last executing test programs: 32m41.876372458s ago: executing program 0 (id=311): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x2009, 0x202) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r2, 0xc, 0x8}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3d, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1002, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x6, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 32m40.87167059s ago: executing program 0 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8a0000008066f30fb31866aaa6660f38826e373764f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3f}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 32m40.248154853s ago: executing program 0 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x1, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x1, &(0x7f0000003780), 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1070bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42188}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0xffffffff}]}, 0x3c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000040)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r5, &(0x7f0000000000)={0x10}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xb4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0xb4}}, 0x40) 32m39.706418453s ago: executing program 0 (id=324): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}]}}]}, 0x14c}}, 0x0) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x20) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x0, 0x6, {0x54, 0x101, 0x7, {0x3, 0x6}, {0x4, 0x9}, @rumble={0xc341, 0x4d9}}, {0x52, 0x2, 0xc47, {0x6, 0x90c}, {0xe, 0x5}, @period={0x5d, 0x2, 0x74, 0x6, 0x3, {0x7, 0x2, 0x0, 0x4c3}, 0x9, &(0x7f0000000140)=[0x561, 0x4, 0x1a5, 0x9, 0x8, 0xcc4f, 0xfffa, 0xfff, 0x7]}}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x59) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') fchdir(r7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) close(r0) 32m39.33615729s ago: executing program 0 (id=327): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) (fail_nth: 10) 32m39.089715554s ago: executing program 0 (id=328): timer_create(0x3, 0x0, &(0x7f0000001400)) unshare(0x40000000) timer_gettime(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x2d29, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="fcff27bd70000a000000004d6163a173656330fbffffff00000000000800090003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f00000000c0)="76e4922f44c3e1ba2cd520d5e8b3f7a3de3f6384a4c3aa26ba0b69c5668ff68d5291c66b3afdc6edb341825e1711f5a06ed3d7572a2a38bf666e5f2dbd1045909d", 0x41}, {&(0x7f0000000140)="c2196177896c51af7bfafb62b2eeeb93fa68f3b147596720374bfb22b226df6eaa1f2a10665163bf4280ca728cad202f00fa31f1f998d93c86305718dfc390c8eb0b7e173bea36f76e7d1d21c4e641c12549fd182fca8741187f1a00204cef592daa386d3961fe0dce0b49a9d52dd1412ca815df", 0x74}, {&(0x7f0000000280)="b34f7dced43060800696a026b2e042ac569b6a045e3a19853d2bf2f33786f675b8d0eb11f68ef4fc2ed02583a01e7b1034fb991f2f7d5b90cf5351ac915dc05127dc91029435d8e8c2235b5723", 0x4d}, {&(0x7f0000000380)="dcb1547c9f13c4671986e0", 0xb}, {&(0x7f00000003c0)="8ea7e8149fced0c35a8abb1a6158fceb29281e4faf2cfe18c02d7544f974101c39189dbedfb557389cd92ffef20fdb4ad741a3837c12694c67", 0x39}, {&(0x7f0000000400)}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="f358cd82d16f38cd519c9f7ed3a2abde912182117d9442d703b0638e31e5f18808d92877ce4990045ca4a0ba8e24", 0x2e}], 0x8) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x5b}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000340)=""/186, &(0x7f0000000400)="17f0a110a1df14b57760b341156fc5f59d9dc6d9db339978201386b8c89bdd97193367700b33b6e65455f80bd55d17ddff039842bf57d90614c48976b76e7fb2b82bd60b22d34a770d098286fc712ab2becf89b9e3b3d4f2811803b0f264e79dfa654fd570d523", &(0x7f0000000480)="fdc618d7e1c1525975a563203fe20b25", 0x80, 0x1}, 0x38) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 32m38.244673036s ago: executing program 32 (id=328): timer_create(0x3, 0x0, &(0x7f0000001400)) unshare(0x40000000) timer_gettime(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x2d29, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="fcff27bd70000a000000004d6163a173656330fbffffff00000000000800090003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f00000000c0)="76e4922f44c3e1ba2cd520d5e8b3f7a3de3f6384a4c3aa26ba0b69c5668ff68d5291c66b3afdc6edb341825e1711f5a06ed3d7572a2a38bf666e5f2dbd1045909d", 0x41}, {&(0x7f0000000140)="c2196177896c51af7bfafb62b2eeeb93fa68f3b147596720374bfb22b226df6eaa1f2a10665163bf4280ca728cad202f00fa31f1f998d93c86305718dfc390c8eb0b7e173bea36f76e7d1d21c4e641c12549fd182fca8741187f1a00204cef592daa386d3961fe0dce0b49a9d52dd1412ca815df", 0x74}, {&(0x7f0000000280)="b34f7dced43060800696a026b2e042ac569b6a045e3a19853d2bf2f33786f675b8d0eb11f68ef4fc2ed02583a01e7b1034fb991f2f7d5b90cf5351ac915dc05127dc91029435d8e8c2235b5723", 0x4d}, {&(0x7f0000000380)="dcb1547c9f13c4671986e0", 0xb}, {&(0x7f00000003c0)="8ea7e8149fced0c35a8abb1a6158fceb29281e4faf2cfe18c02d7544f974101c39189dbedfb557389cd92ffef20fdb4ad741a3837c12694c67", 0x39}, {&(0x7f0000000400)}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="f358cd82d16f38cd519c9f7ed3a2abde912182117d9442d703b0638e31e5f18808d92877ce4990045ca4a0ba8e24", 0x2e}], 0x8) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x5b}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000340)=""/186, &(0x7f0000000400)="17f0a110a1df14b57760b341156fc5f59d9dc6d9db339978201386b8c89bdd97193367700b33b6e65455f80bd55d17ddff039842bf57d90614c48976b76e7fb2b82bd60b22d34a770d098286fc712ab2becf89b9e3b3d4f2811803b0f264e79dfa654fd570d523", &(0x7f0000000480)="fdc618d7e1c1525975a563203fe20b25", 0x80, 0x1}, 0x38) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 10.993257157s ago: executing program 2 (id=7533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1) pwrite64(r1, 0x0, 0x0, 0x9000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000009400"]) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) uname(&(0x7f00000002c0)=""/43) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) 10.61087599s ago: executing program 2 (id=7534): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x7, {{0x2, 0x4e20, @multicast1}}}, 0x90) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x2de}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1ad2, 0x0, 0x1}, 0xfffffd76, 0x0) connect$l2tp(r6, &(0x7f0000000580)={0x2, 0x0, @empty, 0x2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x438, 0xd0, 0x0, 0x300, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xfe}, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb7fe5b0aeb2ca3c4, 0x810, r1, 0x5b763000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a31"], 0x98}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000003ac0)='%(:2e\x1c7T!\xb4.I\x95\xd3\x84S][\xb0w\xf0\xc4\xec\xd8\xcdCQO\x80\xaeT\x8d\xb4Z\x94\x03v\xb8\x7f\x90o\t\x01~C&1$\xbe\xcdi\x9e\xf4\xf82O\x95\x11p\x00\xbc\xd4\xe5t\x9e\x92\xb81', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) accept$alg(r9, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000100)='R', 0xfffffffffffffd1c, 0x8008880, &(0x7f0000000140)={0xa, 0x4e25, 0x8, @loopback, 0xffffffff}, 0x1c) 10.131914377s ago: executing program 2 (id=7536): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 10.023993738s ago: executing program 5 (id=7537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000044000)) timer_create(0x2, 0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000040)={{0x77359400}, {0x0, 0x9}}, 0x0) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 8.899933851s ago: executing program 5 (id=7541): unshare(0x600) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0), 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.760159939s ago: executing program 5 (id=7542): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001000)={0x38, 0x0, 0x0, 0xc46, 0x0, 0x400000001000, 0x0, 0x4, 0x0, 0xfffffff8}, 0x0) r6 = socket(0x2, 0x80805, 0x0) fsopen(&(0x7f0000000000)='configfs\x00', 0x0) getsockopt$bt_hci(r6, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.008549635s ago: executing program 2 (id=7548): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="90c85f3f1bf69a7ff463dec06e2be54c372202de7b82eb53aae9f6fc8c8418e85b890a4dfe0e9fe265f92361acdf4075f1e918db", 0x34}, {&(0x7f0000000600)="1c09dafe70d65c2b30cc69a7296a9b6a6abe928c4cfcb8bba30be4fa42a3ce4c93189e7f67742a2874c9dbe72a74263ff53b6b93cf89919d0dbeabb8dcd7b824ea454d5596409fbf4d0f9830091bf76fe5c1f49de2a8ff1752acb9931208ca764043faf7735d906af984d15df5ad6e6de9ad35faeea28da671cde86aa4ff9d835d81fe98356ccb16b7c008ed227f1e7acad0", 0x92}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xe8}}], 0x1, 0x0) 6.903973209s ago: executing program 3 (id=7550): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd2(0x0, 0x80001) io_submit(r2, 0x3, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r3}, 0x0, 0x0]) landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) r4 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) 6.676145098s ago: executing program 2 (id=7551): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd2(0x0, 0x80001) io_submit(r2, 0x3, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r3}, 0x0, 0x0]) landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) 5.536159793s ago: executing program 5 (id=7554): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80001) io_submit(r0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r1}, 0x0, 0x0]) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) 5.018137345s ago: executing program 1 (id=7555): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.880003244s ago: executing program 1 (id=7556): r0 = epoll_create1(0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x6, {0x6, 0x21, "03cbd234"}}, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f00000000c0)=0x50000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4042851}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x80000003}) r4 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x49, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x38}}, 0x0) 4.810647981s ago: executing program 2 (id=7557): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x5, 0x8, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1001ff, 0x5, 0x79, 0xdf4, 0x347}) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4.75987118s ago: executing program 3 (id=7558): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) ppoll(&(0x7f0000000000)=[{r2, 0x49c}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r3, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0xff88, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 4.616010047s ago: executing program 3 (id=7559): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071107a00000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) unshare(0x66000480) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000056f24291610626200000000200", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0xc084}, 0x8044) 4.381580897s ago: executing program 5 (id=7560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1) pwrite64(r1, 0x0, 0x0, 0x9000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000000000009400"]) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) 3.917712162s ago: executing program 4 (id=7561): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x104}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 3.631120873s ago: executing program 4 (id=7562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB='\b'], 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @empty}, 0x1c) listen(r3, 0x50) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1a) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r4, 0x50) listen(r4, 0x0) 3.630270488s ago: executing program 5 (id=7563): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x4, @remote}}}, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r7, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) 3.012128755s ago: executing program 4 (id=7564): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x8, 0x10ffff, 0xffffffff, 0x0, 0x2}) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x22d}}], 0x18}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x101, 0x1, 0xfffffffd, 0xffffff00}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', 0x0}) 2.638411444s ago: executing program 3 (id=7565): set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1000000}, 0x1c) 2.603074192s ago: executing program 4 (id=7566): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.336179635s ago: executing program 4 (id=7567): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.138844866s ago: executing program 4 (id=7568): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd2(0x0, 0x80001) io_submit(r2, 0x3, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r3}, 0x0, 0x0]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r8, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) 2.061074822s ago: executing program 1 (id=7569): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x149640, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x24060400) unshare(0x26020480) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) poll(&(0x7f0000000240)=[{r1, 0x4}, {r0, 0x3}, {r0, 0x400}, {0xffffffffffffffff, 0x80}], 0x4, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x10, 0x4) migrate_pages(0x0, 0x8, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x3) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4000, 0xdc) r6 = fanotify_init(0x202, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = dup2(r6, r5) read$FUSE(r7, &(0x7f0000003fc0)={0x2020}, 0x2020) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x1000}, &(0x7f0000000100)=0x8) unshare(0x38020580) r10 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) syz_open_dev$usbfs(&(0x7f0000001c00), 0xda, 0x1e1041) ioctl$USBDEVFS_BULK(r10, 0x5523, 0x0) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r11, 0xc0345642, &(0x7f0000000200)={0x8, "02e55186d73f8ee550f4b1d8ca75c6df947be8f94a14fabef9df10207ee9b4e6", 0x1, 0x1}) 1.516217138s ago: executing program 3 (id=7570): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2, 0x7}}}], 0x18, 0x2000000}, 0x800) 1.365275203s ago: executing program 3 (id=7571): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04130501c8000500ab11274f9359c49d81f642987d8bac74c0712a105c7712e892d12b"], 0x8) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1477, 0x1006, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='nr0\x00') 853.918261ms ago: executing program 1 (id=7572): openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x104}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 492.796705ms ago: executing program 1 (id=7573): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000007, 0x97052, r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0xfd, 0x3, @time={0x5, 0xfffffff8}, {0x9, 0x6}, {0xe3, 0x9}, @addr={0x4, 0x7}}, {0x0, 0x8, 0xf, 0x5, @time={0x1, 0x6}, {0x6}, {0x3}, @time=@tick=0x9}], 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x30, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000580)={&(0x7f0000000540)="06dfed83b121d1b8124f4f09e80ca32e07c576debf15ef13e6", 0x19}) 0s ago: executing program 1 (id=7574): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x8, 0xa}, {0xffff, 0xe}, {0x0, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): 1982.229338][T21539] usb 4-1: config 222 has an invalid interface number: 31 but max is 0 [ 1982.247897][T21539] usb 4-1: config 222 has an invalid descriptor of length 93, skipping remainder of the config [ 1982.268377][T28980] usb 3-1: device descriptor read/64, error -71 [ 1982.294514][T21539] usb 4-1: config 222 has no interface number 0 [ 1982.308500][T21539] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0x8E has an invalid bInterval 235, changing to 11 [ 1982.396334][T21539] usb 4-1: config 222 interface 31 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.441230][T28980] usb usb3-port1: attempt power cycle [ 1982.471626][T21539] usb 4-1: config 222 interface 31 has no altsetting 0 [ 1982.515931][T21539] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1982.537607][T21539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.588355][T21539] usb 4-1: Product: syz [ 1982.592608][T21539] usb 4-1: Manufacturer: syz [ 1982.600774][T32034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1982.604885][T21539] usb 4-1: SerialNumber: syz [ 1982.798318][T28980] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1982.874469][T28980] usb 3-1: device descriptor read/8, error -71 [ 1983.006827][T21539] ldusb 4-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 1983.065841][T21539] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1983.165197][T21539] usb 4-1: USB disconnect, device number 108 [ 1983.178353][T28980] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1983.219622][T28980] usb 3-1: device descriptor read/8, error -71 [ 1983.226104][T21539] ldusb 4-1:222.31: LD USB Device #0 now disconnected [ 1983.343769][T28980] usb usb3-port1: unable to enumerate USB device [ 1983.568729][ T5895] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1983.694869][T32047] veth0: entered promiscuous mode [ 1983.768578][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1983.781891][ T5895] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1983.804563][ T5895] usb 5-1: config 0 has no interface number 0 [ 1983.814043][ T5895] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1983.823501][ T5895] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1983.832894][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.843035][ T5895] usb 5-1: Product: syz [ 1983.847264][ T5895] usb 5-1: Manufacturer: syz [ 1983.863750][ T5895] usb 5-1: SerialNumber: syz [ 1983.879847][ T5895] usb 5-1: config 0 descriptor?? [ 1983.894371][ T5895] smsc75xx v1.0.0 [ 1983.992198][T32056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6991'. [ 1984.009930][T32056] vlan4: entered promiscuous mode [ 1984.015119][T32056] bridge0: entered promiscuous mode [ 1984.048451][T28980] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1984.071019][T32059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1984.228572][T28980] usb 2-1: Using ep0 maxpacket: 32 [ 1984.238486][T28980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1984.252370][T28980] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1984.262346][T28980] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1984.271058][T28980] usb 2-1: Product: syz [ 1984.275738][T28980] usb 2-1: Manufacturer: syz [ 1984.281589][T28980] usb 2-1: SerialNumber: syz [ 1984.299785][T28980] usb 2-1: config 0 descriptor?? [ 1984.316409][T32047] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1984.510422][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1984.527259][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1984.560794][T32069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1984.880527][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1984.912745][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1984.938450][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1984.954715][ T5895] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1984.965637][ T5895] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1985.097868][ T5848] usb 2-1: USB disconnect, device number 84 [ 1985.116330][T32073] FAULT_INJECTION: forcing a failure. [ 1985.116330][T32073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1985.137260][T32073] CPU: 1 UID: 0 PID: 32073 Comm: syz.3.6995 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1985.137293][T32073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1985.137307][T32073] Call Trace: [ 1985.137315][T32073] [ 1985.137325][T32073] dump_stack_lvl+0x189/0x250 [ 1985.137356][T32073] ? __pfx____ratelimit+0x10/0x10 [ 1985.137390][T32073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1985.137415][T32073] ? __pfx__printk+0x10/0x10 [ 1985.137456][T32073] should_fail_ex+0x414/0x560 [ 1985.137493][T32073] _copy_to_user+0x31/0xb0 [ 1985.137522][T32073] simple_read_from_buffer+0xe1/0x170 [ 1985.137553][T32073] proc_fail_nth_read+0x1df/0x250 [ 1985.137589][T32073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1985.137622][T32073] ? rw_verify_area+0x258/0x650 [ 1985.137643][T32073] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1985.137672][T32073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1985.137705][T32073] vfs_read+0x200/0x980 [ 1985.137736][T32073] ? __pfx_vfs_read+0x10/0x10 [ 1985.137769][T32073] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1985.137802][T32073] ksys_read+0x145/0x250 [ 1985.137828][T32073] ? __pfx_ksys_read+0x10/0x10 [ 1985.137850][T32073] ? rcu_is_watching+0x15/0xb0 [ 1985.137880][T32073] ? do_syscall_64+0xbe/0x3b0 [ 1985.137904][T32073] do_syscall_64+0xfa/0x3b0 [ 1985.137922][T32073] ? lockdep_hardirqs_on+0x9c/0x150 [ 1985.137953][T32073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.137974][T32073] ? clear_bhb_loop+0x60/0xb0 [ 1985.137999][T32073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.138019][T32073] RIP: 0033:0x7ff5f8d8d33c [ 1985.138038][T32073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1985.138057][T32073] RSP: 002b:00007ff5f9b72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1985.138090][T32073] RAX: ffffffffffffffda RBX: 00007ff5f8fb5fa0 RCX: 00007ff5f8d8d33c [ 1985.138105][T32073] RDX: 000000000000000f RSI: 00007ff5f9b720a0 RDI: 0000000000000004 [ 1985.138119][T32073] RBP: 00007ff5f9b72090 R08: 0000000000000000 R09: 0000000000000000 [ 1985.138132][T32073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1985.138144][T32073] R13: 0000000000000000 R14: 00007ff5f8fb5fa0 R15: 00007ff5f90dfa28 [ 1985.138172][T32073] [ 1985.443996][T32046] veth0: left promiscuous mode [ 1985.854596][T32083] fuse: Bad value for 'fd' [ 1985.879663][T28980] hid-generic 0000:0000:0000.00C5: unknown main item tag 0x0 [ 1985.912090][T28980] hid-generic 0000:0000:0000.00C5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1986.395587][T32098] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1986.500017][ T5848] usb 5-1: USB disconnect, device number 120 [ 1987.668498][ T5848] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1988.054665][T32118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1988.194059][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 1988.218832][ T5848] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1988.267081][ T5848] usb 5-1: config 0 has no interface number 0 [ 1988.625583][ T5848] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1988.635288][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.643743][ T5848] usb 5-1: Product: syz [ 1988.658239][ T5848] usb 5-1: Manufacturer: syz [ 1988.796397][T28980] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1988.834629][ T5848] usb 5-1: SerialNumber: syz [ 1988.969669][T28980] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1988.989346][ T5848] usb 5-1: config 0 descriptor?? [ 1988.994465][T28980] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.007594][ T5848] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1989.065099][T28980] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1989.077681][T28980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.090139][T28980] usb 6-1: Product: syz [ 1989.097377][T28980] usb 6-1: Manufacturer: syz [ 1989.551723][T28980] usb 6-1: SerialNumber: syz [ 1989.570759][T28980] hub 6-1:1.0: bad descriptor, ignoring hub [ 1989.577290][ T5848] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1989.577798][T28980] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1989.736884][ T5848] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1989.746736][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 76 [ 1989.797771][T28980] usb 6-1: USB disconnect, device number 79 [ 1989.992114][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1990.000348][ T5848] usb 5-1: USB disconnect, device number 121 [ 1990.029224][ T5848] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1990.097776][ T5848] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1990.140030][ T5848] quatech2 5-1:0.51: device disconnected [ 1990.378349][T28980] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1990.571748][T28980] usb 6-1: device descriptor read/64, error -71 [ 1990.821577][T28980] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1990.980801][T28980] usb 6-1: device descriptor read/64, error -71 [ 1991.098483][T28980] usb usb6-port1: attempt power cycle [ 1991.261275][T32149] ptrace attach of "./syz-executor exec"[28146] was attempted by "./syz-executor exec"[32149] [ 1991.578251][T28980] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1991.708372][T28980] usb 6-1: device descriptor read/8, error -71 [ 1991.848703][ T5848] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1992.218967][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 1992.242915][T32158] TCP: TCP_TX_DELAY enabled [ 1992.428336][T28979] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1992.568230][T28980] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1992.600751][T28979] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1992.640020][T28980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.641023][T28979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1992.655688][T28980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1992.688026][T28980] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1992.746702][T28980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.812044][T28980] usb 6-1: config 0 descriptor?? [ 1992.821489][T28979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.858458][T28979] usb 5-1: Product: syz [ 1992.862743][T28979] usb 5-1: Manufacturer: syz [ 1992.883219][T28980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1992.894986][T28979] usb 5-1: SerialNumber: syz [ 1992.993153][T28980] dvb-usb: bulk message failed: -22 (3/0) [ 1993.105851][T28980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1993.141049][T28980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1993.173751][T28980] usb 6-1: media controller created [ 1993.231498][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1993.254093][T28980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1993.285036][ T5848] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1993.345734][ T5848] usb 4-1: can't read configurations, error -71 [ 1993.366691][T28979] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1993.402658][T28980] dvb-usb: bulk message failed: -22 (6/0) [ 1993.428355][T28980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1993.752485][T28980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input194 [ 1993.842954][T28980] dvb-usb: schedule remote query interval to 150 msecs. [ 1993.997917][T28980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1994.240542][ T5895] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1994.258702][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 1994.391286][ T924] dvb-usb: error while querying for an remote control event. [ 1994.399214][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1994.568391][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 1994.574444][ T924] dvb-usb: error while querying for an remote control event. [ 1994.649702][ T5895] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1994.718840][ T5848] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1994.738588][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 1994.744594][ T924] dvb-usb: error while querying for an remote control event. [ 1994.792933][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1994.908392][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 1994.914571][ T924] dvb-usb: error while querying for an remote control event. [ 1994.928622][ T5895] usb usb2-port1: attempt power cycle [ 1995.193536][T28980] dvb-usb: bulk message failed: -22 (1/0) [ 1995.210438][T28980] dvb-usb: error while querying for an remote control event. [ 1995.550597][ T5848] usb 4-1: config 0 has no interfaces? [ 1995.594153][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1995.598534][T28980] dvb-usb: bulk message failed: -22 (1/0) [ 1995.609182][T28980] dvb-usb: error while querying for an remote control event. [ 1995.646764][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.688463][ T5895] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1995.712431][ T5848] usb 4-1: Product: syz [ 1995.720647][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1995.741635][ T5848] usb 4-1: Manufacturer: syz [ 1995.763470][ T5848] usb 4-1: SerialNumber: syz [ 1995.769701][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 1995.775479][T21539] dvb-usb: error while querying for an remote control event. [ 1995.839324][ T5848] usb 4-1: config 0 descriptor?? [ 1995.948368][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 1995.954149][T21539] dvb-usb: error while querying for an remote control event. [ 1995.970735][ T5895] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1996.003858][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1996.140379][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 1996.146355][ T924] dvb-usb: error while querying for an remote control event. [ 1996.167272][ T5895] usb usb2-port1: unable to enumerate USB device [ 1996.328290][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 1996.451809][ T5895] dvb-usb: error while querying for an remote control event. [ 1996.500325][T28979] usb 6-1: USB disconnect, device number 83 [ 1996.573591][T28979] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1996.983498][ T5848] usb 5-1: USB disconnect, device number 122 [ 1997.069174][ T5848] usblp0: removed [ 1997.606701][T32204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1997.681331][T32204] binder: 32194:32204 ioctl c0306201 2000000003c0 returned -14 [ 1997.838767][ T5895] usb 4-1: USB disconnect, device number 110 [ 1998.868394][T32212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1999.198222][ T5848] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1999.534212][ T5848] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1999.596901][ T5848] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1999.666618][ T5848] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1999.682065][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.692246][ T5848] usb 4-1: Product: syz [ 1999.696524][ T5848] usb 4-1: Manufacturer: syz [ 1999.711151][ T5848] usb 4-1: SerialNumber: syz [ 1999.739558][ T5848] hub 4-1:1.0: bad descriptor, ignoring hub [ 1999.763054][ T5848] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1999.868606][T21539] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2000.041929][T21539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.085096][T21539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.088722][T24837] usb 4-1: USB disconnect, device number 111 [ 2000.178468][T21539] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2000.233034][T21539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.267401][T21539] usb 3-1: config 0 descriptor?? [ 2000.509055][ T924] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2000.548399][ T5895] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2000.689623][T32220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.699901][ T24] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 2000.716848][T32220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.724932][ T5895] usb 4-1: device descriptor read/64, error -71 [ 2000.732280][ T924] usb 6-1: Using ep0 maxpacket: 16 [ 2000.751800][ T924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 2000.767319][ T924] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 2000.778050][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.799019][ T924] usb 6-1: config 0 descriptor?? [ 2000.813155][T32240] netlink: 'syz.2.7032': attribute type 3 has an invalid length. [ 2000.821279][T32240] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7032'. [ 2000.862292][T21539] hid-steam 0003:28DE:1142.00C6: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2000.908568][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2000.932741][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2000.946409][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.956068][ T24] usb 2-1: Product: syz [ 2000.960890][ T24] usb 2-1: Manufacturer: syz [ 2000.965565][ T24] usb 2-1: SerialNumber: syz [ 2000.998616][T21539] hid-steam 0003:28DE:1142.00C6: Steam wireless receiver connected [ 2001.018284][ T5895] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2001.036251][T21539] hid-steam 0003:28DE:1142.00C7: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 2001.065458][T32242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2001.178360][ T5895] usb 4-1: device descriptor read/64, error -71 [ 2001.298743][ T5895] usb usb4-port1: attempt power cycle [ 2001.402665][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2001.614668][ T924] usbhid 6-1:0.0: can't add hid device: -71 [ 2001.645036][ T924] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2001.653226][ T5895] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2001.700013][ T924] usb 6-1: USB disconnect, device number 84 [ 2001.761815][ T5895] usb 4-1: device descriptor read/8, error -71 [ 2002.108434][ T924] usb 3-1: reset high-speed USB device number 92 using dummy_hcd [ 2002.148456][ T5848] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2002.288346][ T5848] usb 5-1: device descriptor read/64, error -71 [ 2002.528553][ T5848] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2002.679508][ T5848] usb 5-1: device descriptor read/64, error -71 [ 2002.809338][ T30] audit: type=1326 audit(1751649664.384:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2002.843879][ T5848] usb usb5-port1: attempt power cycle [ 2002.964616][T32271] FAULT_INJECTION: forcing a failure. [ 2002.964616][T32271] name failslab, interval 1, probability 0, space 0, times 0 [ 2003.090413][ T30] audit: type=1326 audit(1751649664.384:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.090722][T32271] CPU: 0 UID: 0 PID: 32271 Comm: syz.5.7048 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 2003.090753][T32271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2003.090769][T32271] Call Trace: [ 2003.090779][T32271] [ 2003.090790][T32271] dump_stack_lvl+0x189/0x250 [ 2003.090826][T32271] ? __pfx____ratelimit+0x10/0x10 [ 2003.090864][T32271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2003.090892][T32271] ? __pfx__printk+0x10/0x10 [ 2003.090932][T32271] ? __pfx___might_resched+0x10/0x10 [ 2003.090967][T32271] should_fail_ex+0x414/0x560 [ 2003.091007][T32271] should_failslab+0xa8/0x100 [ 2003.091041][T32271] __kmalloc_cache_noprof+0x70/0x3d0 [ 2003.091069][T32271] ? mpi_alloc+0x52/0x140 [ 2003.091108][T32271] mpi_alloc+0x52/0x140 [ 2003.091144][T32271] dh_compute_value+0x95/0x380 [ 2003.091175][T32271] ? __pfx_dh_compute_value+0x10/0x10 [ 2003.091195][T32271] ? rcu_is_watching+0x15/0xb0 [ 2003.091223][T32271] ? trace_kmalloc+0x1f/0xd0 [ 2003.091248][T32271] ? __keyctl_dh_compute+0x648/0xca0 [ 2003.091280][T32271] __keyctl_dh_compute+0x7ee/0xca0 [ 2003.091316][T32271] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 2003.091354][T32271] ? __lock_acquire+0xab9/0xd20 [ 2003.091392][T32271] ? __might_fault+0xb0/0x130 [ 2003.091446][T32271] keyctl_dh_compute+0x109/0x160 [ 2003.091475][T32271] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 2003.091520][T32271] __se_sys_keyctl+0x423/0x910 [ 2003.091556][T32271] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2003.091591][T32271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2003.091623][T32271] ? __fget_files+0x3a0/0x420 [ 2003.091663][T32271] ? fput+0xa0/0xd0 [ 2003.091684][T32271] ? ksys_write+0x22a/0x250 [ 2003.091719][T32271] ? __pfx_ksys_write+0x10/0x10 [ 2003.091744][T32271] ? rcu_is_watching+0x15/0xb0 [ 2003.091778][T32271] ? do_syscall_64+0xbe/0x3b0 [ 2003.091799][T32271] ? __x64_sys_keyctl+0x20/0xc0 [ 2003.091833][T32271] do_syscall_64+0xfa/0x3b0 [ 2003.091854][T32271] ? lockdep_hardirqs_on+0x9c/0x150 [ 2003.091889][T32271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.091914][T32271] ? clear_bhb_loop+0x60/0xb0 [ 2003.091941][T32271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.091965][T32271] RIP: 0033:0x7f691558e929 [ 2003.091985][T32271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2003.092007][T32271] RSP: 002b:00007f69163b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2003.092032][T32271] RAX: ffffffffffffffda RBX: 00007f69157b5fa0 RCX: 00007f691558e929 [ 2003.092050][T32271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 2003.092066][T32271] RBP: 00007f69163b6090 R08: 0000200000000180 R09: 0000000000000000 [ 2003.092082][T32271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2003.092097][T32271] R13: 0000000000000000 R14: 00007f69157b5fa0 R15: 00007f69158dfa28 [ 2003.092133][T32271] [ 2003.358216][ T5848] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2003.370898][ T30] audit: type=1326 audit(1751649664.384:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.438232][ T30] audit: type=1326 audit(1751649664.384:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.468476][ T30] audit: type=1326 audit(1751649664.384:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.498397][ T30] audit: type=1326 audit(1751649664.384:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.521290][ T30] audit: type=1326 audit(1751649664.384:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.544010][ T30] audit: type=1326 audit(1751649664.384:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.569913][ T30] audit: type=1326 audit(1751649664.384:13097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.609825][T28980] usb 3-1: USB disconnect, device number 92 [ 2003.629459][ T5848] usb 5-1: device descriptor read/8, error -71 [ 2003.637244][T28980] hid-steam 0003:28DE:1142.00C6: Steam wireless receiver disconnected [ 2003.665322][ T30] audit: type=1326 audit(1751649664.384:13098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.2.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57e818e929 code=0x7ffc0000 [ 2003.839788][T32275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7049'. [ 2003.879217][ T5848] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2003.910268][T32276] fuse: Unknown parameter 'fd 0x0000000000000008' [ 2003.954348][T28980] usb 2-1: USB disconnect, device number 89 [ 2003.993797][T28980] usblp0: removed [ 2004.029103][ T5848] usb 5-1: device descriptor read/8, error -71 [ 2004.082888][T32278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2004.165293][ T5848] usb usb5-port1: unable to enumerate USB device [ 2004.538669][ T5848] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2004.829992][T24837] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2004.842265][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 2004.851737][ T5848] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2004.891295][ T5848] usb 2-1: config 0 has no interface number 0 [ 2004.996544][ T5848] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2005.012722][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.022780][T24837] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2005.034712][T24837] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2005.045738][ T5848] usb 2-1: Product: syz [ 2005.090250][ T5848] usb 2-1: Manufacturer: syz [ 2005.114744][T24837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2005.127741][T24837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2005.139171][ T5848] usb 2-1: SerialNumber: syz [ 2005.177634][T24837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2005.189539][ T5848] usb 2-1: config 0 descriptor?? [ 2005.197358][ T5848] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2005.222303][T24837] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2005.231991][T24837] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2005.248258][T24837] usb 4-1: Product: syz [ 2005.261384][T24837] usb 4-1: Manufacturer: syz [ 2005.288997][T24837] cdc_wdm 4-1:1.0: skipping garbage [ 2005.325560][T24837] cdc_wdm 4-1:1.0: skipping garbage [ 2005.370804][T24837] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2005.427749][T24837] cdc_wdm 4-1:1.0: Unknown control protocol [ 2005.540194][T32284] team0: left promiscuous mode [ 2005.645529][T32284] team0: entered promiscuous mode [ 2005.645918][T32284] macsec0: left promiscuous mode [ 2005.645938][T32284] team0: left promiscuous mode [ 2005.759086][T32292] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2005.931034][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 2006.017089][ T5848] usb 2-1: qt2_attach - failed to power on unit: -71 [ 2006.025213][ T5848] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 2006.079806][ T5848] usb 2-1: USB disconnect, device number 90 [ 2006.144249][T28980] usb 4-1: USB disconnect, device number 116 [ 2006.915796][T32324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7063'. [ 2006.964735][T32324] fuse: Unknown parameter 'euid' [ 2007.040542][ T924] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 2007.108244][T28980] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2007.206155][ T924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2007.217494][ T924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2007.232599][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.242512][ T924] usb 2-1: Product: syz [ 2007.246868][ T924] usb 2-1: Manufacturer: syz [ 2007.248425][T24837] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2007.263189][T28980] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2007.273668][ T924] usb 2-1: SerialNumber: syz [ 2007.278427][T28980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.305817][T28980] usb 4-1: config 0 descriptor?? [ 2007.329124][T28980] cp210x 4-1:0.0: cp210x converter detected [ 2007.419458][T24837] usb 5-1: Using ep0 maxpacket: 8 [ 2007.428693][T24837] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2007.437174][T24837] usb 5-1: config 179 has no interface number 0 [ 2007.443588][T24837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2007.454807][T24837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2007.466152][T24837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2007.482797][T24837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2007.494449][T24837] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2007.507830][T24837] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2007.517023][T24837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.533912][T28980] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2007.539059][T32324] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2007.549590][T28980] cp210x 4-1:0.0: querying part number failed [ 2007.554360][T13633] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2007.572834][T28980] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2007.618728][ T5848] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2007.716093][ T924] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2007.742055][T13633] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2007.752031][T13633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.760889][T13633] usb 3-1: Product: syz [ 2007.766037][T13633] usb 3-1: Manufacturer: syz [ 2007.788531][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 2007.807349][T13633] usb 3-1: SerialNumber: syz [ 2007.817784][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.854998][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2007.874869][T13633] usb 3-1: config 0 descriptor?? [ 2007.881022][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2007.899317][ T5848] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2007.950719][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2007.973265][ T5848] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2007.983235][ T5848] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2007.993547][ T5848] usb 6-1: Manufacturer: syz [ 2008.034639][ T5848] usb 6-1: config 0 descriptor?? [ 2008.102224][T24837] usb 5-1: USB disconnect, device number 127 [ 2008.108381][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2008.108419][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2008.301916][T13633] airspy 3-1:0.0: Board ID: 00 [ 2008.306825][T13633] airspy 3-1:0.0: Firmware version: [ 2008.418286][ T5848] rc_core: IR keymap rc-hauppauge not found [ 2008.424398][ T5848] Registered IR keymap rc-empty [ 2008.435723][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.469207][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.499824][ T5848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2008.522886][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input195 [ 2008.550882][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.578303][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.611330][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.679943][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.698593][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.739326][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.770873][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.813218][T32337] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 2008.832072][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.892452][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2008.957875][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2009.001263][ T5848] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2009.011362][ T5848] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2009.325661][T13633] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 2009.335481][T13633] airspy 3-1:0.0: Registered as swradio24 [ 2009.348441][T13633] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2009.383384][T13633] usb 3-1: USB disconnect, device number 93 [ 2009.838863][T28980] usb 4-1: USB disconnect, device number 117 [ 2009.888055][T28980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2010.015932][T28980] cp210x 4-1:0.0: device disconnected [ 2010.194333][T13633] usb 2-1: USB disconnect, device number 91 [ 2010.248624][T13633] usblp0: removed [ 2010.525172][T28980] usb 6-1: USB disconnect, device number 85 [ 2010.538805][T32358] program syz.1.7073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2010.868454][T13633] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2011.038321][T13633] usb 2-1: device descriptor read/64, error -71 [ 2011.081508][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2011.100533][T32368] ipvlan2: entered promiscuous mode [ 2011.106649][T32368] bridge0: port 1(ipvlan2) entered blocking state [ 2011.114372][T32368] bridge0: port 1(ipvlan2) entered disabled state [ 2011.121905][T32368] ipvlan2: entered allmulticast mode [ 2011.137631][T32368] bridge0: entered allmulticast mode [ 2011.161489][T32368] ipvlan2: left allmulticast mode [ 2011.166994][T32368] bridge0: left allmulticast mode [ 2011.328194][T13633] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2011.383529][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 2011.476003][T13633] usb 2-1: device descriptor read/64, error -71 [ 2011.485141][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.501179][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2011.514785][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2011.530096][ T5848] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2011.542417][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2011.572840][ T5848] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2011.595954][ T5848] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2011.607860][T13633] usb usb2-port1: attempt power cycle [ 2011.708286][ T5848] usb 5-1: Manufacturer: syz [ 2011.752186][ T5848] usb 5-1: config 0 descriptor?? [ 2011.761948][T32383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7077'. [ 2012.008236][ T924] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2012.048223][T13633] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 2012.089003][T13633] usb 2-1: device descriptor read/8, error -71 [ 2012.358223][T13633] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2012.389228][T13633] usb 2-1: device descriptor read/8, error -71 [ 2012.506493][T13633] usb usb2-port1: unable to enumerate USB device [ 2012.533578][ T924] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2012.644946][ T924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2012.714890][ T5848] rc_core: IR keymap rc-hauppauge not found [ 2012.721855][ T924] usb 3-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 2012.726828][ T5848] Registered IR keymap rc-empty [ 2012.736170][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2012.758870][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2012.766171][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.799866][ T924] usb 3-1: Product: syz [ 2012.804107][ T924] usb 3-1: Manufacturer: syz [ 2012.825219][ T5848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2012.840253][T32390] fuse: Bad value for 'group_id' [ 2012.851107][T32390] fuse: Bad value for 'group_id' [ 2012.858791][ T924] usb 3-1: SerialNumber: syz [ 2012.863115][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input196 [ 2012.915120][ T924] usb 3-1: config 0 descriptor?? [ 2012.917012][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2012.968350][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2012.971586][T32383] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2013.008817][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.012545][ T924] option 3-1:0.0: GSM modem (1-port) converter detected [ 2013.033506][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.098521][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.148776][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.211838][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.258471][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.308728][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.338306][ T5848] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2013.365012][ T924] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2013.371393][ T5848] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2013.427232][ T5848] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2013.580233][ T924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2013.590047][ T924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2013.638502][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.690929][ T924] usb 4-1: Product: syz [ 2013.712068][ T924] usb 4-1: Manufacturer: syz [ 2013.737353][ T924] usb 4-1: SerialNumber: syz [ 2014.138343][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2014.192737][ T924] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2014.565835][T13633] usb 3-1: USB disconnect, device number 94 [ 2014.587806][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2014.600406][T13633] option 3-1:0.0: device disconnected [ 2014.677243][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.785571][ T5848] usb 5-1: USB disconnect, device number 2 [ 2014.990991][ T24] usb 2-1: config 0 descriptor?? [ 2015.095903][ T24] cp210x 2-1:0.0: cp210x converter detected [ 2015.236420][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2015.293800][ T24] cp210x 2-1:0.0: querying part number failed [ 2015.335855][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2015.554392][T32408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2016.348391][T13633] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2016.546101][T13633] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2016.575661][T13633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.621589][T13633] usb 6-1: Product: syz [ 2016.664627][T13633] usb 6-1: Manufacturer: syz [ 2016.686831][T13633] usb 6-1: SerialNumber: syz [ 2016.724246][T13633] usb 6-1: config 0 descriptor?? [ 2016.837841][T24837] usb 2-1: USB disconnect, device number 96 [ 2016.893366][T24837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2016.936549][T24837] cp210x 2-1:0.0: device disconnected [ 2017.101577][T32408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7085'. [ 2017.322360][ T5895] usb 4-1: USB disconnect, device number 118 [ 2017.419963][ T5895] usblp0: removed [ 2017.544585][T32433] fuse: Bad value for 'group_id' [ 2017.556648][T32433] fuse: Bad value for 'group_id' [ 2017.668172][ T5848] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2018.088456][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 2018.096698][ T5848] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 2018.161900][ T5848] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 2018.213279][ T5848] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2018.294332][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2018.337606][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2018.378337][ T5848] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 2018.390959][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.446670][ T5848] usb 2-1: Product: syz [ 2018.462240][ T5848] usb 2-1: Manufacturer: syz [ 2018.469861][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 2018.469880][ T30] audit: type=1326 audit(1751649680.044:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32440 comm="syz.3.7093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5f8d8e929 code=0x0 [ 2018.481297][ T5848] usb 2-1: SerialNumber: syz [ 2018.548247][ T10] usb 6-1: USB disconnect, device number 86 [ 2018.644956][ T5848] usb 2-1: config 0 descriptor?? [ 2018.691895][ T5848] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 2018.723379][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2019.029821][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 2019.051569][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 2019.067498][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2019.175061][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2019.380545][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 2019.438358][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 2019.500032][ T5848] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2019.593628][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 2019.736610][ T5848] keyspan 2-1:0.0: unsupported endpoint type 0 [ 2019.757775][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 2019.795543][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 2019.837642][ T5848] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 2019.961620][ T5848] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2020.193882][ T5848] usb 2-1: USB disconnect, device number 97 [ 2020.337592][ T5848] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2020.517140][ T5848] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2020.531007][ T24] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 2020.545883][ T5848] keyspan 2-1:0.0: device disconnected [ 2021.032071][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2021.055708][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2021.107423][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.164113][ T24] usb 4-1: Product: syz [ 2021.184778][ T24] usb 4-1: Manufacturer: syz [ 2021.203130][ T24] usb 4-1: SerialNumber: syz [ 2021.688886][T32479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7105'. [ 2021.718539][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7105'. [ 2023.861595][T32509] kthread_run failed with err -4 [ 2024.929389][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2024.963943][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2025.026075][ T24] usb 4-1: USB disconnect, device number 119 [ 2025.073787][ T24] usblp0: removed [ 2025.098385][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 2025.111743][ T5895] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2025.146436][ T5895] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2025.196194][ T5895] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2025.206465][ T5895] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2025.228292][ T5895] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2025.256616][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2025.273611][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.298224][ T5895] usb 5-1: Product: syz [ 2025.304461][ T5895] usb 5-1: Manufacturer: syz [ 2025.313493][ T5895] usb 5-1: SerialNumber: syz [ 2025.801691][ T5895] usb 5-1: USB disconnect, device number 4 [ 2026.018426][T13633] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 2026.236378][T13633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.272208][T13633] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2026.513104][T13633] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2026.628194][T13633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.712792][T13633] usb 6-1: config 0 descriptor?? [ 2026.760697][T13633] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2026.767422][T13633] dvb-usb: bulk message failed: -22 (3/0) [ 2026.853083][T13633] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2026.904422][T13633] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2026.929263][T13633] usb 6-1: media controller created [ 2027.006299][T13633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2027.057035][T13633] dvb-usb: bulk message failed: -22 (6/0) [ 2027.101326][T13633] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2027.128309][T13633] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input197 [ 2027.202361][T13633] dvb-usb: schedule remote query interval to 150 msecs. [ 2027.385348][T13633] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2027.539463][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2027.545279][T24837] dvb-usb: error while querying for an remote control event. [ 2027.988301][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2027.994481][T24837] dvb-usb: error while querying for an remote control event. [ 2028.260208][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2028.265999][T24837] dvb-usb: error while querying for an remote control event. [ 2028.478434][T13633] dvb-usb: bulk message failed: -22 (1/0) [ 2028.494545][T13633] dvb-usb: error while querying for an remote control event. [ 2028.698648][T13633] dvb-usb: bulk message failed: -22 (1/0) [ 2028.704438][T13633] dvb-usb: error while querying for an remote control event. [ 2028.900391][T32550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2028.908398][T13633] dvb-usb: bulk message failed: -22 (1/0) [ 2028.914274][T13633] dvb-usb: error while querying for an remote control event. [ 2029.004848][ T30] audit: type=1326 audit(1751649690.564:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f8d8e929 code=0x7ffc0000 [ 2029.098263][T13633] dvb-usb: bulk message failed: -22 (1/0) [ 2029.104052][T13633] dvb-usb: error while querying for an remote control event. [ 2029.115383][ T30] audit: type=1326 audit(1751649690.574:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f8d8e929 code=0x7ffc0000 [ 2029.320387][ T30] audit: type=1326 audit(1751649690.854:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.409169][ T30] audit: type=1326 audit(1751649690.854:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.431753][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.461715][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2029.467567][T24837] dvb-usb: error while querying for an remote control event. [ 2029.688389][T24837] usb 6-1: USB disconnect, device number 87 [ 2029.805296][ T30] audit: type=1326 audit(1751649690.854:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.869565][ T30] audit: type=1326 audit(1751649690.854:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.893588][ T30] audit: type=1326 audit(1751649690.854:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.916055][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.924126][ T30] audit: type=1326 audit(1751649690.854:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2029.946593][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.956682][T24837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2030.025688][ T30] audit: type=1326 audit(1751649690.854:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2030.048219][ C0] vkms_vblank_simulate: vblank timer overrun [ 2030.112508][ T30] audit: type=1326 audit(1751649690.854:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32549 comm="syz.3.7124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5f8d2ab19 code=0x7ffc0000 [ 2030.138124][T18823] Bluetooth: hci1: command 0x0405 tx timeout [ 2030.548744][ T24] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 2030.741492][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2030.761844][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2030.807970][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.830397][ T24] usb 6-1: Product: syz [ 2030.834650][ T24] usb 6-1: Manufacturer: syz [ 2030.840617][ T24] usb 6-1: SerialNumber: syz [ 2030.944734][T32596] syz_tun: refused to change device tx_queue_len [ 2030.953451][T32596] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2031.188278][T24837] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2031.362133][T24837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.384300][T24837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2031.399906][T24837] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2031.411427][T24837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2031.488813][T24837] usb 3-1: SerialNumber: syz [ 2031.753800][T32597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.861396][T32597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.312417][T24837] usb 3-1: 0:2 : does not exist [ 2033.398610][T24837] usb 3-1: USB disconnect, device number 95 [ 2033.494112][T20322] udevd[20322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2034.347762][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2034.398894][ T24] usb 6-1: USB disconnect, device number 88 [ 2034.460643][ T24] usblp0: removed [ 2035.438430][T24837] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2035.590430][T24837] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2035.601177][T24837] usb 4-1: config 0 has no interface number 0 [ 2035.655215][T24837] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.688408][T24837] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.719580][T24837] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 2035.748205][T24837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.780781][T24837] usb 4-1: config 0 descriptor?? [ 2036.198458][T24837] prodikeys 0003:041E:2801.00C8: item fetching failed at offset 0/7 [ 2036.221944][T24837] prodikeys 0003:041E:2801.00C8: hid parse failed [ 2036.245117][T24837] prodikeys 0003:041E:2801.00C8: probe with driver prodikeys failed with error -22 [ 2036.399408][T13633] usb 4-1: USB disconnect, device number 120 [ 2036.696933][T32657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7152'. [ 2037.278285][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2037.448213][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 2037.460887][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 2037.488232][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.698745][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.705245][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.714495][ T24] usb 2-1: Product: syz [ 2037.718916][ T24] usb 2-1: Manufacturer: syz [ 2037.723560][ T24] usb 2-1: SerialNumber: syz [ 2037.733662][ T24] usb 2-1: config 0 descriptor?? [ 2037.759383][ T24] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 2037.766054][ T24] usb 2-1: No valid video chain found. [ 2037.948345][T28980] usb 2-1: USB disconnect, device number 98 [ 2042.754667][T32711] fuse: Unknown parameter '0xffffffffffffffff' [ 2042.768573][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2044.952693][T13633] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2045.128270][T13633] usb 6-1: Using ep0 maxpacket: 16 [ 2045.142424][T13633] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2045.172150][T32754] bridge1: entered promiscuous mode [ 2045.178366][T13633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.195163][T13633] usb 6-1: Product: syz [ 2045.216387][T13633] usb 6-1: Manufacturer: syz [ 2045.228851][T13633] usb 6-1: SerialNumber: syz [ 2045.260904][T13633] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2045.278041][T13633] r8152-cfgselector 6-1: config 0 descriptor?? [ 2045.887747][T13633] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2045.919945][T13633] r8152-cfgselector 6-1: bad CDC descriptors [ 2045.980282][T13633] r8152-cfgselector 6-1: USB disconnect, device number 89 [ 2046.958373][ T317] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7193'. [ 2046.987920][ T317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7193'. [ 2047.017796][ T317] netlink: 'syz.1.7193': attribute type 2 has an invalid length. [ 2049.043805][ T342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=832 (1664 ns) > initial count (16 ns). Using initial count to start timer. [ 2050.499170][ T361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7207'. [ 2050.995565][ T364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7204'. [ 2052.608640][ T380] wireguard0: entered promiscuous mode [ 2053.759274][T27591] tipc: Disabling bearer [ 2055.624706][T27591] bond0 (unregistering): Released all slaves [ 2055.652402][ T402] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2056.716248][T27591] bond1 (unregistering): Released all slaves [ 2056.746214][T27591] bond2 (unregistering): Released all slaves [ 2056.800908][T27591] bond3 (unregistering): Released all slaves [ 2056.966677][T27591] : left promiscuous mode [ 2057.112963][T27591] tipc: Left network mode [ 2058.164221][T27591] hsr_slave_0: left promiscuous mode [ 2058.180345][T27591] hsr_slave_1: left promiscuous mode [ 2059.645262][ T445] block device autoloading is deprecated and will be removed. [ 2061.011427][ T442] bridge0: entered allmulticast mode [ 2061.693324][T27591] IPVS: stop unused estimator thread 0... [ 2062.367271][ T492] sch_fq: defrate 0 ignored. [ 2062.658410][T13633] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2062.835485][T13633] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 2062.878199][T13633] usb 6-1: config 0 has no interface number 1 [ 2062.894879][T13633] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2062.919707][T13633] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2062.960139][T13633] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2062.973996][T13633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2063.002759][T13633] usb 6-1: SerialNumber: syz [ 2063.039341][T13633] usb 6-1: config 0 descriptor?? [ 2063.092553][T13633] usb 6-1: Found UVC 0.00 device (0002:0000) [ 2063.122716][T13633] usb 6-1: No valid video chain found. [ 2064.574995][T13633] usb 6-1: USB disconnect, device number 90 [ 2065.013136][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7260'. [ 2066.058197][T13633] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2066.251133][T13633] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 2066.280787][T13633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.328311][T13633] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2066.337261][T13633] usb 6-1: config 0 has no interface number 0 [ 2066.363806][T13633] usb 6-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2066.417716][T13633] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 2066.438527][T13633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2066.446604][T13633] usb 6-1: SerialNumber: syz [ 2066.479267][T13633] usb 6-1: config 0 descriptor?? [ 2066.488234][ T5895] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 2066.507410][T13633] usb 6-1: Found UVC 0.00 device (0002:0000) [ 2066.528156][T13633] usb 6-1: No valid video chain found. [ 2066.720383][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.738160][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2066.759999][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2066.772441][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.790854][ T5895] usb 4-1: Product: syz [ 2066.800990][ T5895] usb 4-1: Manufacturer: syz [ 2066.805661][ T5895] usb 4-1: SerialNumber: syz [ 2067.045672][ T5895] usb 4-1: 0:2 : does not exist [ 2067.072216][ T5895] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2067.145377][ T5895] usb 4-1: USB disconnect, device number 121 [ 2067.195549][T29358] udevd[29358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2067.708247][T13633] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2067.868692][T13633] usb 2-1: Using ep0 maxpacket: 16 [ 2067.875971][T13633] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.892448][T13633] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.902988][T13633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2067.913986][T13633] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2067.924578][T13633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.941721][T13633] usb 2-1: config 0 descriptor?? [ 2068.052803][T24837] usb 6-1: USB disconnect, device number 91 [ 2068.409721][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7269'. [ 2068.426589][T13633] hid (null): report_id 0 is invalid [ 2068.611013][T13633] usb 2-1: USB disconnect, device number 99 [ 2070.549121][ T563] kthread_run failed with err -4 [ 2071.191077][ T581] pim6reg1: entered promiscuous mode [ 2071.209593][ T581] pim6reg1: entered allmulticast mode [ 2072.178862][ T600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7287'. [ 2072.349333][ T604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7288'. [ 2072.468018][ T606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7283'. [ 2072.543171][ T606] vlan4: entered promiscuous mode [ 2072.582499][ T606] gretap0: entered promiscuous mode [ 2073.048723][ T613] input: syz1 as /devices/virtual/input/input198 [ 2075.717405][ T5895] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2075.883964][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2075.905754][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2075.920989][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2075.932009][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2075.948612][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2075.957983][ T5895] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2075.978543][ T5895] usb 2-1: Manufacturer: syz [ 2075.996669][ T5895] usb 2-1: config 0 descriptor?? [ 2076.078559][ T10] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2076.258354][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 2076.289605][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2076.308631][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2076.316755][ T10] usb 6-1: can't read configurations, error -71 [ 2076.431083][ T5895] appleir 0003:05AC:8243.00CA: unknown main item tag 0x0 [ 2076.468827][ T5895] appleir 0003:05AC:8243.00CA: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2077.844499][ T671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2078.108460][T24837] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2078.594370][ T684] usb usb8: usbfs: process 684 (syz.4.7309) did not claim interface 0 before use [ 2078.648098][T24837] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2078.674481][ T10] usb 2-1: USB disconnect, device number 100 [ 2078.684779][T24837] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2078.754959][T24837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2078.769054][T24837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.781726][T24837] usb 4-1: Product: syz [ 2078.802435][T24837] usb 4-1: Manufacturer: syz [ 2078.825125][T24837] usb 4-1: SerialNumber: syz [ 2078.871240][T24837] hub 4-1:1.0: bad descriptor, ignoring hub [ 2078.895209][T24837] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2079.268515][T28980] usb 4-1: USB disconnect, device number 122 [ 2079.770259][T24837] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2080.452237][T24837] usb 4-1: device descriptor read/64, error -71 [ 2081.629651][ T699] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2084.122477][ T740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2084.434234][ T742] ptrace attach of "./syz-executor exec"[28146] was attempted by "./syz-executor exec"[742] [ 2085.978547][T24837] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2086.176191][T24837] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2086.185054][T24837] usb 4-1: can't read configurations, error -61 [ 2086.368273][T24837] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2086.403915][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2086.548293][T24837] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2086.562857][T24837] usb 4-1: can't read configurations, error -61 [ 2086.572839][T24837] usb usb4-port1: attempt power cycle [ 2086.591264][ T10] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 2086.635749][ T10] usb 3-1: config 0 has no interface number 0 [ 2086.664693][ T10] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 2086.679825][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.687912][ T10] usb 3-1: Product: syz [ 2086.692641][ T10] usb 3-1: Manufacturer: syz [ 2086.780387][ T10] usb 3-1: SerialNumber: syz [ 2086.823785][ T10] usb 3-1: config 0 descriptor?? [ 2086.859053][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 2087.106423][ T754] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2087.144828][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 2087.157910][ T10] gspca_pac7302 3-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 2087.168406][T24837] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2087.189145][ T10] usb 3-1: USB disconnect, device number 96 [ 2087.205573][T24837] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2087.215064][T24837] usb 4-1: can't read configurations, error -61 [ 2087.348865][T24837] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2087.396378][T24837] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2087.426375][T24837] usb 4-1: can't read configurations, error -61 [ 2087.464453][T24837] usb usb4-port1: unable to enumerate USB device [ 2087.704582][ T774] FAULT_INJECTION: forcing a failure. [ 2087.704582][ T774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.724406][ T774] CPU: 1 UID: 0 PID: 774 Comm: syz.1.7332 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 2087.724438][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2087.724452][ T774] Call Trace: [ 2087.724461][ T774] [ 2087.724471][ T774] dump_stack_lvl+0x189/0x250 [ 2087.724504][ T774] ? __pfx____ratelimit+0x10/0x10 [ 2087.724538][ T774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2087.724563][ T774] ? __pfx__printk+0x10/0x10 [ 2087.724592][ T774] ? __might_fault+0xb0/0x130 [ 2087.724630][ T774] should_fail_ex+0x414/0x560 [ 2087.724667][ T774] _copy_from_user+0x2d/0xb0 [ 2087.724694][ T774] ___sys_recvmsg+0x12e/0x510 [ 2087.724730][ T774] ? __pfx____sys_recvmsg+0x10/0x10 [ 2087.724792][ T774] ? __might_fault+0xb0/0x130 [ 2087.724822][ T774] do_recvmmsg+0x307/0x770 [ 2087.724860][ T774] ? __pfx_do_recvmmsg+0x10/0x10 [ 2087.724903][ T774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2087.724944][ T774] __x64_sys_recvmmsg+0x190/0x240 [ 2087.724976][ T774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2087.725021][ T774] ? rcu_is_watching+0x15/0xb0 [ 2087.725052][ T774] ? do_syscall_64+0xbe/0x3b0 [ 2087.725077][ T774] do_syscall_64+0xfa/0x3b0 [ 2087.725097][ T774] ? lockdep_hardirqs_on+0x9c/0x150 [ 2087.725128][ T774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.725149][ T774] ? clear_bhb_loop+0x60/0xb0 [ 2087.725174][ T774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.725195][ T774] RIP: 0033:0x7f644dd8e929 [ 2087.725215][ T774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2087.725234][ T774] RSP: 002b:00007f644bbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2087.725256][ T774] RAX: ffffffffffffffda RBX: 00007f644dfb5fa0 RCX: 00007f644dd8e929 [ 2087.725272][ T774] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 2087.725289][ T774] RBP: 00007f644bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.725302][ T774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.725316][ T774] R13: 0000000000000000 R14: 00007f644dfb5fa0 R15: 00007f644e0dfa28 [ 2087.725347][ T774] [ 2088.268235][ T5848] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2088.411415][ T5848] usb 3-1: device descriptor read/64, error -71 [ 2088.668185][ T5848] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2088.828265][ T5848] usb 3-1: device descriptor read/64, error -71 [ 2088.968811][ T5848] usb usb3-port1: attempt power cycle [ 2089.133415][ T802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2089.338193][ T5848] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2089.368988][ T5848] usb 3-1: device descriptor read/8, error -71 [ 2089.478256][T24837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2089.618200][ T5848] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2089.639198][ T5848] usb 3-1: device descriptor read/8, error -71 [ 2089.646504][T24837] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2089.657439][T24837] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2089.674542][T24837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2089.684197][T24837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.692357][T24837] usb 4-1: Product: syz [ 2089.696733][T24837] usb 4-1: Manufacturer: syz [ 2089.701560][T24837] usb 4-1: SerialNumber: syz [ 2089.735637][T24837] hub 4-1:1.0: bad descriptor, ignoring hub [ 2089.741931][T24837] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2089.750144][ T5848] usb usb3-port1: unable to enumerate USB device [ 2090.048928][T28980] usb 4-1: USB disconnect, device number 3 [ 2090.378383][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2090.508142][ T5895] usb 4-1: device descriptor read/64, error -71 [ 2090.768423][ T5895] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2090.908265][ T5895] usb 4-1: device descriptor read/64, error -71 [ 2091.020286][ T5895] usb usb4-port1: attempt power cycle [ 2091.358307][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2091.389584][ T5895] usb 4-1: device descriptor read/8, error -71 [ 2091.451493][ T824] syz_tun: entered allmulticast mode [ 2091.459582][ T823] syz_tun: left allmulticast mode [ 2091.628279][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2091.662410][ T5895] usb 4-1: device descriptor read/8, error -71 [ 2091.778534][ T5895] usb usb4-port1: unable to enumerate USB device [ 2091.795850][ T834] input: syz0 as /devices/virtual/input/input199 [ 2091.990478][ T839] macsec0: entered promiscuous mode [ 2092.000213][ T839] bridge0: port 1(macsec0) entered blocking state [ 2092.006918][ T839] bridge0: port 1(macsec0) entered disabled state [ 2092.029529][ T839] macsec0: entered allmulticast mode [ 2092.043134][ T839] bridge0: entered allmulticast mode [ 2092.072518][ T839] macsec0: left allmulticast mode [ 2092.085132][ T839] bridge0: left allmulticast mode [ 2092.362579][ T848] syz.5.7357: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2092.379706][ T848] CPU: 0 UID: 0 PID: 848 Comm: syz.5.7357 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 2092.379740][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2092.379754][ T848] Call Trace: [ 2092.379763][ T848] [ 2092.379773][ T848] dump_stack_lvl+0x189/0x250 [ 2092.379809][ T848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2092.379849][ T848] ? __pfx__printk+0x10/0x10 [ 2092.379879][ T848] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2092.379911][ T848] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2092.379943][ T848] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2092.379979][ T848] warn_alloc+0x214/0x310 [ 2092.380010][ T848] ? stack_depot_save_flags+0x40/0x900 [ 2092.380047][ T848] ? __pfx_warn_alloc+0x10/0x10 [ 2092.380082][ T848] ? kasan_save_track+0x4f/0x80 [ 2092.380107][ T848] ? xskq_create+0x56/0x170 [ 2092.380139][ T848] ? xsk_init_queue+0xb0/0x110 [ 2092.380167][ T848] ? xsk_setsockopt+0x43f/0x710 [ 2092.380194][ T848] ? do_sock_setsockopt+0x25a/0x3e0 [ 2092.380220][ T848] ? __x64_sys_setsockopt+0x18b/0x220 [ 2092.380245][ T848] ? do_syscall_64+0xfa/0x3b0 [ 2092.380265][ T848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.380295][ T848] __vmalloc_node_range_noprof+0x125/0x12f0 [ 2092.380367][ T848] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2092.380404][ T848] ? __kasan_kmalloc+0x93/0xb0 [ 2092.380434][ T848] vmalloc_user_noprof+0xad/0xf0 [ 2092.380465][ T848] ? xskq_create+0xbf/0x170 [ 2092.380498][ T848] xskq_create+0xbf/0x170 [ 2092.380534][ T848] xsk_init_queue+0xb0/0x110 [ 2092.380568][ T848] xsk_setsockopt+0x43f/0x710 [ 2092.380601][ T848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2092.380633][ T848] ? do_futex+0x333/0x420 [ 2092.380671][ T848] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2092.380691][ T848] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2092.380723][ T848] do_sock_setsockopt+0x25a/0x3e0 [ 2092.380754][ T848] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2092.380788][ T848] ? __pfx___se_sys_futex+0x10/0x10 [ 2092.380836][ T848] __x64_sys_setsockopt+0x18b/0x220 [ 2092.380871][ T848] do_syscall_64+0xfa/0x3b0 [ 2092.380891][ T848] ? lockdep_hardirqs_on+0x9c/0x150 [ 2092.380923][ T848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.380945][ T848] ? clear_bhb_loop+0x60/0xb0 [ 2092.380971][ T848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.380992][ T848] RIP: 0033:0x7f691558e929 [ 2092.381012][ T848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2092.381032][ T848] RSP: 002b:00007f69163b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2092.381055][ T848] RAX: ffffffffffffffda RBX: 00007f69157b5fa0 RCX: 00007f691558e929 [ 2092.381072][ T848] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 2092.381085][ T848] RBP: 00007f6915610b39 R08: 0000000000000052 R09: 0000000000000000 [ 2092.381100][ T848] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.381114][ T848] R13: 0000000000000000 R14: 00007f69157b5fa0 R15: 00007f69158dfa28 [ 2092.381148][ T848] [ 2092.381157][ T848] Mem-Info: [ 2092.738822][T24837] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 2092.841717][ T850] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2092.864961][ T848] active_anon:24195 inactive_anon:1 isolated_anon:0 [ 2092.864961][ T848] active_file:18634 inactive_file:3866 isolated_file:0 [ 2092.864961][ T848] unevictable:769 dirty:191 writeback:0 [ 2092.864961][ T848] slab_reclaimable:9356 slab_unreclaimable:108876 [ 2092.864961][ T848] mapped:33216 shmem:18011 pagetables:1601 [ 2092.864961][ T848] sec_pagetables:0 bounce:0 [ 2092.864961][ T848] kernel_misc_reclaimable:0 [ 2092.864961][ T848] free:1306295 free_pcp:12956 free_cma:0 [ 2092.932433][ T848] Node 0 active_anon:96780kB inactive_anon:4kB active_file:74512kB inactive_file:15328kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:132940kB dirty:764kB writeback:0kB shmem:70508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12504kB pagetables:6244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2093.032215][T24837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.068262][ T848] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2093.103173][T24837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2093.130005][T24837] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2093.195290][ T848] Node 0 [ 2093.195303][T24837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.195313][ T848] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2093.235151][ T5895] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2093.292169][T24837] usb 4-1: config 0 descriptor?? [ 2093.313013][ T848] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 2093.327320][ T848] Node 0 DMA32 free:1297128kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96856kB inactive_anon:4kB active_file:74368kB inactive_file:14072kB unevictable:1540kB writepending:776kB present:3129332kB managed:2558400kB mlocked:0kB bounce:0kB free_pcp:39280kB local_pcp:18088kB free_cma:0kB [ 2093.405373][T24837] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2093.415016][ T848] lowmem_reserve[]: 0 0 1 1 1 [ 2093.434331][T24837] dvb-usb: bulk message failed: -22 (3/0) [ 2093.434961][ T5895] usb 2-1: config 0 has no interfaces? [ 2093.468312][ T848] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180kB inactive_anon:0kB active_file:144kB inactive_file:1256kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 2093.505022][ T848] lowmem_reserve[]: 0 0 0 0 0 [ 2093.513376][ T5895] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2093.525823][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.562352][ T864] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2093.579822][ T5895] usb 2-1: Product: syz [ 2093.579847][ T5895] usb 2-1: Manufacturer: syz [ 2093.579863][ T5895] usb 2-1: SerialNumber: syz [ 2093.598149][ T5895] usb 2-1: config 0 descriptor?? [ 2093.605144][ T848] Node 1 Normal free:3912668kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11808kB local_pcp:0kB free_cma:0kB [ 2093.609720][T24837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2093.656196][ T848] lowmem_reserve[]: 0 0 0 0 0 [ 2093.710236][ T848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2093.731737][ T848] Node 0 DMA32: 646*4kB (UME) 1554*8kB (UME) 854*16kB (UME) 993*32kB (UME) 269*64kB (UME) 429*128kB (UME) 249*256kB (UME) 174*512kB (UME) 102*1024kB (UME) 9*2048kB (UME) 217*4096kB (UM) = 1297128kB [ 2093.760623][ T848] Node 0 Normal: 6*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 2093.773931][ T848] Node 1 Normal: 199*4kB (UM) 56*8kB (UE) 52*16kB (UE) 256*32kB (UME) 93*64kB (UME) 31*128kB (UME) 13*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 8*2048kB (UME) 943*4096kB (UM) = 3912668kB [ 2093.797526][ T848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.808497][ T848] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2093.823873][ T848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.834548][ T848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2093.923323][ T848] 40511 total pagecache pages [ 2093.928561][ T848] 1 pages in swap cache [ 2093.934620][ T848] Free swap = 124992kB [ 2093.939619][T24837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2093.950316][T24837] usb 4-1: media controller created [ 2093.955684][ T848] Total swap = 124996kB [ 2093.961238][ T848] 2097051 pages RAM [ 2093.965290][ T848] 0 pages HighMem/MovableOnly [ 2093.979104][ T848] 425409 pages reserved [ 2093.984328][ T848] 0 pages cma reserved [ 2093.984904][T24837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2094.143794][T24837] dvb-usb: bulk message failed: -22 (6/0) [ 2094.231357][T24837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2094.254943][T24837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input200 [ 2094.310377][T24837] dvb-usb: schedule remote query interval to 150 msecs. [ 2094.319764][T24837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2094.480827][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2094.487021][T24837] dvb-usb: error while querying for an remote control event. [ 2094.818156][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2094.824671][T24837] dvb-usb: error while querying for an remote control event. [ 2095.055506][T24837] dvb-usb: bulk message failed: -22 (1/0) [ 2095.068148][T24837] dvb-usb: error while querying for an remote control event. [ 2095.117742][T24837] usb 2-1: USB disconnect, device number 101 [ 2095.236408][ T872] fuse: Unknown parameter 'grou00000000000000000000' [ 2095.268809][ T5848] dvb-usb: bulk message failed: -22 (1/0) [ 2095.274819][ T5848] dvb-usb: error while querying for an remote control event. [ 2095.488557][ T5848] dvb-usb: bulk message failed: -22 (1/0) [ 2095.494579][ T5848] dvb-usb: error while querying for an remote control event. [ 2095.538281][ T5848] usb 4-1: USB disconnect, device number 8 [ 2095.604881][ T5848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2095.913159][ T875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2096.188254][ T5848] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2096.456010][ T876] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2096.501666][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2096.516754][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2096.541418][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2096.554265][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.565912][ T5848] usb 2-1: Product: syz [ 2096.591414][ T5848] usb 2-1: Manufacturer: syz [ 2096.661422][ T5848] usb 2-1: SerialNumber: syz [ 2096.721053][ T5848] hub 2-1:1.0: bad descriptor, ignoring hub [ 2096.733185][ T5848] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2097.018564][ T5848] usb 2-1: USB disconnect, device number 102 [ 2097.798828][ T5848] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2098.088210][ T5848] usb 2-1: device descriptor read/64, error -71 [ 2098.452688][ T5848] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2098.675497][ T926] fuse: Unknown parameter 'grou00000000000000000000' [ 2098.763830][ T902] syz.3.7370 (902): drop_caches: 2 [ 2099.093280][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.101549][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.329883][ T24] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 2099.408608][ T5848] usb 2-1: device descriptor read/64, error -71 [ 2099.521400][ T5848] usb usb2-port1: attempt power cycle [ 2099.573002][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.593181][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2099.613667][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2099.668107][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.798424][ T24] usb 6-1: config 0 descriptor?? [ 2099.858588][ T5848] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2099.972868][ T5848] usb 2-1: config 0 has no interfaces? [ 2099.987549][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2100.008552][ T5848] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2100.008687][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 2100.145215][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.145698][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2100.160640][ T5848] usb 2-1: Product: syz [ 2100.174659][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2100.186472][ T5848] usb 2-1: Manufacturer: syz [ 2100.188177][ T24] usb 6-1: media controller created [ 2100.205115][ T5848] usb 2-1: SerialNumber: syz [ 2100.208014][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2100.219602][ T5848] usb 2-1: config 0 descriptor?? [ 2100.258438][ T5895] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2100.386343][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 2100.396142][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2100.413510][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input201 [ 2100.432172][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 2100.515871][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 2100.566436][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2100.657476][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2100.700559][ T5895] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2100.708790][ T5895] usb 3-1: can't read configurations, error -71 [ 2100.727720][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2100.737080][ T924] dvb-usb: error while querying for an remote control event. [ 2100.948385][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2100.956768][ T24] dvb-usb: error while querying for an remote control event. [ 2101.158154][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2101.173375][ T24] dvb-usb: error while querying for an remote control event. [ 2101.399693][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2101.421314][ T24] dvb-usb: error while querying for an remote control event. [ 2101.598268][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2101.604529][ T924] dvb-usb: error while querying for an remote control event. [ 2101.770192][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2101.810134][ T5895] dvb-usb: error while querying for an remote control event. [ 2101.906460][ T5895] usb 6-1: USB disconnect, device number 94 [ 2102.007979][ T924] usb 2-1: USB disconnect, device number 105 [ 2102.063705][ T964] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2102.093580][ T5895] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2102.324786][ T974] netlink: 'syz.5.7387': attribute type 2 has an invalid length. [ 2102.376779][ T974] netlink: 'syz.5.7387': attribute type 1 has an invalid length. [ 2102.429079][ T981] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2102.448777][ T974] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7387'. [ 2102.607021][ T982] pim6reg1: entered promiscuous mode [ 2102.612609][ T982] pim6reg1: entered allmulticast mode [ 2102.656226][ T987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2102.738938][ T982] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2103.259115][ T1002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2104.070098][ T1010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2104.908310][ T5848] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2105.102576][ T5848] usb 4-1: config 0 has no interfaces? [ 2105.128158][ T924] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 2105.128990][ T5848] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2105.155104][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.198358][ T5848] usb 4-1: Product: syz [ 2105.202587][ T5848] usb 4-1: Manufacturer: syz [ 2105.213082][ T5848] usb 4-1: SerialNumber: syz [ 2105.268934][ T5848] usb 4-1: config 0 descriptor?? [ 2105.308787][ T10] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2105.458310][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 2105.471214][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2105.481977][ T10] usb 6-1: config 0 has no interface number 0 [ 2105.543830][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2105.555004][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2105.579320][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.605302][ T10] usb 6-1: Product: syz [ 2105.629550][ T10] usb 6-1: Manufacturer: syz [ 2105.636292][ T10] usb 6-1: SerialNumber: syz [ 2105.668846][ T10] usb 6-1: config 0 descriptor?? [ 2105.692953][ T924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.706588][ T924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2105.718016][ T924] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2105.733000][ T924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.754742][ T924] usb 3-1: config 0 descriptor?? [ 2105.775764][ T924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2105.784285][ T924] dvb-usb: bulk message failed: -22 (3/0) [ 2105.824317][ T924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2105.875921][ T924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2105.917365][ T924] usb 3-1: media controller created [ 2105.956259][ T924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2106.015130][ T924] dvb-usb: bulk message failed: -22 (6/0) [ 2106.024976][ T5848] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2106.062333][ T924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2106.094594][ T924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input202 [ 2106.140802][ T924] dvb-usb: schedule remote query interval to 150 msecs. [ 2106.151024][ T924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2106.229382][ T5848] usb 2-1: config 0 has no interfaces? [ 2106.251669][ T5848] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2106.264113][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.278934][ T10] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2106.287361][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2106.307977][ T5848] usb 2-1: Product: syz [ 2106.308487][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2106.319970][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2106.341239][ T924] dvb-usb: error while querying for an remote control event. [ 2106.377650][ T5848] usb 2-1: Manufacturer: syz [ 2106.394715][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2106.449503][ T5848] usb 2-1: SerialNumber: syz [ 2106.563506][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.028590][ T924] dvb-usb: error while querying for an remote control event. [ 2107.151071][ T5848] usb 2-1: config 0 descriptor?? [ 2107.171658][ T10] usb 6-1: USB disconnect, device number 95 [ 2107.209250][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.215293][ T924] dvb-usb: error while querying for an remote control event. [ 2107.388196][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.394350][ T924] dvb-usb: error while querying for an remote control event. [ 2107.559616][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2107.618981][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.645663][ T5848] usb 4-1: USB disconnect, device number 9 [ 2107.659215][ T924] dvb-usb: error while querying for an remote control event. [ 2107.769580][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2107.781305][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2107.792235][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2107.800185][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2107.817237][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.825380][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.825415][ T924] dvb-usb: error while querying for an remote control event. [ 2107.856556][ T10] usb 6-1: config 0 descriptor?? [ 2107.978220][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2107.984089][ T924] dvb-usb: error while querying for an remote control event. [ 2108.178185][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2108.184026][ T924] dvb-usb: error while querying for an remote control event. [ 2108.439326][ T924] usb 3-1: USB disconnect, device number 103 [ 2108.520443][ T10] corsair-psu 0003:1B1C:1C09.00CB: hidraw0: USB HID v0.00 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 2108.589328][ T924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2108.613069][ T10] corsair-psu 0003:1B1C:1C09.00CB: unable to initialize device (-38) [ 2108.661908][ T10] corsair-psu 0003:1B1C:1C09.00CB: probe with driver corsair-psu failed with error -38 [ 2108.792124][ T10] usb 2-1: USB disconnect, device number 106 [ 2108.960608][ T1074] syzkaller1: entered promiscuous mode [ 2108.986114][ T1074] syzkaller1: entered allmulticast mode [ 2109.423178][ T1076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2109.538250][ T5848] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2109.698176][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 2109.705097][ T5848] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2109.715606][ T5848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2109.734533][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2109.765880][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2109.790584][ T5848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2109.803835][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2109.834108][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2109.862779][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.970623][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2109.983368][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2110.012207][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2110.023076][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.064162][ T10] usb 3-1: Product: syz [ 2110.084692][ T10] usb 3-1: Manufacturer: syz [ 2110.116554][ T5848] usb 4-1: GET_CAPABILITIES returned 0 [ 2110.127669][ T10] usb 3-1: SerialNumber: syz [ 2110.147579][ T5848] usbtmc 4-1:16.0: can't read capabilities [ 2110.178000][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 2110.231934][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2110.288538][ T5848] usb 4-1: USB disconnect, device number 10 [ 2110.405045][ T5895] usb 3-1: USB disconnect, device number 104 [ 2110.534018][ T1097] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7415'. [ 2110.631137][ T924] usb 6-1: USB disconnect, device number 96 [ 2110.992495][ T5848] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2111.069132][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2111.307796][ T10] usb 3-1: device descriptor read/64, error -71 [ 2111.331065][ T5848] usb 4-1: config 0 has no interfaces? [ 2111.370460][ T5848] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2111.383470][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.401254][ T5848] usb 4-1: Product: syz [ 2111.471283][ T5848] usb 4-1: Manufacturer: syz [ 2111.481579][ T5848] usb 4-1: SerialNumber: syz [ 2111.542875][ T5848] usb 4-1: config 0 descriptor?? [ 2111.604306][ T1107] : renamed from bridge_slave_0 (while UP) [ 2111.610929][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2111.748150][ T10] usb 3-1: device descriptor read/64, error -71 [ 2111.758149][ T5895] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 2111.964714][ T10] usb usb3-port1: attempt power cycle [ 2111.988267][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.002439][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2112.032238][ T5895] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2112.203638][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.264005][ T5895] usb 6-1: config 0 descriptor?? [ 2112.295910][ T5895] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2112.323214][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 2112.375308][ T5895] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2112.442377][ T5895] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2112.470249][ T5895] usb 6-1: media controller created [ 2112.530763][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2112.559798][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 2112.580346][ T5895] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2112.723677][ T1128] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2112.828324][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input203 [ 2112.887890][ T1129] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2112.895021][ T1129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2113.017547][ T5895] dvb-usb: schedule remote query interval to 150 msecs. [ 2113.030028][ T1129] vhci_hcd vhci_hcd.0: Device attached [ 2113.088740][ T5895] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2113.235682][ T10] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 2113.238975][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2113.261451][ T5895] dvb-usb: error while querying for an remote control event. [ 2113.443445][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2113.456248][ T5895] dvb-usb: error while querying for an remote control event. [ 2113.470004][ T924] usb 4-1: USB disconnect, device number 11 [ 2113.596433][ T1130] vhci_hcd: connection reset by peer [ 2113.612136][T16382] vhci_hcd: stop threads [ 2113.632252][T16382] vhci_hcd: release socket [ 2113.648342][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2113.655375][ T924] dvb-usb: error while querying for an remote control event. [ 2113.672810][T16382] vhci_hcd: disconnect device [ 2113.838307][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2113.846223][ T24] dvb-usb: error while querying for an remote control event. [ 2114.038321][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2114.044209][ T24] dvb-usb: error while querying for an remote control event. [ 2114.058312][ T924] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2114.238172][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2114.285380][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 2114.313699][ T24] dvb-usb: error while querying for an remote control event. [ 2114.337170][ T924] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 2114.348843][ T924] usb 3-1: config 0 has no interface number 0 [ 2114.362271][ T924] usb 3-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 2114.404672][ T924] usb 3-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2114.587440][ T924] usb 3-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2114.625398][ T1153] sctp: [Deprecated]: syz.1.7430 (pid 1153) Use of int in maxseg socket option. [ 2114.625398][ T1153] Use struct sctp_assoc_value instead [ 2114.900683][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2114.916800][ T24] dvb-usb: error while querying for an remote control event. [ 2114.954315][ T924] usb 3-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 2114.986545][ T924] usb 3-1: config 0 interface 80 altsetting 254 bulk endpoint 0xB has invalid maxpacket 1024 [ 2115.218172][ T924] usb 3-1: config 0 interface 80 altsetting 254 bulk endpoint 0x8 has invalid maxpacket 1024 [ 2115.228668][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 2115.272024][T21539] dvb-usb: error while querying for an remote control event. [ 2115.303390][ T924] usb 3-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 2115.368236][ T924] usb 3-1: config 0 interface 80 has no altsetting 0 [ 2115.396458][ T924] usb 3-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8 [ 2115.414681][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.471007][ T924] usb 3-1: Product: syz [ 2115.482450][ T924] usb 3-1: Manufacturer: syz [ 2115.499585][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 2115.505359][T21539] dvb-usb: error while querying for an remote control event. [ 2115.526363][ T924] usb 3-1: SerialNumber: syz [ 2115.549066][ T924] usb 3-1: config 0 descriptor?? [ 2115.569841][ T1136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2115.606718][ T1136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2115.656392][ T5848] usb 6-1: USB disconnect, device number 97 [ 2115.705961][ T924] sierra 3-1:0.80: Sierra USB modem converter detected [ 2115.817443][ T5848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2115.940342][ T924] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 2116.023242][ T924] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 2116.089503][ T924] usb 3-1: Sierra USB modem converter now attached to ttyUSB2 [ 2116.202079][ T924] usb 3-1: USB disconnect, device number 108 [ 2116.283834][ T924] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2116.294894][ T1167] input: syz1 as /devices/virtual/input/input204 [ 2116.323726][ T924] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 2116.380373][ T924] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 2116.396196][ T924] sierra 3-1:0.80: device disconnected [ 2116.991012][ T5848] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2117.168589][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 2117.182188][ T5848] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2117.193417][ T5848] usb 3-1: config 0 has no interface number 0 [ 2117.205319][ T5848] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2117.215134][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.223520][ T5848] usb 3-1: Product: syz [ 2117.229747][ T5848] usb 3-1: Manufacturer: syz [ 2117.234512][ T5848] usb 3-1: SerialNumber: syz [ 2117.247956][ T5848] usb 3-1: config 0 descriptor?? [ 2117.468575][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.482772][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.502966][ T5848] smsc95xx v2.0.0 [ 2117.517301][ T5848] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2117.577926][ T1193] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2117.613487][ T5848] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 2118.233916][ T924] usb 3-1: USB disconnect, device number 109 [ 2118.240153][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 2118.348286][ T10] vhci_hcd: vhci_device speed not set [ 2118.396219][ T1200] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.433804][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.446768][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2118.467936][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2118.560631][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.634655][ T24] usb 4-1: config 0 descriptor?? [ 2118.752743][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2118.776971][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 2118.807950][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2118.859579][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2118.883383][ T24] usb 4-1: media controller created [ 2118.916262][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2118.974709][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 2118.992842][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2119.009173][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input205 [ 2119.048970][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 2119.059474][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2119.218408][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2119.224336][ T24] dvb-usb: error while querying for an remote control event. [ 2119.388279][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2119.394157][ T5895] dvb-usb: error while querying for an remote control event. [ 2119.568705][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2119.576915][ T5895] dvb-usb: error while querying for an remote control event. [ 2119.788346][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2119.794262][ T5895] dvb-usb: error while querying for an remote control event. [ 2119.972763][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2119.984801][ T5895] dvb-usb: error while querying for an remote control event. [ 2120.148792][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2120.266604][ T5895] dvb-usb: error while querying for an remote control event. [ 2120.718177][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2120.724055][ T5895] dvb-usb: error while querying for an remote control event. [ 2120.978198][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2120.984112][ T5895] dvb-usb: error while querying for an remote control event. [ 2121.139330][ T1243] netlink: 666 bytes leftover after parsing attributes in process `syz.5.7454'. [ 2121.158171][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2121.179323][ T5895] dvb-usb: error while querying for an remote control event. [ 2121.358229][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2121.366849][ T5895] dvb-usb: error while querying for an remote control event. [ 2121.409313][ T1248] ipt_ECN: cannot use operation on non-tcp rule [ 2121.598275][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2121.685865][T24837] usb 4-1: USB disconnect, device number 12 [ 2121.714036][ T5895] dvb-usb: error while querying for an remote control event. [ 2121.917422][T24837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2122.258267][ T1261] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2123.147688][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2123.330154][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 2123.358680][ T5895] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2123.574969][ T5895] usb 4-1: config 0 has no interface number 0 [ 2123.706622][ T5895] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2123.886871][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.914090][ T5895] usb 4-1: Product: syz [ 2123.950544][ T5895] usb 4-1: Manufacturer: syz [ 2123.966104][ T5895] usb 4-1: SerialNumber: syz [ 2124.018715][ T5895] usb 4-1: config 0 descriptor?? [ 2124.064084][ T5895] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2124.673649][ T1291] FAULT_INJECTION: forcing a failure. [ 2124.673649][ T1291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2124.706418][ T1291] CPU: 1 UID: 0 PID: 1291 Comm: syz.5.7467 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 2124.706442][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2124.706452][ T1291] Call Trace: [ 2124.706459][ T1291] [ 2124.706466][ T1291] dump_stack_lvl+0x189/0x250 [ 2124.706492][ T1291] ? __pfx____ratelimit+0x10/0x10 [ 2124.706517][ T1291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2124.706535][ T1291] ? __pfx__printk+0x10/0x10 [ 2124.706556][ T1291] ? __might_fault+0xb0/0x130 [ 2124.706582][ T1291] should_fail_ex+0x414/0x560 [ 2124.706609][ T1291] _copy_from_user+0x2d/0xb0 [ 2124.706631][ T1291] ___sys_recvmsg+0x12e/0x510 [ 2124.706656][ T1291] ? __pfx____sys_recvmsg+0x10/0x10 [ 2124.706694][ T1291] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 2124.706717][ T1291] do_recvmmsg+0x307/0x770 [ 2124.706745][ T1291] ? __pfx_do_recvmmsg+0x10/0x10 [ 2124.706775][ T1291] ? _copy_from_user+0x94/0xb0 [ 2124.706804][ T1291] __x64_sys_recvmmsg+0x1af/0x240 [ 2124.706828][ T1291] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2124.706847][ T1291] ? rcu_is_watching+0x15/0xb0 [ 2124.706869][ T1291] ? do_syscall_64+0xbe/0x3b0 [ 2124.706886][ T1291] do_syscall_64+0xfa/0x3b0 [ 2124.706900][ T1291] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.706923][ T1291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.706938][ T1291] ? clear_bhb_loop+0x60/0xb0 [ 2124.706956][ T1291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.706971][ T1291] RIP: 0033:0x7f691558e929 [ 2124.706984][ T1291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.706998][ T1291] RSP: 002b:00007f69163b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2124.707014][ T1291] RAX: ffffffffffffffda RBX: 00007f69157b5fa0 RCX: 00007f691558e929 [ 2124.707025][ T1291] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 2124.707035][ T1291] RBP: 00007f69163b6090 R08: 0000200000000480 R09: 0000000000000000 [ 2124.707045][ T1291] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 2124.707055][ T1291] R13: 0000000000000000 R14: 00007f69157b5fa0 R15: 00007f69158dfa28 [ 2124.707077][ T1291] [ 2125.316218][ T1309] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2125.501636][ T1306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2125.758874][ T5895] usb 4-1: qt2_attach - failed to power on unit: -71 [ 2125.765714][ T5895] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 2126.012365][ T5895] usb 4-1: USB disconnect, device number 13 [ 2126.467149][ T1318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7474'. [ 2127.027478][ T1335] kAFS: unable to lookup cell '/,' [ 2127.445792][ T1349] trusted_key: encrypted_key: insufficient parameters specified [ 2127.509009][ T1349] trusted_key: encrypted_key: master key parameter 'default&dse:new' is invalid [ 2127.698372][ T5848] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2127.828206][ T5895] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2127.901266][ T5848] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2127.920292][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.950951][ T5848] usb 4-1: config 0 descriptor?? [ 2127.967095][ T5848] cp210x 4-1:0.0: cp210x converter detected [ 2128.013957][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2128.082668][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2128.122313][ T5895] usb 6-1: New USB device found, idVendor=27b8, idProduct=016f, bcdDevice= 0.00 [ 2128.137103][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.164331][ T1351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.180638][ T5895] usb 6-1: config 0 descriptor?? [ 2128.209154][ T1351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.245266][ T5848] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2128.272607][ T5848] cp210x 4-1:0.0: querying part number failed [ 2128.330174][ T5848] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2128.751061][ T5895] hid-generic 0003:27B8:016F.00CC: hidraw0: USB HID v0.00 Device [HID 27b8:016f] on usb-dummy_hcd.5-1/input0 [ 2128.916787][ T5895] usb 6-1: USB disconnect, device number 98 [ 2129.233594][ T1374] fido_id[1374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2130.508948][T24837] usb 4-1: USB disconnect, device number 14 [ 2130.531783][T24837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2130.551648][T24837] cp210x 4-1:0.0: device disconnected [ 2130.971601][ T1399] bridge0: entered allmulticast mode [ 2131.208200][ T924] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2131.369782][ T924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.391450][ T924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2131.437765][ T924] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2131.479840][ T924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.494585][ T924] usb 3-1: config 0 descriptor?? [ 2132.111683][ T1416] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 2132.126009][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2132.126028][ T30] audit: type=1326 audit(1751649793.694:13325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1400 comm="syz.2.7500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e818e929 code=0x0 [ 2132.261661][ T924] usbhid 3-1:0.0: can't add hid device: -71 [ 2132.275674][ T924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2132.325364][ T924] usb 3-1: USB disconnect, device number 110 [ 2132.532062][ T1425] geneve2: entered promiscuous mode [ 2134.075097][T18823] Bluetooth: hci3: unexpected event for opcode 0x202d [ 2135.151116][ T30] audit: type=1800 audit(1751649796.724:13326): pid=1460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7519" name="dmabuf" dev="dmabuf" ino=49 res=0 errno=0 [ 2136.380870][ T924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2136.533099][ T1468] program syz.5.7523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2136.542741][ T924] usb 4-1: Using ep0 maxpacket: 32 [ 2136.556120][ T924] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2136.573306][ T924] usb 4-1: config 0 has no interface number 0 [ 2136.597018][ T924] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2136.607495][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.619858][ T924] usb 4-1: Product: syz [ 2136.642922][ T924] usb 4-1: Manufacturer: syz [ 2136.656661][ T924] usb 4-1: SerialNumber: syz [ 2136.704829][ T924] usb 4-1: config 0 descriptor?? [ 2136.747719][ T924] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2138.442610][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7534'. [ 2139.095473][ T924] usb 4-1: qt2_attach - failed to power on unit: -71 [ 2139.186182][ T924] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 2139.298598][ T924] usb 4-1: USB disconnect, device number 15 [ 2143.089243][ T1570] netlink: 'syz.1.7553': attribute type 10 has an invalid length. [ 2143.131676][ T1570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2143.155172][ T1570] team0: Port device bond0 added [ 2143.155219][ T30] audit: type=1326 audit(1751649804.724:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.1.7553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644dd8e929 code=0x7ffc0000 [ 2143.316091][ T30] audit: type=1326 audit(1751649804.724:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.1.7553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644dd8e929 code=0x7ffc0000 [ 2143.387350][ T30] audit: type=1326 audit(1751649804.724:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.1.7553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f644dd8e929 code=0x7ffc0000 [ 2143.457501][ T30] audit: type=1326 audit(1751649804.804:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.1.7553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644dd8e929 code=0x7ffc0000 [ 2143.668167][ T30] audit: type=1326 audit(1751649804.804:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1569 comm="syz.1.7553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644dd8e929 code=0x7ffc0000 [ 2144.203897][T24837] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2144.303929][ T1592] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7559'. [ 2144.389571][T24837] usb 2-1: Using ep0 maxpacket: 8 [ 2144.419193][T24837] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2144.459476][T24837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2144.494788][T24837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2144.532130][T24837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2144.830680][T24837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2144.867660][T24837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2144.919094][ T5848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2144.932888][T24837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.120993][ T5848] usb 4-1: config index 0 descriptor too short (expected 24929, got 18) [ 2145.171920][ T5848] usb 4-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 2145.186752][T24837] usb 2-1: usb_control_msg returned -32 [ 2145.208951][T24837] usbtmc 2-1:16.0: can't read capabilities [ 2145.219826][ T5848] usb 4-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 2145.259748][ T5848] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 2145.290683][ T5848] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2145.310943][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.320024][ T5848] usb 4-1: Product: syz [ 2145.324440][ T5848] usb 4-1: Manufacturer: syz [ 2145.329674][ T5848] usb 4-1: SerialNumber: syz [ 2145.578525][ T5848] usb 4-1: USB disconnect, device number 16 [ 2145.893559][ T1610] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 6 [ 2145.938863][ T5895] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 2146.096044][ T5848] usb 2-1: USB disconnect, device number 107 [ 2146.123693][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.141349][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2146.187194][ T5895] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2146.246792][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.348698][ T5895] usb 6-1: config 0 descriptor?? [ 2146.475418][ T5895] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2146.510000][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 2146.629520][ T5895] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2146.670817][ T5895] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2146.695905][ T5895] usb 6-1: media controller created [ 2146.787773][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2146.864566][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 2146.906532][ T5895] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2147.183145][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input207 [ 2147.270150][ T5895] dvb-usb: schedule remote query interval to 150 msecs. [ 2147.277545][ T5895] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2147.428500][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2147.438415][ T924] dvb-usb: error while querying for an remote control event. [ 2147.618301][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2147.661963][ T5895] dvb-usb: error while querying for an remote control event. [ 2147.928616][T24837] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2148.123622][ T924] dvb-usb: bulk message failed: -22 (1/0) [ 2148.129645][ T924] dvb-usb: error while querying for an remote control event. [ 2148.368148][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 2148.376825][ T5895] dvb-usb: error while querying for an remote control event. [ 2148.415283][T24837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2148.439976][T24837] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2148.447647][T24837] usb 4-1: can't read configurations, error -71 [ 2148.639738][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 2148.645645][T21539] dvb-usb: error while querying for an remote control event. [ 2148.836117][T21539] dvb-usb: bulk message failed: -22 (1/0) [ 2148.849666][T21539] dvb-usb: error while querying for an remote control event. [ 2148.901447][ T1640] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 2148.907030][ T5848] usb 6-1: USB disconnect, device number 99 [ 2148.913372][ T1640] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 2148.913398][ T1640] CPU: 1 UID: 0 PID: 1640 Comm: syz.1.7574 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 2148.913422][ T1640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2148.950211][ T1640] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 2148.955624][ T1640] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 2148.975265][ T1640] RSP: 0018:ffffc9000e2e70f0 EFLAGS: 00010206 [ 2148.981359][ T1640] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 2148.989348][ T1640] RDX: ffffc900155b9000 RSI: 0000000000000340 RDI: 0000000000000341 [ 2148.997332][ T1640] RBP: dffffc0000000000 R08: ffff88802e7c9e00 R09: 0000000000000002 [ 2149.005314][ T1640] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 2149.013306][ T1640] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880676ca000 [ 2149.021457][ T1640] FS: 00007f644bbf66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 2149.030403][ T1640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2149.036997][ T1640] CR2: 0000200000000240 CR3: 0000000027f90000 CR4: 00000000003526f0 [ 2149.044987][ T1640] Call Trace: [ 2149.048292][ T1640] [ 2149.051239][ T1640] qdisc_tree_reduce_backlog+0x299/0x480 [ 2149.056983][ T1640] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 2149.062722][ T1640] hhf_change+0x764/0xad0 [ 2149.067097][ T1640] ? __pfx_hhf_change+0x10/0x10 [ 2149.071991][ T1640] ? __pfx_hhf_init+0x10/0x10 [ 2149.076696][ T1640] hhf_init+0x213/0x950 [ 2149.080888][ T1640] ? __pfx_hhf_init+0x10/0x10 [ 2149.085589][ T1640] qdisc_create+0x7a9/0xea0 [ 2149.090111][ T1640] tc_modify_qdisc+0x1426/0x2010 [ 2149.095069][ T1640] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2149.100375][ T1640] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2149.105722][ T1640] rtnetlink_rcv_msg+0x77c/0xb70 [ 2149.110706][ T1640] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2149.115833][ T1640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2149.121400][ T1640] ? ref_tracker_free+0x63a/0x7d0 [ 2149.126510][ T1640] ? __copy_skb_header+0xa7/0x550 [ 2149.131556][ T1640] ? __pfx_ref_tracker_free+0x10/0x10 [ 2149.136948][ T1640] netlink_rcv_skb+0x205/0x470 [ 2149.141826][ T1640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2149.147332][ T1640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2149.152639][ T1640] ? netlink_deliver_tap+0x2e/0x1b0 [ 2149.157858][ T1640] ? netlink_deliver_tap+0x2e/0x1b0 [ 2149.163088][ T1640] netlink_unicast+0x758/0x8d0 [ 2149.167874][ T1640] netlink_sendmsg+0x805/0xb30 [ 2149.172684][ T1640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2149.177987][ T1640] ? aa_sock_msg_perm+0x94/0x160 [ 2149.182950][ T1640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2149.188249][ T1640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2149.193555][ T1640] __sock_sendmsg+0x219/0x270 [ 2149.198251][ T1640] ____sys_sendmsg+0x505/0x830 [ 2149.203034][ T1640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2149.208339][ T1640] ? import_iovec+0x74/0xa0 [ 2149.212864][ T1640] ___sys_sendmsg+0x21f/0x2a0 [ 2149.217568][ T1640] ? __pfx____sys_sendmsg+0x10/0x10 [ 2149.222846][ T1640] ? __fget_files+0x2a/0x420 [ 2149.227475][ T1640] ? __fget_files+0x3a0/0x420 [ 2149.232178][ T1640] __x64_sys_sendmsg+0x19b/0x260 [ 2149.237142][ T1640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2149.242644][ T1640] ? rcu_is_watching+0x15/0xb0 [ 2149.247455][ T1640] ? do_syscall_64+0xbe/0x3b0 [ 2149.252167][ T1640] do_syscall_64+0xfa/0x3b0 [ 2149.256703][ T1640] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.261937][ T1640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.268048][ T1640] ? clear_bhb_loop+0x60/0xb0 [ 2149.272773][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.278687][ T1640] RIP: 0033:0x7f644dd8e929 [ 2149.283131][ T1640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2149.302756][ T1640] RSP: 002b:00007f644bbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2149.311192][ T1640] RAX: ffffffffffffffda RBX: 00007f644dfb5fa0 RCX: 00007f644dd8e929 [ 2149.319184][ T1640] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2149.327175][ T1640] RBP: 00007f644de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2149.335183][ T1640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2149.343192][ T1640] R13: 0000000000000000 R14: 00007f644dfb5fa0 R15: 00007f644e0dfa28 [ 2149.351192][ T1640] [ 2149.354239][ T1640] Modules linked in: [ 2149.358264][ T1640] ---[ end trace 0000000000000000 ]--- [ 2149.363751][ T1640] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 2149.369175][ T1640] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 2149.388951][ T1640] RSP: 0018:ffffc9000e2e70f0 EFLAGS: 00010206 [ 2149.395145][ T1640] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 2149.403147][ T1640] RDX: ffffc900155b9000 RSI: 0000000000000340 RDI: 0000000000000341 [ 2149.411155][ T1640] RBP: dffffc0000000000 R08: ffff88802e7c9e00 R09: 0000000000000002 [ 2149.419154][ T1640] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 2149.427127][ T1640] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880676ca000 [ 2149.435129][ T1640] FS: 00007f644bbf66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 2149.444084][ T1640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2149.450699][ T1640] CR2: 0000200000000240 CR3: 0000000027f90000 CR4: 00000000003526f0 [ 2149.458716][ T1640] Kernel panic - not syncing: Fatal exception in interrupt [ 2149.466343][ T1640] Kernel Offset: disabled [ 2149.470683][ T1640] Rebooting in 86400 seconds..