last executing test programs: 6.747469627s ago: executing program 4 (id=2396): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff030}, {0x6, 0x0, 0x0, 0xa83}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, 0x1}) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x3, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x20041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) close(r6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.085111914s ago: executing program 0 (id=2400): r0 = socket$kcm(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./bus\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/120, 0x78}], 0x3) 5.461397971s ago: executing program 3 (id=2402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={{0x3, 0x0, 0x80, {0x0, 0xd000, 0x1}}, "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", "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"}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)={0x3, [0x3, 0x0, 0x7]}) r7 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffffffffffff9, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e24}, 0x6e, 0x0}}], 0x1, 0x40008004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x5836, 0xa, 0x7, 0x4000000000000e51, 0x1, 0x4000005479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0x6, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80c94}) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r7, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f00000024c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x40090) 5.452918893s ago: executing program 0 (id=2403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) bind$alg(r1, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) getpeername(r0, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000080)=0x80) 4.519354759s ago: executing program 2 (id=2404): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x81, 0xb9, &(0x7f00000004c0)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000004, 0x810, r1, 0xa543c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x14) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000200)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r5], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2020) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) read$FUSE(r6, &(0x7f0000004400)={0x2020}, 0x2020) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)) 3.524314792s ago: executing program 0 (id=2406): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000), 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x16, 0xfffffffffffffffe) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000740)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.483766802s ago: executing program 2 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@uid_gt={'uid>', r1}}, {@appraise}, {@fowner_eq={'fowner', 0x3d, r1}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '+'}}, {@fowner_gt={'fowner>', r2}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_measure}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') r3 = inotify_init() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x18, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PRIORITY={0x8, 0x6, 0x13}]}, 0x2c}}, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x80) (async) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') 3.334908707s ago: executing program 2 (id=2408): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x8}, 0x18) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000006c0)={0x0, 0x0, 0x1000000000, 0x10}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x88009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x8}}]}) write$binfmt_misc(r1, &(0x7f0000000000)="180c45", 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f00000001c0)={0x0, r8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001e1e9cb20123632d0e456010203010902240001000010000904a040020803010009050602080001000009050402"], 0x0) kexec_load(0x4, 0x7, &(0x7f0000000900)=[{&(0x7f0000000540)="748977245e329ef31bb73e06db732f4b6cb1ae295120fab5ebf6d2e22a1f429ff4c02d8a2d3c4b182dfb05f9193e9d3bb6761d307530de68920d9457252ea074364598733bc1ff336f8921cb9fd549de412254a9ae15bb499d20", 0x5a, 0x9}, {&(0x7f00000005c0)="15483aca4a8d1bf1ae6fed40f98125aa5021e3ed75401950294bfed3983bfc85dc232fd0ad4702cb68da94466b1d2b8eeec599ea8b93eec36b24e0cecb2e1143b9e6688b", 0x44, 0x6, 0x4}, {&(0x7f0000000640)="dc28655b110d1f48385de174e833ddcea25f97f04bfc3b0f776f95c0ff2d9d9eb3b9a2a2a3c7e4910fc887948a3e97c8414efb275a77402a76bb098f58d99df6e8326efb31ee5ae4931c207db98eede33ba107bf1c74195bd329e7308f1d3f45e598d885b0152be56fd355585de651eb7d19ad736b454139ff5ec5dfbf3951f28dc2a596755dc5e66406a03c67de7f17336a466dd7e9caea98feadaacd58a17ca8b550f3016c55e8ebbd8f5c949543c3cf1178145066655658dd6e42c4e0bb", 0xbf, 0x3}, {&(0x7f0000000700)="524583dfd2850a4d1861011106e61002b4e81745fda395dac27e06724657a794c85f781472e06ef42c17e82f7fe012f7331acc5e1632c444983aefbf1d6d68086ac16af577fb", 0x46, 0x7, 0xb}, {&(0x7f0000000780)="187bfad6d0bae2471d97912061d11c1d8c67880b28f54315a75578bbb2b7b9ee9ee97a8d4fb61d03daf6956cf58b56c87933a46276f0d005c873d067a18b8bc4680f", 0x42, 0xffffffff, 0x1}, {&(0x7f0000000800)="a6316edf4fcb1441fc9693b6b6a467d6c364b0118aebe4f9b3d735257fe1ddf92c88442a2d9f0a6252ab08cdd41cca35d7fcb08b09135da0411d85cf582234447dffae47a86cab3f73315c1a08fc0e43be95e3c9c6630a23488f769b7c6303f16be9b534fc5be00292e6ba22d1d2bc7075f910b0", 0x74, 0x1, 0x4}, {&(0x7f0000000880)="4c5c5207fcd70563e449a6479036e8b61d0826292e2a0c15a68ed6f79f43613755be10745f6d8f8f2556e06d8c5aa802ece6144698de86f4716610ebdb4e4dfe0691c7f49f2aa67e", 0x48, 0x9, 0x1}], 0x0) fcntl$getownex(r7, 0x10, &(0x7f00000003c0)) r9 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r4) sendmsg$TIPC_NL_BEARER_ADD(r10, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x2c8, r11, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfd}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe88}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf48}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda79}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc156e5e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7dba}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4002011}, 0x8000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r9}, 0x8) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.333254118s ago: executing program 4 (id=2410): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000480000000000059078ac1e0001ac14142f440405038917ceac1e0101ac1414aaac1e010100000000ffffffff830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x100010, r5, 0x5508b000) rt_sigprocmask(0x1, &(0x7f0000001fc0)={[0x8]}, &(0x7f0000002000), 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.317621257s ago: executing program 3 (id=2411): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x101, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010006000000000004000500000000001000070000000000200002000000c8c3df74bea3a88d361ccae7d60000"], 0x24, 0x2) setpriority(0x2, 0x0, 0x7) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.02258959s ago: executing program 4 (id=2412): socketpair(0x25, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'virt_wifi0\x00', @random="0100000000eb"}) 2.879401003s ago: executing program 4 (id=2413): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0, 0x0, 0x20fffffffd}, 0x18) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0xb635773f06ebbee2, 0x110, 0xffffffffffffffff, 0xc096a000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/232, 0xe8}], 0x5, &(0x7f0000001740)=""/237, 0xed}, 0xb5cc}, {{&(0x7f0000001840)=@nfc, 0x80, &(0x7f0000001b00)=[{&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f00000018c0)=""/212, 0xd4}, {&(0x7f00000019c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000001a80)=""/42, 0x2a}, {&(0x7f0000001ac0)=""/35, 0x23}], 0x7, &(0x7f0000001b80)=""/98, 0x62}, 0x3}, {{&(0x7f0000001c00)=@hci, 0x80, &(0x7f0000001c80), 0x0, &(0x7f0000003280)=""/213, 0xd5}, 0x3}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) getrusage(0x1, &(0x7f0000000380)) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2, r2}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'gretap0\x00', 0x0}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)=ANY=[@ANYBLOB="1c00000002010102000000000000000000000000080003b50b6e4d21"], 0x1c}}, 0x0) (async) ioctl$SIOCRSSCAUSE(r7, 0x89e1, &(0x7f0000000000)) 2.873814174s ago: executing program 4 (id=2414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000080071103a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000340)='security.SMACK64IPOUT\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='/dev/bus/usb/0Q#/00#\x00\x00'], 0x16, 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast}) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socketpair(0x2, 0xa, 0x2850, &(0x7f0000000240)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r5}) r6 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.39818031s ago: executing program 1 (id=2415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffffa, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0xa8, 0x19, 0x300, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x14, 0x80, 0x3b, 0xfe, 0x3, 0x0, 0x9, 0x1000}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x6}, {0x2}, {0x3a1c}, {0x5c}, {0x0, 0x0, 0x1}, {0xff}, {0xf, 0x0, 0x1}, {0x200}, {0x9}, {0xf1f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x432}, {0xfd, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0x68e5}, {}, {0x5}, {0xffbf2, 0x0, 0x1}, {0x7}, {0xde}, {0xffffc}, {0x3, 0x0, 0x1}, {0x401}, {0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x10) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000024c9c03c150000000000000000000000000000000300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x9, 0x84, 0xffffffffffffffff, 0xffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/165, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af04, &(0x7f0000000300)={0x3}) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8080000}) 2.339566907s ago: executing program 3 (id=2416): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x428100, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', '+\x00'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002100)={0x10, 0x0, r2}, 0x10) fadvise64(r0, 0x0, 0x7fffffff, 0x4) r4 = openat$cgroup_ro(r0, &(0x7f0000002140)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000002180)={0xfffffffffffffff4, r1}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000021c0)) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000400, r3, &(0x7f0000002200)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="5405f467b060"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000002380)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000002400)={'sit0\x00', &(0x7f00000023c0)={@remote, 0x0, 0x0, 0x30, 0x0, [{@local}, {@initdev}, {@private}]}}) ioctl$FIONCLEX(r1, 0x5450) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002440), 0x2, 0x6}}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f00000024c0)=0x8, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002540), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)={0x11c, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0xf5, 0x19, "c61d3574c558968d7c693be03d5e186d4dca28e9dadd8d2847a278c783fd85e3ebd4d5217751f5f9f12c487f080f1515b9ee663ec83574aed723565b134cdb2cd8be292cee7c6d339355756b3fc442e071bfa8ea613cf8a6a7406d77a5ccbe831a10cd72998eef7d7bbabbeafe2629002a69bb3648f23a380c0333a4cab3c1a7fdb1844d61b410b987bf503a420d7d3b44d2007313f70558243d424632ab1fd51559cfb62db967e1640b7ea4e0794f9b9d533dc24552afcedb9baf6b9c7712b9dc56bfb2df7d3553ce053e479c2696a9699f19b6cac62e361c42271aeb22ff9a3dfc40f4e55ba61077a28707df04758717"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_open_dev$video(&(0x7f0000002740), 0x9, 0x80) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000002780)={0xc, 0x400, 0x0, 0x80080, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000027c0)={0x5be141ef, r11}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r13, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, r14, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x11) ioctl$SIOCRSGL2CALL(r12, 0x89e5, &(0x7f0000002940)=@netrom) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000002980)={0x28, 0x2, 0x0, {0x3, 0xc4, 0xfffffffffffffffc}}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000029c0)={0x9, 0x1, "c630725216f566b0327e75f50123cbb097b32d5c8d3522f7710c8e5d97dff97d816345ea59d62c9123c3e52f39b78d56d31e84ba6afacf9923e57c97d08d0c136b3c11573416d988f38e7ca5062e384d680dbd79579ac51f95499e17ee713107fd5aef6719547a2fae4ee7ab27a45dd1a207bee4f3ca46a29f09336affa828e80305bb35e667c5dd9b6736508138e9424af15b1674a93249239359e1f61b0fcb643ad585206d10bd0f237b9d9d853f130036c38fc75c654237684650e147f57a7132c260e2f69184ee53ced624af7684cc472e0620e551d7630241d71ca4b632823732ff89da4598601f14fb7cf80dd8ee92ee54761babf2e6f1e254195f925e"}) 2.247308759s ago: executing program 1 (id=2417): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = semget$private(0x0, 0x3, 0x8) semop(r1, &(0x7f0000000180)=[{0x4, 0x6, 0x1000}, {0x1, 0x2, 0x1800}], 0x2) syz_open_dev$dri(&(0x7f0000000280), 0x8003, 0x4082) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) semget$private(0x0, 0x3, 0x8) (async) semop(r1, &(0x7f0000000180)=[{0x4, 0x6, 0x1000}, {0x1, 0x2, 0x1800}], 0x2) (async) syz_open_dev$dri(&(0x7f0000000280), 0x8003, 0x4082) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 2.210365236s ago: executing program 3 (id=2418): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) socket$netlink(0x10, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = getpid() r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20040442) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg1\x00'}) shutdown(r5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x902, 0x100, 0x8, 0x0, 0x8, r3}) 2.121629431s ago: executing program 1 (id=2419): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1, 0x4, 0x39, @loopback, @mcast2={0xff, 0x3}, 0x2000, 0x0, 0x0, 0x2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x40000) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) read$nci(r1, &(0x7f0000000580)=""/10, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) dup(0xffffffffffffffff) 1.790608096s ago: executing program 1 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x449) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100"/13, @ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x2}, {&(0x7f0000000900)=""/230, 0xe6}, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/162, 0xa2}], 0x2, 0x40, 0xd}}], 0x48, 0x90}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x200) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x541a00, 0xf) sendfile(r3, r3, 0x0, 0x4) r4 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRESDEC=r5, @ANYRESOCT, @ANYBLOB="9855408d89983e01f91e832b4668073414e0b7dd8be8789a98735fa7e84cefb481841550f0567049c01e93d156ab2563dfaa6ae6f5521e67dfe99a253f9f161ecec5042005fad351842166da035af49cdd850fa8bb27313b7f4b588af97f0ba5e34ba6667bdddadd5a9c8f80589edc3e9b9de32424b45955b5dac61acc9a45", @ANYRES16=r4], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close(r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x3, 0x484, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x65, 0x0, 0x40, 0x29, 0x0, @empty, @private=0xa010102, {[@lsrr={0x83, 0x3, 0x3f}]}}}}}) 1.554944545s ago: executing program 1 (id=2421): syz_usb_connect(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x36, 0x8c, 0x3b, 0x10, 0x1286, 0x2046, 0x83b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x0, 0x2, 0xff, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 1.097688052s ago: executing program 3 (id=2422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) fsopen(&(0x7f0000000100)='nsfs\x00', 0x1) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r2}) (async) ftruncate(r0, 0xc17a) lseek(r0, 0x6, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x11}, 0x1, 0x0, 0x0, 0x804}, 0x24000801) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xb5, 0x66, 0xd1, 0x50, 0x543, 0x152b, 0xfb67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0xea, 0xa7, 0x0, 0xc2, 0x94, 0x18, 0xa0}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 855.491793ms ago: executing program 4 (id=2423): timer_create(0xfffffffffffffffd, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000600)={{}, {r2, r3+60000000}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) 459.30437ms ago: executing program 3 (id=2424): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0300000000000000de2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @enum, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4a}, 0x20) syz_usb_connect(0x5, 0x24, 0x0, 0x0) 411.849199ms ago: executing program 0 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x28, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x0, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f00000006c0)=""/11, 0xb}], 0x4}, 0x6}], 0x1, 0x12042, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="188860"], 0x18}, 0x20004891) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000200)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x1, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0xd, 0x2, 0x8, 0x7, 0x8, 0xfffc, 0x7, {0x0, @in6={{0xa, 0x4e21, 0x2, @empty, 0x1}}, 0x60, 0xe, 0xe76e, 0x6, 0x4}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000340)={r8, @in={{0x2, 0x4e20, @remote}}, 0x0, 0xa007}, 0x90) dup(r6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x800f, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x6, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x80, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x20000000, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x24, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x4, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x85, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0xc, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x6, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 290.851733ms ago: executing program 0 (id=2426): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 271.33821ms ago: executing program 2 (id=2427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5, 0x6], 0x0, 0xa340}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 223.633962ms ago: executing program 0 (id=2428): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0) fchdir(r0) socketpair(0x22, 0x2, 0x23, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x9, 0x2, 0x3, 0x4400, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0xb88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="40010000000000003c002b8008000100", @ANYRES32, @ANYBLOB="0800030006"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_usbip_server_init(0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x7fffffff, 0x1, 0x4, 0x65b4, 0x17b, 0x290a, 0xfffffff7, {r6, @in={{0x2, 0x4e20, @empty}}, 0xb1, 0x800, 0x4, 0xe3, 0x10001}}, &(0x7f0000000380)=0xb0) 135.257468ms ago: executing program 2 (id=2429): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x40004}, 0x1c) connect$inet6(r4, &(0x7f0000000440)={0xa, 0xfffe, 0x380000, @empty, 0x401}, 0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0x7ffffff7, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x36c18523, 0x401, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, r6, {0x6}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 97.873257ms ago: executing program 1 (id=2430): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x1, 0x0, @void}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xf0f041, 0x0, '\x00', @value64}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000085000000050000d4be"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xffffd000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r8, 0x5) sendfile(r7, r8, 0x0, 0x7ffff000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x90) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) kernel console output (not intermixed with test programs): 21] usb 5-1: can't read configurations, error -22 [ 632.672430][ T8537] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.679137][ T8521] usb usb5-port1: attempt power cycle [ 633.030541][ T8537] usb 4-1: config 0 has no interfaces? [ 633.065597][ T8537] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 633.075405][ T5955] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 633.083849][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.094232][ T8537] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 633.102430][ T5955] usb 1-1: config 0 has no interface number 0 [ 633.108799][ T8537] usb 4-1: Manufacturer: syz [ 633.116054][ T8537] usb 4-1: config 0 descriptor?? [ 633.124372][ T5955] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 633.133648][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.142521][ T5955] usb 1-1: Product: syz [ 633.146834][ T5955] usb 1-1: Manufacturer: syz [ 633.151560][ T5955] usb 1-1: SerialNumber: syz [ 633.158610][ T5955] usb 1-1: config 0 descriptor?? [ 633.166890][ T5955] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 633.173510][ T5955] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 633.350126][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.358902][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.375369][T12368] tap0: tun_chr_ioctl cmd 1074025677 [ 633.393379][ T5955] usb 1-1: USB disconnect, device number 81 [ 633.405121][T12368] tap0: linktype set to 270 [ 633.490200][ T8521] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 633.671839][ T8521] usb 5-1: no configurations [ 633.680996][ T8521] usb 5-1: can't read configurations, error -22 [ 633.697399][T12407] dummy0: entered promiscuous mode [ 633.706672][T12407] macsec1: entered promiscuous mode [ 634.470242][T12407] macsec1: entered allmulticast mode [ 634.477175][T12407] dummy0: entered allmulticast mode [ 634.520849][ T8521] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 634.538958][T12407] dummy0: left allmulticast mode [ 634.549140][T12407] dummy0: left promiscuous mode [ 634.579432][ T8521] usb 5-1: device descriptor read/8, error -71 [ 634.615559][T12413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1783'. [ 634.701733][ T8521] usb usb5-port1: unable to enumerate USB device [ 635.524057][T12427] pimreg: entered allmulticast mode [ 635.691049][ T10] usb 4-1: USB disconnect, device number 56 [ 636.674525][T12444] overlay: Unknown parameter '/' [ 637.851451][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 637.932471][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.974084][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.987244][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.997338][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.007516][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.019332][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.029964][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 638.044638][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 638.062789][ T10] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 638.087500][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 638.126038][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 638.146667][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.170342][ T8521] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 638.194199][ T10] usb 1-1: Product: syz [ 638.230239][ T10] usb 1-1: Manufacturer: syz [ 638.243809][ T10] usb 1-1: SerialNumber: syz [ 638.262171][ T10] usb 1-1: config 0 descriptor?? [ 638.326313][T12494] syz.1.1805: attempt to access beyond end of device [ 638.326313][T12494] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 638.340622][T12494] efs: cannot read volume header [ 638.396700][ T8521] usb 4-1: device descriptor read/all, error -61 [ 638.481473][ T8518] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 638.590472][ T8521] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 638.730669][ T8518] usb 3-1: Using ep0 maxpacket: 16 [ 638.817975][ T8518] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 638.842100][ T8518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.979549][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 639.000161][ T8521] usb 4-1: device descriptor read/64, error -71 [ 639.007087][ T8518] usb 3-1: config 0 has no interface number 0 [ 639.025840][ T8518] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 639.037432][ T10] usb 1-1: USB disconnect, device number 82 [ 639.037611][ C1] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 639.043591][ T8518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.072488][ T8518] usb 3-1: Product: syz [ 639.076876][ T8518] usb 3-1: Manufacturer: syz [ 639.083099][ T8518] usb 3-1: SerialNumber: syz [ 639.094445][ T8518] usb 3-1: config 0 descriptor?? [ 639.116331][ T8521] usb usb4-port1: attempt power cycle [ 639.128126][ T8518] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 639.139778][ T8518] usb 3-1: No valid video chain found. [ 639.227975][T12504] netlink: 'syz.4.1810': attribute type 10 has an invalid length. [ 639.236753][T12504] syz_tun: entered promiscuous mode [ 639.258773][T12504] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 639.348719][ T8518] usb 3-1: USB disconnect, device number 69 [ 639.400839][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 639.501813][ T8521] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 639.642537][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 639.741771][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 639.851711][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 639.862284][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.910304][ T9] usb 2-1: Product: syz [ 639.921017][ T9] usb 2-1: Manufacturer: syz [ 639.925774][ T9] usb 2-1: SerialNumber: syz [ 639.962442][ T9] usb 2-1: config 0 descriptor?? [ 639.969230][T12502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 639.984360][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 640.370317][ T5955] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 640.396479][ T9] usb 2-1: USB disconnect, device number 68 [ 640.403313][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 640.425630][ T8521] usb 4-1: device descriptor read/8, error -71 [ 641.319366][T12531] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 641.329829][T12529] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 641.377319][ T5956] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 641.504046][T12531] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 641.664578][ T5955] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 642.261062][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.270296][ T5955] usb 3-1: Product: syz [ 642.274521][ T5955] usb 3-1: Manufacturer: syz [ 642.279607][ T5955] usb 3-1: SerialNumber: syz [ 642.297264][ T5955] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 642.315265][ T8528] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 642.422987][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.444010][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.461885][ T5956] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 642.471612][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 642.479715][ T5956] usb 5-1: SerialNumber: syz [ 642.637021][T12545] program syz.3.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.732730][ T8521] usb 3-1: USB disconnect, device number 70 [ 642.798016][T12550] syz.1.1819: attempt to access beyond end of device [ 642.798016][T12550] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 642.811391][T12550] efs: cannot read volume header [ 643.395638][ T8528] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 643.407530][ T8528] ath9k_htc: Failed to initialize the device [ 643.463718][ T8521] usb 3-1: ath9k_htc: USB layer deinitialized [ 644.054412][ T5956] usb 5-1: 0:2 : does not exist [ 644.069609][ T5956] usb 5-1: unit 5 not found! [ 644.094884][T12556] netlink: 'syz.0.1822': attribute type 39 has an invalid length. [ 644.132493][ T5956] usb 5-1: USB disconnect, device number 74 [ 644.175541][T12556] veth0_macvtap: left promiscuous mode [ 644.280126][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 644.434866][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.456211][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.479231][ T9] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 644.489565][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.514694][ T9] usb 2-1: config 0 descriptor?? [ 644.570706][ T8521] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 644.700299][ T8521] usb 3-1: device descriptor read/64, error -71 [ 644.720192][ T5956] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 644.860274][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.870283][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 644.879207][ T5956] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 644.888516][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.899759][ T5956] usb 4-1: config 0 descriptor?? [ 644.938394][ T9] hkems 0003:2006:0118.0023: unbalanced delimiter at end of report description [ 644.949875][ T8521] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 644.962098][ T9] hkems 0003:2006:0118.0023: parse failed [ 644.969362][ T9] hkems 0003:2006:0118.0023: probe with driver hkems failed with error -22 [ 645.093250][ T8521] usb 3-1: device descriptor read/64, error -71 [ 645.139158][ T8528] usb 2-1: USB disconnect, device number 69 [ 645.210271][ T8521] usb usb3-port1: attempt power cycle [ 645.395868][ T5956] konepure 0003:1E7D:2DBE.0024: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 645.686158][ T8521] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 645.692646][ T5956] usb 4-1: USB disconnect, device number 61 [ 645.774749][ T8521] usb 3-1: device descriptor read/8, error -71 [ 645.937715][T12581] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 646.133173][ T8521] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 646.236163][ T8521] usb 3-1: device descriptor read/8, error -71 [ 648.070614][ T8521] usb usb3-port1: unable to enumerate USB device [ 648.089507][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 648.089524][ T30] audit: type=1326 audit(1754262658.926:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.347287][ T30] audit: type=1326 audit(1754262658.926:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.368924][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.376044][ T30] audit: type=1326 audit(1754262658.926:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.405614][ T30] audit: type=1326 audit(1754262658.926:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.428424][ T30] audit: type=1326 audit(1754262658.926:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.451844][ T30] audit: type=1326 audit(1754262658.926:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.473867][ T30] audit: type=1326 audit(1754262658.926:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.546573][ T30] audit: type=1326 audit(1754262658.926:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.568287][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.579945][ T30] audit: type=1326 audit(1754262658.926:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 648.601494][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.562955][ T30] audit: type=1326 audit(1754262658.926:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12588 comm="syz.3.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5938eb69 code=0x7ffc0000 [ 649.584567][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.620512][ T5956] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 650.934346][ T5955] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 650.970574][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 650.990261][ T8528] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 651.196778][ T5955] usb 3-1: no configurations [ 651.228188][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 651.253303][ T5955] usb 3-1: can't read configurations, error -22 [ 651.290141][ T5956] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 651.309279][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.372977][ T8528] usb 5-1: Using ep0 maxpacket: 8 [ 651.384971][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 651.394011][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 651.412790][ T5956] usb 4-1: config 0 descriptor?? [ 651.420543][ T5955] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 651.433587][ T8528] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e [ 651.445784][ T8528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.454179][ T8528] usb 5-1: Product: syz [ 651.458426][ T8528] usb 5-1: Manufacturer: syz [ 651.463160][ T8528] usb 5-1: SerialNumber: syz [ 651.474075][ T8528] usb 5-1: config 0 descriptor?? [ 651.590941][ T5955] usb 3-1: no configurations [ 651.596002][ T5955] usb 3-1: can't read configurations, error -22 [ 651.602753][ T5955] usb usb3-port1: attempt power cycle [ 651.650279][ T8518] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 651.685961][ T8528] usb 5-1: USB disconnect, device number 75 [ 651.810242][ T8518] usb 1-1: Using ep0 maxpacket: 32 [ 651.822053][ T8518] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 651.833479][ T8518] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.842292][ T5956] corsair 0003:1B1C:1B09.0025: unbalanced delimiter at end of report description [ 651.855833][ T8518] usb 1-1: config 1 interface 0 has no altsetting 0 [ 651.865883][ T8518] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.40 [ 651.868092][ T5956] corsair 0003:1B1C:1B09.0025: parse failed [ 651.875387][ T8518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.884159][ T5956] corsair 0003:1B1C:1B09.0025: probe with driver corsair failed with error -22 [ 651.890618][ T8518] usb 1-1: Product: 俢 [ 651.903591][ T8518] usb 1-1: Manufacturer: 淃ꐫ背汻Ὶ륛껕碹♺齨䕾兜诊錍㓾槖שׂ윲㯲歲ﴦ֚쮬윗笯歸☠䄬箞ⴤ鍒䱪鯤踛祥퓅篔找컏﬊ᴛ吖흚Ზ橿㯖ॣ梬酨ၰ䪈䯌崈ꑍ휦䵻㛻쵚⒫ၼ꫏͂좴竫泰 [ 651.927024][ T8518] usb 1-1: SerialNumber: ь [ 651.960195][ T5955] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 651.982332][ T5955] usb 3-1: no configurations [ 651.987250][ T5955] usb 3-1: can't read configurations, error -22 [ 652.236599][ T8518] usbhid 1-1:1.0: can't add hid device: -71 [ 652.243143][ T8518] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 652.255997][ T8518] usb 1-1: USB disconnect, device number 83 [ 652.273499][ T5955] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 652.951734][ T5955] usb 3-1: no configurations [ 652.956422][ T5955] usb 3-1: can't read configurations, error -22 [ 652.963849][T12630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1846'. [ 652.973394][T12630] unsupported nlmsg_type 40 [ 652.980662][ T5955] usb usb3-port1: unable to enumerate USB device [ 653.560487][ T8521] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 653.722528][ T8521] usb 5-1: device descriptor read/64, error -71 [ 654.218339][ T5955] usb 4-1: USB disconnect, device number 62 [ 654.275311][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 654.310225][ T8521] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 654.343987][T12665] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 654.355481][T12665] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1856'. [ 654.450161][ T8521] usb 5-1: device descriptor read/64, error -71 [ 654.471680][T12672] program syz.3.1858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.654815][ T8521] usb usb5-port1: attempt power cycle [ 655.409057][T12681] block device autoloading is deprecated and will be removed. [ 655.416971][T12681] syz.2.1859: attempt to access beyond end of device [ 655.416971][T12681] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 655.429842][T12681] FAT-fs (loop5): unable to read boot sector [ 655.518854][ T8521] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 655.581203][ T8521] usb 5-1: device descriptor read/8, error -71 [ 655.902048][ T8521] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 655.942448][ T8521] usb 5-1: device descriptor read/8, error -71 [ 655.957613][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.968931][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.004497][T12700] pimreg: entered allmulticast mode [ 656.070739][ T8521] usb usb5-port1: unable to enumerate USB device [ 656.409545][T12712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 657.050214][ T5956] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 657.114058][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1870'. [ 657.126244][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1870'. [ 657.221717][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 657.240191][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 657.262522][ T5956] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 657.271892][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.291760][ T8521] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 657.310276][ T5956] usb 3-1: config 0 descriptor?? [ 657.383949][ T8518] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 657.450245][ T8521] usb 1-1: Using ep0 maxpacket: 8 [ 657.459134][ T8521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 657.496316][ T8521] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 657.507855][ T8521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.525661][ T8521] usb 1-1: config 0 descriptor?? [ 657.550476][ T8518] usb 5-1: Using ep0 maxpacket: 16 [ 657.563206][ T8518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.575023][ T8518] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 657.585632][ T8518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.601291][ T8518] usb 5-1: config 0 descriptor?? [ 657.651522][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 657.727569][ T5956] corsair 0003:1B1C:1B09.0026: unbalanced delimiter at end of report description [ 657.747980][ T5956] corsair 0003:1B1C:1B09.0026: parse failed [ 657.754916][ T5956] corsair 0003:1B1C:1B09.0026: probe with driver corsair failed with error -22 [ 657.825981][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.843633][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 657.858877][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.870753][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 657.879141][ T9] usb 4-1: SerialNumber: syz [ 657.892533][ T9] cdc_ether 4-1:1.0: skipping garbage [ 657.898184][ T9] cdc_ether 4-1:1.0: skipping garbage [ 657.905467][ T9] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 657.913518][ T9] usb 4-1: bad CDC descriptors [ 657.957163][ T8521] corsair 0003:1B1C:1B09.0027: unbalanced delimiter at end of report description [ 657.969648][ T8521] corsair 0003:1B1C:1B09.0027: parse failed [ 657.978083][ T8521] corsair 0003:1B1C:1B09.0027: probe with driver corsair failed with error -22 [ 658.135545][T12718] tipc: Started in network mode [ 658.143086][T12718] tipc: Node identity 4a32e4509a94, cluster identity 4711 [ 658.215206][T12720] FAULT_INJECTION: forcing a failure. [ 658.215206][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.229359][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.2.1868 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 658.229401][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 658.229416][T12720] Call Trace: [ 658.229425][T12720] [ 658.229435][T12720] dump_stack_lvl+0x189/0x250 [ 658.229467][T12720] ? __pfx____ratelimit+0x10/0x10 [ 658.229491][T12720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.229516][T12720] ? __pfx__printk+0x10/0x10 [ 658.229545][T12720] ? __might_fault+0xb0/0x130 [ 658.229580][T12720] should_fail_ex+0x414/0x560 [ 658.229610][T12720] _copy_from_user+0x2d/0xb0 [ 658.229642][T12720] __sys_bpf+0x1ed/0x860 [ 658.229677][T12720] ? __pfx___sys_bpf+0x10/0x10 [ 658.229726][T12720] ? ksys_write+0x22a/0x250 [ 658.229750][T12720] ? __pfx_ksys_write+0x10/0x10 [ 658.229780][T12720] __x64_sys_bpf+0x7c/0x90 [ 658.229810][T12720] do_syscall_64+0xfa/0x3b0 [ 658.229837][T12720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.229859][T12720] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 658.229881][T12720] ? clear_bhb_loop+0x60/0xb0 [ 658.229908][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.229929][T12720] RIP: 0033:0x7f28d6b8eb69 [ 658.229949][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.229969][T12720] RSP: 002b:00007f28d79c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.229993][T12720] RAX: ffffffffffffffda RBX: 00007f28d6db6160 RCX: 00007f28d6b8eb69 [ 658.230013][T12720] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 658.230027][T12720] RBP: 00007f28d79c2090 R08: 0000000000000000 R09: 0000000000000000 [ 658.230041][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.230053][T12720] R13: 0000000000000000 R14: 00007f28d6db6160 R15: 00007ffc13b51f28 [ 658.230087][T12720] [ 658.583248][T12718] tipc: Enabled bearer , priority 0 [ 658.592717][T12724] syzkaller0: entered promiscuous mode [ 658.598266][T12724] syzkaller0: entered allmulticast mode [ 658.712689][T12718] tipc: Resetting bearer [ 658.917703][ T5956] usb 3-1: USB disconnect, device number 79 [ 659.107717][T12717] tipc: Resetting bearer [ 659.207381][T12717] tipc: Disabling bearer [ 659.374346][ T8521] usb 4-1: USB disconnect, device number 63 [ 659.843490][ T8518] usbhid 5-1:0.0: can't add hid device: -71 [ 659.858594][ T8518] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.871895][ T8518] usb 5-1: USB disconnect, device number 80 [ 659.899788][T12735] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 659.940320][ T5956] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 659.958197][T12735] bond3: entered promiscuous mode [ 659.964305][T12735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 659.995604][T12737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.007543][T12737] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 660.018088][T12737] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 660.500479][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 660.516158][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.531470][T12737] bond3: (slave vcan1): making interface the new active one [ 660.542133][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.547392][T12737] vcan1: entered promiscuous mode [ 660.556907][ T5956] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 660.562792][T12737] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 660.567553][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.597169][ T5956] usb 2-1: config 0 descriptor?? [ 660.698015][ T8528] usb 1-1: USB disconnect, device number 84 [ 660.838267][T12743] input: syz1 as /devices/virtual/input/input48 [ 660.981619][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.991378][T12753] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1878'. [ 661.200797][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.208707][ T5956] usbhid 2-1:0.0: can't add hid device: -71 [ 661.217931][ T8528] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 661.226683][ T5956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 661.245483][ T5956] usb 2-1: USB disconnect, device number 70 [ 661.303600][T12760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 661.418054][ T8528] usb 1-1: Using ep0 maxpacket: 16 [ 661.842122][ T8528] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 661.862379][ T8528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.884395][ T8528] usb 1-1: Product: syz [ 661.896537][ T8528] usb 1-1: Manufacturer: syz [ 661.904881][ T5919] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 661.923081][ T8528] usb 1-1: SerialNumber: syz [ 661.936622][ T8528] usb 1-1: config 0 descriptor?? [ 661.971937][ T8528] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 662.342409][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 662.414776][ T8528] gspca_sn9c2028: read1 error -71 [ 662.524953][ T8528] gspca_sn9c2028: read1 error -71 [ 662.595363][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 662.611910][ T8528] gspca_sn9c2028: read1 error -71 [ 662.623548][ T8528] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 662.642299][ T5919] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 662.660274][ T8528] usb 1-1: USB disconnect, device number 85 [ 662.672957][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.689463][ T5919] usb 4-1: config 0 descriptor?? [ 662.824295][T12761] delete_channel: no stack [ 663.023379][ T9] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 243 sec [ 663.128459][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 663.128478][ T30] audit: type=1800 audit(1754262673.966:271): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.4.1887" name="/newroot/365/file0" dev="tmpfs" ino=1952 res=0 errno=0 [ 663.207247][ T5919] corsair 0003:1B1C:1B09.0028: unbalanced delimiter at end of report description [ 663.220081][ T5919] corsair 0003:1B1C:1B09.0028: parse failed [ 663.226275][ T5919] corsair 0003:1B1C:1B09.0028: probe with driver corsair failed with error -22 [ 663.229059][T12781] input: syz0 as /devices/virtual/input/input49 [ 663.440186][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 663.540843][ T8518] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 663.600862][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 663.612171][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 664.241165][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 664.250446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.267821][ T9] usb 1-1: config 0 descriptor?? [ 664.321184][ T8518] usb 3-1: Using ep0 maxpacket: 32 [ 664.363242][ T8518] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 664.394171][ T8518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.516208][ T8518] usb 3-1: config 0 descriptor?? [ 664.726165][ T8518] gspca_main: sq930x-2.14.0 probing 041e:403c [ 664.801852][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 664.888548][T12805] vxcan3: entered allmulticast mode [ 665.544125][ T5919] usb 4-1: USB disconnect, device number 64 [ 665.761891][ T9] corsair 0003:1B1C:1B09.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input0 [ 666.478872][T12813] xt_TPROXY: Can be used only with -p tcp or -p udp [ 667.670898][ T8518] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 667.676958][ T8518] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 667.687903][ T8518] usb 3-1: USB disconnect, device number 80 [ 668.375040][ T8537] usb 1-1: USB disconnect, device number 86 [ 669.750107][ T5919] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 669.933476][T12818] input: syz1 as /devices/virtual/input/input50 [ 670.130424][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 670.158712][ T5919] usb 3-1: config 0 has an invalid descriptor of length 180, skipping remainder of the config [ 670.180975][ T5919] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 670.203436][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 670.234000][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 670.256874][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.342508][ T5919] usb 3-1: config 0 descriptor?? [ 670.635474][ T5919] usb 3-1: string descriptor 0 read error: -71 [ 670.647114][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 670.657871][ T5192] bcm5974 3-1:0.0: could not read from device [ 670.672921][ T5919] usb 3-1: USB disconnect, device number 81 [ 670.679532][ T5192] bcm5974 3-1:0.0: could not read from device [ 670.870549][ T8521] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 671.159498][T12852] syz.0.1904: attempt to access beyond end of device [ 671.159498][T12852] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 671.173179][T12852] efs: cannot read volume header [ 671.183157][ T8521] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 671.192287][ T8521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.201212][ T8521] usb 2-1: Product: syz [ 671.205601][ T8521] usb 2-1: Manufacturer: syz [ 671.210419][ T8521] usb 2-1: SerialNumber: syz [ 671.248225][T12859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 671.990180][ T5919] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 672.023830][ T8521] pwc: Visionite VCS-UC300 USB webcam detected. [ 672.039195][ T8521] pwc: Failed to set LED on/off time (-71) [ 672.047043][ T8521] pwc: send_video_command error -71 [ 672.055434][ T8521] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 672.064069][ T8521] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71 [ 672.078877][ T8521] usb 2-1: USB disconnect, device number 71 [ 672.272599][ T5919] usb 4-1: device descriptor read/64, error -71 [ 672.460762][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 672.524392][ T5919] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 672.567120][T12876] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 672.631851][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.650124][ T9] usb 5-1: config 1 has no interface number 0 [ 672.656293][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.669152][ T9] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 672.680237][ T9] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 672.692040][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 672.692924][ T5919] usb 4-1: device descriptor read/64, error -71 [ 672.714923][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.740248][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.748294][ T9] usb 5-1: Product: syz [ 672.758097][ T9] usb 5-1: Manufacturer: syz [ 672.763976][ T9] usb 5-1: SerialNumber: syz [ 672.840370][ T5919] usb usb4-port1: attempt power cycle [ 673.160631][ T8518] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 673.190119][ T5919] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 673.212609][ T5919] usb 4-1: device descriptor read/8, error -71 [ 673.370341][ T8518] usb 2-1: Using ep0 maxpacket: 32 [ 673.422082][ T8518] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 673.433013][ T8518] usb 2-1: config 0 has no interface number 0 [ 673.440267][ T8518] usb 2-1: config 0 interface 169 has no altsetting 0 [ 673.454112][ T8518] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 673.465114][ T8518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.474690][ T8518] usb 2-1: Product: syz [ 673.474732][ T5919] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 673.479586][ T8518] usb 2-1: Manufacturer: syz [ 673.494847][ T8518] usb 2-1: SerialNumber: syz [ 673.504910][ T8518] usb 2-1: config 0 descriptor?? [ 673.535719][ T8518] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.569187][ T5919] usb 4-1: device descriptor read/8, error -71 [ 673.601258][ T9] cdc_ncm 5-1:1.1: bind() failure [ 673.728022][ T9] usb 2-1: USB disconnect, device number 72 [ 673.730701][ T5919] usb usb4-port1: unable to enumerate USB device [ 673.808896][ T5919] usb 5-1: USB disconnect, device number 81 [ 674.306916][T12902] netlink: 'syz.0.1917': attribute type 10 has an invalid length. [ 674.317485][T12902] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 674.381777][T12907] vivid-000: ================= START STATUS ================= [ 674.413267][T12907] vivid-000: Test Pattern: 75% Colorbar [ 674.419276][T12907] vivid-000: Fill Percentage of Frame: 100 [ 674.425485][T12907] vivid-000: Horizontal Movement: No Movement [ 674.432190][T12907] vivid-000: Vertical Movement: No Movement [ 674.442391][T12907] vivid-000: OSD Text Mode: All [ 674.447314][T12907] vivid-000: Show Border: false [ 674.456539][T12907] vivid-000: Show Square: true [ 674.541292][T12907] vivid-000: Sensor Flipped Horizontally: false [ 674.548069][T12907] vivid-000: Sensor Flipped Vertically: false [ 674.554320][T12907] vivid-000: Insert SAV Code in Image: false [ 674.560980][T12907] vivid-000: Insert EAV Code in Image: false [ 674.567246][T12907] vivid-000: Insert Video Guard Band: false [ 674.587490][T12907] vivid-000: Reduced Framerate: false [ 674.593682][T12907] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 674.606058][T12907] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 674.615395][T12907] vivid-000: Enable Capture Cropping: true [ 674.615968][T12908] syzkaller1: entered promiscuous mode [ 674.622323][T12907] vivid-000: Enable Capture Composing: [ 674.681896][T12911] syz.3.1918: attempt to access beyond end of device [ 674.681896][T12911] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 674.700824][T12911] efs: cannot read volume header [ 674.773178][T12908] syzkaller1: entered allmulticast mode [ 675.210850][T12908] veth1: entered promiscuous mode [ 675.211984][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 675.239907][T12907] true [ 675.243000][T12907] vivid-000: Enable Capture Scaler: true [ 675.249882][T12907] vivid-000: Timestamp Source: End of Frame [ 675.256734][T12907] vivid-000: Colorspace: sRGB [ 675.281084][T12907] vivid-000: Transfer Function: Default [ 675.299347][T12907] vivid-000: Y'CbCr Encoding: Default [ 675.313215][T12907] vivid-000: HSV Encoding: Hue 0-179 [ 675.329368][T12907] vivid-000: Quantization: Default [ 675.343684][T12907] vivid-000: Apply Alpha To Red Only: false [ 675.354810][T12907] vivid-000: Standard Aspect Ratio: 4x3 [ 675.374668][T12907] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 675.384619][T12907] vivid-000: DV Timings: 640x480p59 inactive [ 675.394151][T12907] vivid-000: DV Timings Aspect Ratio: 14x9 [ 675.405116][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.429286][T12907] vivid-000: Maximum EDID Blocks: 2 [ 675.446754][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.464587][T12907] vivid-000: Limited RGB Range (16-235): false [ 675.489945][T12907] vivid-000: Rx RGB Quantization Range: Automatic [ 675.499564][T12907] vivid-000: Power Present: 0x00000001 [ 675.506035][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 675.520682][ T8521] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 675.529910][T12907] tpg source WxH: 320x180 (R'G'B) [ 675.543348][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 675.554353][T12907] tpg field: 1 [ 675.557972][T12907] tpg crop: (0,0)/320x180 [ 675.562596][ T9] usb 1-1: SerialNumber: syz [ 675.585378][T12907] tpg compose: (0,0)/320x180 [ 675.600268][T12907] tpg colorspace: 5 [ 675.604247][T12907] tpg transfer function: 0/1 [ 675.608918][T12907] tpg quantization: 0/2 [ 675.679600][T12923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.695500][ T8521] usb 3-1: Using ep0 maxpacket: 8 [ 676.133983][T12907] tpg RGB range: 0/2 [ 676.138132][ T8521] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 676.159180][T12907] vivid-000: ================== END STATUS ================== [ 676.168204][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 676.183965][ T8521] usb 3-1: config 0 has no interface number 0 [ 676.212440][ T8521] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 676.262393][ T8521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.329627][ T8521] usb 3-1: Product: syz [ 676.329700][ T8521] usb 3-1: Manufacturer: syz [ 676.329755][ T8521] usb 3-1: SerialNumber: syz [ 676.440236][ T8521] usb 3-1: config 0 descriptor?? [ 676.775446][ T10] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 676.986474][ T8521] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 677.032948][ T8521] usb 3-1: No valid video chain found. [ 677.066251][ T10] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 677.128818][ T10] usb 2-1: config 0 has no interface number 0 [ 677.141053][ T8521] usb 3-1: USB disconnect, device number 82 [ 677.187149][ T10] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 677.215516][ T9] usb 1-1: 0:2 : does not exist [ 677.224197][ T9] usb 1-1: unit 48 not found! [ 677.247307][ T9] usb 1-1: USB disconnect, device number 87 [ 677.267473][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 677.323115][ T10] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 677.399792][ T10] usb 2-1: Product: syz [ 677.446173][ T10] usb 2-1: Manufacturer: syz [ 677.481640][ T10] usb 2-1: SerialNumber: syz [ 677.719393][ T10] usb 2-1: config 0 descriptor?? [ 677.768680][T12927] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 677.834122][ T10] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 677.891161][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 677.986064][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 678.092045][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 678.233835][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 678.300514][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 678.362581][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 678.526491][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 678.731243][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 678.934224][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 679.058921][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 679.336377][ T5919] usb 2-1: USB disconnect, device number 73 [ 679.379584][T12935] netlink: 'syz.4.1924': attribute type 10 has an invalid length. [ 679.518027][T12935] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 680.013893][ T5919] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 680.029295][ T5919] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 680.118672][ T5919] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 680.328959][ T5919] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 680.420176][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 680.580785][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 680.583891][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.600427][ T9] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 680.600512][ T9] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 680.600581][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 680.600651][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.603683][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.650759][ T5919] keyspan 2-1:0.107: device disconnected [ 681.140246][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.158487][ T9] usb 1-1: Product: syz [ 681.174522][ T9] usb 1-1: Manufacturer: syz [ 681.179325][ T9] usb 1-1: SerialNumber: syz [ 681.192547][ T5919] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 681.342083][T12966] tmpfs: Unknown parameter '`uge' [ 681.409543][ T9] usb 1-1: 0:2 : does not exist [ 681.458586][ T9] usb 1-1: USB disconnect, device number 89 [ 681.521337][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 681.537179][ T5919] usb 2-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 681.548644][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.644705][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.648083][T12975] No such timeout policy "syz0" [ 681.657436][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.667640][ T5919] usb 2-1: Product: syz [ 681.693862][ T8521] IPVS: starting estimator thread 0... [ 681.702770][ T5919] usb 2-1: Manufacturer: syz [ 681.733894][ T5919] usb 2-1: SerialNumber: syz [ 681.800458][T12976] IPVS: using max 23 ests per chain, 55200 per kthread [ 682.261041][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 682.290884][T12960] veth0_to_bond: entered allmulticast mode [ 682.320854][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 682.395484][ T5919] usb 2-1: 0:2 : does not exist [ 682.409426][ T5919] usb 2-1: unit 9 not found! [ 682.618959][T12990] program syz.4.1942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.651761][ T5919] usb 2-1: USB disconnect, device number 74 [ 682.670141][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 682.993770][T12997] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.965764][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.990079][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.010260][ T5956] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 684.011551][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 684.029169][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 684.038450][ T9] usb 4-1: SerialNumber: syz [ 684.360099][ T8528] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 684.363956][ T9] usb 4-1: 0:2 : does not exist [ 684.379475][ T9] usb 4-1: USB disconnect, device number 69 [ 684.390129][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 684.397053][ T5956] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 684.409543][ T5956] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 684.419006][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 684.427255][ T5956] usb 3-1: Product: syz [ 684.431657][ T5919] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 684.439897][ T5956] usb 3-1: Manufacturer: syz [ 684.446206][ T5956] usb 3-1: SerialNumber: syz [ 684.453254][ T5956] usb 3-1: config 0 descriptor?? [ 684.459019][T13005] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 684.513278][ T8528] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 684.521846][ T8528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.533675][ T8528] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 684.542926][ T8528] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 684.551684][ T8528] usb 2-1: Manufacturer: syz [ 684.558406][ T8528] usb 2-1: config 0 descriptor?? [ 684.580120][ T8537] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 684.613234][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 684.620511][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.632182][ T8528] rc_core: IR keymap rc-hauppauge not found [ 684.638579][ T8528] Registered IR keymap rc-empty [ 684.643546][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 684.654540][ T8528] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 684.669246][ T5919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 684.680156][ T8528] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 684.692256][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.694755][ T8521] usb 3-1: USB disconnect, device number 83 [ 684.701925][ T5919] usb 5-1: Product: syz [ 684.714776][ T5919] usb 5-1: Manufacturer: syz [ 684.719485][ T5919] usb 5-1: SerialNumber: syz [ 684.750134][ T8537] usb 1-1: Using ep0 maxpacket: 8 [ 684.758192][ T8537] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 684.771285][ T8537] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 684.781111][ T8537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.791443][ T8537] usb 1-1: config 0 descriptor?? [ 684.946302][ T5919] usb 5-1: 0:2 : does not exist [ 684.964318][ T5919] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 684.979792][T13024] netlink: 'syz.2.1944': attribute type 10 has an invalid length. [ 684.982985][T13012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.004466][T13012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.015356][T13024] macvlan0: entered promiscuous mode [ 685.020923][ T5919] usb 5-1: USB disconnect, device number 82 [ 685.028965][T13024] macvlan0: entered allmulticast mode [ 685.070858][T13024] veth1_vlan: entered allmulticast mode [ 685.085887][T13021] rc rc0: two consecutive events of type space [ 685.098778][T13024] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 685.112623][T13012] dummy0: mtu less than device minimum [ 685.190196][ T5956] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 685.222828][ T8537] corsair 0003:1B1C:1B09.002A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input0 [ 685.295153][ T8537] usb 2-1: USB disconnect, device number 75 [ 685.320122][ T5956] usb 4-1: device descriptor read/64, error -71 [ 685.670167][ T5956] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 685.830940][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.837891][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.410138][ T5956] usb 4-1: device descriptor read/64, error -71 [ 686.557802][ T5956] usb usb4-port1: attempt power cycle [ 687.525481][ T8537] usb 1-1: USB disconnect, device number 90 [ 687.670763][ T5956] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 687.720838][ T5956] usb 4-1: device descriptor read/8, error -71 [ 687.723721][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 687.845989][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 687.859707][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 687.984856][ T5956] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 688.000816][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 688.040526][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.092799][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.093624][ T5956] usb 4-1: device descriptor read/8, error -71 [ 688.183580][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 688.219608][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 688.244165][ T9] usb 2-1: can't read configurations, error -71 [ 688.287327][ T5956] usb usb4-port1: unable to enumerate USB device [ 689.675124][T13080] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1964'. [ 689.724764][T13081] input: syz1 as /devices/virtual/input/input53 [ 689.820736][T13080] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1964'. [ 690.273016][T13095] usb usb8: usbfs: process 13095 (syz.0.1968) did not claim interface 0 before use [ 691.160608][T13112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 691.910928][ T8521] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 692.421165][ T8521] usb 2-1: device descriptor read/64, error -71 [ 693.560818][ T8521] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 694.260173][ T8521] usb 2-1: device descriptor read/64, error -71 [ 694.635965][ T8521] usb usb2-port1: attempt power cycle [ 695.887738][T13138] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 696.470910][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'. [ 696.513798][T13143] gretap0: entered promiscuous mode [ 696.522539][T13143] gretap0: left promiscuous mode [ 696.729566][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1984'. [ 696.783876][T13155] qnx6: unable to read the first superblock [ 697.066517][T13166] fuse: Unknown parameter '' [ 697.327302][T13174] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (das16m1) [ 697.340706][ T5956] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 697.514327][ T5956] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 697.531415][ T5956] usb 2-1: config 0 has no interface number 0 [ 697.569321][ T5956] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 697.605960][ T5956] usb 2-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.645397][ T5956] usb 2-1: config 0 interface 216 has no altsetting 0 [ 697.661347][ T5956] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 697.673834][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.743807][ T5956] usb 2-1: config 0 descriptor?? [ 697.769078][T13166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 697.805335][ T5956] usb 2-1: NFC: intf ffff888031733000 id ffffffff8eb3fac0 [ 698.886847][T13187] binder: 13183:13187 ioctl c0306201 200000000280 returned -14 [ 698.952247][T13185] binder: BINDER_SET_CONTEXT_MGR already set [ 698.963885][T13185] binder: 13183:13185 ioctl 4018620d 2000000000c0 returned -16 [ 699.164572][T13189] netlink: 'syz.4.1995': attribute type 1 has an invalid length. [ 699.696702][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 699.768915][T13189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.850112][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 699.857738][ T10] usb 5-1: config 7 has an invalid interface number: 46 but max is 0 [ 699.873114][ T10] usb 5-1: config 7 has no interface number 0 [ 699.879587][ T10] usb 5-1: config 7 interface 46 has no altsetting 0 [ 699.893854][ T10] usb 5-1: New USB device found, idVendor=9fdb, idProduct=cfba, bcdDevice=f1.37 [ 699.904791][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.913530][ T10] usb 5-1: Product: syz [ 699.919096][ T10] usb 5-1: Manufacturer: syz [ 699.924564][ T10] usb 5-1: SerialNumber: syz [ 700.010804][ T8521] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 700.066406][ T5919] usb 2-1: USB disconnect, device number 81 [ 700.220181][ T5956] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 700.300360][ T10] usb 5-1: USB disconnect, device number 83 [ 700.311448][ T8521] usb 1-1: Using ep0 maxpacket: 8 [ 700.322895][ T8521] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 700.337177][ T8521] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 700.354226][ T8521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.002708][ T8521] usb 1-1: config 0 descriptor?? [ 701.125755][ T5956] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 701.135265][ T5956] usb 4-1: config 0 has no interface number 0 [ 701.147667][ T5956] usb 4-1: config 0 interface 252 has no altsetting 0 [ 701.156927][ T5956] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=2a.0f [ 701.170372][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.178597][ T5956] usb 4-1: Product: syz [ 701.200064][ T5956] usb 4-1: Manufacturer: syz [ 701.204785][ T5956] usb 4-1: SerialNumber: syz [ 701.217104][ T5956] usb 4-1: config 0 descriptor?? [ 701.229107][ T5956] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 701.257339][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 701.274413][ T5956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 701.298385][ T5956] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) error while loading driver (-19) [ 701.329110][ T5956] dvb_usb_cxusb 4-1:0.252: probe with driver dvb_usb_cxusb failed with error -22 [ 701.390768][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 701.427915][ T8521] corsair 0003:1B1C:1B09.002B: unbalanced delimiter at end of report description [ 701.441618][ T5956] usb 4-1: USB disconnect, device number 74 [ 701.461122][ T8521] corsair 0003:1B1C:1B09.002B: parse failed [ 701.467582][ T8521] corsair 0003:1B1C:1B09.002B: probe with driver corsair failed with error -22 [ 701.490647][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2003'. [ 701.540978][ T9] usb 3-1: device descriptor read/64, error -71 [ 701.780790][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 702.532187][ T9] usb 3-1: device descriptor read/64, error -71 [ 702.610300][ T8521] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 702.640704][ T9] usb usb3-port1: attempt power cycle [ 702.726259][T13246] lo: entered allmulticast mode [ 703.209558][ T8521] usb 5-1: Using ep0 maxpacket: 32 [ 703.217917][ T8521] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 703.227026][ T8521] usb 5-1: config 0 has no interface number 0 [ 703.233338][ T8521] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 703.247244][ T8521] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 1033, setting to 1024 [ 703.259373][ T8521] usb 5-1: config 0 interface 85 has no altsetting 0 [ 703.266432][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 703.276430][ T8521] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 703.286409][T13250] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 703.290507][ T8521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.302175][ T8521] usb 5-1: Product: syz [ 703.302381][ T9] usb 3-1: device descriptor read/8, error -71 [ 703.313435][ T8521] usb 5-1: Manufacturer: syz [ 703.314013][T13250] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 703.318052][ T8521] usb 5-1: SerialNumber: syz [ 703.341843][ T8521] usb 5-1: config 0 descriptor?? [ 703.347793][T13230] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 703.433309][T13238] lo: left allmulticast mode [ 703.558084][T13230] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2005'. [ 703.581214][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 703.593555][T13230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.620709][ T9] usb 3-1: device descriptor read/8, error -71 [ 703.675111][ T8537] usb 1-1: USB disconnect, device number 91 [ 703.688146][T10412] Bluetooth: hci5: Frame reassembly failed (-84) [ 703.820994][ T9] usb usb3-port1: unable to enumerate USB device [ 705.070304][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 705.155862][ T8521] appletouch 5-1:0.85: Failed to read mode from device. [ 705.164411][ T8521] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 705.181865][ T8521] usb 5-1: USB disconnect, device number 84 [ 705.235842][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 705.251367][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 705.266496][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 705.279651][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 705.294520][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.306743][ T9] usb 1-1: config 0 descriptor?? [ 705.320735][ T5919] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 705.327432][ T9] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 705.500459][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 705.515278][ T5919] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 705.527908][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.535348][ T8521] usb 1-1: USB disconnect, device number 92 [ 705.536126][ T5919] usb 2-1: Product: syz [ 705.550481][ T5919] usb 2-1: Manufacturer: syz [ 705.557860][ T5919] usb 2-1: SerialNumber: syz [ 705.580093][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 705.581833][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 705.587183][ T5919] usb 2-1: config 0 descriptor?? [ 705.646074][ T5919] gspca_main: sq930x-2.14.0 probing 2770:930c [ 706.149691][T13285] tmpfs: Unknown parameter 'trans' [ 706.275550][T13293] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2023'. [ 706.386126][T13300] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2024'. [ 707.010113][ T5919] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 707.250248][ T5919] gspca_sq930x: Sensor ov9630 not yet treated [ 707.264981][ T5919] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 707.292498][ T5919] usb 2-1: USB disconnect, device number 82 [ 707.471816][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 708.261606][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 709.050108][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 709.109939][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.172758][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 709.202238][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.359964][ T9] usb 4-1: config 0 descriptor?? [ 709.360357][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 709.406659][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.449182][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.487536][ T10] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 709.558276][ T10] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 709.585105][ T10] usb 5-1: Product: syz [ 709.595628][ T10] usb 5-1: Manufacturer: syz [ 709.605314][ T10] usb 5-1: SerialNumber: syz [ 709.621881][ T10] usb 5-1: config 0 descriptor?? [ 709.650613][ T10] usb 5-1: NFC: intf ffff8880274a4000 id ffffffff8eb3fac0 [ 709.667593][ T9] kye 0003:0458:0087.002C: reserved main item tag 0xd [ 709.686339][ T9] kye 0003:0458:0087.002C: unexpected long global item [ 709.698976][ T30] audit: type=1326 audit(1754262720.546:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13357 comm="syz.0.2042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab818eb69 code=0x0 [ 709.701572][ T9] kye 0003:0458:0087.002C: parse failed [ 709.735262][ T9] kye 0003:0458:0087.002C: probe with driver kye failed with error -22 [ 709.828956][ T5919] usb 5-1: USB disconnect, device number 85 [ 710.098892][ T8537] usb 4-1: USB disconnect, device number 75 [ 710.099015][T13372] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 710.136267][T13372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 710.164082][T13372] 9pnet_fd: Insufficient options for proto=fd [ 710.620766][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 710.782645][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 710.817388][ T9] usb 2-1: can't read configurations, error -22 [ 710.985176][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 711.152760][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 711.171685][ T9] usb 2-1: can't read configurations, error -22 [ 711.179355][ T9] usb usb2-port1: attempt power cycle [ 711.410223][ T5919] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 711.550242][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 711.558370][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 711.593542][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 711.597635][ T5919] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 711.615347][ T9] usb 2-1: can't read configurations, error -22 [ 711.623748][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 711.637088][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.657349][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 711.666976][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.686013][T13406] netlink: 'syz.4.2057': attribute type 6 has an invalid length. [ 711.694442][ T5919] usb 1-1: Product: syz [ 711.719551][ T5919] usb 1-1: Manufacturer: syz [ 711.724220][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.748563][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.751733][ T5919] usb 1-1: SerialNumber: syz [ 711.771343][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 711.791384][ T5919] usb 1-1: config 0 descriptor?? [ 711.796494][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.796546][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.844525][ T9] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 711.854042][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.854791][T13407] syz.4.2057 (13407): attempted to duplicate a private mapping with mremap. This is not supported. [ 711.876813][ T9] usb 2-1: can't read configurations, error -22 [ 711.887909][ T30] audit: type=1326 audit(1754262722.736:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.4.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 711.933699][ T9] usb usb2-port1: unable to enumerate USB device [ 711.974778][ T10] usb 4-1: config 0 descriptor?? [ 711.986637][ T30] audit: type=1326 audit(1754262722.736:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.4.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 712.024562][ T30] audit: type=1326 audit(1754262722.756:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.4.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 712.073470][ T30] audit: type=1326 audit(1754262722.916:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.4.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 712.098764][ T30] audit: type=1326 audit(1754262722.916:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13403 comm="syz.4.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 712.177891][T13409] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 712.376464][ T5919] usb 1-1: USB disconnect, device number 93 [ 712.546297][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 712.577712][ T10] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 714.821996][ T5956] usb 4-1: USB disconnect, device number 76 [ 715.316151][T13441] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2063'. [ 715.377833][T13442] syz.3.2063: attempt to access beyond end of device [ 715.377833][T13442] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 715.391865][T13442] hfs: can't find a HFS filesystem on dev nbd3 [ 715.731743][T13439] batadv_slave_1: entered promiscuous mode [ 716.270661][ T5956] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 716.307381][T13438] batadv_slave_1: left promiscuous mode [ 716.400080][ T5956] usb 1-1: device descriptor read/64, error -71 [ 716.452295][ T8521] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 716.671386][ T8521] usb 2-1: Using ep0 maxpacket: 8 [ 717.020689][ T8521] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 717.029093][ T8521] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 717.037610][ T8521] usb 2-1: config 0 has no interface number 0 [ 717.044271][ T8521] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 717.050451][ T8537] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 717.056218][ T8521] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 190, changing to 11 [ 717.075551][ T8521] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 717.089156][ T8521] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 717.098629][ T8521] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 717.107361][ T8521] usb 2-1: Product: syz [ 717.112340][ T8521] usb 2-1: Manufacturer: syz [ 717.120287][ T5956] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 717.121759][ T8521] usb 2-1: config 0 descriptor?? [ 717.134281][T13452] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 717.220282][ T8537] usb 5-1: Using ep0 maxpacket: 32 [ 717.230913][ T8537] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 717.239436][ T8537] usb 5-1: config 0 has no interface number 0 [ 717.245823][ T8537] usb 5-1: config 0 interface 12 has no altsetting 0 [ 717.252764][ T5956] usb 1-1: device descriptor read/64, error -71 [ 717.265921][ T8537] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 717.275526][ T8537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.283735][ T8537] usb 5-1: Product: syz [ 717.288015][ T8537] usb 5-1: Manufacturer: syz [ 717.292849][ T8537] usb 5-1: SerialNumber: syz [ 717.303051][ T8537] usb 5-1: config 0 descriptor?? [ 717.360743][ T5956] usb usb1-port1: attempt power cycle [ 717.702022][ T5919] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 717.730496][ T5956] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 717.758771][ T8521] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input55 [ 717.779841][ T5956] usb 1-1: device descriptor read/8, error -71 [ 717.841013][ T5919] usb 3-1: device descriptor read/64, error -71 [ 717.954142][ T8528] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 718.007966][ T5955] usb 2-1: USB disconnect, device number 87 [ 718.008164][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 718.030349][ T5956] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 718.070927][ T5956] usb 1-1: device descriptor read/8, error -71 [ 718.090248][ T8528] usb 4-1: device descriptor read/64, error -71 [ 718.096643][ T5919] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 718.181017][ T5956] usb usb1-port1: unable to enumerate USB device [ 718.240161][ T5919] usb 3-1: device descriptor read/64, error -71 [ 718.330270][ T8528] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 718.351902][ T5919] usb usb3-port1: attempt power cycle [ 718.480213][ T8528] usb 4-1: device descriptor read/64, error -71 [ 718.607978][ T8528] usb usb4-port1: attempt power cycle [ 718.700409][ T5919] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 718.811158][ T5919] usb 3-1: device descriptor read/8, error -71 [ 718.970146][ T8528] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 719.000857][ T8528] usb 4-1: device descriptor read/8, error -71 [ 719.050258][ T5919] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 719.091488][ T5919] usb 3-1: device descriptor read/8, error -71 [ 719.201502][ T5919] usb usb3-port1: unable to enumerate USB device [ 719.265776][ T8528] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 719.341960][ T8528] usb 4-1: device descriptor read/8, error -71 [ 719.366343][ T8537] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 719.417313][ T8537] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 719.425282][ T8537] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 719.434051][ T8537] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 719.524577][ T8528] usb usb4-port1: unable to enumerate USB device [ 719.612232][ T8521] usb 5-1: USB disconnect, device number 86 [ 720.135629][T13501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.570126][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 720.732063][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.765115][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.795367][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.809373][ T10] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 720.818661][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.829358][ T10] usb 1-1: config 0 descriptor?? [ 721.998575][T13530] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 722.041302][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 722.055213][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 722.110941][ T10] usb 1-1: USB disconnect, device number 98 [ 722.410304][ T8537] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 722.600593][ T8537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.621574][ T5919] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 722.632181][ T8537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.643961][ T8537] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.657639][ T8537] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 722.669005][ T8537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.687001][ T8537] usb 5-1: config 0 descriptor?? [ 722.793744][T13561] binder: 13558:13561 ioctl c0306201 200000000640 returned -22 [ 722.990640][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 723.001306][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 723.061837][ T5919] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 723.491677][ T8521] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 303 sec [ 723.531709][ T5919] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 723.543395][ T5919] usb 2-1: config 5 has no interface number 0 [ 723.549615][ T5919] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 723.561925][ T5919] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.575308][ T5919] usb 2-1: config 5 interface 246 has no altsetting 0 [ 723.740607][ T5919] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 723.749920][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.758118][ T5919] usb 2-1: Product: syz [ 723.762529][ T5919] usb 2-1: Manufacturer: syz [ 723.767814][ T5919] usb 2-1: SerialNumber: syz [ 723.792110][ T8528] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 723.917789][T13570] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 724.100498][ T8528] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 724.151034][ T8528] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.184215][ T8528] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 724.196491][ T8528] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.404448][ T8528] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 724.460177][ T8528] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 724.534951][ T8528] usb 1-1: Product: syz [ 724.550578][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.559580][ T8528] usb 1-1: Manufacturer: syz [ 724.641138][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.656278][ T8528] cdc_wdm 1-1:1.0: skipping garbage [ 724.673126][ T8528] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 724.856654][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.869312][ T5919] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 724.879404][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.888324][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.896123][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.897214][ T6189] usb 2-1: Failed to submit usb control message: -71 [ 724.910685][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.925267][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 724.926979][ T5854] Bluetooth: hci2: unknown advertising packet type: 0x40 [ 724.934721][ T5854] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 724.945335][ T5854] Bluetooth: hci2: Dropping invalid advertising data [ 724.953720][ T6189] usb 2-1: unable to send the bmi data to the device: -71 [ 724.959705][ T5854] Bluetooth: hci2: Malformed LE Event: 0x02 [ 724.969570][ T5919] usb 2-1: USB disconnect, device number 88 [ 724.981919][ T6189] usb 2-1: unable to get target info from device [ 724.994071][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.994960][ T6189] usb 2-1: could not get target info (-71) [ 725.023488][ T6189] usb 2-1: could not probe fw (-71) [ 725.293861][ T8537] usbhid 5-1:0.0: can't add hid device: -71 [ 725.313941][ T8537] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 725.325772][ T8537] usb 5-1: USB disconnect, device number 87 [ 725.335260][T13586] netlink: 'syz.2.2104': attribute type 2 has an invalid length. [ 725.356598][T13586] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2104'. [ 725.551908][T13594] netlink: 'syz.2.2105': attribute type 2 has an invalid length. [ 725.559740][T13594] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2105'. [ 725.569219][T13594] nbd: must specify a device to reconfigure [ 725.786767][ T8537] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 725.910405][ T5919] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 725.940110][ T8537] usb 5-1: Using ep0 maxpacket: 16 [ 725.950547][ T8537] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 725.959158][ T8537] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 725.967612][ T8537] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 725.981395][ T8537] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 726.390446][ T8528] usb 1-1: USB disconnect, device number 99 [ 726.399139][ T8537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.409942][ T8537] usb 5-1: Product: syz [ 726.420487][ T8537] usb 5-1: Manufacturer: syz [ 726.425132][ T8537] usb 5-1: SerialNumber: syz [ 726.434076][ T8537] usb 5-1: config 0 descriptor?? [ 726.443702][ T8537] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 726.480111][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 726.488623][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.503910][ T5919] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 726.513472][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.523639][ T5919] usb 2-1: Product: syz [ 726.527959][ T5919] usb 2-1: Manufacturer: syz [ 726.533664][ T5919] usb 2-1: SerialNumber: syz [ 726.550516][ T5919] usb 2-1: config 0 descriptor?? [ 726.559551][ T5919] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 726.567471][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 726.575421][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 726.586272][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 726.595635][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 726.603818][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 726.612157][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 726.624375][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 726.764343][ T5919] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 726.777194][ T5919] usb 2-1: USB disconnect, device number 89 [ 727.489792][ T8537] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 727.621811][ T5919] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 727.767440][ T5919] keyspan 2-1:0.0: device disconnected [ 728.524753][T13636] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 729.481781][ T5962] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 729.523280][ T10] usb 5-1: USB disconnect, device number 88 [ 729.637973][T13650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2123'. [ 729.864633][T13650] netlink: 'syz.4.2123': attribute type 10 has an invalid length. [ 729.915776][ T5962] usb 1-1: config 0 interface 0 has no altsetting 0 [ 729.931986][ T5962] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 729.960098][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.054365][ T5962] usb 1-1: config 0 descriptor?? [ 731.370828][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 731.533056][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.557229][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.575416][ T10] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 731.592525][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.609396][ T10] usb 3-1: config 0 descriptor?? [ 731.760419][ T5962] video4linux radio48: keene_cmd_set failed (-110) [ 731.770225][ T5962] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 732.823500][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 732.829654][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 732.847007][ T10] usb 3-1: USB disconnect, device number 92 [ 732.930358][ T8537] usb 1-1: USB disconnect, device number 100 [ 733.283212][ T5955] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 733.550143][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 733.568194][ T5955] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 733.602881][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.672783][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.752779][ T5955] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 733.868965][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.990779][ T5955] usb 2-1: config 0 descriptor?? [ 734.022237][ T5955] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 734.246293][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 735.099668][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2141'. [ 735.105087][ T5955] usb 2-1: USB disconnect, device number 90 [ 735.150097][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 735.446887][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 735.490851][ T5919] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 735.490871][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 735.496409][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 735.564521][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.683085][ T10] usb 1-1: Product: syz [ 735.732523][ T10] usb 1-1: Manufacturer: syz [ 735.751296][ T10] usb 1-1: SerialNumber: syz [ 735.777273][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 735.787468][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 736.618009][ T10] r8152-cfgselector 1-1: USB disconnect, device number 101 [ 736.646927][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.663831][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.930360][ T8521] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 737.025888][T13753] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 737.071245][T13753] batman_adv: batadv0: Adding interface: team0 [ 737.078523][T13754] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 737.079333][T13753] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.090224][ T8521] usb 4-1: device descriptor read/64, error -71 [ 737.112075][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.128783][T13753] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 737.138451][T13754] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2151'. [ 737.191562][T13754] team0: entered promiscuous mode [ 737.197268][T13754] team_slave_0: entered promiscuous mode [ 737.231720][T13754] team_slave_1: entered promiscuous mode [ 737.253044][T13754] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.278202][T13754] batman_adv: batadv0: Interface activated: team0 [ 737.295742][T13754] batman_adv: batadv0: Interface deactivated: team0 [ 737.317800][T13754] batman_adv: batadv0: Removing interface: team0 [ 737.336301][T13754] bridge0: port 3(team0) entered blocking state [ 737.357357][T13754] bridge0: port 3(team0) entered disabled state [ 737.377445][T13754] team0: entered allmulticast mode [ 737.394543][T13754] team_slave_0: entered allmulticast mode [ 737.420217][ T8521] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 737.432322][T13754] team_slave_1: entered allmulticast mode [ 737.560689][ T8521] usb 4-1: device descriptor read/64, error -71 [ 737.670725][ T8521] usb usb4-port1: attempt power cycle [ 737.810506][ T5962] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 737.970357][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 738.020140][ T8521] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 738.031925][ T5962] usb 1-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 738.048165][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.065173][ T8521] usb 4-1: device descriptor read/8, error -71 [ 738.072309][ T5962] usb 1-1: Product: syz [ 738.076519][ T5962] usb 1-1: Manufacturer: syz [ 738.093953][ T5962] usb 1-1: SerialNumber: syz [ 738.106314][ T5962] usb 1-1: config 0 descriptor?? [ 738.137842][ T5962] usb-storage 1-1:0.0: USB Mass Storage device detected [ 738.340826][ T8521] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 738.360552][ T8537] usb 1-1: USB disconnect, device number 102 [ 738.400821][ T8521] usb 4-1: device descriptor read/8, error -71 [ 738.602238][ T8521] usb usb4-port1: unable to enumerate USB device [ 739.780165][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 741.053774][T13816] syz.2.2167: attempt to access beyond end of device [ 741.053774][T13816] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 741.067511][T13816] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 741.980873][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 742.202508][T13829] netlink: 'syz.1.2171': attribute type 30 has an invalid length. [ 742.487381][T13849] netlink: 'syz.1.2174': attribute type 6 has an invalid length. [ 742.530046][ T8521] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 742.721066][ T8521] usb 3-1: Using ep0 maxpacket: 32 [ 742.772989][ T8521] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 743.038393][ T8521] usb 3-1: config 0 interface 0 has no altsetting 0 [ 743.071237][ T8521] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 743.114462][ T8521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.161839][ T8521] usb 3-1: config 0 descriptor?? [ 743.432017][ T5962] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 743.503621][T13858] tipc: Can't bind to reserved service type 2 [ 743.604504][ T8521] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 743.620050][ T8521] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 743.636348][ T5962] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 743.646121][ T5962] usb 1-1: config 2 has no interface number 0 [ 743.656080][ T8521] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 743.669642][ T5962] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 743.682668][ T8521] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 743.691692][ T5962] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 743.705835][ T8521] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0 [ 743.715778][ T8521] corsair-cpro 0003:1B1C:0C10.002E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 743.731389][ T5962] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 743.743510][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.752394][ T5962] usb 1-1: Product: syz [ 743.756767][ T5962] usb 1-1: Manufacturer: syz [ 743.763733][ T5962] usb 1-1: SerialNumber: syz [ 743.772144][T13856] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 743.783521][ T5962] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected [ 743.796835][ T5962] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 743.817160][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.829015][ T8521] corsair-cpro 0003:1B1C:0C10.002E: probe with driver corsair-cpro failed with error -38 [ 743.855636][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.430564][ T8521] usb 1-1: USB disconnect, device number 103 [ 744.471770][ T8521] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 744.512481][ T8521] kobil_sct 1-1:2.45: device disconnected [ 744.831249][ T5962] usb 3-1: USB disconnect, device number 94 [ 746.101096][T13873] sctp: [Deprecated]: syz.3.2181 (pid 13873) Use of int in max_burst socket option. [ 746.101096][T13873] Use struct sctp_assoc_value instead [ 747.020977][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 747.035901][T13939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.305692][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.312142][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.321331][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 747.371759][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 747.623251][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 747.650684][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.682597][ T10] usb 1-1: config 0 descriptor?? [ 748.080427][ T5919] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 748.108731][ T10] corsair 0003:1B1C:1B09.002F: unbalanced delimiter at end of report description [ 748.141434][ T10] corsair 0003:1B1C:1B09.002F: parse failed [ 748.147526][ T10] corsair 0003:1B1C:1B09.002F: probe with driver corsair failed with error -22 [ 748.226130][ T5919] usb 4-1: device descriptor read/64, error -71 [ 748.630243][ T5919] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 749.740454][ T5919] usb 4-1: device descriptor read/64, error -71 [ 749.863793][ T5919] usb usb4-port1: attempt power cycle [ 750.030323][ T5962] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 750.151057][ T10] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 750.192629][ T5962] usb 2-1: config 64 has an invalid interface number: 167 but max is 0 [ 750.201160][ T5962] usb 2-1: config 64 has no interface number 0 [ 750.207439][ T5962] usb 2-1: config 64 interface 167 altsetting 14 bulk endpoint 0xF has invalid maxpacket 8 [ 750.218072][ T5962] usb 2-1: config 64 interface 167 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 750.220073][ T5919] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 750.230370][ T5962] usb 2-1: config 64 interface 167 has no altsetting 0 [ 750.244588][ T5962] usb 2-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.1c [ 750.253791][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.265373][T13981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 750.273550][ T5919] usb 4-1: device descriptor read/8, error -71 [ 750.314766][ T10] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 750.325420][ T10] usb 5-1: config 8 has no interface number 0 [ 750.331805][ T10] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 750.343414][ T10] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 750.353484][ T10] usb 5-1: config 8 interface 177 has no altsetting 0 [ 750.360385][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 750.369485][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.382510][T13985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 750.499068][ T8537] usb 1-1: USB disconnect, device number 104 [ 750.615874][ T10] usb 5-1: string descriptor 0 read error: -71 [ 750.643761][ T10] ir_toy 5-1:8.177: required endpoints not found [ 750.678383][ T10] usb 5-1: USB disconnect, device number 89 [ 750.729302][ T5919] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 750.752122][ T5919] usb 4-1: device descriptor read/8, error -71 [ 750.864988][ T5919] usb usb4-port1: unable to enumerate USB device [ 752.005383][T14013] affs: No valid root block on device nullb0 [ 752.028802][T14013] program syz.0.2206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 752.137794][T14018] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 752.276660][ C1] sd 0:0:1:0: [sda] tag#3176 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 752.287300][ C1] sd 0:0:1:0: [sda] tag#3176 CDB: Write(6) 0a 00 00 00 73 d0 [ 752.346969][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 752.357493][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.366035][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.731075][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 752.732536][ T5919] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 752.819935][ T5962] usb 2-1: string descriptor 0 read error: -71 [ 752.830579][ T5962] usb-storage 2-1:64.167: USB Mass Storage device detected [ 752.872904][ T5962] usb-storage 2-1:64.167: Quirks match for vid 07af pid 0004: 4 [ 752.904109][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 752.937446][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 752.952205][ T5919] usb 3-1: config 0 has an invalid interface number: 179 but max is 0 [ 752.956056][ T5962] usb 2-1: USB disconnect, device number 91 [ 752.966931][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 752.970171][ T5919] usb 3-1: config 0 has no interface number 0 [ 752.984416][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.996244][ T10] usb 1-1: config 0 descriptor?? [ 753.004059][ T5919] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 753.016295][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.025915][ T5919] usb 3-1: Product: syz [ 753.033352][ T5919] usb 3-1: Manufacturer: syz [ 753.037993][ T5919] usb 3-1: SerialNumber: syz [ 753.045534][ T5919] usb 3-1: config 0 descriptor?? [ 753.058783][ T5919] usb-storage 3-1:0.179: USB Mass Storage device detected [ 753.077070][ T5919] usb-storage 3-1:0.179: device ignored [ 753.107402][ T30] audit: type=1804 audit(1754262763.946:278): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2214" name="/newroot/464/file0" dev="tmpfs" ino=2465 res=1 errno=0 [ 753.128180][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.144734][T14048] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 753.158771][T14048] ref_ctr increment failed for inode: 0x9a1 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807c990a00 [ 753.429644][ T10] corsair 0003:1B1C:1B09.0030: unbalanced delimiter at end of report description [ 753.462082][ T10] corsair 0003:1B1C:1B09.0030: parse failed [ 753.502616][ T10] corsair 0003:1B1C:1B09.0030: probe with driver corsair failed with error -22 [ 753.624228][ T5919] usb 3-1: USB disconnect, device number 95 [ 755.681246][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 756.151084][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 756.364175][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 756.373942][T14078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.554160][ T8537] usb 1-1: USB disconnect, device number 105 [ 756.610070][ T5919] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 756.636002][T14078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.661843][T14083] overlay: filesystem on ./bus not supported as upperdir [ 756.669827][ T5919] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 756.678097][T14083] overlay: filesystem on ./bus not supported as upperdir [ 756.686216][ T5919] usb 5-1: can't read configurations, error -61 [ 756.820119][ T5919] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 757.580657][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 757.733795][ T5919] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 757.743516][ T5919] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 757.751356][ T5919] usb 5-1: can't read configurations, error -61 [ 757.758133][ T5919] usb usb5-port1: attempt power cycle [ 758.210107][ T5919] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 758.419951][T14101] usb usb1: check_ctrlrecip: process 14101 (syz.3.2226) requesting ep 01 but needs 81 [ 759.451501][ T8537] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 759.625328][ T8537] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 759.645483][ T8537] usb 3-1: config 0 has no interface number 0 [ 759.685673][ T5919] usb 5-1: device descriptor read/8, error -71 [ 759.731517][ T8537] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 759.765378][ T8537] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.786863][ T8537] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 759.796285][ T8537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.805060][ T8537] usb 3-1: Product: syz [ 759.811938][ T8537] usb 3-1: Manufacturer: syz [ 759.816616][ T8537] usb 3-1: SerialNumber: syz [ 759.854045][ T8537] usb 3-1: config 0 descriptor?? [ 759.861972][T14109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 759.872490][ T8537] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 759.890705][T14121] netlink: 'syz.1.2233': attribute type 6 has an invalid length. [ 759.921152][ T8537] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 761.609873][ T5919] usb 3-1: USB disconnect, device number 96 [ 761.620105][ T5919] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 761.678531][ T5919] cyberjack 3-1:0.69: device disconnected [ 764.750125][ T8528] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 764.960923][T14151] netlink: 'syz.4.2240': attribute type 21 has an invalid length. [ 765.023481][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 765.036474][T14151] netlink: 'syz.4.2240': attribute type 21 has an invalid length. [ 765.056525][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 765.120058][ T8528] usb 2-1: device not accepting address 92, error -71 [ 765.603148][ T8528] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 765.950503][ T8528] usb 2-1: device descriptor read/64, error -71 [ 766.065881][ T8528] usb usb2-port1: attempt power cycle [ 766.500314][ T8528] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 766.765518][ T8528] usb 2-1: device descriptor read/8, error -71 [ 767.020233][ T8528] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 767.070346][ T8528] usb 2-1: device descriptor read/8, error -71 [ 767.124716][T14176] No such timeout policy "syz1" [ 767.183140][ T8528] usb usb2-port1: unable to enumerate USB device [ 768.610803][T14212] tmpfs: Bad value for 'mpol' [ 768.997130][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 769.070165][ T5955] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 769.116436][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 769.244969][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 769.273603][ T5955] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 769.306624][ T5955] usb 2-1: config 0 has no interface number 0 [ 769.366079][ T5955] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 769.397418][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.428242][ T5955] usb 2-1: Product: syz [ 769.445774][ T5955] usb 2-1: Manufacturer: syz [ 769.472220][ T5955] usb 2-1: SerialNumber: syz [ 769.528055][ T5955] usb 2-1: config 0 descriptor?? [ 769.601507][ T5955] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 769.804575][ T5955] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 769.931694][ T5955] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 771.248190][T14218] team_slave_0 (unregistering): left allmulticast mode [ 771.350748][T14218] team0: Port device team_slave_0 removed [ 771.451579][T14224] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2260'. [ 771.598153][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 771.670313][ T5955] usb 2-1: USB disconnect, device number 96 [ 771.758108][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 771.863608][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 771.880978][ T5955] quatech2 2-1:0.51: device disconnected [ 771.913510][T14233] : entered promiscuous mode [ 783.580387][ T10] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 364 sec [ 798.471494][ T43] kworker/1:1 (43) used greatest stack depth: 14632 bytes left [ 808.703823][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.710319][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 843.901036][ T10] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 424 sec [ 870.142443][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.148821][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.220260][ T10] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 484 sec [ 931.584118][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.590811][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.540207][ T10] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 545 sec [ 993.023398][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.031064][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1014.220422][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1015.216847][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1015.235750][ T10] usb 3-1: config 0 has no interface number 0 [ 1015.250227][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.275389][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.293557][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1015.304219][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.329367][ T10] usb 3-1: config 0 descriptor?? [ 1015.423195][T14284] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2276'. [ 1016.378871][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 1016.403097][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1016.457612][ T10] usb 3-1: USB disconnect, device number 97 [ 1016.724371][ T30] audit: type=1326 audit(1754263027.566:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1016.767588][ T30] audit: type=1326 audit(1754263027.606:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1016.807596][ T30] audit: type=1326 audit(1754263027.646:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1016.846715][ T30] audit: type=1326 audit(1754263027.646:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1016.928594][ T30] audit: type=1326 audit(1754263027.766:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1016.979462][T14315] input: syz1 as /devices/virtual/input/input57 [ 1017.006623][T14320] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1017.010205][ T30] audit: type=1326 audit(1754263027.766:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1017.037851][T14320] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1017.084577][ T30] audit: type=1326 audit(1754263027.766:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1017.227990][T14329] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2288'. [ 1017.244403][T14329] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 1017.255468][T14329] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2288'. [ 1017.370388][ T24] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1017.541887][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1017.548511][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1017.638612][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1017.752070][ T9] usb 4-1: device descriptor read/64, error -71 [ 1017.815552][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 1017.828676][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.850655][ T24] usb 5-1: Product: syz [ 1017.862793][ T24] usb 5-1: Manufacturer: syz [ 1017.867575][ T24] usb 5-1: SerialNumber: syz [ 1018.052398][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1018.144349][ T30] audit: type=1804 audit(1754263028.986:286): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2292" name="bus" dev="ramfs" ino=45317 res=1 errno=0 [ 1018.199274][T14342] netlink: 'syz.1.2291': attribute type 21 has an invalid length. [ 1018.207531][T14342] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2291'. [ 1018.210960][ T9] usb 4-1: device descriptor read/64, error -71 [ 1018.219417][ T30] audit: type=1326 audit(1754263029.066:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1018.247131][ T30] audit: type=1326 audit(1754263029.066:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14300 comm="syz.4.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65898eb69 code=0x7ffc0000 [ 1018.259129][T14344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.278599][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 1018.278702][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1018.281916][ T24] usb 5-1: USB disconnect, device number 94 [ 1018.467540][ T9] usb usb4-port1: attempt power cycle [ 1018.820687][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1018.843260][ T9] usb 4-1: device descriptor read/8, error -71 [ 1019.082415][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1019.254881][ T9] usb 4-1: device descriptor read/8, error -71 [ 1019.256196][T14350] bond0: entered promiscuous mode [ 1019.274747][T14350] bond_slave_0: entered promiscuous mode [ 1019.537447][ T9] usb usb4-port1: unable to enumerate USB device [ 1019.674422][T14350] bond_slave_1: entered promiscuous mode [ 1019.680808][T14350] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1019.696535][T14350] bond0: left promiscuous mode [ 1019.702190][T14350] bond_slave_0: left promiscuous mode [ 1019.708387][T14350] bond_slave_1: left promiscuous mode [ 1019.714795][T14350] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1019.748969][T14355] delete_channel: no stack [ 1020.046856][T14360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.056441][T14360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.289983][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1021.100194][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1021.346355][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1021.359735][ T24] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 1021.386833][ T24] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1021.710095][ T24] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1021.739101][ T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 100, using maximum allowed: 30 [ 1021.915107][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.353085][T14403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1022.494959][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.538353][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.593245][ T24] usb 3-1: Product: syz [ 1022.616640][ T24] usb 3-1: Manufacturer: syz [ 1022.687771][T14414] overlay: Unknown parameter '\eiserfs' [ 1022.706573][ T24] usb 3-1: SerialNumber: syz [ 1023.683111][ T24] usb 3-1: USB disconnect, device number 98 [ 1024.533104][T14451] binder: 14448:14451 ioctl c0306201 200000000280 returned -14 [ 1024.570061][T14449] binder: BINDER_SET_CONTEXT_MGR already set [ 1024.576233][T14449] binder: 14448:14449 ioctl 4018620d 2000000000c0 returned -16 [ 1024.860312][ T8521] page_pool_release_retry() stalled pool shutdown: id 29, 51 inflight 605 sec [ 1024.980443][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1025.120760][ T9] usb 2-1: device descriptor read/64, error -71 [ 1026.014907][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1026.190445][ T9] usb 2-1: device descriptor read/64, error -71 [ 1026.310054][ T9] usb usb2-port1: attempt power cycle [ 1026.660022][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1026.712517][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1026.742533][ T9] usb 2-1: device descriptor read/8, error -71 [ 1026.890013][ T24] usb 3-1: device descriptor read/64, error -71 [ 1026.990015][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1027.068924][ T9] usb 2-1: device descriptor read/8, error -71 [ 1027.191097][ T9] usb usb2-port1: unable to enumerate USB device [ 1027.275573][ T5919] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1027.284309][ T24] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1027.651637][ T24] usb 3-1: device descriptor read/64, error -71 [ 1027.679996][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1028.202993][ T24] usb usb3-port1: attempt power cycle [ 1028.208864][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1028.222460][ T5919] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 1028.233085][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.255603][ T5919] usb 5-1: config 0 descriptor?? [ 1028.581945][ T24] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1028.742631][ T24] usb 3-1: device descriptor read/8, error -71 [ 1029.010567][ T24] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1029.065887][ T24] usb 3-1: device descriptor read/8, error -71 [ 1029.198552][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unknown main item tag 0x0 [ 1029.212957][ T24] usb usb3-port1: unable to enumerate USB device [ 1029.233451][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unknown main item tag 0x0 [ 1029.252193][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unknown main item tag 0x0 [ 1029.277918][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unknown main item tag 0x0 [ 1029.289884][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unknown main item tag 0x0 [ 1029.300591][ T5919] corsair-psu 0003:1B1C:1C0D.0031: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 1029.362138][T14512] binder: 14508:14512 ioctl c0306201 200000001440 returned -14 [ 1029.510834][T14487] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1029.624277][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2339'. [ 1029.650594][T14525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1029.796021][T14534] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44421 - 0 [ 1029.826412][T14534] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44421 - 0 [ 1029.849925][T14534] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44421 - 0 [ 1029.880012][T14534] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 44421 - 0 [ 1029.900801][T14534] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 54966 - 0 [ 1029.909666][T14534] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 54966 - 0 [ 1029.919993][ T5919] corsair-psu 0003:1B1C:1C0D.0031: unable to initialize device (-110) [ 1029.936607][ T5919] corsair-psu 0003:1B1C:1C0D.0031: probe with driver corsair-psu failed with error -110 [ 1029.948903][T14534] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 54966 - 0 [ 1029.969972][T14534] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 54966 - 0 [ 1029.978918][T14534] geneve2: entered promiscuous mode [ 1029.999921][T14534] geneve2: entered allmulticast mode [ 1030.212189][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 1030.227178][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 1030.237463][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 1030.391149][T14546] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1031.015059][T14557] overlayfs: failed to resolve './file1': -2 [ 1031.420244][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1031.600136][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.635574][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.668342][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1031.679542][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.696939][ T24] usb 2-1: config 0 descriptor?? [ 1031.977914][ T8521] usb 5-1: USB disconnect, device number 95 [ 1032.119559][ T24] kone 0003:1E7D:2CED.0032: unknown main item tag 0x4 [ 1032.154435][ T24] kone 0003:1E7D:2CED.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 1032.181655][T14578] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 1032.271811][T14578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1032.272212][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 1032.287804][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 1032.408410][ T8521] usb 2-1: USB disconnect, device number 101 [ 1033.711302][T14596] netlink: 'syz.1.2359': attribute type 9 has an invalid length. [ 1033.722974][T14596] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1034.029125][T14604] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1034.437325][T14622] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2363'. [ 1034.840801][ T24] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1035.039498][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.053224][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.064602][ T24] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1035.078187][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.343539][T14637] netlink: 'syz.1.2370': attribute type 9 has an invalid length. [ 1035.344288][ T24] usb 3-1: config 0 descriptor?? [ 1035.357900][T14637] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2370'. [ 1035.787621][ T24] zydacron 0003:13EC:0006.0033: item fetching failed at offset 2/5 [ 1035.977383][ T24] zydacron 0003:13EC:0006.0033: parse failed [ 1035.984735][ T24] zydacron 0003:13EC:0006.0033: probe with driver zydacron failed with error -22 [ 1035.997335][ T24] usb 3-1: USB disconnect, device number 103 [ 1036.432996][ T8521] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1036.570024][ T8521] usb 4-1: device descriptor read/64, error -71 [ 1036.791397][T14675] random: crng reseeded on system resumption [ 1037.000575][T14677] hub 2-0:1.0: USB hub found [ 1037.007906][T14677] hub 2-0:1.0: 1 port detected [ 1038.120257][ T8521] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1038.153634][T14683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1038.163225][T14683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1038.239141][T14683] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1038.471911][ T8521] usb 4-1: device descriptor read/64, error -71 [ 1038.719721][ T8521] usb usb4-port1: attempt power cycle [ 1038.731940][T14688] block device autoloading is deprecated and will be removed. [ 1039.081270][ T8521] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1039.478587][ T8521] usb 4-1: device descriptor read/8, error -71 [ 1039.928085][T14713] fuse: Unknown parameter 'Rd' [ 1040.221953][T14727] tmpfs: Bad value for 'mpol' [ 1041.479971][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 1041.480390][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 1041.493653][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 1042.895574][T14764] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1043.758274][T14787] netlink: 'syz.2.2404': attribute type 4 has an invalid length. [ 1043.923620][T14788] netlink: del zone limit has 4 unknown bytes [ 1044.728863][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 1044.740674][ T24] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1044.893655][ T24] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 1044.907272][ T24] usb 3-1: config 0 has no interface number 0 [ 1044.917295][ T24] usb 3-1: config 0 interface 160 altsetting 64 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1044.929021][ T24] usb 3-1: config 0 interface 160 has no altsetting 0 [ 1044.939784][ T24] usb 3-1: New USB device found, idVendor=3612, idProduct=d032, bcdDevice=56.e4 [ 1044.951230][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.960674][ T24] usb 3-1: Product: syz [ 1044.964962][ T24] usb 3-1: Manufacturer: syz [ 1044.969608][ T24] usb 3-1: SerialNumber: syz [ 1044.977656][ T24] usb 3-1: config 0 descriptor?? [ 1044.987598][ T24] usb-storage 3-1:0.160: USB Mass Storage device detected [ 1045.202952][T14820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.096705][T14839] rdma_op ffff88807c75f1f0 conn xmit_rdma 0000000000000000 [ 1046.503220][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1046.706202][T14847] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2422'. [ 1046.727538][T14847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1046.750061][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1046.757949][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1046.769683][ T24] usb 2-1: config 0 has no interface number 0 [ 1046.775969][ T24] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1046.791514][ T24] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=83.b3 [ 1046.845571][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.855833][ T24] usb 2-1: Product: syz [ 1046.860660][ T24] usb 2-1: Manufacturer: syz [ 1046.865387][ T24] usb 2-1: SerialNumber: syz [ 1046.873388][ T24] usb 2-1: config 0 descriptor?? [ 1046.879229][T14841] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1046.888026][ T24] usb 2-1: NFC: intf ffff8880291ca000 id ffffffff8eb3fac0 [ 1046.913994][ T24] nfcmrvl 2-1:0.12: NFC: registered with nci successfully [ 1047.098429][ T24] usb 2-1: USB disconnect, device number 102 [ 1047.106739][ T24] usb 2-1: NFC: intf ffff8880291ca000 [ 1047.465312][ T8521] usb 3-1: USB disconnect, device number 104 [ 1047.554545][T14869] delete_channel: no stack [ 1047.559191][T14869] delete_channel: no stack [ 1047.600332][T14869] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1047.610160][T14869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'. [ 1047.815925][T14876] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 1047.828090][T14876] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1047.836545][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.2.2431 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1047.846566][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1047.856654][T14876] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 1047.862940][T14876] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 1047.882634][T14876] RSP: 0018:ffffc9001b4b7820 EFLAGS: 00010202 [ 1047.888722][T14876] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888030f71e00 [ 1047.896803][T14876] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 1047.904807][T14876] RBP: ffffc9001b4b7a30 R08: ffff88805726874f R09: 1ffff1100ae4d0e9 [ 1047.912817][T14876] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 1047.920818][T14876] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888034095028 [ 1047.928813][T14876] FS: 00007f28d7a046c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1047.937763][T14876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.944400][T14876] CR2: 000000110c3d9d12 CR3: 000000007920e000 CR4: 00000000003526f0 [ 1047.952398][T14876] Call Trace: [ 1047.955716][T14876] [ 1047.958674][T14876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.964609][T14876] ? rcu_read_lock_any_held+0xb3/0x120 [ 1047.970118][T14876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1047.976058][T14876] direct_splice_actor+0x101/0x160 [ 1047.981203][T14876] splice_direct_to_actor+0x5a5/0xcc0 [ 1047.986605][T14876] ? __pfx_direct_splice_actor+0x10/0x10 [ 1047.992259][T14876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1047.998174][T14876] do_splice_direct+0x181/0x270 [ 1048.003046][T14876] ? __pfx_do_splice_direct+0x10/0x10 [ 1048.008429][T14876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1048.014327][T14876] ? rw_verify_area+0x258/0x650 [ 1048.019221][T14876] do_sendfile+0x4da/0x7e0 [ 1048.023653][T14876] ? __pfx_do_sendfile+0x10/0x10 [ 1048.028598][T14876] ? __se_sys_futex+0x36f/0x400 [ 1048.033461][T14876] __se_sys_sendfile64+0x13e/0x190 [ 1048.038585][T14876] ? __pfx___se_sys_futex+0x10/0x10 [ 1048.043824][T14876] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1048.049466][T14876] ? do_syscall_64+0xbe/0x3b0 [ 1048.054155][T14876] do_syscall_64+0xfa/0x3b0 [ 1048.058676][T14876] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.063898][T14876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.069986][T14876] ? clear_bhb_loop+0x60/0xb0 [ 1048.074683][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.080677][T14876] RIP: 0033:0x7f28d6b8eb69 [ 1048.085104][T14876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.104737][T14876] RSP: 002b:00007f28d7a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1048.113181][T14876] RAX: ffffffffffffffda RBX: 00007f28d6db5fa0 RCX: 00007f28d6b8eb69 [ 1048.121170][T14876] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 1048.129154][T14876] RBP: 00007f28d6c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1048.137154][T14876] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.145177][T14876] R13: 0000000000000000 R14: 00007f28d6db5fa0 R15: 00007ffc13b51f28 [ 1048.153203][T14876] [ 1048.156251][T14876] Modules linked in: [ 1048.160937][T14876] ---[ end trace 0000000000000000 ]--- [ 1048.170932][T14876] RIP: 0010:iter_file_splice_write+0xa9b/0x1000 [ 1048.177995][T14876] Code: 00 74 08 4c 89 f7 e8 14 5b e0 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 44 8b 64 24 04 74 08 48 89 df e8 e1 5a e0 ff 4c 8b [ 1048.202923][T14876] RSP: 0018:ffffc9001b4b7820 EFLAGS: 00010202 [ 1048.209089][T14876] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888030f71e00 [ 1048.217199][T14876] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffa [ 1048.226548][T14876] RBP: ffffc9001b4b7a30 R08: ffff88805726874f R09: 1ffff1100ae4d0e9 [ 1048.237803][T14876] R10: dffffc0000000000 R11: ffffffff81fe9d40 R12: dffffc0000000000 [ 1048.240008][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1048.246749][T14876] R13: 7ffffffffffffffa R14: dffffc0000000000 R15: ffff888034095028 [ 1048.262399][T14876] FS: 00007f28d7a046c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 1048.272407][T14876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.279250][T14876] CR2: 00007f9d595812f8 CR3: 000000007920e000 CR4: 00000000003526f0 [ 1048.288887][T14876] DR0: 0000000000001880 DR1: 0000000000000000 DR2: 0000000000000000 [ 1048.296932][T14876] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1048.305254][T14876] Kernel panic - not syncing: Fatal exception [ 1048.311695][T14876] Kernel Offset: disabled [ 1048.316029][T14876] Rebooting in 86400 seconds..