last executing test programs: 13m50.177055099s ago: executing program 4 (id=490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000010170000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x1ae, 0x0, &(0x7f0000000780)="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", &(0x7f0000000300), 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = dup(r3) r7 = fsopen(0x0, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000000)={'ip_vti0\x00'}) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r11, 0x1}}, 0x48) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="650f01ef6436f466f080737ca90f01c30f320f01c8b8006000000f23d80f21f835000000a00f23f8670f01c3faf00fba3985", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13m45.997653839s ago: executing program 4 (id=503): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/204, 0xcc, 0x5) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1) 13m44.946735785s ago: executing program 4 (id=506): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='veth1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 13m44.816645778s ago: executing program 4 (id=507): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000000001010400000000141a000002000000580001801400018008000100e000000108000200e00000010c000280050001000000000006000340000200002c00018014000300fc0200000027000000000000000000e114000400fc000000000000000000000000000001240002801400018008000100ac141480050001000000000008000740000000011c0010800800024000000007080001400000008008000340000049270800048004000380"], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000029c0)="17000000020001000003d68c5e", 0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8040480) fstat(0xffffffffffffffff, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) syz_clone3(&(0x7f0000000080)={0x823400, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13m43.817379485s ago: executing program 4 (id=511): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xfffffdef}], 0x300, 0x401eb94) 13m43.711854131s ago: executing program 4 (id=513): r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0xfffffffd, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 13m43.136873951s ago: executing program 32 (id=513): r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0xfffffffd, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 1m46.763626063s ago: executing program 0 (id=3438): unshare(0x24020400) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x3) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x8, 0x3, 0x8, 0x8, '\x00', 0x500000}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) getxattr(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x8, 0x1, 0x0, 0x0, 'syz0\x00', 0x8}, 0x0, [0x0, 0x101, 0x0, 0x0, 0x2, 0x8000000000000000, 0x0, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0xf, 0x80000000000000, 0x0, 0x8001, 0x0, 0x0, 0x4, 0x7, 0x4, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26f, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x800000000000000, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000002, 0x0, 0x0, 0x1, 0x400000000000, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0x1, 0x3, 0xfff}}) (async) close(r1) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) 1m46.489059501s ago: executing program 0 (id=3441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 1m46.313007068s ago: executing program 0 (id=3442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000200081dc070000000000000002000004"], 0x1c}}, 0x20005000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) pipe(&(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x294, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x264, 0x2, [@TCA_GRED_LIMIT={0x4, 0x5, 0xb96}, @TCA_GRED_PARMS={0x0, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0xfffffffffffffe93, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x294}}, 0x0) 1m45.972942001s ago: executing program 0 (id=3444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d000000060000000400000018090600", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x6020400) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98848cd14e9a88d4ea84136ad1b0fa"], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000580)={r7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000500)={0xa, 0x4e24, 0x3fe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000f00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r8, @ANYRESDEC=r2, @ANYRES64=r1], 0x340}}], 0x2, 0x810) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x1b, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0xfe, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0xfc, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x29, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x12, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m44.871999357s ago: executing program 0 (id=3446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000000800168604000180080004"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1m44.430156299s ago: executing program 0 (id=3450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4e02}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000f4e000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f00001a7000/0x1000)=nil, &(0x7f0000ef5000/0x9000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x3c1c, 0xc002, 0x2000, 0x38}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 1m43.926184003s ago: executing program 33 (id=3450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4e02}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000f4e000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f00001a7000/0x1000)=nil, &(0x7f0000ef5000/0x9000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x3c1c, 0xc002, 0x2000, 0x38}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 9.669658406s ago: executing program 6 (id=3652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4e02}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000f4e000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f00001a7000/0x1000)=nil, &(0x7f0000ef5000/0x9000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1, 0x3000000000000000}]) 8.847820668s ago: executing program 6 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x1) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="601004000705c337e628a5c9b6b7fa166957ee79021864fadbb42a1a1cc0981d1956c17043c7f5b0288e70cb0672f6287e0c4eeb62040f695f5b6693102f862502fde301d9d7704135ba80dfa0d9855dd84d0000006717a54ff5b6fc00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="fe0c04"], 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000540)={0x20, 0x3, 0x4, "4000c378"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4002, 0xc4, 0x6}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0xa, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0xfb, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) linkat(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 8.708938404s ago: executing program 5 (id=3655): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xa) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x6000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.587798824s ago: executing program 5 (id=3657): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) futex(&(0x7f000000cffc), 0x5, 0x800, 0x0, &(0x7f00000001c0), 0x93000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001cc0)="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", 0x297}], 0x1}}], 0x1, 0x60c5895) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) read(r2, &(0x7f00000000c0)=""/163, 0xd0140f23) 8.28649812s ago: executing program 5 (id=3659): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0xed, 0x0, 0x4, 0x0, 0x1, 0x6}) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r2 = msgget$private(0x0, 0x200) msgsnd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r2, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000380)=""/4096) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="013057785e3423117fae4da2a4e071dd8da13fb47f0cbc6cf96d1e07755819", 0x1f}, {&(0x7f0000002840)="9b318658cbc85c5f45434a9d040501e014b945046afc481f04a34cc7352bc7346628a42e7fe8b83c5d0da85e9a347bf5ef1444352b7aff86bdc57cb713fcad1925ea8bd432388b6190a0cb0119cf28318fe315878efc639cb739db846ae923812d78e310bda5d0863820f7a058b0de3b522536f1186a92e336b1cf7cc1f0d1272a32bc82111539da6458772d00276a942abfe6234300"/165, 0xa5}, {&(0x7f0000001380)="74aaf04a5f84f58c0422a8d9152ca9ab7efff592a08192dbc8ba7b967558c665a75a798d9dd5624bdd89e35f152ce7e9554f686de466e614a0c79be576360773abbcbbc9eb42f0e976c7c1251745483d3452a97e4dec8a2e8b868ae1c7c314f152c371637fa846c6d1ab36fd32dd6686e210cee7a29c21d6d2458938d5d83271c69cdc9e57d37b4f7225de549b7ad62b12c25be5bf3f0859a23b3e0b761a3caa2159acbdc23be4131a40dda3a05260ead37fc27175", 0xb5}, {&(0x7f0000001440)="a650531a842ae4a07b3edb626b0ac03e4f26f1ed868c0297fcee5941777dfcdcb1aa3c53b545312a3edeb7211ca2ae28d9a25a5908db315e193264b05dfdbc80598f74b4923fe95ae1143b1ef26669d1b2216ae5e55b9bae725f1e5518e205e315afb1e2dd07e2012e88daa693f0fe430f11a5dd21085f3f9a3f59cd049c0ce8e559b9b37b1910db0dad3eb15899e4630a96d0e1667124fe05f715abb733a6ede3dbfd0aea410278a02ea58bdfba223fd58344201b69677ed4b44efa55012e119c2251eaf7e6234af7d09db4adc44cdbbac62f11f38d6af805", 0xd9}], 0x4, &(0x7f0000001580)=[{0xa8, 0xff, 0x1, "9ad85b693bb919e3508807efdee2ece7f7c94b600d2cca7ea7de81394753fcba9d9e866e9148ca40b45439eb947bb78830e5808ff82066d506095d53ca3eb4bcb7c9cc6317fd6ff766b5180eb8e5b1507aad202ef3fc56471cadaf9667d61021b75c025add5f2db43dc660e4e43b9ba63c967407ffc6f3249ff8b5c7a8f9e149f852e74de4893f3b63325bf9c06e87ad6b1b22252833"}, {0x1010, 0x84, 0x1, "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"}, {0x60, 0x10a, 0x9ae, "6ac71f8afe8577fb5de506065cf1124759fdb4b62f6439b1b5eaf4e28bfbd650a41833ac9db4eeeff1db3f48c0420bff09863c8b543a6b1a679c259af57d459dc44f22ad78437857757df6a3819e"}, {0x58, 0x119, 0xfffff962, "942b5103939922f128bcd7e7ace02d30fa869e28cd0806255f696506c20edb4f27cf5375eef76dc57e4df0a5ade5bffd2ecc95095c23542f3b0e6241d0fcc714a61e3f"}, {0x100, 0x1ed, 0x0, "bc35887d914801608b4b39b2cea979862656bb36b3b0354745018ce835487ec2d5fe38adba680fd08cb04e6c08994dbaa0051db897bf1d6573dd2fcddc39e85eb3da0a99de26966cc715a38234206279e96773dadddc366a010d2a06dc8ced9afb1d2b072750851910248e3fc2d86c298a45d864c18ca6f0a28c20127e60bd7f6c21743d55b08c9c1169cb8fd6ca0f1aa96cc6c8168cd1d10c68640becd4ac7050637bc69d9d68a1b1d3394773c1d99f4739832eea0f8144a7992538d0fda227389197de2f7c1d33b04083ae1e6b2805f0eec858a826fb2a5b2cbae4cd4c0735c8d0198a79c1101875660ec5bdbab4"}], 0x1270}, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) 8.218354448s ago: executing program 5 (id=3660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f6272696467650008000a00fbffffff140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x8014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30}}, 0x8040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x1, 0x2, {0xd50c86d8f1837abc, 0x0, 0x3}, {0x0, 0xf0}, 0xfc, 0xff}, {0x3, 0x0, {0x2, 0x0, 0x2}, {0x2, 0x1}, 0x1, 0x2}], 0x40) 8.116205555s ago: executing program 5 (id=3661): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x240, 0x25018}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x3c}}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r6 = socket(0x18, 0x800, 0x0) sendfile(r6, r5, 0x0, 0x8) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r7, &(0x7f0000000c80)={0x2d, 0x4, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @empty}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffe0, 0xf}, {0x7, 0xffff}, {0xc, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 7.530805813s ago: executing program 1 (id=3663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="9ed600001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 6.949150183s ago: executing program 1 (id=3664): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r0, 0x1) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x8090) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4000005, 0x10}, &(0x7f0000000180)=0xc) 6.946881924s ago: executing program 1 (id=3665): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) writev(r0, &(0x7f00000001c0), 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x1d5, 0x3, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x9, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x2, [{@loopback, 0xfffffff2}, {@rand_addr=0x64010100, 0x10}, {@multicast1, 0x9}, {@multicast1, 0xec4d}, {@remote, 0x53c6dbb6}]}, @timestamp_prespec={0x44, 0x4, 0xfd, 0x3, 0x6}, @lsrr={0x83, 0xf, 0x17, [@local, @multicast2, @broadcast]}, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffaba}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x180c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'dvmrp1\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xe, 0x8, 0x39, 0x71b, 0xd40, 0x400, 0xe, 0x5, 0xe7, 0x1f800000, 0x4ac7db9f, 0x0, 0x7, 0x6ff, 0x7, 0x1, 0x5, 0x5, 0xfff, 0x2, 0xab, 0x68, 0x4}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb016029", @ANYRES32=0x0], 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 6.215121214s ago: executing program 5 (id=3667): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) fadvise64(r0, 0x6, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000001c0)={0x5, @win={{0x5, 0x2, 0x1, 0x7fff}, 0x8, 0x40, 0x0, 0xfff, 0x0, 0x8}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970af", 0x69, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) sendmsg$nl_xfrm(r5, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x82, 0x9}, 0x18) ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, &(0x7f00000002c0)={"e5c471ee395784846345a23ed58b0957ba9ce69597b3b54e4706d0fa305e", 0x5, 0x2, 0x401, 0x3, 0xfffffc2a, 0x5, 0x2, 0x1, [0xc, 0x80, 0x1, 0x0, 0x5, 0x6, 0x5, 0x9, 0xffffffff, 0x6, 0x881d, 0x0, 0x6, 0x8, 0x0, 0x6, 0x6, 0x2, 0x3]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) 5.711283855s ago: executing program 6 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYRES16], 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x9}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xef0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xec0, 0x2, [@TCA_CGROUP_ACT={0xebc, 0x1, [@m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x1, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xef0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000200000001100000ffffff7f00000000", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000600000000ffff000000"], 0x50) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000040fc04d8050000000000010902240001ff0f00000904000004030000000921700c000122e301090581030502050a30"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="000a00000000000000572932afccea7ca0c2"], 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.333205734s ago: executing program 3 (id=3671): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x13}, 0xfffffffa}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa2c09000000f80800451f00300067000009019078ac141421ac1414bb050190780a01010145ab0c7e006400dd026fe77f7c1e0101ac1e0101"], 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x21b602, 0x0) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) (async, rerun: 32) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000100)=0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000008000000080000000080000000550000003000006040000000f00eb00010000000a000000030000000a0000000001000000000000000000030000000001000000030000007f0000000b0000000000000e06000000010000000000000000000003000000000100000002000000050000000600000000000007"], 0x0, 0xa0, 0x0, 0x1, 0x7, 0x10000}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507", @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) 5.239111941s ago: executing program 1 (id=3672): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x4, 0xffc, 0x1fe, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000174000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x141801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) getcwd(0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000240)={0x20, r4, &(0x7f00000001c0)=[{0x1, 0x6}, {0x1, 0x2}, {0x1}, {0x0, 0x2}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x5}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 5.128124698s ago: executing program 3 (id=3673): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x3c00, 0x118, 0x780, 0x800, 0x4, 0xfffffffa, 0xf, 0x0, {0x7, 0x9, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x1ff}, 0x3, 0x0, 0xe, 0x0, 0x1, 0x9, 0x7, 0x0, 0x80, 0x7, 0x2, 0x8, 0x24, 0x100, 0x2, 0x6}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x4, 0xa}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x4, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000400)={r2, "1d1a076d50884b9cc8f99f3b8bb4a5b3"}) socket$netlink(0x10, 0x3, 0x0) 4.924876935s ago: executing program 3 (id=3674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000600)={0x0, "645bb74be38edf81866b512458ac6374"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001640)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="3a6de2cab5a23fe8f108706178"]) r4 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000300)="91afcb884beaac3e5a4f958ee30c1d18b9574c0805d1b99122bcf4a96d19de754961dda4b92eb7f8f82898ef2774c4b1ee7ec284b8b95e4ad77ae98a93c65ea51933c8aa8cb1981b1f", 0x49, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x4, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r8, r9, r10, r11], 0x4, 0x80000}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e3b4244a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f472beb24c47fbd19e9e7b2b8c851592d64758d2ff1ac341f208c6d28c62c00052de2165ad", 0x8c}], 0x1}, 0x34008880) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x80000001, @loopback, 0x4}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 4.77001209s ago: executing program 3 (id=3676): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x8090) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r1, 0x4000005, 0x10}, &(0x7f0000000180)=0xc) 3.970163056s ago: executing program 3 (id=3677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x9c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x0, 0x8004, 0x5, 0x52bd, 0x129432e6, 0xc8, 0xf9, 0xe, 0x6, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x201000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x401, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x8, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0x2f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004880)='/proc/bus/input/devices\x00', 0x0, 0x0) readv(r4, &(0x7f0000005080)=[{&(0x7f00000049c0)=""/242, 0xf2}, {&(0x7f0000004ac0)=""/127, 0x7f}, {&(0x7f0000004b40)=""/194, 0xc2}, {&(0x7f0000004c40)=""/130, 0x82}, {&(0x7f0000004d00)=""/118, 0x76}, {0x0}, {&(0x7f0000004e00)=""/235, 0xeb}], 0x7) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f2, 0x300, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.617199361s ago: executing program 2 (id=3681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2431}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x1000000, 0x0, {0xbffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_procfs(0x0, 0x0) 2.565140059s ago: executing program 6 (id=3682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) unshare(0x24060400) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe800, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) r7 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x0, 0x2, 0x3, 0x0, {0xa, 0x4e21, 0x1, @empty, 0x4}}}, 0x3a) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x1) (async) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) setrlimit(0x9, &(0x7f0000000040)={0x81, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.228644054s ago: executing program 6 (id=3683): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x204f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) unshare(0x2050000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x8fd, 0x4, 0x2, {0x2, @pix={0x5, 0x4, 0x33524742, 0x7, 0x4, 0x6, 0x4, 0x10000, 0x1, 0x7, 0x1, 0x3}}, 0x7fe}) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) 2.005492614s ago: executing program 1 (id=3684): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.001404097s ago: executing program 6 (id=3685): socket$inet6_tcp(0xa, 0x1, 0x0) memfd_secret(0x80000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r2, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x22, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_io_uring_setup(0xcaf, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) 1.81819802s ago: executing program 3 (id=3686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a4000000000090002"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x9, 0x42303159, 0x1, @discrete={0x0, 0x17fff}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000061108b00000000001f010000000000009500000000000000e1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bfe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e301090581038936"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.525942375s ago: executing program 2 (id=3687): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x8090) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r1, 0x4000005, 0x10}, &(0x7f0000000180)=0xc) 1.50555656s ago: executing program 2 (id=3688): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e792000001ffffff", [0x0, 0x2000000000001]}}) 1.319675374s ago: executing program 2 (id=3689): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x100000, 0x1c800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fchmod(r2, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0xc0185500, &(0x7f0000000040)={0x80, 0x100000, "aa2fe1a243fcd9abf29cc3391c06b86f68e7f73d4f0bff9669a8e82040ccb44d75131fb06cade553a6bdc314438ce0af11c38cd724980b087a7a16f9295be0a69db51576e7a06ef6bcabc67b52ba82e73504fa842ec2f0c06bf006f3e5bcdd5057997bf171c60d96a538b02ee9f4b573457498ca09cb417b1fbe6dc3b0c27ab0693ac57aff136748f7740dfc33f3a902b670f8933aec28869e637c18379d6d0b4d844b732cb1932733dfcec2f69f8b6df76ba84e1f001ad29105230471f466b6f9d7d2b05a57fe16e7363e5ecebc2c74539ca55c7ce3a175061adedd20532a9de97379f4dd5baeeae835946311e6e4e2361355c54b3bd500"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000080)) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x3) 1.210033585s ago: executing program 2 (id=3690): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="0200000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.037230858s ago: executing program 2 (id=3691): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @p_u8=&(0x7f0000000480)=0x4}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210020000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @p_u8=&(0x7f0000000480)=0x4}}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210020000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) (async) 0s ago: executing program 1 (id=3692): r0 = socket$kcm(0xa, 0x5, 0x87) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000002c0)={0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="180800000000e9eea03beeaf8cbca74494372055a3eb1102e00b53609d7502998499f921f1c173cf14f0861c2eea2c7ca6577b2816d9545ddfdd20fdea6073d42ef16c848f6178518b9f1b9a66374516f3dfd8000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000085000000ba000000bf9800000000000056090000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) writev(r1, &(0x7f0000000500)=[{0x0, 0x6dadd441}, {&(0x7f0000000380)="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", 0x137}], 0x2) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1410000010"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r9, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) close(0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsmount(r1, 0x0, 0x2) syz_emit_ethernet(0x1ef, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/498], &(0x7f0000000300)={0x0, 0x1, [0x46e, 0xfbf, 0xdc9, 0x375]}) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="38379d77209acfdbe501721c1233ab9d55cd45f3d8130b68f952ca9f7cd0623ecba6e1f9352a11204109c7166187ed705c8e0e51411d491cc723b1ccde1f6cac645e0f9ad4253cd0e80f8119b98f1fd7ae4827e8e8253a2939a3e3b9970a026720f4e5b23f77a996476218893e149914848f9283b1e5fa7c21d9ea7cb7f3aafd1afa96a0b44b840e80069395c1203248a1c360f1406436fc9cacb5588f"}], 0x1000000000000249}, 0x0) kernel console output (not intermixed with test programs): evice strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.535185][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.550170][ T9] usb 6-1: Product: syz [ 1057.554737][ T5721] usb 3-1: unit 6 not found! [ 1057.562076][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.570233][ T9] usb 6-1: Manufacturer: syz [ 1057.572877][ T5721] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1057.580445][ T9] usb 6-1: SerialNumber: syz [ 1057.584680][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1057.598492][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.611988][ T9] usb 6-1: config 0 descriptor?? [ 1057.641408][ T24] usb 4-1: config 0 descriptor?? [ 1057.691708][ T5721] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1057.711557][ T5721] usb 3-1: USB disconnect, device number 113 [ 1057.762822][ T5659] udevd[5659]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.852171][T18719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.865663][T18719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.875711][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1057.895486][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1057.915826][ T9] usb 6-1: USB disconnect, device number 64 [ 1058.066667][ T24] corsair 0003:1B1C:1B02.0040: unbalanced delimiter at end of report description [ 1058.099223][ T24] corsair 0003:1B1C:1B02.0040: parse failed [ 1058.122957][ T24] corsair 0003:1B1C:1B02.0040: probe with driver corsair failed with error -22 [ 1058.139988][T18722] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1058.162891][ T24] usb 4-1: USB disconnect, device number 73 [ 1058.615730][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3340'. [ 1058.813872][T18740] netlink: 'syz.5.3341': attribute type 3 has an invalid length. [ 1058.840277][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1059.006679][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1059.044193][ T24] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1059.071716][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.087555][ T24] usb 4-1: Product: syz [ 1059.096930][ T24] usb 4-1: Manufacturer: syz [ 1059.101876][ T24] usb 4-1: SerialNumber: syz [ 1059.726355][ T5721] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1059.900215][ T5745] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1059.910599][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1059.920826][ T5721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1059.929468][ T5721] usb 3-1: config 0 has no interface number 0 [ 1059.935699][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 1059.946902][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 1059.962862][ T5721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1059.972973][ T5721] usb 3-1: config 0 has no interface number 0 [ 1059.979240][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 1059.990545][ T5721] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 1060.005501][ T5721] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1060.014945][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.023520][ T5721] usb 3-1: Product: syz [ 1060.027791][ T5721] usb 3-1: Manufacturer: syz [ 1060.033175][ T5721] usb 3-1: SerialNumber: syz [ 1060.042878][ T5721] usb 3-1: config 0 descriptor?? [ 1060.050405][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 1060.053557][ T5721] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.064179][ T5745] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.080520][ T5745] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1060.089965][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.098458][ T5745] usb 2-1: Product: syz [ 1060.103226][ T5745] usb 2-1: Manufacturer: syz [ 1060.108023][ T5745] usb 2-1: SerialNumber: syz [ 1060.257613][ T5721] usb 3-1: USB disconnect, device number 114 [ 1060.326415][T18756] trusted_key: encrypted_key: insufficient parameters specified [ 1060.365518][ T5745] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.422423][ T5745] usb 2-1: USB disconnect, device number 101 [ 1060.490615][ T7035] udevd[7035]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.234328][T18771] netlink: 'syz.2.3351': attribute type 5 has an invalid length. [ 1061.242416][ T5745] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1061.402223][ T5745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.413089][ T5745] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 1061.425227][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.438137][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1061.449532][ T5745] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 1061.465573][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.496531][ T5745] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1061.525253][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.561465][ T5745] usb 2-1: Product: syz [ 1061.566484][ T5745] usb 2-1: Manufacturer: syz [ 1061.583423][ T5745] usb 2-1: SerialNumber: syz [ 1061.608788][T18768] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1061.632896][ T5745] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1061.639409][ T5745] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1061.657712][ T5745] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1061.661517][ T24] usb 4-1: USB disconnect, device number 74 [ 1061.676493][ T5745] cdc_ncm 2-1:1.1: bind() failure [ 1061.708461][ T5745] usbtest 2-1:1.1: couldn't get endpoints, -22 [ 1061.715059][ T5745] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 1061.858669][T18768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.871637][T18768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.925228][ T5721] usb 2-1: USB disconnect, device number 102 [ 1062.280885][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1062.470251][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1062.495170][ T24] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1062.525969][ T24] usb 3-1: config 4 has no interface number 0 [ 1062.546811][ T24] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.560981][ T24] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.573460][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1062.609194][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.648301][ T24] hub 3-1:4.128: USB hub found [ 1062.846865][ T24] hub 3-1:4.128: 2 ports detected [ 1062.855427][T18801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3354'. [ 1062.866242][ T24] hub 3-1:4.128: Using single TT (err -22) [ 1063.049946][ T24] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 1063.066050][ T24] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 1063.124030][ T24] usb 3-1: USB disconnect, device number 115 [ 1063.725860][ T30] audit: type=1326 audit(1777128032.460:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1063.757760][ T30] audit: type=1326 audit(1777128032.460:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f50f175922c code=0x7ffc0000 [ 1063.780733][ T30] audit: type=1326 audit(1777128032.460:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f50f175928e code=0x7ffc0000 [ 1063.789153][T18816] syzkaller0: entered promiscuous mode [ 1063.804872][ T30] audit: type=1326 audit(1777128032.460:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1063.830151][T18816] syzkaller0: entered allmulticast mode [ 1063.834590][ T30] audit: type=1326 audit(1777128032.490:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1063.905853][ T30] audit: type=1326 audit(1777128032.490:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f50f1759b3b code=0x7ffc0000 [ 1063.930422][ T30] audit: type=1326 audit(1777128032.490:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1063.954359][ T30] audit: type=1326 audit(1777128032.490:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1063.984475][ T30] audit: type=1326 audit(1777128032.490:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1064.007876][ T30] audit: type=1326 audit(1777128032.490:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.2.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1064.042234][T18819] kvm: user requested TSC rate below hardware speed [ 1064.122329][ T5745] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1064.261355][ T5745] usb 2-1: device descriptor read/64, error -71 [ 1064.520512][ T5745] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1064.661182][ T5745] usb 2-1: device descriptor read/64, error -71 [ 1064.750411][ T9] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1064.781173][ T5745] usb usb2-port1: attempt power cycle [ 1064.790276][T14967] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1064.915095][ T9] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1064.927393][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1064.939087][T14967] usb 3-1: device descriptor read/64, error -71 [ 1064.946637][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1064.967517][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1064.978432][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1064.990259][ T9] usb 6-1: Product: syz [ 1064.994565][ T9] usb 6-1: Manufacturer: syz [ 1065.001275][ T9] usb 6-1: SerialNumber: syz [ 1065.011782][ T9] usb 6-1: config 0 descriptor?? [ 1065.029134][T18811] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1065.044221][ T9] usb 6-1: selecting invalid altsetting 0 [ 1065.142134][ T5745] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1065.172786][ T5745] usb 2-1: device descriptor read/8, error -71 [ 1065.190277][T14967] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1065.350250][T14967] usb 3-1: device descriptor read/64, error -71 [ 1065.419611][ T24] usb 6-1: USB disconnect, device number 65 [ 1065.430279][ T5745] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1065.461034][T14967] usb usb3-port1: attempt power cycle [ 1065.467468][ T5745] usb 2-1: device descriptor read/8, error -71 [ 1065.581664][ T5745] usb usb2-port1: unable to enumerate USB device [ 1065.810216][T14967] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1065.841077][T14967] usb 3-1: device descriptor read/8, error -71 [ 1066.014296][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1066.023407][T18844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1066.083897][T14967] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1066.128061][T14967] usb 3-1: device descriptor read/8, error -71 [ 1066.277959][T14967] usb usb3-port1: unable to enumerate USB device [ 1066.797221][T18855] netlink: 'syz.3.3372': attribute type 12 has an invalid length. [ 1067.195320][T18868] FAULT_INJECTION: forcing a failure. [ 1067.195320][T18868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.211375][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.3.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.211400][T18868] Tainted: [L]=SOFTLOCKUP [ 1067.211405][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1067.211413][T18868] Call Trace: [ 1067.211425][T18868] [ 1067.211431][T18868] dump_stack_lvl+0xe8/0x150 [ 1067.211452][T18868] should_fail_ex+0x412/0x560 [ 1067.211472][T18868] _copy_to_iter+0x404/0x17d0 [ 1067.211497][T18868] ? __pfx__copy_to_iter+0x10/0x10 [ 1067.211513][T18868] ? m_stop+0x125/0x2d0 [ 1067.211525][T18868] ? mmput+0xe/0x70 [ 1067.211540][T18868] ? m_stop+0x24e/0x2d0 [ 1067.211556][T18868] seq_read_iter+0xbf5/0xe10 [ 1067.211579][T18868] seq_read+0x367/0x480 [ 1067.211602][T18868] ? __pfx_seq_read+0x10/0x10 [ 1067.211628][T18868] ? rw_verify_area+0x2a6/0x4d0 [ 1067.211644][T18868] ? __pfx_seq_read+0x10/0x10 [ 1067.211664][T18868] vfs_read+0x20c/0xa70 [ 1067.211684][T18868] ? __pfx___mutex_lock+0x10/0x10 [ 1067.211699][T18868] ? __pfx_vfs_read+0x10/0x10 [ 1067.211717][T18868] ? __fget_files+0x2a/0x420 [ 1067.211734][T18868] ? __fget_files+0x3a0/0x420 [ 1067.211748][T18868] ? __fget_files+0x2a/0x420 [ 1067.211768][T18868] ksys_read+0x150/0x270 [ 1067.211788][T18868] ? __pfx_ksys_read+0x10/0x10 [ 1067.211823][T18868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.211844][T18868] do_syscall_64+0x15f/0xf80 [ 1067.211858][T18868] ? trace_irq_disable+0x3b/0x140 [ 1067.211876][T18868] ? clear_bhb_loop+0x40/0x90 [ 1067.211896][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.211909][T18868] RIP: 0033:0x7f28a039cdd9 [ 1067.211922][T18868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.211933][T18868] RSP: 002b:00007f28a1322028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.211948][T18868] RAX: ffffffffffffffda RBX: 00007f28a0615fa0 RCX: 00007f28a039cdd9 [ 1067.211957][T18868] RDX: 0000000000002020 RSI: 0000200000002140 RDI: 000000000000000a [ 1067.211966][T18868] RBP: 00007f28a1322090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.211974][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.211981][T18868] R13: 00007f28a0616038 R14: 00007f28a0615fa0 R15: 00007f28a073fa48 [ 1067.212001][T18868] [ 1067.580212][T14967] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1067.605173][T18871] netlink: 'syz.3.3377': attribute type 3 has an invalid length. [ 1067.740195][T14967] usb 2-1: Using ep0 maxpacket: 32 [ 1067.749632][T14967] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1067.758256][T14967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.768513][T14967] usb 2-1: config 0 has no interface number 0 [ 1067.776854][T14967] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1067.792999][T14967] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1067.802530][T14967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.812173][T14967] usb 2-1: Product: syz [ 1067.816403][T14967] usb 2-1: Manufacturer: syz [ 1067.821269][T14967] usb 2-1: SerialNumber: syz [ 1067.828145][T14967] usb 2-1: config 0 descriptor?? [ 1067.839741][T14967] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1067.847471][T14967] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1067.870673][ T10] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1067.882222][ T5721] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1067.937283][T18880] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1068.022950][ T10] usb 6-1: config 0 has no interfaces? [ 1068.028744][ T10] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1068.038976][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.047831][T14967] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1068.058275][ T10] usb 6-1: config 0 descriptor?? [ 1068.068626][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1068.078671][ T5721] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 1068.087434][ T5721] usb 4-1: config 0 has no interface number 1 [ 1068.094368][ T5721] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.105648][ T5721] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1068.122397][ T5721] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1068.134631][ T5721] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1068.144969][ T5721] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.158496][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1068.170384][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1068.184573][ T5721] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1068.193824][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.202505][ T5721] usb 4-1: Product: syz [ 1068.206739][ T5721] usb 4-1: Manufacturer: syz [ 1068.211562][ T5721] usb 4-1: SerialNumber: syz [ 1068.218979][ T5721] usb 4-1: config 0 descriptor?? [ 1068.226617][T18871] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1068.240361][ T5721] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1068.244798][ T5721] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1068.254836][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1068.275667][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.287147][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.300436][ T10] usb 6-1: USB disconnect, device number 66 [ 1068.332621][T18883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.342310][T18883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.356772][T18866] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1068.417514][ T24] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1068.462510][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.500932][ T24] usb 3-1: config 0 has no interfaces? [ 1068.513159][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1068.547807][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.558902][T14967] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 1068.583695][ T24] usb 3-1: Product: syz [ 1068.591120][ T24] usb 3-1: Manufacturer: syz [ 1068.600758][ T24] usb 3-1: SerialNumber: syz [ 1068.607549][T14967] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1068.619240][ T24] usb 3-1: config 0 descriptor?? [ 1068.643486][T14967] usb 2-1: USB disconnect, device number 107 [ 1068.668092][T14967] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1068.862935][ T24] usb 3-1: USB disconnect, device number 120 [ 1068.910308][ T5721] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1069.070922][ T5721] usb 6-1: no configurations [ 1069.075603][ T5721] usb 6-1: can't read configurations, error -22 [ 1069.209187][ T24] usb 4-1: USB disconnect, device number 75 [ 1069.223314][ T5721] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1069.378482][T18893] erspan0: entered promiscuous mode [ 1069.418700][ T5721] usb 6-1: no configurations [ 1069.432892][T18893] bridge0: port 3(vlan2) entered blocking state [ 1069.439374][T18893] bridge0: port 3(vlan2) entered forwarding state [ 1069.509472][ T5721] usb 6-1: can't read configurations, error -22 [ 1069.575337][ T5721] usb usb6-port1: attempt power cycle [ 1069.613268][ T8003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.621764][ T8003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.641341][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1069.931599][ T5721] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1070.045357][ T5721] usb 6-1: no configurations [ 1070.055742][ T5721] usb 6-1: can't read configurations, error -22 [ 1070.060366][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1070.092406][T18914] xt_bpf: check failed: parse error [ 1070.231131][ T5721] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1070.286006][ T5721] usb 6-1: no configurations [ 1070.306433][ T5721] usb 6-1: can't read configurations, error -22 [ 1070.339147][ T5721] usb usb6-port1: unable to enumerate USB device [ 1070.690595][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.236069][T18935] program syz.2.3387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1071.282244][T18935] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 1071.320038][T18935] netlink: 'syz.2.3387': attribute type 8 has an invalid length. [ 1071.352845][T18935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1071.637503][T18950] FAULT_INJECTION: forcing a failure. [ 1071.637503][T18950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.652995][T18950] CPU: 1 UID: 0 PID: 18950 Comm: syz.2.3396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.653019][T18950] Tainted: [L]=SOFTLOCKUP [ 1071.653023][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.653031][T18950] Call Trace: [ 1071.653037][T18950] [ 1071.653043][T18950] dump_stack_lvl+0xe8/0x150 [ 1071.653063][T18950] should_fail_ex+0x412/0x560 [ 1071.653083][T18950] _copy_to_user+0x31/0xb0 [ 1071.653102][T18950] simple_read_from_buffer+0xe1/0x170 [ 1071.653120][T18950] proc_fail_nth_read+0x1bb/0x230 [ 1071.653139][T18950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.653157][T18950] ? rw_verify_area+0x2a6/0x4d0 [ 1071.653173][T18950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.653190][T18950] vfs_read+0x20c/0xa70 [ 1071.653217][T18950] ? __pfx___mutex_lock+0x10/0x10 [ 1071.653232][T18950] ? __pfx_vfs_read+0x10/0x10 [ 1071.653250][T18950] ? __fget_files+0x2a/0x420 [ 1071.653267][T18950] ? __fget_files+0x3a0/0x420 [ 1071.653280][T18950] ? __fget_files+0x2a/0x420 [ 1071.653299][T18950] ksys_read+0x150/0x270 [ 1071.653317][T18950] ? __pfx_ksys_read+0x10/0x10 [ 1071.653338][T18950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.653352][T18950] do_syscall_64+0x15f/0xf80 [ 1071.653365][T18950] ? trace_irq_disable+0x3b/0x140 [ 1071.653384][T18950] ? clear_bhb_loop+0x40/0x90 [ 1071.653400][T18950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.653412][T18950] RIP: 0033:0x7f50f175d60e [ 1071.653425][T18950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1071.653436][T18950] RSP: 002b:00007f50f25aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.653452][T18950] RAX: ffffffffffffffda RBX: 00007f50f25ab6c0 RCX: 00007f50f175d60e [ 1071.653464][T18950] RDX: 000000000000000f RSI: 00007f50f25ab0a0 RDI: 000000000000000b [ 1071.653472][T18950] RBP: 00007f50f25ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.653480][T18950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.653487][T18950] R13: 00007f50f1a16038 R14: 00007f50f1a15fa0 R15: 00007f50f1b3fa48 [ 1071.653506][T18950] [ 1071.720693][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1071.880779][ T5745] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1072.042608][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 1072.049804][ T5745] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1072.069390][ T5745] usb 2-1: config 0 has no interface number 0 [ 1072.107254][ T10] usb 6-1: config 0 has an invalid interface number: 81 but max is 0 [ 1072.115988][ T10] usb 6-1: config 0 has no interface number 0 [ 1072.122245][ T10] usb 6-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 1072.137568][ T5745] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1072.145688][ T10] usb 6-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 1072.163978][T18956] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3397'. [ 1072.182633][ T10] usb 6-1: config 0 interface 81 has no altsetting 0 [ 1072.191240][ T5745] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1072.201099][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.210314][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1072.222795][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.231377][ T5745] usb 2-1: Product: syz [ 1072.235865][ T5745] usb 2-1: Manufacturer: syz [ 1072.240659][ T10] usb 6-1: Product: syz [ 1072.249008][ T5745] usb 2-1: SerialNumber: syz [ 1072.253894][ T10] usb 6-1: Manufacturer: syz [ 1072.263095][ T10] usb 6-1: SerialNumber: syz [ 1072.270824][ T5745] usb 2-1: config 0 descriptor?? [ 1072.286041][ T10] usb 6-1: config 0 descriptor?? [ 1072.573018][T18945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.905965][ T10] peak_usb 6-1:0.81: probe with driver peak_usb failed with error 81 [ 1072.930479][ T10] usb 6-1: USB disconnect, device number 71 [ 1072.937616][ T5745] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1072.975648][ T5745] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1073.150376][T18968] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3402'. [ 1073.200439][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1073.362120][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.373342][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.383503][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1073.396904][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1073.406121][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.418235][ T24] usb 3-1: config 0 descriptor?? [ 1073.450299][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1073.484078][ T5745] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1073.496976][ T5745] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1073.506751][ T5745] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1073.518315][ T5745] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1073.537502][ T5745] usb 2-1: USB disconnect, device number 108 [ 1073.605337][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1073.616937][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.634349][ T10] usb 4-1: Product: syz [ 1073.640920][ T10] usb 4-1: Manufacturer: syz [ 1073.646298][ T10] usb 4-1: SerialNumber: syz [ 1073.649238][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 1073.649257][ T30] audit: type=1326 audit(1777128042.380:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.675393][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1073.683510][ T30] audit: type=1326 audit(1777128042.380:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.704979][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1073.711506][ T30] audit: type=1326 audit(1777128042.410:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.746864][ T30] audit: type=1326 audit(1777128042.410:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.772749][ T30] audit: type=1326 audit(1777128042.410:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.800012][ T30] audit: type=1326 audit(1777128042.410:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.825895][ T30] audit: type=1326 audit(1777128042.410:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.848992][ T30] audit: type=1326 audit(1777128042.410:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.872900][ T30] audit: type=1326 audit(1777128042.410:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.896063][ T30] audit: type=1326 audit(1777128042.410:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18961 comm="syz.2.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f179cdd9 code=0x7ffc0000 [ 1073.925113][ T5722] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1073.938159][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1073.944438][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1073.961932][ T24] usb 3-1: USB disconnect, device number 121 [ 1074.040423][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1074.092267][ T5722] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.102598][ T5722] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.113916][ T5722] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.123278][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.131902][ T5722] usb 6-1: SerialNumber: syz [ 1074.157434][T18970] syzkaller0: entered allmulticast mode [ 1074.173451][T18970] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 1074.333818][ T10] usb 4-1: USB disconnect, device number 76 [ 1074.388165][ T5722] usb 6-1: 0:2 : does not exist [ 1074.400911][ T5722] usb 6-1: 0:0: failed to get current value for ch 0 (-22) [ 1074.465915][ T5722] usb 6-1: USB disconnect, device number 72 [ 1074.517040][ T5659] udevd[5659]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.760564][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1074.778164][ T9] ath9k_htc: Failed to initialize the device [ 1074.793711][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1074.855678][T18988] fuse: Bad value for 'user_id' [ 1074.860823][T18988] fuse: Bad value for 'user_id' [ 1075.035087][T18991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1075.097563][T18988] binder: 18985:18988 ioctl c0306201 0 returned -14 [ 1075.457163][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1075.770430][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1075.930777][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1075.947484][ T10] usb 2-1: config 0 has no interfaces? [ 1075.960227][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1075.985174][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.019752][ T10] usb 2-1: config 0 descriptor?? [ 1076.419708][ T9] usb 2-1: USB disconnect, device number 109 [ 1077.220326][ T24] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1077.413427][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1077.448818][ T24] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1077.480636][ T24] usb 3-1: config 150 has no interface number 0 [ 1077.502117][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1077.525472][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1077.551714][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.575996][ T24] usb 3-1: Product: syz [ 1077.590929][ T24] usb 3-1: Manufacturer: syz [ 1077.600837][ T24] usb 3-1: SerialNumber: syz [ 1077.824715][ T24] xr_serial 3-1:150.204: skipping garbage [ 1077.839099][ T24] xr_serial 3-1:150.204: xr_serial converter detected [ 1078.010758][ T29] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1078.172560][ T29] usb 2-1: device descriptor read/64, error -71 [ 1078.440342][ T29] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1078.483003][ T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1078.505106][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1078.555409][ T24] usb 3-1: USB disconnect, device number 122 [ 1078.580251][ T29] usb 2-1: device descriptor read/64, error -71 [ 1078.599591][ T24] xr_serial 3-1:150.204: device disconnected [ 1078.720588][ T29] usb usb2-port1: attempt power cycle [ 1078.750818][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1078.931046][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1078.949989][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1078.974789][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.991248][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1079.042798][ T10] usb 4-1: config 0 descriptor?? [ 1079.058151][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1079.070196][ T29] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1079.104269][ T29] usb 2-1: device descriptor read/8, error -71 [ 1079.151055][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1079.164487][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.207663][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1079.230920][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.266708][ T24] usb 3-1: config 0 descriptor?? [ 1079.350422][ T29] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1079.391524][ T29] usb 2-1: device descriptor read/8, error -71 [ 1079.440546][T19062] syzkaller0: entered promiscuous mode [ 1079.447033][T19062] syzkaller0: entered allmulticast mode [ 1079.521368][ T29] usb usb2-port1: unable to enumerate USB device [ 1079.717632][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.735508][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.749431][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.766827][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.784174][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.803645][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.824504][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.839772][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.859555][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.876689][ T24] sony 0003:054C:024B.0041: unknown main item tag 0x0 [ 1079.961547][ T24] sony 0003:054C:024B.0041: hiddev0,hidraw0: USB HID v0.08 Device [HID 054c:024b] on usb-dummy_hcd.2-1/input0 [ 1079.992341][ T24] sony 0003:054C:024B.0041: failed to claim input [ 1080.077531][ T24] usb 3-1: USB disconnect, device number 123 [ 1080.255360][T19065] fido_id[19065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1081.190188][ T24] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1081.357825][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1081.368977][ T24] usb 3-1: config 0 has no interface number 0 [ 1081.379474][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1081.411840][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1081.460463][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1081.500391][ T47] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1081.518489][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.552324][ T24] usb 3-1: config 0 descriptor?? [ 1081.569481][T19074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1081.597202][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1081.815207][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.831131][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.863927][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.900895][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.031569][ T10] gspca_vc032x: reg_r err -110 [ 1082.044674][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.080955][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.095569][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.110369][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.119443][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.126455][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.156611][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.163494][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.184684][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.220584][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.226052][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.232126][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.237592][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.243566][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.249078][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.268865][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.274653][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.280548][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.285998][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1082.291954][ T10] gspca_vc032x: Unknown sensor... [ 1082.297294][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1082.774934][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1082.828220][ T24] usb 4-1: USB disconnect, device number 77 [ 1082.903617][T19082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.922052][T19082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.234095][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1083.381230][ T24] usb 4-1: device descriptor read/64, error -71 [ 1083.645649][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1083.804602][ T24] usb 4-1: device descriptor read/64, error -71 [ 1083.922008][ T24] usb usb4-port1: attempt power cycle [ 1084.280727][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1084.323955][ T24] usb 4-1: device descriptor read/8, error -71 [ 1084.571290][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1084.615534][ T24] usb 4-1: device descriptor read/8, error -71 [ 1084.733770][ T24] usb usb4-port1: unable to enumerate USB device [ 1086.158036][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1087.081730][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1087.186201][ T5722] usb 3-1: USB disconnect, device number 124 [ 1087.277803][T19105] tipc: Failed to remove unknown binding: 66,1,1/0:4103876849/4103876851 [ 1087.550479][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1087.565020][T19121] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1087.730452][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1087.752879][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.765528][T19125] netlink: 'syz.0.3442': attribute type 5 has an invalid length. [ 1087.791765][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1087.827340][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.141025][ T5721] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1088.300412][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 1088.311483][ T5721] usb 3-1: config 1 has an invalid interface number: 20 but max is 2 [ 1088.320038][ T5721] usb 3-1: config 1 has no interface number 0 [ 1088.328715][ T5721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 1088.347569][T19132] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1088.347945][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1088.366726][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.379236][ T5721] usb 3-1: Product: syz [ 1088.384130][ T5721] usb 3-1: Manufacturer: syz [ 1088.389035][ T5721] usb 3-1: SerialNumber: syz [ 1088.404873][ T5721] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1088.512393][ T5721] snd-usb-audio 3-1:1.20: probe with driver snd-usb-audio failed with error -22 [ 1088.623260][T19127] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.635315][T19085] udevd[19085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.20/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.839651][ T5722] usb 3-1: USB disconnect, device number 125 [ 1089.630252][T14967] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1089.817157][T14967] usb 6-1: device descriptor read/64, error -71 [ 1089.983456][ T8003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.090373][T14967] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1090.230299][T14967] usb 6-1: device descriptor read/64, error -71 [ 1090.383078][T14079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1090.399993][T14079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1090.400765][T14967] usb usb6-port1: attempt power cycle [ 1090.413155][T14079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1090.420041][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1090.420348][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.466287][T14079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1090.483427][T14079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.514419][ T8003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.548650][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.572457][ T10] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1090.582605][ T10] usb 4-1: no configuration chosen from 1 choice [ 1090.597713][ T10] usb 4-1: USB disconnect, device number 82 [ 1090.793292][ T8003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.810345][T14967] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1090.842578][T14967] usb 6-1: device descriptor read/8, error -71 [ 1090.966647][ T8003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.000214][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1091.100238][T14967] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1091.141141][T14967] usb 6-1: device descriptor read/8, error -71 [ 1091.176272][ T9] usb 3-1: config 0 has no interfaces? [ 1091.187672][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1091.197647][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.206100][ T9] usb 3-1: Product: syz [ 1091.210855][ T9] usb 3-1: Manufacturer: syz [ 1091.215561][ T9] usb 3-1: SerialNumber: syz [ 1091.230782][ T9] usb 3-1: config 0 descriptor?? [ 1091.250685][T14967] usb usb6-port1: unable to enumerate USB device [ 1091.654687][ T5721] usb 3-1: USB disconnect, device number 126 [ 1091.813013][T19146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.822135][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.830734][T19146] bridge_slave_0: entered allmulticast mode [ 1091.840997][T19146] bridge_slave_0: entered promiscuous mode [ 1091.929759][ T8003] vlan2: left allmulticast mode [ 1091.943183][ T8003] geneve0: left allmulticast mode [ 1091.958049][ T8003] vlan2: left promiscuous mode [ 1091.963366][ T8003] geneve0: left promiscuous mode [ 1091.972742][ T8003] bridge0: port 3(vlan2) entered disabled state [ 1092.001712][ T8003] bridge_slave_1: left allmulticast mode [ 1092.015898][ T8003] bridge_slave_1: left promiscuous mode [ 1092.036903][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.073403][ T8003] bridge_slave_0: left allmulticast mode [ 1092.079670][ T8003] bridge_slave_0: left promiscuous mode [ 1092.096628][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.322333][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1092.353067][T19181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.374753][T19181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.492170][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1092.513470][ T24] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1092.530359][T14079] Bluetooth: hci0: command tx timeout [ 1092.550785][ T29] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1092.559502][ T24] usb 4-1: config 0 has no interface number 0 [ 1092.576919][ T24] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1092.603577][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1092.622939][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.643869][ T24] usb 4-1: Product: syz [ 1092.650199][ T24] usb 4-1: Manufacturer: syz [ 1092.661456][ T24] usb 4-1: SerialNumber: syz [ 1092.705414][ T24] usb 4-1: config 0 descriptor?? [ 1092.724749][T19174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1092.962022][T19174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1093.097614][ T8003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.109659][ T8003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.120570][ T8003] bond0 (unregistering): Released all slaves [ 1093.133992][T19146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.141770][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.149173][T19146] bridge_slave_1: entered allmulticast mode [ 1093.158782][T19146] bridge_slave_1: entered promiscuous mode [ 1093.165008][ T5722] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1093.182943][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1093.248528][ T8003] tipc: Disabling bearer [ 1093.255477][ T8003] tipc: Left network mode [ 1093.262480][T19146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.275923][T19146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.300275][T14967] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1093.343644][T19146] team0: Port device team_slave_0 added [ 1093.353209][T19146] team0: Port device team_slave_1 added [ 1093.361128][ T5722] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 1093.415526][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1093.424176][ T5722] usb 6-1: string descriptor 0 read error: -71 [ 1093.432424][ T24] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1093.447795][ T5722] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1093.453639][ T24] usb 4-1: USB disconnect, device number 83 [ 1093.479307][T14967] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1093.489001][T14967] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1093.505755][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.525631][T14967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.549301][ T5722] usb 6-1: can't set config #1, error -71 [ 1093.563078][T14967] usb 2-1: config 0 descriptor?? [ 1093.579450][ T5722] usb 6-1: USB disconnect, device number 77 [ 1093.629420][T19146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.636936][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.665985][T19146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.699233][T19146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.732442][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.764423][T19146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.848208][ T8003] hsr_slave_0: left promiscuous mode [ 1093.863244][T14967] usbhid 2-1:0.0: can't add hid device: -71 [ 1093.874943][T14967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1093.899192][ T8003] hsr_slave_1: left promiscuous mode [ 1093.921137][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.933648][T14967] usb 2-1: USB disconnect, device number 114 [ 1093.958234][ T8003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.981360][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.007002][T19206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1094.018532][ T8003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.075703][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1094.095540][ T8003] veth1_macvtap: left promiscuous mode [ 1094.106621][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1094.118710][ T8003] veth0_macvtap: left promiscuous mode [ 1094.130617][ T8003] veth1_vlan: left promiscuous mode [ 1094.138261][T19211] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 1094.148436][ T8003] veth0_vlan: left promiscuous mode [ 1094.242731][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1094.299475][T19219] loop5: detected capacity change from 0 to 7 [ 1094.308488][T19219] Dev loop5: unable to read RDB block 7 [ 1094.315529][T19219] loop5: unable to read partition table [ 1094.325148][T19219] loop5: partition table beyond EOD, truncated [ 1094.341803][T19219] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1094.412608][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.438576][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.450797][T14969] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1094.473238][ T29] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1094.494754][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1094.503861][ T29] usb 3-1: SerialNumber: syz [ 1094.606528][T14079] Bluetooth: hci0: command tx timeout [ 1094.630279][T14969] usb 4-1: Using ep0 maxpacket: 16 [ 1094.645275][T14969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1094.668074][T14969] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1094.688230][T14969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.697241][T14969] usb 4-1: Product: syz [ 1094.702038][T14969] usb 4-1: Manufacturer: syz [ 1094.706762][T14969] usb 4-1: SerialNumber: syz [ 1094.770022][T14969] usb 4-1: config 0 descriptor?? [ 1094.803469][T14969] hub 4-1:0.0: bad descriptor, ignoring hub [ 1094.830747][T14969] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1094.864706][T14969] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.000347][T14967] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1095.226460][T14967] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1095.254210][T14967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.297478][T14967] usb 6-1: config 0 descriptor?? [ 1095.334506][ T8003] team0 (unregistering): Port device team_slave_1 removed [ 1095.406458][ T8003] team0 (unregistering): Port device team_slave_0 removed [ 1095.714544][ T5722] usb 4-1: USB disconnect, device number 84 [ 1096.164156][T19202] netlink: 'syz.2.3461': attribute type 3 has an invalid length. [ 1096.199192][ T29] usb 3-1: skipping empty audio interface (v1) [ 1096.265463][T19211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.273169][T19211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.319481][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1096.347572][T19211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.355403][T19211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.362989][T19211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.370252][T19211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.386978][ T29] usb 3-1: USB disconnect, device number 2 [ 1096.407465][T19211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1096.441081][T14967] ath6kl: Failed to submit usb control message: -110 [ 1096.441667][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1096.487608][T14967] ath6kl: unable to send the bmi data to the device: -110 [ 1096.511956][T14967] ath6kl: Unable to send get target info: -110 [ 1096.615076][T14967] ath6kl: Failed to init ath6kl core: -110 [ 1096.627969][T14967] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1096.666880][T19085] udevd[19085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.684335][T14079] Bluetooth: hci0: command tx timeout [ 1097.014375][T19257] xt_hashlimit: size too large, truncated to 1048576 [ 1097.180166][T19239] tipc: Started in network mode [ 1097.194581][T19239] tipc: Node identity 82a158c3b827, cluster identity 4711 [ 1097.222308][T19239] tipc: Enabled bearer , priority 0 [ 1097.247412][T19240] syzkaller0: entered promiscuous mode [ 1097.258920][T19240] syzkaller0: entered allmulticast mode [ 1097.358205][T19146] hsr_slave_0: entered promiscuous mode [ 1097.395429][T19146] hsr_slave_1: entered promiscuous mode [ 1097.409631][T19146] debugfs: 'hsr0' already exists in 'hsr' [ 1097.424027][T19146] Cannot create hsr debugfs directory [ 1098.132985][ T9] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1098.394697][T14967] tipc: Node number set to 981883075 [ 1098.647441][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1098.695364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1098.735734][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1098.760681][T14079] Bluetooth: hci0: command tx timeout [ 1098.766215][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1099.009976][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1099.082372][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.127078][T19146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1099.150188][ T29] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1099.150717][ T9] usb 2-1: Product: syz [ 1099.185433][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.220897][ T9] usb 2-1: Manufacturer: syz [ 1099.238625][ T9] usb 2-1: SerialNumber: syz [ 1099.265710][T19227] tipc: Resetting bearer [ 1099.318901][T19227] tipc: Disabling bearer [ 1099.330239][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1099.338660][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.352973][T19146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1099.359849][ T29] usb 4-1: config 0 has no interfaces? [ 1099.360290][ T9] usb 2-1: config 0 descriptor?? [ 1099.372637][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.385835][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.393492][ T29] usb 4-1: config 0 has no interfaces? [ 1099.400913][ T24] usb 6-1: USB disconnect, device number 78 [ 1099.433999][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.444940][T19146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1099.464669][ T29] usb 4-1: config 0 has no interfaces? [ 1099.492638][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1099.499909][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.512623][T19146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1099.519521][ T29] usb 4-1: config 0 has no interfaces? [ 1099.529148][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1099.552520][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.574872][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.593800][ T29] usb 4-1: config 0 descriptor?? [ 1100.067103][ T9] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1100.084171][ T9] usb 2-1: USB disconnect, device number 115 [ 1100.126280][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1100.163295][T19146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.202276][T19146] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.230579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.237732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.248942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.256095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.289815][T19146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1100.345156][T19146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.446936][T19146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.691171][T19294] loop5: detected capacity change from 0 to 7 [ 1100.714873][T19294] Dev loop5: unable to read RDB block 7 [ 1100.726984][T19146] veth0_vlan: entered promiscuous mode [ 1100.733254][T19294] loop5: unable to read partition table [ 1100.749236][T19294] loop5: partition table beyond EOD, truncated [ 1100.766905][T19294] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1100.767820][T19146] veth1_vlan: entered promiscuous mode [ 1100.866701][T19146] veth0_macvtap: entered promiscuous mode [ 1100.913830][T19146] veth1_macvtap: entered promiscuous mode [ 1100.969500][T19303] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1101.006988][T19303] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1101.039474][T19146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.065434][T19146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.095707][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.108113][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.139003][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.153287][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.471651][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.492806][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.589072][ T7689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.620264][ T7689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.941943][T19329] program syz.6.3451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.134757][T19332] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1102.185398][T19332] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1102.236796][T19332] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1102.249997][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1102.659992][T14967] usb 4-1: USB disconnect, device number 85 [ 1102.880270][ T5721] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1103.048717][T19353] binder: 19352:19353 ioctl c0306201 200000000180 returned -14 [ 1103.079958][ T5721] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1103.093664][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.111041][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.121321][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1103.135036][ T5721] usb 2-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 1103.145503][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.158497][ T5721] usb 2-1: config 0 descriptor?? [ 1103.240329][ T5745] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1103.403741][ T5745] usb 6-1: Using ep0 maxpacket: 32 [ 1103.424615][ T5745] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1103.472177][ T5745] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.491289][ T5745] usb 6-1: config 0 has no interface number 0 [ 1103.497854][ T5745] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1103.508709][ T5745] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1103.520436][ T5745] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1103.540164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 1103.596306][ T5745] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1103.653598][ T5745] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1103.676567][ T5745] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1103.710275][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1103.735884][ T5745] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1103.798142][ T5745] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1103.885083][ T5721] usbhid 2-1:0.0: can't add hid device: -71 [ 1103.906552][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.922601][ T5721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1103.945237][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.955248][ T5745] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1103.981946][ T5721] usb 2-1: USB disconnect, device number 116 [ 1104.006313][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1104.058258][ T5745] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1104.092230][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.117770][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.136817][ T5745] usb 6-1: Product: syz [ 1104.136842][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1104.136883][ T24] usb 4-1: SerialNumber: syz [ 1104.152452][ T5745] usb 6-1: Manufacturer: syz [ 1104.197729][ T5745] usb 6-1: SerialNumber: syz [ 1104.224905][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1104.244046][ T5745] usb 6-1: config 0 descriptor?? [ 1104.278377][T19349] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1104.315523][T19349] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1104.403946][T14079] Bluetooth: hci2: urb ffff8880351a4a00 submission failed (90) [ 1104.547912][T19366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.631136][T19366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.665966][ T5729] usb 6-1: USB disconnect, device number 79 [ 1104.992599][ T24] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1105.191945][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1105.237307][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1105.274469][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 1105.390934][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1105.401201][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.425982][ T24] usb 2-1: Product: syz [ 1105.438227][ T24] usb 2-1: Manufacturer: syz [ 1105.444298][ T24] usb 2-1: SerialNumber: syz [ 1105.494094][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1105.494117][ T30] audit: type=1326 audit(1777128074.230:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19373 comm="syz.6.3490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4ea7196b57 code=0x0 [ 1105.762941][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1105.789129][T19382] netlink: 'syz.1.3491': attribute type 5 has an invalid length. [ 1105.800912][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1105.842480][T19382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1105.870545][ T5729] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1105.940774][T19382] geneve2: entered promiscuous mode [ 1105.952133][T19382] geneve2: entered allmulticast mode [ 1105.998821][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1106.026766][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1106.041178][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1106.059661][ T5729] usb 6-1: device descriptor read/all, error -61 [ 1106.230323][ T5729] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1106.287800][ T5721] usb 4-1: USB disconnect, device number 86 [ 1106.298638][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1106.346050][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1106.470652][ T5729] usb 6-1: device descriptor read/64, error -71 [ 1106.628606][ T5729] usb usb6-port1: attempt power cycle [ 1106.940212][T19390] syz.1.3491 (19390): drop_caches: 2 [ 1106.966288][T19403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1106.985954][ T5729] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1106.999877][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1107.021195][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1107.032134][ T5729] usb 6-1: device descriptor read/8, error -71 [ 1107.056343][ T24] usb 2-1: unit 3 not found! [ 1107.218874][ T24] usb 2-1: USB disconnect, device number 117 [ 1107.291124][ T5729] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1107.323562][ T5729] usb 6-1: device descriptor read/8, error -71 [ 1107.415938][T19234] udevd[19234]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.448630][ T5729] usb usb6-port1: unable to enumerate USB device [ 1107.702235][ T5729] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1107.817847][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1107.870414][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 1107.879542][T19418] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1107.889030][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.904590][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024 [ 1107.906122][T19418] bond1 (unregistering): Released all slaves [ 1107.916173][ T5729] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1107.932323][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.947340][ T5729] usb 3-1: config 0 descriptor?? [ 1107.970819][T19409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1108.008940][ T5729] hub 3-1:0.0: USB hub found [ 1108.181952][T19431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1108.194334][T19432] loop5: detected capacity change from 0 to 7 [ 1108.206768][T19432] Dev loop5: unable to read RDB block 7 [ 1108.207590][ T5729] hub 3-1:0.0: 1 port detected [ 1108.213584][T19432] loop5: unable to read partition table [ 1108.224139][T19432] loop5: partition table beyond EOD, truncated [ 1108.235701][T19432] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1108.554516][T19436] vimc link validate: Scaler:src:16x16 (0x33424752, 9, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1108.600441][T14967] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1108.766498][T14967] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1108.805125][T14967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.834037][T14967] usb 2-1: Product: syz [ 1108.846644][ T24] usb 3-1: USB disconnect, device number 3 [ 1108.851297][T14967] usb 2-1: Manufacturer: syz [ 1108.852705][ T5729] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1108.879085][T14967] usb 2-1: SerialNumber: syz [ 1108.970607][T14967] usb 2-1: config 0 descriptor?? [ 1108.997769][T14967] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1109.124504][T19443] gretap0: entered promiscuous mode [ 1109.134322][T19443] veth1: entered promiscuous mode [ 1109.141544][T19443] hsr1: entered promiscuous mode [ 1109.147581][T19443] hsr1: entered allmulticast mode [ 1109.159919][T19443] gretap0: entered allmulticast mode [ 1109.167483][T19443] veth1: entered allmulticast mode [ 1109.192243][T19445] kvm: user requested TSC rate below hardware speed [ 1109.207451][T19445] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1109.217105][T19445] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1109.396058][T19434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.409166][T19434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.417563][ T5745] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1109.535601][T14967] gspca_stk1135: reg_w 0x0 err -71 [ 1109.561908][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.576192][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1109.599799][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1109.608126][T14967] gspca_stk1135: Sensor write failed [ 1109.632277][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.641742][ T5745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1109.651629][T14967] gspca_stk1135: Sensor write failed [ 1109.657037][ T5745] usb 4-1: can't read configurations, error -61 [ 1109.664577][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.672315][T14967] gspca_stk1135: Sensor read failed [ 1109.677896][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.684756][T14967] gspca_stk1135: Sensor read failed [ 1109.696892][T14967] gspca_stk1135: Detected sensor type unknown (0x0) [ 1109.707805][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.714817][T14967] gspca_stk1135: Sensor read failed [ 1109.721291][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.728133][T14967] gspca_stk1135: Sensor read failed [ 1109.734020][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.741627][T14967] gspca_stk1135: Sensor write failed [ 1109.747311][T14967] gspca_stk1135: serial bus timeout: status=0x00 [ 1109.754568][T14967] gspca_stk1135: Sensor write failed [ 1109.760413][T14967] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1109.775092][T14967] usb 2-1: USB disconnect, device number 118 [ 1109.802999][ T5745] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1109.910823][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1109.971327][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1109.993719][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1110.009898][ T5745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1110.018657][ T5745] usb 4-1: can't read configurations, error -61 [ 1110.034849][ T5745] usb usb4-port1: attempt power cycle [ 1110.080178][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1110.098180][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1110.117856][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1110.129220][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1110.141212][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1110.159984][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1110.172238][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1110.182836][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.211706][ T24] usb 3-1: config 0 descriptor?? [ 1110.217680][T19454] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1110.320267][T14967] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1110.431410][ C0] Bluetooth: hci2: Unexpected continuation: 1 bytes [ 1110.440478][ T5745] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1110.444200][ T5667] Bluetooth: hci2: unexpected event 0x10 length: 71 > 1 [ 1110.471192][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1110.498912][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1110.506747][T14967] usb 2-1: Using ep0 maxpacket: 16 [ 1110.521860][T14967] usb 2-1: config 0 has no interfaces? [ 1110.533533][ T5745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1110.544980][T14967] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1110.559376][ T5745] usb 4-1: can't read configurations, error -61 [ 1110.569006][T14967] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1110.590597][T14967] usb 2-1: Manufacturer: syz [ 1110.616871][T14967] usb 2-1: config 0 descriptor?? [ 1110.636283][T19454] : renamed from vlan0 (while UP) [ 1110.653330][T14079] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 1110.654168][ T5729] usb 3-1: USB disconnect, device number 4 [ 1110.660907][T14079] Bluetooth: hci2: hardware error 0x51 [ 1110.746396][ T5745] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1110.770929][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1110.782696][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1110.794358][ T5745] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1110.803319][ T5745] usb 4-1: can't read configurations, error -61 [ 1110.811004][ T5745] usb usb4-port1: unable to enumerate USB device [ 1110.887704][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1112.693051][ T5745] usb 2-1: USB disconnect, device number 119 [ 1113.001893][T14079] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.483320][ T47] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1116.046752][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.055008][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1145.490861][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1157.209978][T19533] loop5: detected capacity change from 0 to 7 [ 1157.219978][T19533] Dev loop5: unable to read RDB block 7 [ 1157.227882][T19533] loop5: unable to read partition table [ 1157.230726][T19532] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1157.236590][T19533] loop5: partition table beyond EOD, truncated [ 1157.295589][T19533] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1157.603183][T19550] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1157.791671][T19556] libceph: resolve 'c' (ret=-3): failed [ 1157.935055][T19565] netlink: 'syz.1.3524': attribute type 29 has an invalid length. [ 1157.991576][T19565] sctp: [Deprecated]: syz.1.3524 (pid 19565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1157.991576][T19565] Use struct sctp_sack_info instead [ 1158.113571][T19570] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1158.290617][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1158.345298][T19584] loop5: detected capacity change from 0 to 7 [ 1158.373724][T19584] Dev loop5: unable to read RDB block 7 [ 1158.390388][ T5722] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1158.408891][T19584] loop5: unable to read partition table [ 1158.437712][T19584] loop5: partition table beyond EOD, truncated [ 1158.469246][T19584] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1158.485397][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1158.513371][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1158.550817][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.565223][T19587] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1158.588998][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 1158.607313][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1158.611080][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1158.691338][ T5722] usb 4-1: config 1 has an invalid interface number: 229 but max is 0 [ 1158.704906][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1158.726795][ T5722] usb 4-1: config 1 has no interface number 0 [ 1158.746869][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.767447][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.770837][ T5722] usb 4-1: config 1 interface 229 has no altsetting 0 [ 1158.799001][ T24] usb 3-1: Product: syz [ 1158.808056][ T24] usb 3-1: Manufacturer: syz [ 1158.813474][ T24] usb 3-1: SerialNumber: syz [ 1158.814679][ T5722] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a5.73 [ 1158.855501][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.885543][ T5722] usb 4-1: Product: syz [ 1158.901559][ T5722] usb 4-1: Manufacturer: syz [ 1158.913188][ T5722] usb 4-1: SerialNumber: syz [ 1159.258694][ T5722] usb 4-1: selecting invalid altsetting 1 [ 1159.276999][ T24] usb 3-1: USB disconnect, device number 5 [ 1159.297233][ T5722] comedi comedi5: could not switch to alternate setting 1 [ 1159.326423][ T5722] usbduxfast 4-1:1.229: driver 'usbduxfast' failed to auto-configure device. [ 1159.394576][T19600] udevd[19600]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.432667][ T5722] usb 4-1: USB disconnect, device number 91 [ 1159.983712][T19618] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1160.013293][T19619] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1161.110427][ T5722] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1161.426959][T19646] loop5: detected capacity change from 0 to 7 [ 1161.459811][T19646] Dev loop5: unable to read RDB block 7 [ 1161.487754][T19646] loop5: unable to read partition table [ 1161.509241][T19646] loop5: partition table beyond EOD, truncated [ 1161.561988][T19646] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1162.410158][ T5722] usb 6-1: device descriptor read/64, error -71 [ 1162.651058][ T5722] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1162.750224][ T5721] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1162.800614][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1162.811957][ T5722] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1162.821181][ T5722] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1162.832147][ T5722] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.843663][ T5722] usb 6-1: config 220 has no interface number 2 [ 1162.850838][ T5722] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1162.864614][T14967] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1162.874085][ T5722] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1162.881408][ T5722] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1162.891327][ T5722] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1162.901516][ T5722] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1162.911054][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.919072][ T5722] usb 6-1: Product: syz [ 1162.923739][ T5722] usb 6-1: Manufacturer: syz [ 1162.928404][ T5722] usb 6-1: SerialNumber: syz [ 1162.930209][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 1162.959699][ T5721] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1162.969840][ T5721] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1162.972607][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1162.988250][ T10] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1162.998426][ T5721] usb 2-1: Product: syz [ 1163.008884][ T10] usb 3-1: config 150 has no interface number 0 [ 1163.015461][ T5721] usb 2-1: Manufacturer: syz [ 1163.015485][ T5721] usb 2-1: SerialNumber: syz [ 1163.018422][ T5721] usb 2-1: config 0 descriptor?? [ 1163.030807][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1163.051481][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1163.061281][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.069442][ T10] usb 3-1: Product: syz [ 1163.074171][ T10] usb 3-1: Manufacturer: syz [ 1163.076314][ T5721] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1163.078832][ T10] usb 3-1: SerialNumber: syz [ 1163.109827][T14967] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1163.125322][T14967] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1163.136860][T14967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1163.159585][T19654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.173653][T19654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.188260][T14967] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1163.197732][T14967] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1163.208138][T14967] usb 4-1: Product: syz [ 1163.212857][T14967] usb 4-1: Manufacturer: syz [ 1163.217747][T14967] usb 4-1: SerialNumber: syz [ 1163.243953][T14967] usb 4-1: config 0 descriptor?? [ 1163.266636][ T5722] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1163.284005][ T5722] uvcvideo 6-1:220.0: No valid video chain found. [ 1163.291238][ T5722] usb 6-1: selecting invalid altsetting 0 [ 1163.333121][ T10] xr_serial 3-1:150.204: skipping garbage [ 1163.339037][ T10] xr_serial 3-1:150.204: xr_serial converter detected [ 1163.349048][ T5722] usb 6-1: selecting invalid altsetting 0 [ 1163.359069][ T5722] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1163.380252][ T5722] usb 6-1: USB disconnect, device number 85 [ 1163.660630][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1163.672559][T19663] netlink: 'syz.1.3546': attribute type 13 has an invalid length. [ 1163.680979][T19663] netlink: 'syz.1.3546': attribute type 17 has an invalid length. [ 1163.689088][T19663] netlink: 'syz.1.3546': attribute type 27 has an invalid length. [ 1163.729814][T19665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.740880][T19665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.806616][ T5721] gspca_zc3xx: reg_w_i err -71 [ 1163.815529][ T5721] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1163.860884][ T5721] usb 2-1: USB disconnect, device number 120 [ 1163.873904][T19644] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1163.986171][ T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1164.028914][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1164.066933][ T10] usb 3-1: USB disconnect, device number 6 [ 1164.112083][ T10] xr_serial 3-1:150.204: device disconnected [ 1164.125754][T19670] loop3: detected capacity change from 0 to 7 [ 1164.148398][T19670] Dev loop3: unable to read RDB block 7 [ 1164.162488][T19670] loop3: AHDI p3 p4 [ 1164.176788][T19670] loop3: partition table partially beyond EOD, truncated [ 1164.194193][T19670] loop3: p3 start 1143173120 is beyond EOD, truncated [ 1164.484011][T19674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1164.490614][T19674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1164.502200][T19674] vhci_hcd vhci_hcd.0: Device attached [ 1164.538040][T19675] vhci_hcd: connection closed [ 1164.538342][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1164.565244][ T13] vhci_hcd vhci_hcd.1: release socket [ 1164.584202][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1165.069633][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1165.470200][ T5729] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1165.618539][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1165.629238][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1165.631773][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.666848][T14967] usb 4-1: can't set config #0, error -71 [ 1165.678298][T14967] usb 4-1: USB disconnect, device number 92 [ 1165.750158][ T5721] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1165.767572][ T5729] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1165.815122][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.882957][ T5729] usb 2-1: config 0 descriptor?? [ 1165.957784][ T5721] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1165.987474][ T5721] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1166.014764][ T5721] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1166.090264][T14967] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1166.139971][T19685] syzkaller1: entered promiscuous mode [ 1166.149112][T19685] syzkaller1: entered allmulticast mode [ 1166.206703][ T5729] usbhid 2-1:0.0: can't add hid device: -71 [ 1166.215715][ T5729] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1166.228545][ T5721] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1166.242378][ T5729] usb 2-1: USB disconnect, device number 121 [ 1166.255071][T19708] kvm: pic: non byte write [ 1166.262967][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1166.302850][ T5721] usb 6-1: Product: syz [ 1166.325501][ T5721] usb 6-1: Manufacturer: syz [ 1166.340488][ T5721] usb 6-1: SerialNumber: syz [ 1166.356563][ T5721] usb 6-1: config 0 descriptor?? [ 1166.400190][T14967] usb 4-1: device descriptor read/64, error -71 [ 1166.457628][T19690] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1166.495777][ T5721] usb 6-1: selecting invalid altsetting 0 [ 1166.731294][ T5729] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1166.740169][T14967] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1166.900163][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1166.900279][T14967] usb 4-1: device descriptor read/64, error -71 [ 1167.054557][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.089480][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.103235][T14967] usb usb4-port1: attempt power cycle [ 1167.125337][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.144903][T19728] loop3: detected capacity change from 0 to 7 [ 1167.153040][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.169413][T19728] Dev loop3: unable to read RDB block 7 [ 1167.173657][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.184400][T19728] loop3: AHDI p3 p4 [ 1167.186366][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.196536][ T5729] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1167.196780][T19728] loop3: partition table partially beyond EOD, [ 1167.205967][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.222067][T19694] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1167.229923][T19728] truncated [ 1167.235818][T19728] loop3: p3 start 1143173120 is beyond EOD, truncated [ 1167.236831][ T5721] usb 6-1: USB disconnect, device number 86 [ 1167.360181][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1167.470238][T14967] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1167.479027][ T5729] usb usb2-port1: attempt power cycle [ 1167.500934][T14967] usb 4-1: device descriptor read/8, error -71 [ 1167.760376][T14967] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1167.801062][T14967] usb 4-1: device descriptor read/8, error -71 [ 1167.850200][ T5729] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1167.883374][ T5729] usb 2-1: device descriptor read/8, error -71 [ 1167.924229][T14967] usb usb4-port1: unable to enumerate USB device [ 1168.160207][ T5729] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1168.180615][ T5729] usb 2-1: device descriptor read/8, error -71 [ 1168.290796][ T5729] usb usb2-port1: unable to enumerate USB device [ 1168.820170][ T5729] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 1168.960169][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1169.197030][T19763] loop5: detected capacity change from 0 to 7 [ 1169.220809][T19763] Dev loop5: unable to read RDB block 7 [ 1169.238087][T19763] loop5: AHDI p1 [ 1169.251659][T19763] loop5: partition table partially beyond EOD, truncated [ 1169.302823][ T30] audit: type=1326 audit(1777128138.040:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19761 comm="syz.3.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a039cdd9 code=0x0 [ 1169.333438][T19769] loop3: detected capacity change from 0 to 7 [ 1169.354108][T19769] Dev loop3: unable to read RDB block 7 [ 1169.354323][ T30] audit: type=1326 audit(1777128138.090:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19761 comm="syz.3.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f28a039cdd9 code=0x0 [ 1169.359927][T19769] loop3: AHDI p3 p4 [ 1169.394663][T19769] loop3: partition table partially beyond EOD, truncated [ 1169.404088][T19769] loop3: p3 start 1143173120 is beyond EOD, truncated [ 1169.544695][T19768] trusted_key: encrypted_key: insufficient parameters specified [ 1169.910831][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1170.079096][ T10] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1170.091781][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1170.104358][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1170.124735][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1170.146122][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1170.179072][ T10] usb 3-1: Product: syz [ 1170.185670][ T10] usb 3-1: Manufacturer: syz [ 1170.190510][ T10] usb 3-1: SerialNumber: syz [ 1170.206875][ T10] usb 3-1: config 0 descriptor?? [ 1170.246382][T19747] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1170.275932][ T10] usb 3-1: selecting invalid altsetting 0 [ 1170.710155][T15791] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1170.880119][T15791] usb 2-1: Using ep0 maxpacket: 32 [ 1170.892935][T15791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1170.918472][T15791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 1170.947445][T15791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 1170.972196][T15791] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1170.982074][T15791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.990713][T15791] usb 2-1: Product: syz [ 1171.000579][T15791] usb 2-1: Manufacturer: syz [ 1171.020256][T15791] usb 2-1: SerialNumber: syz [ 1171.035707][T15791] usb 2-1: config 0 descriptor?? [ 1171.049670][T15791] usb 2-1: no audio or video endpoints found [ 1171.087569][ T4992] Dev loop5: unable to read RDB block 7 [ 1171.104948][ T4992] loop5: AHDI p1 [ 1171.113364][ T4992] loop5: partition table partially beyond EOD, truncated [ 1171.251489][ T10] usb 2-1: USB disconnect, device number 2 [ 1171.430544][T14967] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1171.594177][T14967] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 1171.602842][T14967] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1171.615712][T14967] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1171.625035][T14967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.633141][T14967] usb 6-1: Product: syz [ 1171.637365][T14967] usb 6-1: Manufacturer: syz [ 1171.642119][T14967] usb 6-1: SerialNumber: syz [ 1171.656825][T14967] rndis_host 6-1:7.0: skipping garbage [ 1171.662504][T14967] rndis_host 6-1:7.0: rndis: master #0/ffff8880787a8000 slave #1/0000000000000000 [ 1171.673062][T14967] option 6-1:7.0: GSM modem (1-port) converter detected [ 1171.855530][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.879434][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.889470][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.901775][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.911291][T19790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.920397][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.929895][T15791] usb 6-1: USB disconnect, device number 87 [ 1171.946923][T15791] option 6-1:7.0: device disconnected [ 1172.106340][ T5721] usb 3-1: USB disconnect, device number 7 [ 1172.326871][T19806] netlink: 'syz.3.3580': attribute type 2 has an invalid length. [ 1172.336845][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1172.618554][T19815] loop3: detected capacity change from 0 to 7 [ 1172.627375][T19815] Dev loop3: unable to read RDB block 7 [ 1172.633764][T19815] loop3: AHDI p3 p4 [ 1172.638063][T19815] loop3: partition table partially beyond EOD, truncated [ 1172.646089][T19815] loop3: p3 start 1143173120 is beyond EOD, truncated [ 1173.125756][T19825] loop5: detected capacity change from 0 to 7 [ 1173.133460][T19825] Dev loop5: unable to read RDB block 7 [ 1173.139243][T19825] loop5: unable to read partition table [ 1173.145494][T19825] loop5: partition table beyond EOD, truncated [ 1173.155623][T19825] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1173.567055][T19845] loop3: detected capacity change from 0 to 7 [ 1173.576498][T19845] Dev loop3: unable to read RDB block 7 [ 1173.582340][T19845] loop3: AHDI p3 p4 [ 1173.586957][T19845] loop3: partition table partially beyond EOD, truncated [ 1173.595637][T19845] loop3: p3 start 1143173120 is beyond EOD, truncated [ 1173.800591][T14967] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1173.960551][T14967] usb 6-1: Using ep0 maxpacket: 8 [ 1173.972934][T14967] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 1173.984178][T14967] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 1173.995032][T19863] [U] .h0FwZ,iqgҏV2sO [ 1174.004219][T19863] [U] ` w*BBOLhU [ 1174.008777][T19863] [U] w$n|#%o.z\̧mРw [ 1174.032031][T14967] usb 6-1: config 0 has no interface number 0 [ 1174.043417][T14967] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 28530, setting to 64 [ 1174.058676][T19863] [U] R{ꫢ S [ 1174.066197][T14967] usb 6-1: config 0 interface 200 has no altsetting 0 [ 1174.096801][T14967] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1174.108216][T14967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.146608][T14967] usb 6-1: Product: syz [ 1174.152364][T14967] usb 6-1: Manufacturer: syz [ 1174.180224][T14967] usb 6-1: SerialNumber: syz [ 1174.208138][T14967] usb 6-1: config 0 descriptor?? [ 1174.226165][T19859] [U] [ 1174.467340][T14967] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input89 [ 1174.508827][T19871] loop5: detected capacity change from 0 to 7 [ 1174.546579][T14967] usb 6-1: USB disconnect, device number 88 [ 1174.562454][T19871] Dev loop5: unable to read RDB block 7 [ 1174.570477][T19871] loop5: unable to read partition table [ 1174.579991][T19868] kvm: kvm [19867]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x352e76650000 [ 1174.587895][T19871] loop5: partition table beyond EOD, truncated [ 1174.616977][T19871] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1174.618828][T19868] kvm: kvm [19867]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x582813010000 [ 1175.123213][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1175.267247][T19880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1175.370204][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1175.407043][T19891] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1175.466081][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3607'. [ 1175.497229][T19893] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1175.540538][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1175.582792][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.593984][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1175.601127][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1175.610507][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.623307][ T10] usb 2-1: config 0 descriptor?? [ 1175.680783][T19904] program syz.5.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1176.053500][ T10] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1176.467127][ T5721] usb 2-1: USB disconnect, device number 3 [ 1176.515481][T19934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1177.400443][ T5721] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1177.488201][ T7994] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1177.505479][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.531216][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.591685][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 1177.631267][ T5721] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1177.716710][ T5721] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1177.763581][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.795882][ T5721] usb 2-1: Product: syz [ 1177.824097][ T5721] usb 2-1: Manufacturer: syz [ 1177.848939][ T5721] usb 2-1: SerialNumber: syz [ 1177.994795][ T5721] snd-ua101 2-1:1.1: invalid format type [ 1178.019483][ T5721] snd-ua101 2-1:1.0: invalid num_altsetting [ 1178.084884][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1178.098143][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1178.157368][ T5721] usb 2-1: USB disconnect, device number 4 [ 1178.650408][T14967] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1178.779032][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 1178.857305][T14967] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1178.872623][T14967] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.893058][T14967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1178.932264][T14967] usb 6-1: config 1 has no interface number 0 [ 1178.953932][T14967] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1178.978598][T14967] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1179.002377][T14967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.012086][T14967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.021443][T14967] usb 6-1: Product: syz [ 1179.026940][T14967] usb 6-1: Manufacturer: syz [ 1179.032883][T14967] usb 6-1: SerialNumber: syz [ 1179.050255][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1179.059261][T14967] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1179.073410][T14967] cdc_ncm 6-1:1.1: bind() failure [ 1179.257361][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1179.267157][ T10] usb 3-1: config 0 has no interface number 0 [ 1179.273131][ T5721] usb 6-1: USB disconnect, device number 89 [ 1179.275622][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1179.289331][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.306711][ T10] usb 3-1: config 0 descriptor?? [ 1179.323623][ T10] usb 3-1: selecting invalid altsetting 1 [ 1179.333371][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1179.344365][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1179.554693][ T10] DVB: Unable to find symbol cx22700_attach() [ 1179.682688][ T10] DVB: Unable to find symbol tda10046_attach() [ 1179.700946][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1179.736187][ T10] usb 3-1: USB disconnect, device number 8 [ 1179.851925][ T5722] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1179.870998][ T5721] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1180.204905][ T5721] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1180.359281][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1180.393093][T20023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.652657][ T5721] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1180.677836][ T5722] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1180.689988][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1180.712276][ T5722] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1180.747340][ T5722] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1180.960825][ T5721] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1181.050083][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1181.060742][ T5722] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1181.060777][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1181.060808][ T5722] usb 4-1: Product: syz [ 1181.060824][ T5722] usb 4-1: Manufacturer: syz [ 1181.060852][ T5722] usb 4-1: SerialNumber: syz [ 1181.063919][ T5722] usb 4-1: config 0 descriptor?? [ 1181.113321][T20030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.126840][T20001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1181.183632][T20030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.191425][ T5722] usb 4-1: selecting invalid altsetting 0 [ 1181.290480][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1181.385137][ T5721] usb 2-1: Product: syz [ 1181.394833][ T5721] usb 2-1: Manufacturer: syz [ 1181.407719][ T5721] usb 2-1: SerialNumber: syz [ 1181.424846][ T5721] usb 2-1: config 0 descriptor?? [ 1181.556059][T20003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1181.700186][ T5722] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1181.718554][ T5721] usb 2-1: selecting invalid altsetting 0 [ 1182.076829][T15791] usb 4-1: USB disconnect, device number 97 [ 1182.361917][ T5722] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1182.372008][ T5722] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1182.403424][ T5722] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1182.419576][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.456365][ T5722] usb 6-1: Product: syz [ 1182.476643][ T5722] usb 6-1: Manufacturer: syz [ 1182.504285][ T5722] usb 6-1: SerialNumber: syz [ 1182.540811][ T5722] usb 6-1: config 0 descriptor?? [ 1182.594452][ T5722] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1182.754428][ T5745] usb 2-1: USB disconnect, device number 5 [ 1183.103414][T20068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1183.207214][ T30] audit: type=1326 audit(1777128151.940:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabe19cdd9 code=0x7ffc0000 [ 1183.265151][T20034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.296150][ T30] audit: type=1326 audit(1777128151.940:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbabe19cdd9 code=0x7ffc0000 [ 1183.358711][ T30] audit: type=1326 audit(1777128151.940:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabe19cdd9 code=0x7ffc0000 [ 1183.397607][T20034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.418784][ T30] audit: type=1326 audit(1777128151.940:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbabe15d60e code=0x7ffc0000 [ 1183.457755][ T30] audit: type=1326 audit(1777128151.940:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbabe19ca6b code=0x7ffc0000 [ 1183.549010][ T30] audit: type=1326 audit(1777128151.990:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20032 comm="syz.5.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbabe19ca6b code=0x7ffc0000 [ 1183.612658][ T30] audit: type=1326 audit(1777128152.020:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.1.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1183.687533][ T30] audit: type=1326 audit(1777128152.030:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.1.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1183.747857][ T30] audit: type=1326 audit(1777128152.180:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.1.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1183.827443][ T30] audit: type=1326 audit(1777128152.180:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20069 comm="syz.1.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1184.664645][ T5722] gspca_sunplus: reg_r err -71 [ 1184.672122][ T5722] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1184.706978][ T5722] usb 6-1: USB disconnect, device number 90 [ 1185.375789][T20096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.413895][T20096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.620423][ T5722] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1185.782824][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 1185.805952][T20109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3660'. [ 1185.811425][ T5722] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1185.846918][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.865484][ T5722] usb 4-1: Product: syz [ 1185.879955][ T5722] usb 4-1: Manufacturer: syz [ 1185.894878][ T5722] usb 4-1: SerialNumber: syz [ 1185.915217][ T5722] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1185.984785][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1186.043156][T19600] udevd[19600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.132306][T15791] usb 4-1: USB disconnect, device number 98 [ 1186.184381][T20117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1186.190755][ T5729] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1186.340232][ T5729] usb 3-1: device descriptor read/64, error -71 [ 1186.580420][ T5729] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1186.740181][ T5729] usb 3-1: device descriptor read/64, error -71 [ 1186.816240][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1186.872385][ T5729] usb usb3-port1: attempt power cycle [ 1186.998634][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.052122][ T10] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.140367][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1187.198944][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1187.225905][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1187.240534][ T5729] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1187.258912][ T10] usb 2-1: Product: syz [ 1187.275467][ T10] usb 2-1: Manufacturer: syz [ 1187.289065][ T10] usb 2-1: SerialNumber: syz [ 1187.309914][ T10] usb 2-1: config 0 descriptor?? [ 1187.350971][ T5729] usb 3-1: device descriptor read/8, error -71 [ 1187.425991][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1187.497509][T19600] udevd[19600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1187.590317][ T5729] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1187.627634][ T10] usb 2-1: USB disconnect, device number 6 [ 1187.652839][ T5729] usb 3-1: device descriptor read/8, error -71 [ 1187.772465][ T5729] usb usb3-port1: unable to enumerate USB device [ 1187.881218][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3665'. [ 1188.250161][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1188.430526][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1188.478733][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1188.505646][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1188.542880][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1188.575678][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1188.586471][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.648780][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1188.658816][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.975042][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 1188.981667][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1189.150888][ T5722] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1189.312442][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.333572][ T5722] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 1189.346061][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 1189.408628][ T5722] usb 2-1: Product: syz [ 1189.416429][ T5722] usb 2-1: SerialNumber: syz [ 1189.434370][ T5722] usb 2-1: config 0 descriptor?? [ 1189.443936][ T5722] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1189.455305][ T5722] usb 2-1: Detected SIO [ 1189.465816][ T5722] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1190.420171][ T5729] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1190.499749][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1190.499778][ T30] audit: type=1326 audit(1777128159.230:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.563643][ T30] audit: type=1326 audit(1777128159.230:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.610176][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 1190.615444][ T30] audit: type=1326 audit(1777128159.270:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.621314][ T5729] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1190.655208][ T30] audit: type=1326 audit(1777128159.270:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.683633][ T30] audit: type=1326 audit(1777128159.270:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.706613][ T5729] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1190.706668][ T5729] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1190.706698][ T5729] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1190.706728][ T5729] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1190.796683][ T5729] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1190.807232][ T30] audit: type=1326 audit(1777128159.270:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.808224][ T5729] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1190.839024][ T5729] usb 4-1: Product: syz [ 1190.846571][ T5729] usb 4-1: Manufacturer: syz [ 1190.853154][ T30] audit: type=1326 audit(1777128159.270:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.853414][ T5729] usb 4-1: SerialNumber: syz [ 1190.876268][ T30] audit: type=1326 audit(1777128159.270:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.905060][ T30] audit: type=1326 audit(1777128159.270:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1190.928392][ T30] audit: type=1326 audit(1777128159.270:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20148 comm="syz.1.3672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70a99cdd9 code=0x7ffc0000 [ 1191.006743][ T5729] usb 4-1: config 0 descriptor?? [ 1191.038336][ T5729] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1191.052985][ T5729] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1191.272310][ T5722] usb 4-1: USB disconnect, device number 99 [ 1191.283796][ T5722] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 1191.775803][T20184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.819796][T20184] ipip0: left promiscuous mode [ 1191.836262][T20184] ipip0: left allmulticast mode [ 1191.849601][T20184] ip6tnl1: left allmulticast mode [ 1191.874030][T20184] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1191.888390][ T24] usb 2-1: USB disconnect, device number 7 [ 1191.931834][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1192.001998][ T24] ftdi_sio 2-1:0.0: device disconnected [ 1192.305262][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1192.533913][T20209] loop5: detected capacity change from 0 to 7 [ 1192.547510][T20209] Dev loop5: unable to read RDB block 7 [ 1192.558280][T20209] loop5: unable to read partition table [ 1192.565771][T20209] loop5: partition table beyond EOD, truncated [ 1192.577497][T20209] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1192.593457][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1192.765149][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.783912][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1192.799649][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1192.815397][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.838982][ T24] usb 4-1: config 0 descriptor?? [ 1192.873374][T20205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1193.032206][T20218] netlink: 'syz.2.3691': attribute type 33 has an invalid length. [ 1193.057792][T20218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1193.081851][T20218] `: renamed from team0 (while UP) [ 1193.330219][ T5722] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1193.333718][ T24] hid_parser_main: 28 callbacks suppressed [ 1193.333741][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.394353][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.423078][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.449329][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.470084][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.493923][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.512224][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.513969][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1193.533382][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.554603][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.574548][ T5722] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1193.575684][ T24] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1193.626811][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 5632, setting to 64 [ 1193.644950][ T24] hid-generic 0003:0B05:1AFE.0043: hidraw0: USB HID v7f.fd Device [HID 0b05:1afe] on usb-dummy_hcd.3-1/input0 [ 1193.689795][ T5722] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1193.708397][ T24] usb 4-1: USB disconnect, device number 100 [ 1193.733858][ T5722] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1193.767543][ T5722] usb 3-1: Manufacturer: syz [ 1193.790826][ T5722] usb 3-1: config 0 descriptor?? [ 1193.816945][T20220] fido_id[20220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1193.843393][ T5722] smsusb:smsusb_probe: board id=9, interface number 0 [ 1193.871024][ T5722] smsusb:siano_media_device_register: media controller created [ 1193.918835][ T5722] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1193.939927][ T5722] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1193.959333][ T5722] ------------[ cut here ]------------ [ 1193.965038][ T5722] !PageLargeKmalloc(page) [ 1193.965052][ T5722] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#0: kworker/0:4/5722 [ 1193.979490][ T5722] Modules linked in: [ 1193.983975][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.995021][ T5722] Tainted: [L]=SOFTLOCKUP [ 1193.999376][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.009498][ T5722] Workqueue: usb_hub_wq hub_event [ 1194.014562][ T5722] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1194.020351][ T5722] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 7c e1 fb 8d 5b 41 5e 5d e9 6f 6f 02 ff [ 1194.040078][ T5722] RSP: 0018:ffffc900046a6b20 EFLAGS: 00010206 [ 1194.046196][ T5722] RAX: 00000000ff000000 RBX: ffffea00012df880 RCX: 0000000000000001 [ 1194.054361][ T5722] RDX: ffffc9001a10b000 RSI: ffff88804b7e2000 RDI: ffffea00012df880 [ 1194.062574][ T5722] RBP: 0000000000000000 R08: ffff888028dda903 R09: 1ffff110051bb520 [ 1194.071177][ T5722] R10: dffffc0000000000 R11: ffffed10051bb521 R12: 1ffff110055da682 [ 1194.079194][ T5722] R13: 0000000000000000 R14: ffff888028dda960 R15: dffffc0000000000 [ 1194.087428][ T5722] FS: 0000000000000000(0000) GS:ffff888125295000(0000) knlGS:0000000000000000 [ 1194.096397][ T5722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1194.103023][ T5722] CR2: 00007ffc62882fe4 CR3: 000000007f85a000 CR4: 00000000003526f0 [ 1194.111056][ T5722] Call Trace: [ 1194.114335][ T5722] [ 1194.117264][ T5722] usb_free_urb+0xd0/0x120 [ 1194.121856][ T5722] smsusb_term_device+0x1d7/0x3e0 [ 1194.126916][ T5722] smsusb_probe+0x1aba/0x2280 [ 1194.131649][ T5722] ? __pfx_smsusb_probe+0x10/0x10 [ 1194.136700][ T5722] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1194.142336][ T5722] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.148192][ T5722] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1194.153969][ T5722] usb_probe_interface+0x659/0xc70 [ 1194.159139][ T5722] ? __pfx_usb_probe_interface+0x10/0x10 [ 1194.164903][ T5722] really_probe+0x267/0xaf0 [ 1194.169462][ T5722] __driver_probe_device+0x1ef/0x380 [ 1194.175566][ T5722] driver_probe_device+0x4f/0x240 [ 1194.181012][ T5722] __device_attach_driver+0x279/0x430 [ 1194.186431][ T5722] bus_for_each_drv+0x258/0x2f0 [ 1194.191352][ T5722] ? __pfx___device_attach_driver+0x10/0x10 [ 1194.197285][ T5722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1194.202893][ T5722] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.208152][ T5722] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.214023][ T5722] __device_attach+0x2c5/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1194.218819][ T5722] ? __pfx___device_attach+0x10/0x10 [ 1194.224173][ T5722] ? _raw_spin_unlock+0x28/0x50 [ 1194.229068][ T5722] device_initial_probe+0xa1/0xd0 [ 1194.234148][ T5722] bus_probe_device+0x12a/0x220 [ 1194.239075][ T5722] device_add+0x7e9/0xbb0 [ 1194.243480][ T5722] usb_set_configuration+0x1a87/0x2110 [ 1194.248998][ T5722] usb_generic_driver_probe+0x8d/0x150 [ 1194.254548][ T5722] usb_probe_device+0x1c4/0x3b0 [ 1194.259477][ T5722] ? __pfx_usb_probe_device+0x10/0x10 [ 1194.264903][ T5722] really_probe+0x267/0xaf0 [ 1194.269419][ T5722] __driver_probe_device+0x1ef/0x380 [ 1194.275877][ T5722] driver_probe_device+0x4f/0x240 [ 1194.281596][ T5722] __device_attach_driver+0x279/0x430 [ 1194.287284][ T5722] bus_for_each_drv+0x258/0x2f0 [ 1194.292186][ T5722] ? __pfx___device_attach_driver+0x10/0x10 [ 1194.298083][ T5722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1194.303502][ T5722] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.308724][ T5722] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.314583][ T5722] __device_attach+0x2c5/0x450 [ 1194.319369][ T5722] ? __pfx___device_attach+0x10/0x10 [ 1194.324727][ T5722] ? _raw_spin_unlock+0x28/0x50 [ 1194.329588][ T5722] device_initial_probe+0xa1/0xd0 [ 1194.334673][ T5722] bus_probe_device+0x12a/0x220 [ 1194.339574][ T5722] device_add+0x7e9/0xbb0 [ 1194.343951][ T5722] usb_new_device+0xa08/0x16f0 [ 1194.348729][ T5722] ? __pfx_usb_new_device+0x10/0x10 [ 1194.354022][ T5722] ? _raw_spin_unlock_irq+0x23/0x50 [ 1194.359241][ T5722] hub_event+0x2a1c/0x4f30 [ 1194.363987][ T5722] ? __pfx_hub_event+0x10/0x10 [ 1194.368756][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.374649][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.380752][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.386533][ T5722] process_scheduled_works+0xb5d/0x1860 [ 1194.392660][ T5722] ? __pfx_process_scheduled_works+0x10/0x10 [ 1194.398689][ T5722] ? assign_work+0x3d5/0x5e0 [ 1194.403339][ T5722] worker_thread+0xa53/0xfc0 [ 1194.407973][ T5722] kthread+0x388/0x470 [ 1194.412092][ T5722] ? __pfx_worker_thread+0x10/0x10 [ 1194.417204][ T5722] ? __pfx_kthread+0x10/0x10 [ 1194.421857][ T5722] ret_from_fork+0x514/0xb70 [ 1194.426466][ T5722] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.431617][ T5722] ? __switch_to+0xc79/0x1410 [ 1194.436331][ T5722] ? __pfx_kthread+0x10/0x10 [ 1194.441144][ T5722] ret_from_fork_asm+0x1a/0x30 [ 1194.445924][ T5722] [ 1194.448945][ T5722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1194.456241][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1194.467176][ T5722] Tainted: [L]=SOFTLOCKUP [ 1194.471498][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.481569][ T5722] Workqueue: usb_hub_wq hub_event [ 1194.486701][ T5722] Call Trace: [ 1194.489991][ T5722] [ 1194.493021][ T5722] vpanic+0x56c/0xa60 [ 1194.497100][ T5722] ? __pfx__printk+0x10/0x10 [ 1194.501698][ T5722] ? __pfx_vpanic+0x10/0x10 [ 1194.506198][ T5722] ? is_bpf_text_address+0x292/0x2b0 [ 1194.511488][ T5722] ? is_bpf_text_address+0x26/0x2b0 [ 1194.516724][ T5722] panic+0xc5/0xd0 [ 1194.520487][ T5722] ? __pfx_panic+0x10/0x10 [ 1194.524961][ T5722] ? ret_from_fork_asm+0x1a/0x30 [ 1194.529911][ T5722] __warn+0x315/0x4c0 [ 1194.533900][ T5722] ? free_large_kmalloc+0x9b/0x110 [ 1194.539026][ T5722] ? free_large_kmalloc+0x9b/0x110 [ 1194.544160][ T5722] __report_bug+0x29a/0x540 [ 1194.548665][ T5722] ? device_initial_probe+0xa1/0xd0 [ 1194.553865][ T5722] ? bus_probe_device+0x12a/0x220 [ 1194.558898][ T5722] ? device_add+0x7e9/0xbb0 [ 1194.563405][ T5722] ? free_large_kmalloc+0x9b/0x110 [ 1194.568525][ T5722] ? __pfx___report_bug+0x10/0x10 [ 1194.573559][ T5722] ? usb_new_device+0xa08/0x16f0 [ 1194.578520][ T5722] ? hub_event+0x2a1c/0x4f30 [ 1194.583118][ T5722] ? process_scheduled_works+0xb5d/0x1860 [ 1194.588864][ T5722] ? smscore_unregister_device+0x651/0x780 [ 1194.594684][ T5722] ? free_large_kmalloc+0x9b/0x110 [ 1194.599803][ T5722] report_bug+0x16a/0x220 [ 1194.604144][ T5722] ? free_large_kmalloc+0x9b/0x110 [ 1194.609260][ T5722] ? free_large_kmalloc+0x9d/0x110 [ 1194.614400][ T5722] handle_bug+0x9c/0x200 [ 1194.618647][ T5722] exc_invalid_op+0x1a/0x50 [ 1194.623327][ T5722] asm_exc_invalid_op+0x1a/0x20 [ 1194.628186][ T5722] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1194.633910][ T5722] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 7c e1 fb 8d 5b 41 5e 5d e9 6f 6f 02 ff [ 1194.653544][ T5722] RSP: 0018:ffffc900046a6b20 EFLAGS: 00010206 [ 1194.659617][ T5722] RAX: 00000000ff000000 RBX: ffffea00012df880 RCX: 0000000000000001 [ 1194.667617][ T5722] RDX: ffffc9001a10b000 RSI: ffff88804b7e2000 RDI: ffffea00012df880 [ 1194.675603][ T5722] RBP: 0000000000000000 R08: ffff888028dda903 R09: 1ffff110051bb520 [ 1194.683589][ T5722] R10: dffffc0000000000 R11: ffffed10051bb521 R12: 1ffff110055da682 [ 1194.691586][ T5722] R13: 0000000000000000 R14: ffff888028dda960 R15: dffffc0000000000 [ 1194.699590][ T5722] usb_free_urb+0xd0/0x120 [ 1194.704036][ T5722] smsusb_term_device+0x1d7/0x3e0 [ 1194.709085][ T5722] smsusb_probe+0x1aba/0x2280 [ 1194.713779][ T5722] ? __pfx_smsusb_probe+0x10/0x10 [ 1194.718838][ T5722] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1194.724394][ T5722] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.730200][ T5722] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1194.735838][ T5722] usb_probe_interface+0x659/0xc70 [ 1194.740960][ T5722] ? __pfx_usb_probe_interface+0x10/0x10 [ 1194.746592][ T5722] really_probe+0x267/0xaf0 [ 1194.751101][ T5722] __driver_probe_device+0x1ef/0x380 [ 1194.756397][ T5722] driver_probe_device+0x4f/0x240 [ 1194.761424][ T5722] __device_attach_driver+0x279/0x430 [ 1194.766884][ T5722] bus_for_each_drv+0x258/0x2f0 [ 1194.771744][ T5722] ? __pfx___device_attach_driver+0x10/0x10 [ 1194.777665][ T5722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1194.783051][ T5722] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.788275][ T5722] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.794091][ T5722] __device_attach+0x2c5/0x450 [ 1194.798857][ T5722] ? __pfx___device_attach+0x10/0x10 [ 1194.804156][ T5722] ? _raw_spin_unlock+0x28/0x50 [ 1194.809022][ T5722] device_initial_probe+0xa1/0xd0 [ 1194.814048][ T5722] bus_probe_device+0x12a/0x220 [ 1194.818910][ T5722] device_add+0x7e9/0xbb0 [ 1194.823262][ T5722] usb_set_configuration+0x1a87/0x2110 [ 1194.828787][ T5722] usb_generic_driver_probe+0x8d/0x150 [ 1194.834262][ T5722] usb_probe_device+0x1c4/0x3b0 [ 1194.839132][ T5722] ? __pfx_usb_probe_device+0x10/0x10 [ 1194.844513][ T5722] really_probe+0x267/0xaf0 [ 1194.849035][ T5722] __driver_probe_device+0x1ef/0x380 [ 1194.854330][ T5722] driver_probe_device+0x4f/0x240 [ 1194.859365][ T5722] __device_attach_driver+0x279/0x430 [ 1194.864757][ T5722] bus_for_each_drv+0x258/0x2f0 [ 1194.869717][ T5722] ? __pfx___device_attach_driver+0x10/0x10 [ 1194.875718][ T5722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1194.881112][ T5722] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.886313][ T5722] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.892134][ T5722] __device_attach+0x2c5/0x450 [ 1194.896913][ T5722] ? __pfx___device_attach+0x10/0x10 [ 1194.902225][ T5722] ? _raw_spin_unlock+0x28/0x50 [ 1194.907081][ T5722] device_initial_probe+0xa1/0xd0 [ 1194.912115][ T5722] bus_probe_device+0x12a/0x220 [ 1194.916969][ T5722] device_add+0x7e9/0xbb0 [ 1194.921296][ T5722] usb_new_device+0xa08/0x16f0 [ 1194.926073][ T5722] ? __pfx_usb_new_device+0x10/0x10 [ 1194.931302][ T5722] ? _raw_spin_unlock_irq+0x23/0x50 [ 1194.936595][ T5722] hub_event+0x2a1c/0x4f30 [ 1194.941038][ T5722] ? __pfx_hub_event+0x10/0x10 [ 1194.945808][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.951534][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.957356][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 1194.963115][ T5722] process_scheduled_works+0xb5d/0x1860 [ 1194.968691][ T5722] ? __pfx_process_scheduled_works+0x10/0x10 [ 1194.974671][ T5722] ? assign_work+0x3d5/0x5e0 [ 1194.979282][ T5722] worker_thread+0xa53/0xfc0 [ 1194.983885][ T5722] kthread+0x388/0x470 [ 1194.987958][ T5722] ? __pfx_worker_thread+0x10/0x10 [ 1194.993066][ T5722] ? __pfx_kthread+0x10/0x10 [ 1194.997665][ T5722] ret_from_fork+0x514/0xb70 [ 1195.002257][ T5722] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.007367][ T5722] ? __switch_to+0xc79/0x1410 [ 1195.012051][ T5722] ? __pfx_kthread+0x10/0x10 [ 1195.016647][ T5722] ret_from_fork_asm+0x1a/0x30 [ 1195.021444][ T5722] [ 1195.025026][ T5722] Kernel Offset: disabled [ 1195.029350][ T5722] Rebooting in 86400 seconds..