e [ 222.767999][ T7552] RDX: 000000000000000f RSI: 00007f701e3cd0a0 RDI: 000000000000000c [ 222.768008][ T7552] RBP: 00007f701e3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 222.768017][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.768026][ T7552] R13: 00007f7020416128 R14: 00007f7020416090 R15: 00007f702053fa48 [ 222.768055][ T7552] [ 223.072486][ T2149] usb 5-1: config 0 interface 0 has no altsetting 1 [ 223.180788][ T2149] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 223.191393][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.204743][ T2149] usb 5-1: Product: syz [ 223.268227][ T2149] usb 5-1: Manufacturer: syz [ 223.302222][ T2149] usb 5-1: SerialNumber: syz [ 223.402542][ T2149] usb 5-1: config 0 descriptor?? [ 223.453576][ T2149] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.606692][ T2149] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 223.750102][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.818200][ T5885] usb 3-1: qt2_attach - failed to power on unit: -71 [ 223.839532][ T5885] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 223.879900][ T5885] usb 3-1: USB disconnect, device number 12 [ 223.970053][ T2149] usb 5-1: USB disconnect, device number 19 [ 224.217555][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 224.217571][ T30] audit: type=1326 audit(1771030428.093:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.255345][ T30] audit: type=1326 audit(1771030428.093:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56a35c84e code=0x7ffc0000 [ 224.292453][ T30] audit: type=1326 audit(1771030428.093:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.315397][ T980] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 224.318010][ T30] audit: type=1326 audit(1771030428.093:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.350350][ T30] audit: type=1326 audit(1771030428.093:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.382177][ T30] audit: type=1326 audit(1771030428.093:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.474410][ T30] audit: type=1326 audit(1771030428.093:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.482675][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 224.562321][ T30] audit: type=1326 audit(1771030428.093:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.641893][ T30] audit: type=1326 audit(1771030428.093:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.676404][ T980] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 224.688993][ T980] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 224.698264][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 224.707961][ T30] audit: type=1326 audit(1771030428.093:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7556 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 224.733839][ T7570] FAULT_INJECTION: forcing a failure. [ 224.733839][ T7570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.747645][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.767034][ T7570] CPU: 1 UID: 0 PID: 7570 Comm: syz.4.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.767067][ T7570] Tainted: [L]=SOFTLOCKUP [ 224.767074][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 224.767087][ T7570] Call Trace: [ 224.767095][ T7570] [ 224.767103][ T7570] dump_stack_lvl+0xe8/0x150 [ 224.767136][ T7570] should_fail_ex+0x412/0x560 [ 224.767164][ T7570] _copy_to_user+0x31/0xb0 [ 224.767191][ T7570] simple_read_from_buffer+0xe1/0x170 [ 224.767222][ T7570] proc_fail_nth_read+0x1bb/0x230 [ 224.767256][ T7570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.767288][ T7570] ? rw_verify_area+0x2a6/0x4d0 [ 224.767315][ T7570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.767346][ T7570] vfs_read+0x20c/0xa70 [ 224.767371][ T7570] ? fdget_pos+0x246/0x320 [ 224.767409][ T7570] ? __pfx___mutex_lock+0x10/0x10 [ 224.767435][ T7570] ? __pfx_vfs_read+0x10/0x10 [ 224.767462][ T7570] ? __fget_files+0x2a/0x420 [ 224.767483][ T7570] ? __fget_files+0x3a0/0x420 [ 224.767501][ T7570] ? __fget_files+0x2a/0x420 [ 224.767526][ T7570] ksys_read+0x150/0x270 [ 224.767550][ T7570] ? __pfx_ksys_read+0x10/0x10 [ 224.767581][ T7570] do_syscall_64+0x14d/0xf80 [ 224.767601][ T7570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.767617][ T7570] ? trace_irq_disable+0x37/0x100 [ 224.767637][ T7570] ? clear_bhb_loop+0x40/0x90 [ 224.767657][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.767673][ T7570] RIP: 0033:0x7ff6c2b5c84e [ 224.767688][ T7570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.767703][ T7570] RSP: 002b:00007ff6c3978fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.767720][ T7570] RAX: ffffffffffffffda RBX: 00007ff6c39796c0 RCX: 00007ff6c2b5c84e [ 224.767732][ T7570] RDX: 000000000000000f RSI: 00007ff6c39790a0 RDI: 0000000000000005 [ 224.767742][ T7570] RBP: 00007ff6c3979090 R08: 0000000000000000 R09: 0000000000000000 [ 224.767753][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.767762][ T7570] R13: 00007ff6c2e16038 R14: 00007ff6c2e15fa0 R15: 00007ff6c2f3fa48 [ 224.767787][ T7570] [ 225.287596][ T980] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.338529][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 225.378224][ T794] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.386581][ T980] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.426728][ T980] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.442991][ T980] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 225.453843][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.466800][ T980] usb 1-1: config 0 descriptor?? [ 225.475327][ T7559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.588579][ T794] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 225.617366][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.676397][ T794] usb 2-1: config 0 has no interfaces? [ 225.696164][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.718297][ T980] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 225.739035][ T794] usb 2-1: config 0 has no interfaces? [ 225.752608][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.783241][ T794] usb 2-1: config 0 has no interfaces? [ 225.795947][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.806771][ T794] usb 2-1: config 0 has no interfaces? [ 225.814764][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.829518][ T794] usb 2-1: config 0 has no interfaces? [ 225.842430][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.857458][ T794] usb 2-1: config 0 has no interfaces? [ 225.868318][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.113902][ C0] usblp0: nonzero read bulk status received: -71 [ 226.148550][ T794] usb 2-1: config 0 has no interfaces? [ 226.164295][ T980] usb 1-1: USB disconnect, device number 22 [ 226.171275][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.183201][ T794] usb 2-1: config 0 has no interfaces? [ 226.192310][ T794] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 226.231363][ T980] usblp0: removed [ 226.281166][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.397385][ T794] usb 2-1: config 0 descriptor?? [ 226.517635][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.727014][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 226.854169][ T5885] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 226.886014][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.909663][ T5885] usb 5-1: Product: syz [ 226.933199][ T5885] usb 5-1: Manufacturer: syz [ 226.961929][ T5885] usb 5-1: SerialNumber: syz [ 227.093177][ T7596] batadv_slave_1: entered promiscuous mode [ 227.224540][ T5885] usb 5-1: config 0 descriptor?? [ 227.435795][ T7593] batadv_slave_1: left promiscuous mode [ 227.467522][ T7609] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.422'. [ 227.564332][ T5885] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 227.579449][ T5885] gspca_ov534_9: reg_w failed -71 [ 227.657023][ T7613] FAULT_INJECTION: forcing a failure. [ 227.657023][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 227.674446][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.4.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.674478][ T7613] Tainted: [L]=SOFTLOCKUP [ 227.674486][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 227.674498][ T7613] Call Trace: [ 227.674506][ T7613] [ 227.674515][ T7613] dump_stack_lvl+0xe8/0x150 [ 227.674559][ T7613] should_fail_ex+0x412/0x560 [ 227.674587][ T7613] should_failslab+0xa8/0x100 [ 227.674619][ T7613] ? audit_log_start+0x36e/0xa20 [ 227.674640][ T7613] kmem_cache_alloc_noprof+0x87/0x650 [ 227.674666][ T7613] ? auditd_test_task+0x22/0x280 [ 227.674685][ T7613] ? auditd_test_task+0x22/0x280 [ 227.674711][ T7613] audit_log_start+0x36e/0xa20 [ 227.674738][ T7613] ? __pfx_audit_log_start+0x10/0x10 [ 227.674761][ T7613] ? get_pid_task+0x20/0x1f0 [ 227.674788][ T7613] ? get_pid_task+0x20/0x1f0 [ 227.674812][ T7613] ? get_pid_task+0x20/0x1f0 [ 227.674848][ T7613] audit_seccomp+0x63/0x190 [ 227.674864][ T7613] ? clear_bhb_loop+0x40/0x90 [ 227.674885][ T7613] ? clear_bhb_loop+0xe/0x90 [ 227.674909][ T7613] __seccomp_filter+0xd48/0x1ef0 [ 227.674948][ T7613] ? __pfx___seccomp_filter+0x10/0x10 [ 227.674986][ T7613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.675016][ T7613] ? __fget_files+0x3a0/0x420 [ 227.675045][ T7613] ? fput+0xa0/0xd0 [ 227.675073][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 227.675106][ T7613] ? __secure_computing+0xe1/0x2a0 [ 227.675139][ T7613] do_syscall_64+0xf4/0xf80 [ 227.675162][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.675181][ T7613] ? trace_irq_disable+0x37/0x100 [ 227.675203][ T7613] ? clear_bhb_loop+0x40/0x90 [ 227.675225][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.675245][ T7613] RIP: 0033:0x7ff6c2b9bf79 [ 227.675263][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.675280][ T7613] RSP: 002b:00007ff6c3979028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 227.675301][ T7613] RAX: ffffffffffffffda RBX: 00007ff6c2e15fa0 RCX: 00007ff6c2b9bf79 [ 227.675315][ T7613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.675326][ T7613] RBP: 00007ff6c3979090 R08: 0000000000000000 R09: 0000000000000000 [ 227.675338][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.675349][ T7613] R13: 00007ff6c2e16038 R14: 00007ff6c2e15fa0 R15: 00007ff6c2f3fa48 [ 227.675381][ T7613] [ 228.040579][ T794] usb 2-1: USB disconnect, device number 16 [ 228.308169][ T5885] gspca_ov534_9: Unknown sensor 0000 [ 228.308270][ T5885] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 228.400688][ T5885] usb 5-1: USB disconnect, device number 20 [ 229.201139][ T7636] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 229.443694][ T7643] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 229.456962][ T7636] bond1: entered promiscuous mode [ 229.468662][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 229.468679][ T30] audit: type=1326 audit(1771030433.353:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 229.509152][ T7636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.592085][ T30] audit: type=1326 audit(1771030433.353:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 229.633367][ T30] audit: type=1326 audit(1771030433.403:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 229.667152][ T7645] netlink: 7 bytes leftover after parsing attributes in process `syz.3.435'. [ 229.759199][ T30] audit: type=1326 audit(1771030433.403:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 229.865402][ T30] audit: type=1326 audit(1771030433.413:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 229.954660][ T7650] FAULT_INJECTION: forcing a failure. [ 229.954660][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 229.991121][ T30] audit: type=1326 audit(1771030433.423:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 230.057548][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.2.436 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.057583][ T7650] Tainted: [L]=SOFTLOCKUP [ 230.057590][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 230.057602][ T7650] Call Trace: [ 230.057610][ T7650] [ 230.057618][ T7650] dump_stack_lvl+0xe8/0x150 [ 230.057653][ T7650] should_fail_ex+0x412/0x560 [ 230.057680][ T7650] should_failslab+0xa8/0x100 [ 230.057722][ T7650] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 230.057751][ T7650] ? __alloc_skb+0x186/0x7d0 [ 230.057771][ T7650] ? __alloc_skb+0x1d0/0x7d0 [ 230.057789][ T7650] ? __local_bh_enable_ip+0xd0/0x130 [ 230.057818][ T7650] __alloc_skb+0x1d0/0x7d0 [ 230.057838][ T7650] ? netlink_ack_tlv_len+0x6c/0x210 [ 230.057871][ T7650] netlink_ack+0x146/0xa50 [ 230.057907][ T7650] ? __kmalloc_cache_noprof+0x31c/0x660 [ 230.057944][ T7650] nfnetlink_rcv+0x2517/0x27b0 [ 230.058006][ T7650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 230.058051][ T7650] ? ref_tracker_free+0x693/0x840 [ 230.058102][ T7650] ? __netlink_deliver_tap+0x807/0x850 [ 230.058133][ T7650] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.058181][ T7650] netlink_unicast+0x80f/0x9b0 [ 230.058218][ T7650] ? __pfx_netlink_unicast+0x10/0x10 [ 230.058247][ T7650] ? netlink_sendmsg+0x650/0xb40 [ 230.058265][ T7650] ? skb_put+0x11b/0x210 [ 230.058289][ T7650] netlink_sendmsg+0x813/0xb40 [ 230.058319][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.058341][ T7650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.058367][ T7650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.058398][ T7650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.058416][ T7650] ____sys_sendmsg+0xa68/0xad0 [ 230.058440][ T7650] ? __might_fault+0xaf/0x130 [ 230.058472][ T7650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.058505][ T7650] ? import_iovec+0x73/0xa0 [ 230.058541][ T7650] ___sys_sendmsg+0x2a5/0x360 [ 230.058563][ T7650] ? __lock_acquire+0x6b5/0x2cf0 [ 230.058590][ T7650] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.058650][ T7650] ? __fget_files+0x2a/0x420 [ 230.058672][ T7650] ? __fget_files+0x3a0/0x420 [ 230.058754][ T7650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.058782][ T7650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.058816][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 230.058855][ T7650] do_syscall_64+0x14d/0xf80 [ 230.058880][ T7650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.058900][ T7650] ? trace_irq_disable+0x37/0x100 [ 230.058924][ T7650] ? clear_bhb_loop+0x40/0x90 [ 230.058948][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.058969][ T7650] RIP: 0033:0x7fa56a39bf79 [ 230.058988][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.059005][ T7650] RSP: 002b:00007fa56b19c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.059026][ T7650] RAX: ffffffffffffffda RBX: 00007fa56a615fa0 RCX: 00007fa56a39bf79 [ 230.059040][ T7650] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 230.059053][ T7650] RBP: 00007fa56b19c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.059065][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.059076][ T7650] R13: 00007fa56a616038 R14: 00007fa56a615fa0 R15: 00007fa56a73fa48 [ 230.059108][ T7650] [ 230.088072][ T30] audit: type=1326 audit(1771030433.423:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 230.459736][ T30] audit: type=1326 audit(1771030433.423:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 230.482381][ T30] audit: type=1326 audit(1771030433.643:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 230.626985][ T30] audit: type=1326 audit(1771030433.643:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.3.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45079bf79 code=0x7ffc0000 [ 230.707574][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 230.747616][ T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 230.862821][ T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.898941][ T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.922171][ T980] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 230.964155][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.984888][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.007408][ T980] usb 1-1: config 0 has no interfaces? [ 231.016297][ T9] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 231.036275][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.048693][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.056725][ T980] usb 1-1: config 0 has no interfaces? [ 231.065725][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.080168][ T9] usb 2-1: config 0 descriptor?? [ 231.090150][ T980] usb 1-1: config 0 has no interfaces? [ 231.178386][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.194184][ T980] usb 1-1: config 0 has no interfaces? [ 231.206292][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.218278][ T980] usb 1-1: config 0 has no interfaces? [ 231.230295][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.257407][ T980] usb 1-1: config 0 has no interfaces? [ 231.312506][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.346364][ T7676] batadv_slave_1: entered promiscuous mode [ 231.360318][ T980] usb 1-1: config 0 has no interfaces? [ 231.370300][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.380722][ T980] usb 1-1: config 0 has no interfaces? [ 231.386880][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 231.396811][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.435639][ T794] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.577773][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 231.583856][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.602395][ T980] usb 1-1: config 0 descriptor?? [ 231.651742][ T9] usb 2-1: USB disconnect, device number 17 [ 231.659423][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 231.695324][ T794] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.725622][ T794] usb 3-1: config 0 has no interface number 0 [ 231.752319][ T794] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.773660][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.796796][ T794] usb 3-1: Product: syz [ 231.807142][ T794] usb 3-1: Manufacturer: syz [ 231.807668][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.835973][ T794] usb 3-1: SerialNumber: syz [ 231.858344][ T794] usb 3-1: config 0 descriptor?? [ 231.878816][ T794] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.977432][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 231.988273][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.012743][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.040757][ T7673] batadv_slave_1: left promiscuous mode [ 232.046880][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.130236][ T29] usb 5-1: config 0 descriptor?? [ 232.209428][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 232.234046][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 232.273693][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 232.627645][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 232.803202][ T2149] usb 5-1: USB disconnect, device number 21 [ 232.827604][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 232.840378][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.856709][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.877197][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.906456][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.923684][ T5885] usb 1-1: USB disconnect, device number 23 [ 233.012186][ T29] usb 2-1: config 0 descriptor?? [ 233.041764][ T29] hub 2-1:0.0: USB hub found [ 233.250481][ T29] hub 2-1:0.0: 1 port detected [ 233.452657][ T7680] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 233.463655][ T7680] bond0: (slave wlan1): Opening slave failed [ 233.490023][ T7679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.506409][ T29] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 233.515688][ T29] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 233.552653][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 233.559052][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 233.598526][ T29] usb 2-1: USB disconnect, device number 18 [ 233.633626][ T7690] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 234.763827][ T30] audit: type=1326 audit(1771030438.533:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 234.831442][ T30] audit: type=1326 audit(1771030438.533:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38f495c84e code=0x7ffc0000 [ 235.027546][ T30] audit: type=1326 audit(1771030438.533:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.201572][ T30] audit: type=1326 audit(1771030438.533:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.319757][ T794] usb 3-1: qt2_attach - failed to power on unit: -71 [ 235.326660][ T794] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 235.385690][ T30] audit: type=1326 audit(1771030438.533:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.438898][ T794] usb 3-1: USB disconnect, device number 13 [ 235.573503][ T30] audit: type=1326 audit(1771030438.543:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.706856][ T30] audit: type=1326 audit(1771030438.543:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.729755][ T30] audit: type=1326 audit(1771030438.543:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.753090][ T30] audit: type=1326 audit(1771030438.543:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 235.782990][ T30] audit: type=1326 audit(1771030438.543:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f499bf79 code=0x7ffc0000 [ 236.617349][ T980] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 236.667899][ T7727] batadv_slave_1: entered promiscuous mode [ 236.822911][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 236.875088][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.975814][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.008604][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.040303][ T5885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.052611][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.076787][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.099334][ T980] usb 5-1: config 0 descriptor?? [ 237.120750][ T7732] netlink: 'syz.0.461': attribute type 9 has an invalid length. [ 237.132343][ T7732] netlink: 'syz.0.461': attribute type 7 has an invalid length. [ 237.140526][ T7732] netlink: 'syz.0.461': attribute type 8 has an invalid length. [ 237.234696][ T7722] batadv_slave_1: left promiscuous mode [ 237.262407][ T5885] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 237.297419][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 237.318668][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.339236][ T5885] usb 3-1: config 0 has no interfaces? [ 237.374470][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.395935][ T5885] usb 3-1: config 0 has no interfaces? [ 237.419059][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.437416][ T5885] usb 3-1: config 0 has no interfaces? [ 237.444712][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.457731][ T5885] usb 3-1: config 0 has no interfaces? [ 237.460100][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 237.469892][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.491349][ T5885] usb 3-1: config 0 has no interfaces? [ 237.499937][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.510963][ T5885] usb 3-1: config 0 has no interfaces? [ 237.517316][ T7720] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.539821][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.552068][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.557498][ T5885] usb 3-1: config 0 has no interfaces? [ 237.607331][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.630943][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.641542][ T5885] usb 3-1: config 0 has no interfaces? [ 237.647146][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 237.689886][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.741718][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.771289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.823225][ T5885] usb 3-1: config 0 descriptor?? [ 237.862520][ T9] usb 2-1: config 0 descriptor?? [ 237.882071][ T9] hub 2-1:0.0: USB hub found [ 237.901301][ T980] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input15 [ 237.963444][ T980] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 238.010864][ T980] usb 5-1: USB disconnect, device number 22 [ 238.103680][ T9] hub 2-1:0.0: 1 port detected [ 238.250330][ T7744] fido_id[7744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.308038][ T7733] netlink: 'syz.1.460': attribute type 10 has an invalid length. [ 238.321234][ T7733] bond0: (slave wlan1): Opening slave failed [ 238.409632][ T7729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.429378][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 238.435974][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 238.486912][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 238.494113][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 238.540639][ T9] usb 2-1: USB disconnect, device number 19 [ 238.803256][ T7755] FAULT_INJECTION: forcing a failure. [ 238.803256][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 238.818565][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.3.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.818598][ T7755] Tainted: [L]=SOFTLOCKUP [ 238.818606][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 238.818618][ T7755] Call Trace: [ 238.818626][ T7755] [ 238.818634][ T7755] dump_stack_lvl+0xe8/0x150 [ 238.818669][ T7755] should_fail_ex+0x412/0x560 [ 238.818699][ T7755] should_failslab+0xa8/0x100 [ 238.818722][ T7755] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 238.818787][ T7755] ? __alloc_skb+0x186/0x7d0 [ 238.818808][ T7755] ? __alloc_skb+0x1d0/0x7d0 [ 238.818825][ T7755] ? __local_bh_enable_ip+0xd0/0x130 [ 238.818854][ T7755] __alloc_skb+0x1d0/0x7d0 [ 238.818881][ T7755] netlink_sendmsg+0x5d4/0xb40 [ 238.818915][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.818939][ T7755] ? aa_sock_msg_perm+0xf1/0x1b0 [ 238.818964][ T7755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.818995][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.819014][ T7755] ____sys_sendmsg+0xa68/0xad0 [ 238.819039][ T7755] ? __might_fault+0xaf/0x130 [ 238.819071][ T7755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.819105][ T7755] ? import_iovec+0x73/0xa0 [ 238.819137][ T7755] ___sys_sendmsg+0x2a5/0x360 [ 238.819160][ T7755] ? __lock_acquire+0x6b5/0x2cf0 [ 238.819188][ T7755] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.819248][ T7755] ? __fget_files+0x2a/0x420 [ 238.819271][ T7755] ? __fget_files+0x3a0/0x420 [ 238.819304][ T7755] __x64_sys_sendmsg+0x1bd/0x2a0 [ 238.819331][ T7755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.819366][ T7755] ? __pfx_ksys_write+0x10/0x10 [ 238.819406][ T7755] do_syscall_64+0x14d/0xf80 [ 238.819431][ T7755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.819451][ T7755] ? trace_irq_disable+0x37/0x100 [ 238.819476][ T7755] ? clear_bhb_loop+0x40/0x90 [ 238.819500][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.819521][ T7755] RIP: 0033:0x7fa45079bf79 [ 238.819541][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.819557][ T7755] RSP: 002b:00007fa45162c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.819579][ T7755] RAX: ffffffffffffffda RBX: 00007fa450a15fa0 RCX: 00007fa45079bf79 [ 238.819593][ T7755] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.819606][ T7755] RBP: 00007fa45162c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.819619][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.819631][ T7755] R13: 00007fa450a16038 R14: 00007fa450a15fa0 R15: 00007fa450b3fa48 [ 238.819662][ T7755] [ 239.674093][ T9] usb 3-1: USB disconnect, device number 14 [ 239.687376][ T29] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 240.021521][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.057033][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.123193][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.134532][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 240.134550][ T30] audit: type=1326 audit(1771030444.013:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.297598][ T30] audit: type=1326 audit(1771030444.013:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.337283][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.440445][ T30] audit: type=1326 audit(1771030444.013:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.610319][ T30] audit: type=1326 audit(1771030444.013:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.635444][ T29] usb 4-1: usb_control_msg returned -32 [ 240.641333][ T29] usbtmc 4-1:16.0: can't read capabilities [ 240.661509][ T30] audit: type=1326 audit(1771030444.013:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.712623][ T30] audit: type=1326 audit(1771030444.013:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.829430][ T30] audit: type=1326 audit(1771030444.023:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 240.919805][ T30] audit: type=1326 audit(1771030444.023:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 241.030646][ T30] audit: type=1326 audit(1771030444.023:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 241.090301][ T30] audit: type=1326 audit(1771030444.023:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56a39bf79 code=0x7ffc0000 [ 241.207000][ T980] usb 4-1: USB disconnect, device number 18 [ 241.656969][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.477'. [ 241.705476][ T7790] program syz.4.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.825808][ T7787] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.961772][ T7802] program syz.3.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.201762][ T7803] batadv_slave_1: entered promiscuous mode [ 242.357347][ T29] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 242.514211][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 242.553652][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.572227][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.582658][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.597837][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.647110][ T7788] batadv_slave_1: left promiscuous mode [ 242.677543][ T29] usb 1-1: config 0 descriptor?? [ 242.686061][ T29] hub 1-1:0.0: USB hub found [ 242.888392][ T29] hub 1-1:0.0: 1 port detected [ 242.907392][ T5885] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 242.960583][ T7815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.052973][ T7815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.068247][ T5885] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 243.090152][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.103580][ T7805] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 243.135473][ T5885] usb 3-1: config 0 has no interfaces? [ 243.196247][ T7805] bond0: (slave wlan1): Opening slave failed [ 243.203537][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.206759][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.215169][ T5885] usb 3-1: config 0 has no interfaces? [ 243.255083][ T29] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 243.287469][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.297912][ T29] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 243.317291][ T5885] usb 3-1: config 0 has no interfaces? [ 243.325963][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 243.341804][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.352274][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 243.383664][ T5885] usb 3-1: config 0 has no interfaces? [ 243.416987][ T29] usb 1-1: USB disconnect, device number 24 [ 243.427810][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.528895][ T7818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 243.602131][ T5885] usb 3-1: config 0 has no interfaces? [ 243.645434][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.680413][ T5885] usb 3-1: config 0 has no interfaces? [ 243.738650][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.780520][ T5885] usb 3-1: config 0 has no interfaces? [ 243.800898][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.833817][ T5885] usb 3-1: config 0 has no interfaces? [ 243.853559][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 243.905188][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.966199][ T5885] usb 3-1: config 0 descriptor?? [ 244.531968][ T7836] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 244.542078][ T7836] netlink: 'syz.1.489': attribute type 2 has an invalid length. [ 244.567456][ T7836] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 244.585228][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 245.168463][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 245.387633][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.408679][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.570895][ T980] usb 3-1: USB disconnect, device number 15 [ 245.603318][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.707619][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.973096][ T9] usb 4-1: usb_control_msg returned -32 [ 245.985120][ T9] usbtmc 4-1:16.0: can't read capabilities [ 246.027672][ T5885] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 246.207499][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 246.221617][ T5885] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.231798][ T5885] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.250767][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.270798][ T5885] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 246.287402][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.309007][ T5885] usb 1-1: config 0 descriptor?? [ 246.533993][ T9] usb 4-1: USB disconnect, device number 19 [ 246.731692][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.744562][ T5885] kye 0003:0458:5012.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 246.768915][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.787768][ T5885] kye 0003:0458:5012.0009: unknown main item tag 0x0 [ 246.890374][ T5885] kye 0003:0458:5012.0009: unknown main item tag 0x0 [ 246.911279][ T5885] kye 0003:0458:5012.0009: unknown main item tag 0x0 [ 246.943105][ T5885] kye 0003:0458:5012.0009: unknown main item tag 0x0 [ 247.104043][ T5885] kye 0003:0458:5012.0009: unknown main item tag 0x0 [ 247.175717][ T5885] kye 0003:0458:5012.0009: hidraw0: USB HID v0.01 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 247.337684][ T5885] kye 0003:0458:5012.0009: tablet-enabling feature report not found [ 247.345852][ T5885] kye 0003:0458:5012.0009: tablet enabling failed [ 247.454032][ T7876] batadv_slave_1: entered promiscuous mode [ 247.485132][ T7879] FAULT_INJECTION: forcing a failure. [ 247.485132][ T7879] name failslab, interval 1, probability 0, space 0, times 0 [ 247.583499][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.3.501 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.583543][ T7879] Tainted: [L]=SOFTLOCKUP [ 247.583550][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 247.583567][ T7879] Call Trace: [ 247.583575][ T7879] [ 247.583584][ T7879] dump_stack_lvl+0xe8/0x150 [ 247.583618][ T7879] should_fail_ex+0x412/0x560 [ 247.583647][ T7879] should_failslab+0xa8/0x100 [ 247.583670][ T7879] __kmalloc_cache_noprof+0x88/0x660 [ 247.583698][ T7879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.583722][ T7879] ? nft_trans_table_add+0x56/0x430 [ 247.583753][ T7879] nft_trans_table_add+0x56/0x430 [ 247.583785][ T7879] nf_tables_newtable+0xce3/0x1910 [ 247.583829][ T7879] nfnetlink_rcv+0x1240/0x27b0 [ 247.583893][ T7879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 247.583938][ T7879] ? ref_tracker_free+0x693/0x840 [ 247.583991][ T7879] ? __netlink_deliver_tap+0x807/0x850 [ 247.584023][ T7879] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.584070][ T7879] netlink_unicast+0x80f/0x9b0 [ 247.584108][ T7879] ? __pfx_netlink_unicast+0x10/0x10 [ 247.584138][ T7879] ? netlink_sendmsg+0x650/0xb40 [ 247.584156][ T7879] ? skb_put+0x11b/0x210 [ 247.584182][ T7879] netlink_sendmsg+0x813/0xb40 [ 247.584217][ T7879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.584240][ T7879] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.584266][ T7879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.584297][ T7879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.584316][ T7879] ____sys_sendmsg+0xa68/0xad0 [ 247.584340][ T7879] ? __might_fault+0xaf/0x130 [ 247.584372][ T7879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.584404][ T7879] ? import_iovec+0x73/0xa0 [ 247.584436][ T7879] ___sys_sendmsg+0x2a5/0x360 [ 247.584459][ T7879] ? __lock_acquire+0x6b5/0x2cf0 [ 247.584487][ T7879] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.584548][ T7879] ? __fget_files+0x2a/0x420 [ 247.584572][ T7879] ? __fget_files+0x3a0/0x420 [ 247.584606][ T7879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 247.584634][ T7879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.584669][ T7879] ? __pfx_ksys_write+0x10/0x10 [ 247.584709][ T7879] do_syscall_64+0x14d/0xf80 [ 247.584734][ T7879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.584754][ T7879] ? trace_irq_disable+0x37/0x100 [ 247.584779][ T7879] ? clear_bhb_loop+0x40/0x90 [ 247.584803][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.584824][ T7879] RIP: 0033:0x7fa45079bf79 [ 247.584843][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.584861][ T7879] RSP: 002b:00007fa45162c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.584883][ T7879] RAX: ffffffffffffffda RBX: 00007fa450a15fa0 RCX: 00007fa45079bf79 [ 247.584898][ T7879] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 247.584910][ T7879] RBP: 00007fa45162c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.584922][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.584934][ T7879] R13: 00007fa450a16038 R14: 00007fa450a15fa0 R15: 00007fa450b3fa48 [ 247.584967][ T7879] [ 247.972410][ T7878] ================================================================== [ 247.980514][ T7878] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 247.988774][ T7878] Read of size 5 at addr ffff88805ab82a40 by task fido_id/7878 [ 247.996352][ T7878] [ 247.998701][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 247.998724][ T7878] Tainted: [L]=SOFTLOCKUP [ 247.998729][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 247.998738][ T7878] Call Trace: [ 247.998744][ T7878] [ 247.998750][ T7878] dump_stack_lvl+0xe8/0x150 [ 247.998773][ T7878] print_report+0xba/0x230 [ 247.998790][ T7878] ? report_descriptor_read+0xb5/0x100 [ 247.998804][ T7878] kasan_report+0x117/0x150 [ 247.998827][ T7878] ? report_descriptor_read+0xb5/0x100 [ 247.998850][ T7878] kasan_check_range+0x264/0x2c0 [ 247.998863][ T7878] ? report_descriptor_read+0xb5/0x100 [ 247.998878][ T7878] __asan_memcpy+0x29/0x70 [ 247.998896][ T7878] report_descriptor_read+0xb5/0x100 [ 247.998912][ T7878] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 247.998932][ T7878] kernfs_fop_read_iter+0x451/0x6b0 [ 247.998953][ T7878] vfs_read+0x582/0xa70 [ 247.998975][ T7878] ? __pfx_vfs_read+0x10/0x10 [ 247.998994][ T7878] ? do_sys_openat2+0x14c/0x200 [ 247.999009][ T7878] ? kmem_cache_free+0x180/0x610 [ 247.999028][ T7878] ? fd_install+0x94/0x3d0 [ 247.999049][ T7878] ksys_read+0x150/0x270 [ 247.999068][ T7878] ? __pfx_ksys_read+0x10/0x10 [ 247.999091][ T7878] do_syscall_64+0x14d/0xf80 [ 247.999109][ T7878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.999123][ T7878] ? trace_irq_disable+0x37/0x100 [ 247.999140][ T7878] ? clear_bhb_loop+0x40/0x90 [ 247.999156][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.999170][ T7878] RIP: 0033:0x7f5182aa7407 [ 247.999184][ T7878] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 247.999197][ T7878] RSP: 002b:00007ffe8615d020 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 247.999212][ T7878] RAX: ffffffffffffffda RBX: 00007f518321d880 RCX: 00007f5182aa7407 [ 247.999224][ T7878] RDX: 0000000000001000 RSI: 00007ffe8615d070 RDI: 0000000000000004 [ 247.999233][ T7878] RBP: 0000564107664730 R08: 0000000000000000 R09: 0000000000000000 [ 247.999243][ T7878] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564107663930 [ 247.999252][ T7878] R13: 00007ffe8615d070 R14: 0000000000000004 R15: 00005640ebfed4d8 [ 247.999268][ T7878] [ 247.999273][ T7878] [ 248.222721][ T7878] Allocated by task 5885: [ 248.227398][ T7878] kasan_save_track+0x3e/0x80 [ 248.232101][ T7878] __kasan_kmalloc+0x93/0xb0 [ 248.236704][ T7878] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 248.243125][ T7878] kmemdup_noprof+0x2b/0x70 [ 248.247630][ T7878] hid_open_report+0x216/0xf00 [ 248.252422][ T7878] kye_probe+0x21/0x5f0 [ 248.256583][ T7878] hid_device_probe+0x416/0x7a0 [ 248.261430][ T7878] really_probe+0x267/0xaf0 [ 248.265940][ T7878] __driver_probe_device+0x18c/0x320 [ 248.271224][ T7878] driver_probe_device+0x4f/0x240 [ 248.276254][ T7878] __device_attach_driver+0x2d4/0x4c0 [ 248.281629][ T7878] bus_for_each_drv+0x258/0x2f0 [ 248.286507][ T7878] __device_attach+0x2c5/0x450 [ 248.291284][ T7878] device_initial_probe+0xa1/0xd0 [ 248.296310][ T7878] bus_probe_device+0x12a/0x220 [ 248.301165][ T7878] device_add+0x7b6/0xb70 [ 248.305588][ T7878] hid_add_device+0x272/0x3e0 [ 248.310260][ T7878] usbhid_probe+0xe3a/0x12f0 [ 248.314852][ T7878] usb_probe_interface+0x668/0xc90 [ 248.319969][ T7878] really_probe+0x267/0xaf0 [ 248.324469][ T7878] __driver_probe_device+0x18c/0x320 [ 248.329749][ T7878] driver_probe_device+0x4f/0x240 [ 248.334771][ T7878] __device_attach_driver+0x2d4/0x4c0 [ 248.340142][ T7878] bus_for_each_drv+0x258/0x2f0 [ 248.345002][ T7878] __device_attach+0x2c5/0x450 [ 248.349776][ T7878] device_initial_probe+0xa1/0xd0 [ 248.354851][ T7878] bus_probe_device+0x12a/0x220 [ 248.359708][ T7878] device_add+0x7b6/0xb70 [ 248.364131][ T7878] usb_set_configuration+0x1a87/0x2110 [ 248.369601][ T7878] usb_generic_driver_probe+0x8d/0x150 [ 248.375064][ T7878] usb_probe_device+0x1c4/0x3b0 [ 248.380005][ T7878] really_probe+0x267/0xaf0 [ 248.384508][ T7878] __driver_probe_device+0x18c/0x320 [ 248.389790][ T7878] driver_probe_device+0x4f/0x240 [ 248.394870][ T7878] __device_attach_driver+0x2d4/0x4c0 [ 248.400241][ T7878] bus_for_each_drv+0x258/0x2f0 [ 248.405092][ T7878] __device_attach+0x2c5/0x450 [ 248.409860][ T7878] device_initial_probe+0xa1/0xd0 [ 248.414895][ T7878] bus_probe_device+0x12a/0x220 [ 248.419747][ T7878] device_add+0x7b6/0xb70 [ 248.424078][ T7878] usb_new_device+0xa08/0x16f0 [ 248.428872][ T7878] hub_event+0x2a1c/0x4f30 [ 248.433389][ T7878] process_scheduled_works+0xaec/0x17a0 [ 248.438944][ T7878] worker_thread+0xa50/0xfc0 [ 248.443543][ T7878] kthread+0x388/0x470 [ 248.447737][ T7878] ret_from_fork+0x51e/0xb90 [ 248.452437][ T7878] ret_from_fork_asm+0x1a/0x30 [ 248.457249][ T7878] [ 248.459625][ T7878] The buggy address belongs to the object at ffff88805ab82a40 [ 248.459625][ T7878] which belongs to the cache kmalloc-8 of size 8 [ 248.473354][ T7878] The buggy address is located 0 bytes inside of [ 248.473354][ T7878] freed 8-byte region [ffff88805ab82a40, ffff88805ab82a48) [ 248.486806][ T7878] [ 248.489136][ T7878] The buggy address belongs to the physical page: [ 248.495556][ T7878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ab82180 pfn:0x5ab82 [ 248.505636][ T7878] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 248.513825][ T7878] page_type: f5(slab) [ 248.517905][ T7878] raw: 00fff00000000200 ffff88813fe9d500 ffffea0000a994d0 ffffea0000a5d290 [ 248.527107][ T7878] raw: ffff88805ab82180 000000000080007a 00000000f5000000 0000000000000000 [ 248.535694][ T7878] page dumped because: kasan: bad access detected [ 248.542128][ T7878] page_owner tracks the page as allocated [ 248.547845][ T7878] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5900, tgid 5900 (kworker/0:6), ts 100120168071, free_ts 100119495973 [ 248.568687][ T7878] post_alloc_hook+0x231/0x280 [ 248.573560][ T7878] get_page_from_freelist+0x24dc/0x2580 [ 248.579210][ T7878] __alloc_frozen_pages_noprof+0x18d/0x380 [ 248.585028][ T7878] allocate_slab+0x77/0x660 [ 248.589578][ T7878] refill_objects+0x331/0x3c0 [ 248.594258][ T7878] __pcs_replace_empty_main+0x2b9/0x620 [ 248.599809][ T7878] __kmalloc_cache_noprof+0x392/0x660 [ 248.605190][ T7878] usb_control_msg+0x73/0x3e0 [ 248.609894][ T7878] hub_port_reset+0x3c7/0x1840 [ 248.614660][ T7878] hub_port_init+0x299/0x28d0 [ 248.619336][ T7878] hub_event+0x2593/0x4f30 [ 248.623755][ T7878] process_scheduled_works+0xaec/0x17a0 [ 248.629846][ T7878] worker_thread+0xa50/0xfc0 [ 248.634437][ T7878] kthread+0x388/0x470 [ 248.638528][ T7878] ret_from_fork+0x51e/0xb90 [ 248.643130][ T7878] ret_from_fork_asm+0x1a/0x30 [ 248.648189][ T7878] page last free pid 5900 tgid 5900 stack trace: [ 248.654524][ T7878] __free_frozen_pages+0xc01/0xd80 [ 248.659872][ T7878] __slab_free+0x263/0x2b0 [ 248.664308][ T7878] qlist_free_all+0x97/0x100 [ 248.668997][ T7878] kasan_quarantine_reduce+0x148/0x160 [ 248.674463][ T7878] __kasan_kmalloc+0x22/0xb0 [ 248.679062][ T7878] __kmalloc_cache_noprof+0x31c/0x660 [ 248.684445][ T7878] usb_control_msg+0x73/0x3e0 [ 248.689201][ T7878] hub_ext_port_status+0x116/0x820 [ 248.694327][ T7878] hub_event+0x771/0x4f30 [ 248.698674][ T7878] process_scheduled_works+0xaec/0x17a0 [ 248.704230][ T7878] worker_thread+0xa50/0xfc0 [ 248.709263][ T7878] kthread+0x388/0x470 [ 248.713428][ T7878] ret_from_fork+0x51e/0xb90 [ 248.718054][ T7878] ret_from_fork_asm+0x1a/0x30 [ 248.722917][ T7878] [ 248.725332][ T7878] Memory state around the buggy address: [ 248.730976][ T7878] ffff88805ab82900: 06 fc fc fc 05 fc fc fc 06 fc fc fc 04 fc fc fc [ 248.739042][ T7878] ffff88805ab82980: 00 fc fc fc 06 fc fc fc 06 fc fc fc fa fc fc fc [ 248.747098][ T7878] >ffff88805ab82a00: 06 fc fc fc 06 fc fc fc fb fc fc fc fa fc fc fc [ 248.755165][ T7878] ^ [ 248.761334][ T7878] ffff88805ab82a80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 248.769406][ T7878] ffff88805ab82b00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 248.777483][ T7878] ================================================================== [ 248.804299][ T7871] batadv_slave_1: left promiscuous mode [ 248.820846][ T5885] usb 1-1: USB disconnect, device number 25 [ 248.830988][ T7878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.838342][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 248.849061][ T7878] Tainted: [L]=SOFTLOCKUP [ 248.853428][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.863705][ T7878] Call Trace: [ 248.867015][ T7878] [ 248.869977][ T7878] vpanic+0x56c/0xa60 [ 248.874085][ T7878] ? __pfx_vpanic+0x10/0x10 [ 248.878637][ T7878] panic+0xc5/0xd0 [ 248.882398][ T7878] ? __pfx_panic+0x10/0x10 [ 248.886852][ T7878] ? preempt_schedule_thunk+0x16/0x30 [ 248.892263][ T7878] ? report_descriptor_read+0xb5/0x100 [ 248.897761][ T7878] ? preempt_schedule_thunk+0x16/0x30 [ 248.903169][ T7878] ? report_descriptor_read+0xb5/0x100 [ 248.909271][ T7878] check_panic_on_warn+0x89/0xb0 [ 248.914248][ T7878] ? report_descriptor_read+0xb5/0x100 [ 248.919736][ T7878] end_report+0x6f/0x140 [ 248.924033][ T7878] kasan_report+0x128/0x150 [ 248.928589][ T7878] ? report_descriptor_read+0xb5/0x100 [ 248.934096][ T7878] kasan_check_range+0x264/0x2c0 [ 248.939068][ T7878] ? report_descriptor_read+0xb5/0x100 [ 248.945001][ T7878] __asan_memcpy+0x29/0x70 [ 248.949445][ T7878] report_descriptor_read+0xb5/0x100 [ 248.954755][ T7878] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 248.960244][ T7878] kernfs_fop_read_iter+0x451/0x6b0 [ 248.965472][ T7878] vfs_read+0x582/0xa70 [ 248.969658][ T7878] ? __pfx_vfs_read+0x10/0x10 [ 248.974472][ T7878] ? do_sys_openat2+0x14c/0x200 [ 248.979343][ T7878] ? kmem_cache_free+0x180/0x610 [ 248.984311][ T7878] ? fd_install+0x94/0x3d0 [ 248.988756][ T7878] ksys_read+0x150/0x270 [ 248.993029][ T7878] ? __pfx_ksys_read+0x10/0x10 [ 248.997822][ T7878] do_syscall_64+0x14d/0xf80 [ 249.002445][ T7878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.008559][ T7878] ? trace_irq_disable+0x37/0x100 [ 249.013619][ T7878] ? clear_bhb_loop+0x40/0x90 [ 249.018322][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.024239][ T7878] RIP: 0033:0x7f5182aa7407 [ 249.028669][ T7878] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 249.048557][ T7878] RSP: 002b:00007ffe8615d020 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 249.056998][ T7878] RAX: ffffffffffffffda RBX: 00007f518321d880 RCX: 00007f5182aa7407 [ 249.065022][ T7878] RDX: 0000000000001000 RSI: 00007ffe8615d070 RDI: 0000000000000004 [ 249.073040][ T7878] RBP: 0000564107664730 R08: 0000000000000000 R09: 0000000000000000 [ 249.081049][ T7878] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564107663930 [ 249.089037][ T7878] R13: 00007ffe8615d070 R14: 0000000000000004 R15: 00005640ebfed4d8 [ 249.097120][ T7878] [ 249.100775][ T7878] Kernel Offset: disabled [ 249.105105][ T7878] Rebooting in 86400 seconds..