last executing test programs: 10.058707692s ago: executing program 0 (id=1959): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x8, 0x2c, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1f}, 0x8c, 0x40, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0xf788, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \x00+'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='\\*\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x7]}, {0x7f, 0x7, 0xd82, 0x2}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xe2e}, {[0x7b4, 0x1000, 0xa4, 0x1]}, 0x43, 0x9f, &(0x7f0000000140)=""/159}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x1, 0xe, 0x3, &(0x7f00000002c0)={0x11, "898d728d84372d56a9591239cac5615478dd9e1d07b542d042036422d9fa59ea8c"}}) 9.411481628s ago: executing program 3 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x17f5b, 0x30c02}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x5, 0x14, @local}]}}}]}, 0x40}}, 0x40080) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4044000) 9.31867989s ago: executing program 3 (id=1969): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20240a1, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESHEX], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864010100000000002480655800000000000000001000080000"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80800) move_mount(r8, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) 7.249505164s ago: executing program 3 (id=1973): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000001640)=ANY=[@ANYBLOB="120150020000001044060f8040000102030109026e0003010e0801080b0002012530050904000000010130"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) 7.029523211s ago: executing program 0 (id=1974): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000000280)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xf0ff) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r8 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x2020) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100040000000000040004000000", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB, @ANYRES32, @ANYBLOB="10000100000000002000030000000000"], 0x44, 0x0) fgetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.732323659s ago: executing program 4 (id=1977): r0 = syz_usb_connect(0x6, 0x1cb, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000003, 0x97052, r1, 0x80000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000140)={0x1c, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xbb}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000e56f0001000000840000000000edff000064a6073f86b675148ff3f8e57ca2570aad3a9a24821747b8b448ca988e679e8065874d503196d60e985b7601acfb8f986a23f4959b378092b6ec4b1ce241de83bb9307317c522dd20440eb5f9101", @ANYRESOCT, @ANYBLOB="ffffffffffffff7f0900f900"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20004014) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.329793757s ago: executing program 2 (id=1978): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x1c, 0x20, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10}}, 0x1c}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.105954583s ago: executing program 0 (id=1979): r0 = fanotify_init(0x200, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x18) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) fanotify_mark(r0, 0x201, 0x1000002b, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0]) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="e960297e65bb21b95af7206f1a0da8dacd44170b6f3c9567d988d5e637fa957d413759865e", @ANYRES16=r1, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRESHEX], 0x3c}}, 0x41) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000fd064ead513d187c72c3246a63336bb543c07790a7ec1a090000000000000031bcb96525775cfb11c0eee43433c84ab50fedbd9bd118780a592b802a38081aef7b29903a5c97467c34e3ed275293084ae30a85ee7894e19eace5ca42972c82064c079cf1ffab72c403059da978b709c3dfbe9e3dc9363065bc31528b0f80835e9a390e039729d428d95239a91c6eb978e733090b9b29c544cd8a99df159c29c45d14a87f6a3388d8c3c8f65819d3e5c3746793dbcc9a800000000000000086b5d0a20fbe215582338a53e0b404ad3d4e41", @ANYRES16=r7, @ANYBLOB="20002dbd7000fbdbdf25740000000c009900050000001a000000"], 0x20}}, 0x40448c5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$cgroup_ro(r6, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.055174955s ago: executing program 4 (id=1980): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220500000024ea670b00"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_emit_ethernet(0x0, 0x0, 0x0) clock_getres(0xfffffffffffffffb, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0xef, 0x0, 0x0}) 5.705694629s ago: executing program 0 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01020301090224000100000000090400000221efb00009050202000000000009058b02"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@can_delroute={0x1c, 0x19, 0x200, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0x3, 0x1, 0x40}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) 5.256457628s ago: executing program 3 (id=1982): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x10}, 0x1, 0x0, 0x0, 0xa0f0d2ee7e986339}, 0x81) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x80000, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)=0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0xa, 0x300) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000200)=""/238) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) 4.78334507s ago: executing program 1 (id=1983): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20240a1, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESHEX], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80800) move_mount(r8, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) 4.371988885s ago: executing program 2 (id=1984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000023c0)=@generic={&(0x7f0000002340)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002400)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200000000001e000000000000009500000000000000"], &(0x7f0000002380)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r11, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, r10}, 0x94) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r7, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r12}, 0x10) open_by_handle_at(r8, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) socket(0x18, 0x3, 0x7e23) syz_usb_connect$uac3(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x3, 0x90, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0xa0, 0x0, {0xa, 0x25, 0x25, 0x6, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x6, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x2, 0xdf, "504a7854af4e21"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x9, "5f80", "1e7426"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0xe, 0x7e, {0xa, 0x25, 0x25, 0x7, 0xa4, 0x40}}}}}}}}]}}, &(0x7f0000002300)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x311, 0xd, 0x5, 0x2, 0x8, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x65, &(0x7f0000000200)=@string={0x65, 0x3, "6d993615dfe069c3915d1b7a65cfbd6d6e94eb05306293551974f2b0c31c8c514a1df86aab11cf6bf5a3d636bce8008ce69ec069d85c7552edd4881d9adb193225b35e16b268063caf90e9cdc9437459eaed691e1c69c3409ef8a1833522e859cd1e0b"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.209229053s ago: executing program 4 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x400c810) 3.822055749s ago: executing program 4 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x57, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r2, 0xc, &(0x7f0000000080)={0x1, 0x800003}, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 3.121752863s ago: executing program 3 (id=1987): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$char_usb(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x20000000009, 0x5, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, "9d"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, '3'}]}}, 0x0}, 0x0) 3.019971201s ago: executing program 1 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f09e000913864dfb62d0002e0000002"], 0x28}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0xa, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c800}, 0x400c810) 2.916184515s ago: executing program 1 (id=1989): read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000026c0)={0x50, 0x0, r0, {0x7, 0x2d, 0x5, 0xffffffffc2400002, 0x1, 0x1, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2d}}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0xfe90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r2, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r4, 0x0}]) r5 = socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) sendmmsg$inet(r5, &(0x7f0000002bc0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="cf", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x6ef8eb021116b2d8) r7 = socket(0x10, 0x5, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_emit_ethernet(0x26, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x18, 0x63, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}, "00008848"}}}}, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000000080)={0xa, @capture={0x0, 0x1, {0x2, 0x10000}, 0x402b2771, 0x80}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x40, 0x140c, 0x8, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40800) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003052abd70000007020000000000", @ANYRES32=0x0, @ANYBLOB="0008000006380000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x440b0) 2.91564773s ago: executing program 4 (id=1990): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000000280)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xf0ff) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203030902120001000000000904"], 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="9b0016"], 0xb8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r9 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$isdn(0x22, 0x2, 0x25) r11 = syz_pidfd_open(r0, 0x0) setns(r11, 0x24020000) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x7}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0x12, "f413567c09029e947789b80755483b46"}, {0x5, 0x8, "c92d3002d91d"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) 2.287923693s ago: executing program 2 (id=1992): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f21b034000f21c93c0f20c087531d440f22c066b8af00c4c2c9981500f0000066b8590066b83d018e9bf0f0b887008ee867360f062e0f09", 0x38}], 0x1, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\v', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x284, 0x0, 0x216}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.724633063s ago: executing program 1 (id=1993): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000051405"], 0x18}, 0x1, 0x0, 0x0, 0x24004001}, 0x20040000) r2 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75107000000cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786c4d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r2, 0x0) r3 = mq_open(&(0x7f0000000340)='ramfs\x00', 0x40, 0x100, &(0x7f0000000380)={0x316, 0x9, 0x1, 0x8}) mq_timedreceive(r3, &(0x7f0000000180)=""/191, 0xbf, 0x8, &(0x7f0000000000)={0x0, 0x989680}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.724336931s ago: executing program 2 (id=1994): r0 = socket(0xf, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x3000, 0x0, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r5, 0x3, &(0x7f0000000140)=0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000830}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x40202) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc040564a, &(0x7f00000002c0)={0x0, 0x0, 0x3008, 0x22, 0xd, 0x3}) 1.400263794s ago: executing program 1 (id=1995): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_connect$uac3(0x0, 0xec, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x30, 0x80, 0x80, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xe7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x2e, 0x2}, [@multiply_unit={0xb, 0x24, 0xd, 0x2, 0x4, 0x5, 0x1ff}, @selector_unit={0x7, 0x24, 0xc, 0x5, 0x2, "ce93"}, @power_domain={0xa, 0x24, 0x10, 0x0, 0x8f8c, 0x2, 0xd, '1'}, @mixer_unit={0x8, 0x24, 0x5, 0x4, 0x9, "6d8fe6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x79, 0x8, "1ec39fc748"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x63, 0xb5, 0x5, {0xa, 0x25, 0x25, 0x4, 0x19, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfe, 0x3, 0x6, 0xe6, 'J'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0x3, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x7}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xea, 0x2, 0x2, 0x8, "10cbd47cc70c3c8853"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x1, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0xc, 0x25}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x7f, 0x2, {0xa, 0x25, 0x25, 0x800, 0x9, 0xffff}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x9, 0x80, 0x40, 0x20, 0x70}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x9, [{0x1e, &(0x7f00000004c0)=@string={0x1e, 0x3, "81b1fa84462ce32deed4c26ad4f91e8cd6f2f40228c44113ff76adf9"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1401}}, {0x3c, &(0x7f0000000540)=@string={0x3c, 0x3, "89361c64b52d834c9731e46467adc6a63ffc2a80ea647bc76eb5dacf78505a231419f5d51df228fffb2b46eb456326a31449378acff1da7ec1ac"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xfcff}}, {0x47, &(0x7f0000000640)=@string={0x47, 0x3, "d3e29ac01ecfed2d337895246add75ba380a460c4d2b2c4964cb7c1d3574c017c85c7d57090bb0742c1f552e870bda26e1e564631729f18f287330182527a15570ce53f386"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x4001}}, {0xb8, &(0x7f0000000740)=@string={0xb8, 0x3, "67764eb6e48cef65b96bf2695f90f81cf330893832dff3d5481869bfb2fb8c450ab9b921df94a3d465f06cc3b68d1a92c02b857dbce537e964bae1a544a67953fd21529562f8322e8ae6e2cfd87a3e86a4f9d61a79d01068142dc106ed8da14d3e11f1d3732190b271eea59e024c0f95b45b1c42a47701147afd07be19866f8279cc4b94f534cca7134321908841bfa22e5b49600fb08e5b8cf99893506b63e8977d748304e91b00ae428f51aadf0cc51b3500d672f8"}}, {0xa4, &(0x7f0000000800)=@string={0xa4, 0x3, "b6c898eb5eb11e5e9be26c9ef12676a4d1eee456d0989a54ed9eecc6012a65a32879e9d59e23d67d6e4105c392a7a32557e5908cbda2ddf0f7561ebe301f399ca17b27d99ac4d450db775c2699c6e1aa548794975d59e43d5bf36de039c099aab5ffed8c7b28eed888bd1f0c8d46eb8955cb84b30202d7c126b765067fe3b4b05e445c648e4863b8892be4bea0d5ea09f7f71fb11be470c4778c1b3b118edf67464b"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x100a}}]}) r1 = creat(&(0x7f0000001c40)='./file0\x00', 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r3, 0x3}}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000000)={0x100000, 0x70, 0x0, {r1}}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) io_submit(r5, 0x4, &(0x7f0000002380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x3, r4, &(0x7f0000000000)="86abc7302919d75eb2254ec7bc2ab43c57880344afc1a2c571432a5d983588fc6dc7230f49bae191d16b0575891ddc874c11054f95d2dc23681ec1df6f9e0a4eae914fd53c2715a50b3c816a6f62223d0baf3471fc6a7cb2d79dc720a19380b979e6220999cc3273c4f8ae7088d89859f05c47e1448d9ec4089964b67c9f8494da71b7dcf55ccfbd8fdb1e3588a33ce9b4acd4211da0e190864fd557be0fe7ff54769090b2add4ef27aac1e359f760c23e4f0c34de94dcccb37f6bb04065", 0xbe, 0x2, 0x0, 0x3, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x834, r7, &(0x7f0000000180)="27caf5c06984bfebc65d34d1c877c18fbf5156cc7c12e20e8f26afe3065f4f9609a54f843ad5c29608206a3bca008c8461a4a8fd225e9f4b9d1616cc540ebea64c4eaa5096469247f1ec5ba14cb892a022ce0736a38987cfdb54695d707b11ac6759efe361a6b0a9b94dfdd4a4563168b9c460566c3c3f35a40265e7a396a21fc2bf42f7d255c4831c9ee0431aca7fb7960035150b11bb35461429eb04be24fae0bad7aa85b8dd158139181a49b6e81c1ab2f5ce0772770f9c", 0xb9, 0x5, 0x0, 0x3, r8}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, &(0x7f0000001340)="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", 0x1000, 0x4, 0x0, 0x4, r9}]) 1.231226605s ago: executing program 2 (id=1996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000400)={{@align, {0x6, 0x2, 0x0, 0x3}}, {{[0x5, 0x3f2, 0xffffffff, 0x101]}, 0x0, 0x3, 0xa, 0x0, &(0x7f0000000280)=[{{@_ha_fsid={[0x4, 0x1a4]}, {0x7f, 0x8, 0x81, 0xfffffffffffffffc}}, 0xfff, 0x0, 'ethtool\x00'}, {{@_ha_fsid={[0x0, 0x2]}, {0x8, 0x6, 0x4, 0xe11}}, 0x6, 0x0, 'ethtool\x00'}, {{@align=0x5, {0x8, 0x401, 0x3, 0x16}}, 0x1ff, 0x0, '\x00'}, {{@_ha_fsid={[0x9, 0x2]}, {0x9, 0x700, 0x9, 0x8}}, 0xc4, 0x0, '\x00'}, {{@align=0x1, {0x2, 0x7fff, 0x3cf, 0x4}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x5, 0x97]}, {0xda4, 0xfffc, 0x8, 0x100000000}}, 0x7, 0x0, '\x00'}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYBLOB="1c00000009"], 0x20) r3 = gettid() rt_sigqueueinfo(r3, 0x14, &(0x7f0000000380)={0x6, 0x8, 0x10}) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000880)={0x10000000}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000006400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') move_pages(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil], &(0x7f0000000100)=[0xa], &(0x7f0000000140)=[0x0], 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380100001800800010003000000040003"], 0x7c}}, 0x0) 1.005138386s ago: executing program 0 (id=1997): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000440)=@file={0x1}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0}, 0x50) ioctl$EVIOCRMFF(r6, 0xc0085504, &(0x7f0000000000)=0x10) 981.350183ms ago: executing program 2 (id=1998): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20240a1, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESHEX], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80800) move_mount(r8, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 3 (id=1999): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000580)={0x5, &(0x7f0000000600)=[{0x7, 0xc6, 0x4, 0xf70}, {0x0, 0xf, 0x7, 0x9}, {0x8, 0x5, 0xf7, 0x101}, {0x2, 0x1, 0x8, 0x3}, {0x4104, 0x2, 0x5, 0x6659c90f}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x76}}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080), 0xffffff33}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): evice= 1.08 [ 502.296694][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.307709][ T5918] usb 5-1: Product: syz [ 502.312024][ T5918] usb 5-1: Manufacturer: syz [ 502.317092][ T5918] usb 5-1: SerialNumber: syz [ 502.334601][ T5918] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 502.359593][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 502.406181][ T5887] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 502.665254][ T10] usb 5-1: USB disconnect, device number 99 [ 503.244697][T12097] tap0: tun_chr_ioctl cmd 1074025680 [ 503.460939][ T5887] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 503.480304][ T5887] ath9k_htc: Failed to initialize the device [ 503.572102][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 503.707338][ T9] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 503.872828][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 503.887361][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.948337][ T9] usb 2-1: Product: syz [ 503.958830][ T9] usb 2-1: Manufacturer: syz [ 503.972539][ T9] usb 2-1: SerialNumber: syz [ 504.009002][ T9] usb 2-1: config 0 descriptor?? [ 504.025428][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 504.255115][ T5887] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 504.351015][ T10] usb 3-1: USB disconnect, device number 120 [ 504.360739][ T10] usblp0: removed [ 504.397633][ T5887] usb 5-1: device descriptor read/64, error -71 [ 504.647334][ T5887] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 504.777692][ T5887] usb 5-1: device descriptor read/64, error -71 [ 504.887746][ T5887] usb usb5-port1: attempt power cycle [ 505.247387][ T5887] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 505.302943][ T5887] usb 5-1: device descriptor read/8, error -71 [ 505.557333][ T5887] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 505.599502][ T5887] usb 5-1: device descriptor read/8, error -71 [ 505.707590][ T5887] usb usb5-port1: unable to enumerate USB device [ 505.727546][T10333] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 505.847364][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 505.888903][T12130] netlink: 'syz.0.1570': attribute type 13 has an invalid length. [ 505.947547][T10333] usb 3-1: Using ep0 maxpacket: 16 [ 505.947666][ T9] gspca_stk1135: reg_w 0x200 err -71 [ 505.964146][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 505.992169][ T9] gspca_stk1135: Sensor write failed [ 506.002053][T10333] usb 3-1: config 64 has an invalid interface number: 137 but max is 0 [ 506.003506][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.012572][T10333] usb 3-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 506.026190][T10333] usb 3-1: config 64 has no interface number 0 [ 506.032888][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0xC has invalid maxpacket 1536, setting to 64 [ 506.047703][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 506.064776][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 506.085487][ T9] gspca_stk1135: Sensor write failed [ 506.105628][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 506.121337][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 506.121431][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 506.137742][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.137767][ T9] gspca_stk1135: Sensor read failed [ 506.137982][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.145226][T10333] usb 3-1: config 64 interface 137 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 506.175604][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.196741][ T9] gspca_stk1135: Sensor read failed [ 506.204373][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.214558][T10333] usb 3-1: config 64 interface 137 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 506.224921][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 506.232918][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 506.246498][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.256761][ T9] gspca_stk1135: Sensor read failed [ 506.266644][T10333] usb 3-1: config 64 interface 137 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 506.267950][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.286038][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.293308][ T9] gspca_stk1135: Sensor read failed [ 506.301428][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.303423][T10333] usb 3-1: config 64 interface 137 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 506.325184][ T10] usb 4-1: config 0 descriptor?? [ 506.330551][ T9] gspca_stk1135: Sensor write failed [ 506.340230][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 506.346973][ T9] gspca_stk1135: Sensor write failed [ 506.353006][T10333] usb 3-1: config 64 interface 137 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 506.374982][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 506.375000][T10333] usb 3-1: config 64 interface 137 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 506.406928][ T9] usb 2-1: USB disconnect, device number 92 [ 506.470659][T10333] usb 3-1: config 64 interface 137 has no altsetting 0 [ 506.533730][T12136] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 506.823260][T10333] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=e3.8d [ 506.900745][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.914947][T10333] usb 3-1: Product: 轂羸➋ⅳáﺟ旊⋈áƒæ¢ˆâ“¯åªªë¬‹ã–¦ê‘’顤⫸撞憈⭬汲䊳⛠㓆í¤á¨î¹›ì‡–䷲鹎á©ä¥äµƒãŠ©æ냕퓜尊⼱ㆹ鋑쫒뼽ൔ꼚ﵼï¦á‡²îƒ¤êœ½ï·éššê¢¾ç¥ã©†è…°ì¶…㋋ꖃ㡕â¦à°‚⠗釭旜꯭ⓡ벒Ꮋ麫åŸá‰Œã‰æµ§æ£¼å¨£ç’‡ê¿½ï§šë“‘ꯆ惦헉é„벳Ⰰ１噶俣매刦 [ 507.016453][T10333] usb 3-1: Manufacturer: 倊 [ 507.036573][ T10] hid_parser_main: 470 callbacks suppressed [ 507.036594][ T10] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 507.044237][T10333] usb 3-1: SerialNumber: syz [ 507.057489][ T10] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 507.255727][ T10] ft260 0003:0403:6030.0017: failed to retrieve chip version [ 507.297783][ T10] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -5 [ 507.443807][T10333] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 507.487485][T10333] usb 3-1: selecting invalid altsetting 1 [ 507.493629][T10333] gspca_stk014: reg_r err -71 [ 507.498471][T10333] stk014 3-1:64.137: probe with driver stk014 failed with error -71 [ 507.546857][T10333] usb 3-1: USB disconnect, device number 121 [ 507.939385][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1574'. [ 508.477319][ T5918] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 508.669665][T10333] usb 4-1: USB disconnect, device number 89 [ 508.696786][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 508.707537][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 508.717928][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 508.747513][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.767648][ T5918] usb 3-1: Product: syz [ 508.779935][ T5918] usb 3-1: Manufacturer: syz [ 508.791069][ T5918] usb 3-1: SerialNumber: syz [ 509.331008][T12184] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 509.346528][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 509.346550][ T30] audit: type=1326 audit(1775737618.380:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 509.423620][ T30] audit: type=1326 audit(1775737618.390:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 509.519198][T12184] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 509.537811][ T30] audit: type=1326 audit(1775737618.390:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 509.589182][ T30] audit: type=1326 audit(1775737618.390:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 509.731169][ T30] audit: type=1326 audit(1775737618.390:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 509.866679][ T30] audit: type=1326 audit(1775737618.390:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 510.124255][ T30] audit: type=1326 audit(1775737618.390:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 510.177053][ T30] audit: type=1326 audit(1775737618.390:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 510.229528][ T30] audit: type=1326 audit(1775737618.400:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 510.295988][ T30] audit: type=1326 audit(1775737618.400:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.3.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3455b9c819 code=0x7ffc0000 [ 510.656692][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'. [ 511.140031][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46 [ 511.183481][ T5180] bcm5974 3-1:1.0: could not read from device [ 511.214075][ T5180] bcm5974 3-1:1.0: could not read from device [ 511.250435][ T5918] usb 3-1: USB disconnect, device number 122 [ 511.273893][ T5180] bcm5974 3-1:1.0: could not read from device [ 513.318113][ T5918] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 513.406515][T12240] xt_TCPMSS: Only works on TCP SYN packets [ 513.477320][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 513.505550][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.523147][ T5918] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 513.550988][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.355113][ T5918] usb 4-1: config 0 descriptor?? [ 514.438753][ T5894] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 514.837325][ T5894] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 514.939305][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.117336][ T5894] usb 1-1: config 0 descriptor?? [ 515.139226][ T5894] cp210x 1-1:0.0: cp210x converter detected [ 515.247566][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.273870][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.386099][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 515.417542][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 515.428375][ T5918] usb 4-1: USB disconnect, device number 90 [ 515.488907][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 515.541454][ T5894] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 515.573961][ T5894] usb 1-1: cp210x converter now attached to ttyUSB0 [ 515.659656][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 515.678636][ T9] usb 2-1: config 0 has no interface number 0 [ 515.684921][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.700080][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 515.710131][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.720002][ T9] usb 2-1: Product: syz [ 515.724415][ T9] usb 2-1: Manufacturer: syz [ 515.732092][ T9] usb 2-1: SerialNumber: syz [ 515.754718][ T9] usb 2-1: config 0 descriptor?? [ 515.774960][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.789877][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 515.807792][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.842493][T12257] netlink: 'syz.0.1601': attribute type 2 has an invalid length. [ 515.857370][ T5894] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 515.873646][T12257] !: entered promiscuous mode [ 515.885944][T12257] netlink: 'syz.0.1601': attribute type 2 has an invalid length. [ 515.894322][T12257] !: left promiscuous mode [ 516.007883][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 516.016848][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.026936][ T5894] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 516.036932][ T5894] usb 3-1: config 4 has no interface number 0 [ 516.044085][ T5894] usb 3-1: config 4 interface 127 has no altsetting 0 [ 516.052087][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 516.062406][ T5894] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 516.071957][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.237367][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 516.298505][ T1226] usb 3-1: USB disconnect, device number 123 [ 516.367375][ T9] usb 5-1: device descriptor read/64, error -71 [ 516.607946][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 516.737503][ T9] usb 5-1: device descriptor read/64, error -71 [ 516.807293][ T1226] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 516.848202][ T9] usb usb5-port1: attempt power cycle [ 516.967563][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 516.976648][ T1226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.992778][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.127267][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 517.383658][ T5894] usb 1-1: USB disconnect, device number 100 [ 517.418499][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.427536][ T1226] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 517.447354][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 517.456811][ T1226] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.473703][ T9] usb 5-1: device descriptor read/8, error -71 [ 517.484532][ T5894] cp210x 1-1:0.0: device disconnected [ 517.488523][ T1226] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 517.502752][ T1226] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 517.511169][ T1226] usb 4-1: Manufacturer: syz [ 517.528319][ T1226] usb 4-1: config 0 descriptor?? [ 517.720719][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 517.758280][ T9] usb 5-1: device descriptor read/8, error -71 [ 517.893589][ T9] usb usb5-port1: unable to enumerate USB device [ 517.997263][ T1226] rc_core: IR keymap rc-hauppauge not found [ 518.003265][ T1226] Registered IR keymap rc-empty [ 518.011565][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.018102][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 518.039898][T10333] usb 2-1: USB disconnect, device number 93 [ 518.057130][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.066106][T10333] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 518.108339][ T1226] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 518.126071][ T1226] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 518.151558][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.178011][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.207435][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.237765][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.269344][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.297377][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.311382][T12334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 518.394563][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.418252][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.447371][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.480521][ T1226] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.540666][ T1226] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 518.550396][ T1226] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 518.710914][T12337] FAULT_INJECTION: forcing a failure. [ 518.710914][T12337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.734842][ T1226] usb 4-1: USB disconnect, device number 91 [ 518.811540][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.1.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.811577][T12337] Tainted: [L]=SOFTLOCKUP [ 518.811586][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.811600][T12337] Call Trace: [ 518.811610][T12337] [ 518.811620][T12337] dump_stack_lvl+0xe8/0x150 [ 518.811656][T12337] should_fail_ex+0x412/0x560 [ 518.811705][T12337] _copy_from_user+0x2d/0xb0 [ 518.811735][T12337] do_sock_getsockopt+0x165/0x3f0 [ 518.811768][T12337] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 518.811802][T12337] ? ksys_write+0x1fc/0x270 [ 518.811833][T12337] __x64_sys_getsockopt+0x1a4/0x240 [ 518.811871][T12337] do_syscall_64+0x14d/0xf80 [ 518.811902][T12337] ? trace_irq_disable+0x3b/0x150 [ 518.811923][T12337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.811947][T12337] ? clear_bhb_loop+0x40/0x90 [ 518.811975][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.811998][T12337] RIP: 0033:0x7f3b89f9c819 [ 518.812019][T12337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.812040][T12337] RSP: 002b:00007f3b8adf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 518.812063][T12337] RAX: ffffffffffffffda RBX: 00007f3b8a215fa0 RCX: 00007f3b89f9c819 [ 518.812080][T12337] RDX: 0000000000000018 RSI: 0000000000000107 RDI: 0000000000000003 [ 518.812103][T12337] RBP: 00007f3b8adf7090 R08: 0000200000000780 R09: 0000000000000000 [ 518.812119][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.812134][T12337] R13: 00007f3b8a216038 R14: 00007f3b8a215fa0 R15: 00007f3b8a33fa48 [ 518.812167][T12337] [ 519.260805][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 519.579812][T12349] netlink: 'syz.4.1621': attribute type 15 has an invalid length. [ 519.626520][T12349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1621'. [ 519.640382][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 520.095124][T12365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.368283][T12363] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 520.592859][T12366] tipc: Started in network mode [ 520.598064][T12366] tipc: Node identity 16e1bc1f7897, cluster identity 4711 [ 520.605370][T12366] tipc: Enabled bearer , priority 0 [ 520.648230][T12368] syzkaller0: entered promiscuous mode [ 520.653927][T12368] syzkaller0: entered allmulticast mode [ 520.794827][T12368] tipc: Resetting bearer [ 520.876574][T12368] tipc: Disabling bearer [ 521.011859][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 521.011884][ T30] audit: type=1326 audit(1775737630.010:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.075397][ T30] audit: type=1326 audit(1775737630.010:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.156275][ T30] audit: type=1326 audit(1775737630.010:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.275228][ T30] audit: type=1326 audit(1775737630.010:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.335466][ T30] audit: type=1326 audit(1775737630.010:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.396058][ T30] audit: type=1326 audit(1775737630.010:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.475907][ T30] audit: type=1326 audit(1775737630.010:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.556317][ T30] audit: type=1326 audit(1775737630.010:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.613460][ T30] audit: type=1326 audit(1775737630.010:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 521.820340][ T30] audit: type=1326 audit(1775737630.010:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b89f9c819 code=0x7ffc0000 [ 522.115977][T12392] binder: 12391:12392 ioctl c0306201 2000000007c0 returned -14 [ 523.397335][ T5894] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 523.557311][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 523.569850][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 523.599191][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.655570][ T5894] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.708727][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0 [ 523.760221][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 523.769671][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.784798][ T5894] usb 5-1: Product: syz [ 523.793241][ T5894] usb 5-1: Manufacturer: syz [ 523.798295][ T5894] usb 5-1: SerialNumber: syz [ 523.823090][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input49 [ 524.030935][ T5894] usb 5-1: USB disconnect, device number 108 [ 524.037167][ T5180] bcm5974 5-1:1.0: could not read from device [ 524.105474][T12382] fuse: Unknown parameter 'fD' [ 524.525834][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 524.778865][T10333] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 524.965908][T10333] usb 3-1: config 255 has an invalid interface number: 133 but max is 0 [ 524.977544][T10333] usb 3-1: config 255 has no interface number 0 [ 524.983867][T10333] usb 3-1: config 255 interface 133 has no altsetting 0 [ 525.041144][T10333] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 525.052903][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.087436][T10333] usb 3-1: Product: syz [ 525.103852][T10333] usb 3-1: Manufacturer: syz [ 525.132323][T10333] usb 3-1: SerialNumber: syz [ 525.365993][T10333] s2255 3-1:255.133: Could not find bulk-in endpoint [ 525.375928][T10333] Sensoray 2255 driver load failed: 0xfffffff4 [ 525.392342][T10333] s2255 3-1:255.133: probe with driver s2255 failed with error -12 [ 525.415737][T10333] usbhid 3-1:255.133: couldn't find an input interrupt endpoint [ 525.449170][T10333] usb 3-1: USB disconnect, device number 124 [ 525.594598][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 525.847450][ T5887] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 525.988389][ T5887] usb 4-1: device descriptor read/64, error -71 [ 526.037002][T12445] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 526.049224][T12453] FAULT_INJECTION: forcing a failure. [ 526.049224][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 526.063089][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.2.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.063123][T12453] Tainted: [L]=SOFTLOCKUP [ 526.063133][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 526.063146][T12453] Call Trace: [ 526.063155][T12453] [ 526.063164][T12453] dump_stack_lvl+0xe8/0x150 [ 526.063202][T12453] should_fail_ex+0x412/0x560 [ 526.063242][T12453] should_failslab+0xa8/0x100 [ 526.063272][T12453] ? __pmd_alloc+0xc1/0x5c0 [ 526.063294][T12453] kmem_cache_alloc_noprof+0x87/0x650 [ 526.063318][T12453] ? set_page_refcounted+0xa0/0x1e0 [ 526.063355][T12453] __pmd_alloc+0xc1/0x5c0 [ 526.063381][T12453] handle_mm_fault+0xe96/0x3310 [ 526.063430][T12453] ? handle_mm_fault+0xee/0x3310 [ 526.063474][T12453] ? __pfx_handle_mm_fault+0x10/0x10 [ 526.063529][T12453] ? lock_mm_and_find_vma+0xa7/0x340 [ 526.063559][T12453] do_user_addr_fault+0x75b/0x1340 [ 526.063604][T12453] exc_page_fault+0x6a/0xc0 [ 526.063637][T12453] asm_exc_page_fault+0x26/0x30 [ 526.063659][T12453] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 526.063682][T12453] Code: c4 10 e9 94 48 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 526.063702][T12453] RSP: 0018:ffffc90003af7d78 EFLAGS: 00050202 [ 526.063730][T12453] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 526.063745][T12453] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffc90003af7e00 [ 526.063761][T12453] RBP: ffffc90003af7e68 R08: 0000000000000003 R09: 0000000000000004 [ 526.063775][T12453] R10: dffffc0000000000 R11: fffff5200075efc0 R12: ffff88806f58bf40 [ 526.063792][T12453] R13: ffffc90003af7de0 R14: ffffc90003af7e00 R15: 0000200000000780 [ 526.063827][T12453] _copy_from_user+0x7a/0xb0 [ 526.063856][T12453] do_sock_getsockopt+0x165/0x3f0 [ 526.063889][T12453] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 526.063923][T12453] ? ksys_write+0x1fc/0x270 [ 526.063954][T12453] __x64_sys_getsockopt+0x1a4/0x240 [ 526.063993][T12453] do_syscall_64+0x14d/0xf80 [ 526.064021][T12453] ? trace_irq_disable+0x3b/0x150 [ 526.064041][T12453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.064064][T12453] ? clear_bhb_loop+0x40/0x90 [ 526.064092][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.064114][T12453] RIP: 0033:0x7fadd259c819 [ 526.064135][T12453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.064153][T12453] RSP: 002b:00007fadd3388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 526.064175][T12453] RAX: ffffffffffffffda RBX: 00007fadd2815fa0 RCX: 00007fadd259c819 [ 526.064192][T12453] RDX: 0000000000000018 RSI: 0000000000000107 RDI: 0000000000000003 [ 526.064205][T12453] RBP: 00007fadd3388090 R08: 0000200000000780 R09: 0000000000000000 [ 526.064220][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.064234][T12453] R13: 00007fadd2816038 R14: 00007fadd2815fa0 R15: 00007fadd293fa48 [ 526.064268][T12453] [ 526.794166][ T5887] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 526.861902][T12461] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 526.872305][T12445] team0: Port device batadv1 added [ 526.912096][T12461] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 526.937310][ T5887] usb 4-1: device descriptor read/64, error -71 [ 527.047665][ T5887] usb usb4-port1: attempt power cycle [ 527.398178][ T5887] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 527.427957][ T5887] usb 4-1: device descriptor read/8, error -71 [ 527.667298][ T5887] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 527.712055][ T5887] usb 4-1: device descriptor read/8, error -71 [ 527.827763][ T5887] usb usb4-port1: unable to enumerate USB device [ 528.054147][T12489] FAULT_INJECTION: forcing a failure. [ 528.054147][T12489] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 528.077726][T12489] CPU: 1 UID: 0 PID: 12489 Comm: syz.2.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.077764][T12489] Tainted: [L]=SOFTLOCKUP [ 528.077771][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.077783][T12489] Call Trace: [ 528.077791][T12489] [ 528.077799][T12489] dump_stack_lvl+0xe8/0x150 [ 528.077831][T12489] should_fail_ex+0x412/0x560 [ 528.077864][T12489] prepare_alloc_pages+0x22a/0x650 [ 528.077895][T12489] __alloc_frozen_pages_noprof+0x12f/0x380 [ 528.077924][T12489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.077952][T12489] ? __pfx_policy_nodemask+0x10/0x10 [ 528.077980][T12489] ? __lock_acquire+0x6b5/0x2cf0 [ 528.078007][T12489] alloc_pages_mpol+0x232/0x4a0 [ 528.078036][T12489] alloc_pages_noprof+0xa8/0x1a0 [ 528.078062][T12489] pte_alloc_one+0x22/0x370 [ 528.078093][T12489] __pte_alloc+0x25/0x1a0 [ 528.078120][T12489] do_pte_missing+0x2c47/0x3490 [ 528.078145][T12489] ? do_raw_spin_unlock+0xf5/0x210 [ 528.078178][T12489] handle_mm_fault+0x1bec/0x3310 [ 528.078221][T12489] ? handle_mm_fault+0xee/0x3310 [ 528.078256][T12489] ? __pfx_handle_mm_fault+0x10/0x10 [ 528.078301][T12489] ? lock_mm_and_find_vma+0xa7/0x340 [ 528.078324][T12489] do_user_addr_fault+0x75b/0x1340 [ 528.078361][T12489] exc_page_fault+0x6a/0xc0 [ 528.078386][T12489] asm_exc_page_fault+0x26/0x30 [ 528.078413][T12489] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 528.078433][T12489] Code: c4 10 e9 94 48 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 528.078450][T12489] RSP: 0018:ffffc9000379fd78 EFLAGS: 00050202 [ 528.078473][T12489] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 528.078485][T12489] RDX: 0000000000000001 RSI: 0000200000000780 RDI: ffffc9000379fe00 [ 528.078498][T12489] RBP: ffffc9000379fe68 R08: 0000000000000003 R09: 0000000000000004 [ 528.078510][T12489] R10: dffffc0000000000 R11: fffff520006f3fc0 R12: ffff888057099cc0 [ 528.078523][T12489] R13: ffffc9000379fde0 R14: ffffc9000379fe00 R15: 0000200000000780 [ 528.078556][T12489] _copy_from_user+0x7a/0xb0 [ 528.078581][T12489] do_sock_getsockopt+0x165/0x3f0 [ 528.078608][T12489] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 528.078634][T12489] ? ksys_write+0x1fc/0x270 [ 528.078660][T12489] __x64_sys_getsockopt+0x1a4/0x240 [ 528.078691][T12489] do_syscall_64+0x14d/0xf80 [ 528.078714][T12489] ? trace_irq_disable+0x3b/0x150 [ 528.078731][T12489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.078750][T12489] ? clear_bhb_loop+0x40/0x90 [ 528.078772][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.078790][T12489] RIP: 0033:0x7fadd259c819 [ 528.078806][T12489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.078822][T12489] RSP: 002b:00007fadd3388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 528.078840][T12489] RAX: ffffffffffffffda RBX: 00007fadd2815fa0 RCX: 00007fadd259c819 [ 528.078853][T12489] RDX: 0000000000000018 RSI: 0000000000000107 RDI: 0000000000000003 [ 528.078865][T12489] RBP: 00007fadd3388090 R08: 0000200000000780 R09: 0000000000000000 [ 528.078877][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.078888][T12489] R13: 00007fadd2816038 R14: 00007fadd2815fa0 R15: 00007fadd293fa48 [ 528.078915][T12489] [ 529.340649][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1658'. [ 529.814600][T12518] netlink: 'syz.1.1664': attribute type 7 has an invalid length. [ 529.823443][T12518] netlink: 'syz.1.1664': attribute type 8 has an invalid length. [ 530.063160][T12522] netlink: 'syz.3.1663': attribute type 6 has an invalid length. [ 530.308451][T10333] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 530.457454][T10333] usb 3-1: device descriptor read/64, error -71 [ 530.747310][T10333] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 530.887302][T10333] usb 3-1: device descriptor read/64, error -71 [ 531.038949][T10333] usb usb3-port1: attempt power cycle [ 531.387424][T10333] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 531.409089][T10333] usb 3-1: device descriptor read/8, error -71 [ 531.647486][T10333] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 531.670435][T10333] usb 3-1: device descriptor read/8, error -71 [ 531.796585][T10333] usb usb3-port1: unable to enumerate USB device [ 532.044455][T12549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1673'. [ 532.464202][T12557] bridge_slave_0: left allmulticast mode [ 532.470174][T12557] bridge_slave_0: left promiscuous mode [ 532.476069][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.490022][T12557] bridge_slave_1: left allmulticast mode [ 532.495892][T12557] bridge_slave_1: left promiscuous mode [ 532.504726][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.520183][T12557] bond0: (slave bond_slave_0): Releasing backup interface [ 532.545166][T12557] team0: Port device team_slave_0 removed [ 532.556492][T12557] team0: Port device team_slave_1 removed [ 532.565848][T12557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.577511][T12557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.585576][T12557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 532.730271][T12571] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 532.730271][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 533.085169][T12578] netlink: 'syz.3.1681': attribute type 39 has an invalid length. [ 533.161765][T12578] hsr_slave_0 (unregistering): left promiscuous mode [ 533.190417][T12580] input: syz1 as /devices/virtual/input/input50 [ 533.449055][T12581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.498472][T12590] FAULT_INJECTION: forcing a failure. [ 533.498472][T12590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.518457][T12590] CPU: 0 UID: 0 PID: 12590 Comm: syz.4.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.518510][T12590] Tainted: [L]=SOFTLOCKUP [ 533.518519][T12590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.518534][T12590] Call Trace: [ 533.518543][T12590] [ 533.518554][T12590] dump_stack_lvl+0xe8/0x150 [ 533.518591][T12590] should_fail_ex+0x412/0x560 [ 533.518632][T12590] _copy_from_user+0x2d/0xb0 [ 533.518661][T12590] do_sock_getsockopt+0x165/0x3f0 [ 533.518695][T12590] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 533.518728][T12590] ? ksys_write+0x1fc/0x270 [ 533.518760][T12590] __x64_sys_getsockopt+0x1a4/0x240 [ 533.518796][T12590] do_syscall_64+0x14d/0xf80 [ 533.518827][T12590] ? trace_irq_disable+0x3b/0x150 [ 533.518847][T12590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.518870][T12590] ? clear_bhb_loop+0x40/0x90 [ 533.518898][T12590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.518928][T12590] RIP: 0033:0x7f853739c819 [ 533.518949][T12590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.518969][T12590] RSP: 002b:00007f85381f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 533.518993][T12590] RAX: ffffffffffffffda RBX: 00007f8537615fa0 RCX: 00007f853739c819 [ 533.519010][T12590] RDX: 0000000000000018 RSI: 0000000000000107 RDI: 0000000000000003 [ 533.519024][T12590] RBP: 00007f85381f7090 R08: 0000000000000000 R09: 0000000000000000 [ 533.519038][T12590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.519052][T12590] R13: 00007f8537616038 R14: 00007f8537615fa0 R15: 00007f853773fa48 [ 533.519086][T12590] [ 533.827326][ T5894] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 533.979059][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 534.003540][ T5894] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 534.033500][ T5894] usb 4-1: config 0 has no interface number 0 [ 534.073433][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 534.115291][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.152280][ T5894] usb 4-1: Product: syz [ 534.215434][ T5894] usb 4-1: Manufacturer: syz [ 534.232618][ T5894] usb 4-1: SerialNumber: syz [ 534.262425][ T5894] usb 4-1: config 0 descriptor?? [ 534.633671][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.669044][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.705588][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.728008][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.860486][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 535.017309][T10333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 535.167885][T10333] usb 3-1: Using ep0 maxpacket: 32 [ 535.205556][T10333] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 535.227456][T10333] usb 3-1: config 0 has no interface number 0 [ 535.238163][T12591] tunl0: Caught tx_queue_len zero misconfig [ 535.257341][T12591] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 535.265173][T10333] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 535.288835][ T5894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 535.294932][T10333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.308967][ T5894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 535.337322][T10333] usb 3-1: Product: syz [ 535.341561][T10333] usb 3-1: Manufacturer: syz [ 535.346191][T10333] usb 3-1: SerialNumber: syz [ 535.377912][T10333] usb 3-1: config 0 descriptor?? [ 535.410547][T10333] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 535.619486][T10333] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 535.651793][T10333] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 535.704412][T12591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.730036][T12591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.851207][ T5894] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 535.942909][T12659] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.1697'. [ 535.965672][ T5894] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 535.995425][ T5894] usb 4-1: USB disconnect, device number 96 [ 536.585405][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 536.607453][T10333] usb 3-1: USB disconnect, device number 3 [ 536.647401][T10333] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 536.695517][T10333] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 536.758121][T10333] quatech2 3-1:0.51: device disconnected [ 536.770096][T12663] loop2: detected capacity change from 0 to 7 [ 536.786670][T12663] loop2: [ 536.887510][T12663] loop2: partition table partially beyond EOD, truncated [ 537.015531][ T5894] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 537.209586][ T5894] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 537.240695][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.282122][ T5894] usb 4-1: config 0 descriptor?? [ 537.375798][ T5894] pwc: Creative Labs Webcam 5 detected. [ 537.495840][T12688] loop5: detected capacity change from 0 to 7 [ 537.521775][T12688] Dev loop5: unable to read RDB block 7 [ 537.549319][T12688] loop5: unable to read partition table [ 537.563495][T12688] loop5: partition table beyond EOD, truncated [ 537.590575][T12688] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 537.731432][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.775735][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.896434][ T5887] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 537.923516][ T5887] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 537.968998][ T5894] pwc: recv_control_msg error -71 req 02 val 2b00 [ 538.037591][ T5894] pwc: recv_control_msg error -71 req 02 val 2700 [ 538.087369][ T5894] pwc: recv_control_msg error -71 req 04 val 1600 [ 538.119590][ T5894] pwc: recv_control_msg error -71 req 02 val 2c00 [ 538.160650][ T5894] pwc: recv_control_msg error -71 req 04 val 1000 [ 538.188598][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 538.207393][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 538.221576][T12698] fido_id[12698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 538.254975][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 538.266949][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 538.295508][ T5894] pwc: recv_control_msg error -71 req 06 val 0600 [ 538.319500][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 538.347406][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 538.356690][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.376940][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.404298][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.422124][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 538.444540][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 538.458103][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 538.485314][ T5894] pwc: Failed to power off camera (-71) [ 538.495696][ T5894] pwc: Registered as video103. [ 538.526575][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 538.576326][ T5894] usb 4-1: USB disconnect, device number 97 [ 538.647330][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 538.687598][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 538.817529][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 538.829229][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 93, changing to 7 [ 538.849666][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 538.867928][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.878342][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.898677][ T9] usb 5-1: Product: 䙫ᖋ빳ì·æ‰›ê¤‡â–¨ìšŠà­®îš†í‚•ë‡–࣯줛ꣵⅫ絫劃凇⟆ç’듭膚똅瞮㘋컳熽춞㫵椞䒎Ⴢ퓰ã±è¼¾å¾µê…㊧픧㯵î€ëŸ¥à¦‹é¥©é°†ëµªî¹‚຺艊儻鷱믯Ȣ蚚ࢸ鄵뿸훀Ⓥ絜࿼뮀㒿ⷢ䑥瀩夥筦술㛢ﻱî‡ä«žé¤• [ 538.924875][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.947324][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 538.955405][ T10] usb 3-1: SerialNumber: syz [ 538.967287][ T9] usb 5-1: Manufacturer: ä Š [ 538.986875][ T10] cdc_acm 3-1:1.0: skipping garbage [ 538.992727][ T9] usb 5-1: SerialNumber: Ц [ 539.006190][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 539.314036][ T5894] usb 3-1: USB disconnect, device number 4 [ 539.387226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 539.422826][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.435264][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.476662][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.507324][ T5887] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 539.515660][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.549532][T12707] sctp: [Deprecated]: syz.4.1707 (pid 12707) Use of int in max_burst socket option. [ 539.549532][T12707] Use struct sctp_assoc_value instead [ 539.596653][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.617061][T12736] loop5: detected capacity change from 0 to 4096 [ 539.638288][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.648878][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 539.672455][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 539.683678][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 539.692343][ T9] usb 5-1: unit 1 not found! [ 539.718975][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.754550][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 539.769611][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 539.781963][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.801189][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.810795][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.862226][ T10] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 539.892047][ T10] usb 1-1: config 0 has no interface number 0 [ 539.919076][ T10] usb 1-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 539.943518][ T10] usb 1-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 539.965386][ T10] usb 1-1: config 0 interface 81 has no altsetting 0 [ 539.975814][ T10] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 539.979296][ T5887] usb 4-1: config 0 descriptor?? [ 539.991608][T12740] xt_hashlimit: max too large, truncated to 1048576 [ 540.044271][ T9] usb 5-1: USB disconnect, device number 109 [ 540.052635][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.101395][ T10] usb 1-1: Product: syz [ 540.125016][ T10] usb 1-1: Manufacturer: syz [ 540.134265][T12726] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 540.145913][ T10] usb 1-1: SerialNumber: syz [ 540.263372][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.360836][ T10] usb 1-1: config 0 descriptor?? [ 540.478225][ T1226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 540.579190][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 540.596164][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.625851][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.651350][ T5887] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 540.669808][ T1226] usb 3-1: Using ep0 maxpacket: 16 [ 540.693435][ T1226] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 540.726158][ T1226] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 540.751721][ T1226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.779450][ T1226] usb 3-1: config 0 descriptor?? [ 540.796291][ T1226] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 540.915260][ T10] peak_usb 1-1:0.81: probe with driver peak_usb failed with error 81 [ 540.947289][ T10] usb 1-1: USB disconnect, device number 101 [ 541.143271][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 541.316188][T12766] sctp: [Deprecated]: syz.4.1719 (pid 12766) Use of int in max_burst socket option. [ 541.316188][T12766] Use struct sctp_assoc_value instead [ 541.360903][T12766] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1719'. [ 541.889667][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 542.391823][ T10] usb 4-1: USB disconnect, device number 98 [ 542.569571][T10333] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 542.748546][T10333] usb 2-1: Using ep0 maxpacket: 32 [ 542.757341][T10333] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 542.767297][T10333] usb 2-1: config 0 has no interface number 0 [ 542.781071][ T5918] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 542.796298][T10333] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 542.849078][T10333] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 542.873574][T10333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.903605][T10333] usb 2-1: Product: syz [ 542.915074][T10333] usb 2-1: Manufacturer: syz [ 542.931851][T10333] usb 2-1: SerialNumber: syz [ 543.021873][T12803] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.1726'. [ 543.037961][T10333] usb 2-1: config 0 descriptor?? [ 543.044391][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 543.052072][T10333] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 543.064511][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.076824][T10333] em28xx 2-1:0.132: Video interface 132 found: [ 543.100866][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.156575][ T5918] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 543.180166][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.202049][ T5918] usb 5-1: Product: syz [ 543.206407][ T5918] usb 5-1: Manufacturer: syz [ 543.302955][ T5918] usb 5-1: SerialNumber: syz [ 543.335040][ T5918] usb 5-1: config 0 descriptor?? [ 543.398169][ T5894] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 543.547348][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 543.563233][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.578867][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.637489][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.689390][ T5918] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 543.716401][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 543.772059][ T5918] imon:send_packet: packet tx failed (-71) [ 543.808521][ T5918] imon 5-1:0.0: panel buttons/knobs setup failed [ 543.928471][ T5918] rc_core: IR keymap rc-imon-pad not found [ 543.934485][ T5918] Registered IR keymap rc-empty [ 543.940678][ T5918] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 543.951348][ T5918] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 544.025288][ T5918] imon:send_packet: packet tx failed (-71) [ 544.048300][ T5894] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 544.067514][ T5918] imon 5-1:0.0: remote input dev register failed [ 544.089783][ T5918] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 544.114685][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.168925][ T5894] usb 4-1: config 0 descriptor?? [ 544.209268][ T5894] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 544.242483][T10333] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 544.260837][ T5918] imon 5-1:0.0: unable to initialize intf0, err 0 [ 544.278153][ T5894] usbhid 4-1:0.0: can't add hid device: -22 [ 544.297250][ T5918] imon:imon_probe: failed to initialize context! [ 544.317354][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 544.324622][ T5918] imon 5-1:0.0: unable to register, err -19 [ 544.331686][T10333] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 544.377647][T10333] em28xx 2-1:0.132: board has no eeprom [ 544.393673][ T5918] usb 5-1: USB disconnect, device number 110 [ 544.488943][T10333] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 544.509245][T10333] em28xx 2-1:0.132: analog set to bulk mode. [ 544.537788][ T5887] em28xx 2-1:0.132: Registering V4L2 extension [ 544.577703][ T5894] usb 3-1: USB disconnect, device number 5 [ 544.699274][T10333] usb 4-1: USB disconnect, device number 99 [ 544.764118][ T5887] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 544.822093][ T5887] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 544.867309][ T5887] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 544.894096][ T5887] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 544.949118][T12794] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 544.971928][T12794] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 545.010395][ T9] usb 2-1: USB disconnect, device number 95 [ 545.018695][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 545.081820][ T5894] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 545.146206][ T5887] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 545.180268][ T5887] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 545.197698][ T5887] em28xx 2-1:0.132: No AC97 audio processor [ 545.219588][ T5887] usb 2-1: Decoder not found [ 545.224258][ T5887] em28xx 2-1:0.132: failed to create media graph [ 545.251457][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 545.255212][ T5887] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 545.276496][ T5887] em28xx 2-1:0.132: Remote control support is not available for this card. [ 545.290682][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.322024][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.337254][ T9] em28xx 2-1:0.132: Closing input extension [ 545.358053][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.399862][ T9] em28xx 2-1:0.132: Freeing device [ 545.405717][ T5894] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 545.436546][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.486219][ T5894] usb 3-1: config 0 descriptor?? [ 545.841387][T12843] syzkaller0: entered promiscuous mode [ 545.854971][T12843] syzkaller0: entered allmulticast mode [ 545.902490][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 545.920957][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 545.957753][ T5894] usb 3-1: USB disconnect, device number 6 [ 546.535413][T12868] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 546.969871][T12884] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.1740'. [ 547.767838][T12886] loop5: detected capacity change from 0 to 7 [ 547.776925][ T5824] Dev loop5: unable to read RDB block 7 [ 547.783519][ T5824] loop5: unable to read partition table [ 547.789757][ T5824] loop5: partition table beyond EOD, truncated [ 547.797095][T12886] Dev loop5: unable to read RDB block 7 [ 547.822553][T12886] loop5: unable to read partition table [ 547.842925][T12886] loop5: partition table beyond EOD, truncated [ 547.867345][T12886] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.493791][T12896] tmpfs: Unknown parameter 'í¼º´ªiḇ¡”ëÝ1ôút!©á¨' [ 548.505218][T12896] delete_channel: no stack [ 548.797419][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 548.962418][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 548.973771][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 548.983916][ T9] usb 5-1: config 0 has no interface number 0 [ 548.990341][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 549.006340][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 549.040006][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.057304][ T9] usb 5-1: Product: syz [ 549.061758][ T9] usb 5-1: Manufacturer: syz [ 549.071744][ T9] usb 5-1: SerialNumber: syz [ 549.100818][ T9] usb 5-1: config 0 descriptor?? [ 549.118264][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 549.326338][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 549.544415][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 549.686843][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1746'. [ 549.748838][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 549.886736][ T9] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 549.916305][ T9] em28xx 5-1:0.132: board has no eeprom [ 549.977298][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 549.985187][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 550.042270][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 550.048666][T12903] syzkaller0: entered promiscuous mode [ 550.054426][T12903] syzkaller0: entered allmulticast mode [ 550.084034][ T9] usb 5-1: USB disconnect, device number 111 [ 550.113571][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 550.187306][ T5894] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 550.310319][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 550.324142][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 550.344386][ T5894] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 550.355797][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.374132][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 550.391059][ T5894] usb 4-1: config 0 descriptor?? [ 550.436986][ T10] usb 5-1: Decoder not found [ 550.444688][ T10] em28xx 5-1:0.132: failed to create media graph [ 550.483518][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 550.511326][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 550.523441][ T9] em28xx 5-1:0.132: Closing input extension [ 550.598902][ T9] em28xx 5-1:0.132: Freeing device [ 550.712840][T12920] delete_channel: no stack [ 551.020188][T12924] loop5: detected capacity change from 0 to 7 [ 551.036885][ T5824] Dev loop5: unable to read RDB block 7 [ 551.053772][ T5824] loop5: unable to read partition table [ 551.061502][ T5824] loop5: partition table beyond EOD, truncated [ 551.077728][T12924] Dev loop5: unable to read RDB block 7 [ 551.088524][T12924] loop5: unable to read partition table [ 551.102874][T12924] loop5: partition table beyond EOD, truncated [ 551.120267][T12924] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 551.782541][T12930] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.1754'. [ 552.097306][T10333] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 552.302140][T10333] usb 3-1: Using ep0 maxpacket: 8 [ 552.310578][T10333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.324992][T10333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.369708][T10333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 552.497859][T10333] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 552.506973][T10333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.697998][T10333] usb 3-1: config 0 descriptor?? [ 552.716085][ T5894] usb 4-1: Cannot set autoneg [ 552.721314][ T5894] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 553.141787][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x4 [ 553.167590][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x6 [ 553.181052][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.197297][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.204447][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.244395][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.284714][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.305014][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.317283][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.324315][T10333] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 553.341727][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1755'. [ 553.499758][T10333] elecom 0003:056E:00FE.001A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 554.317046][T12941] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 554.322490][ T5918] usb 3-1: USB disconnect, device number 7 [ 554.476607][ T5894] usb 4-1: USB disconnect, device number 100 [ 554.542821][T12951] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1759'. [ 554.908760][ T5894] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 554.978099][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 555.078542][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 555.086542][ T5894] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 555.095325][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 555.110698][ T5894] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 555.120370][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.128895][ T5894] usb 4-1: Product: syz [ 555.133275][ T5894] usb 4-1: Manufacturer: syz [ 555.138740][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 555.171146][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.187914][ T5894] usb 4-1: SerialNumber: syz [ 555.197312][ T9] usb 2-1: config 0 has no interface number 0 [ 555.216312][T12966] fuse: Invalid uid '00000000000000000003' [ 555.228808][ T5894] r8152-cfgselector 4-1: Unknown version 0x0000 [ 555.256434][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 555.268188][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 555.286866][ T10] usb 5-1: config 1 has no interface number 0 [ 555.293230][ T5894] r8152-cfgselector 4-1: config 0 descriptor?? [ 555.306425][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.358518][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 555.380875][ T9] usb 2-1: Product: syz [ 555.387047][ T9] usb 2-1: Manufacturer: syz [ 555.408587][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 555.423791][ T9] usb 2-1: SerialNumber: syz [ 555.488236][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 555.500626][ T9] usb 2-1: config 0 descriptor?? [ 555.520626][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 555.543956][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.599036][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 555.612359][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.624161][ T10] usb 5-1: Product: syz [ 555.631717][ T10] usb 5-1: Manufacturer: syz [ 555.636846][ T10] usb 5-1: SerialNumber: syz [ 555.701093][T12960] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 555.709178][T12960] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 555.732016][ T10] usb 5-1: Error in usbnet_get_endpoints (-22) [ 555.821450][ T10] r8152-cfgselector 4-1: USB disconnect, device number 101 [ 555.899451][T12976] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.1767'. [ 556.717311][ T5887] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 556.786246][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.796975][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.829908][ T9] gspca_spca1528: reg_w err -71 [ 556.835658][ T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 556.867250][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 556.872612][ T9] usb 2-1: USB disconnect, device number 96 [ 556.878156][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.925717][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 556.940801][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.956972][ T5887] usb 4-1: Product: syz [ 556.976220][T12991] qrtr: Invalid version 159 [ 557.037815][ T5887] usb 4-1: Manufacturer: syz [ 557.085316][ T5887] usb 4-1: SerialNumber: syz [ 557.158826][ T5887] usb 4-1: config 0 descriptor?? [ 557.369830][T12997] ksmbd: Unknown IPC event: 4, ignore. [ 557.494291][T12982] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[12982] [ 557.542978][ T5887] msi2500 4-1:0.0: Registered as swradio24 [ 557.567050][ T5887] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 557.612756][ T5887] usb 4-1: USB disconnect, device number 102 [ 557.922752][ T5895] usb 5-1: USB disconnect, device number 112 [ 558.059708][T13026] batadv_slave_1: entered promiscuous mode [ 558.069047][T13025] batadv_slave_1: left promiscuous mode [ 558.331253][T13029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.539214][T13038] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 558.627290][ T5887] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 558.822392][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 558.828237][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 558.837479][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 558.851780][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 558.860653][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 558.872523][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1784'. [ 558.882879][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1784'. [ 558.911234][ T5887] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 558.921484][ T5887] usb 5-1: config 1 has no interface number 0 [ 558.932449][ T5887] usb 5-1: config 1 interface 151 has no altsetting 0 [ 558.954236][ T5887] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 558.963918][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.972151][ T5887] usb 5-1: Product: syz [ 558.977752][ T5887] usb 5-1: Manufacturer: 〉 [ 558.982495][ T5887] usb 5-1: SerialNumber: syz [ 558.999057][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.011025][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.104629][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.131428][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 559.147322][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 559.165517][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.167700][ T5944] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 559.175754][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.201162][ T9] usb 2-1: Product: syz [ 559.205399][ T9] usb 2-1: Manufacturer: syz [ 559.396869][ T5944] usb 3-1: device descriptor read/64, error -71 [ 559.405292][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 559.440999][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 559.451719][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 559.473949][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 559.707316][ T5944] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 559.857903][ T5944] usb 3-1: device descriptor read/64, error -71 [ 559.966413][T13050] input: syz0 as /devices/virtual/input/input56 [ 559.978104][ T5944] usb usb3-port1: attempt power cycle [ 560.148983][T13053] binder: 13051:13053 ioctl c0306201 0 returned -14 [ 560.347600][ T5944] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 560.368180][ T5944] usb 3-1: device descriptor read/8, error -71 [ 560.374438][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.375508][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.608497][T13058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.617547][T13058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.622273][T10333] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 560.647487][ T5944] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 560.668586][ T5944] usb 3-1: device descriptor read/8, error -71 [ 560.779325][ T5944] usb usb3-port1: unable to enumerate USB device [ 560.797285][T10333] usb 4-1: Using ep0 maxpacket: 8 [ 560.804758][T10333] usb 4-1: config index 0 descriptor too short (expected 80, got 36) [ 560.813632][T10333] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 560.822748][T10333] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 560.833346][T10333] usb 4-1: config 0 has no interface number 0 [ 560.842777][T10333] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 560.852290][T10333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.860751][T10333] usb 4-1: Product: syz [ 560.865008][T10333] usb 4-1: Manufacturer: syz [ 560.870018][T10333] usb 4-1: SerialNumber: syz [ 560.879298][T10333] usb 4-1: config 0 descriptor?? [ 560.890425][T10333] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 561.090683][T10333] usb 4-1: USB disconnect, device number 103 [ 561.177859][ T5918] usb 2-1: USB disconnect, device number 97 [ 561.280107][ T5887] gspca_main: pac7311-2.14.0 probing 093a:260e [ 561.321857][ T5887] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 561.339808][ T5887] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 561.397007][ T5887] usb 5-1: USB disconnect, device number 113 [ 561.657126][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 561.667974][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 561.837307][ T5887] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 562.007583][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 562.014808][ T5887] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 562.024120][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.067621][ T5887] usb 5-1: config 0 descriptor?? [ 562.112239][ T5887] as10x_usb: device has been detected [ 562.128791][ T5887] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 562.190245][ T5887] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 562.325176][ T5887] as10x_usb: error during firmware upload part1 [ 562.349013][ T5887] Registered device nBox DVB-T Dongle [ 562.596037][T13065] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 562.750374][T13065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.884004][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 562.906296][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.913038][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.920881][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 562.920952][ T30] audit: type=1326 audit(1775737671.880:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 562.967483][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 562.980437][T13065] bond2: (slave syz_tun): making interface the new active one [ 563.019330][T13083] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1789'. [ 563.029327][T13065] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 563.034857][ T30] audit: type=1326 audit(1775737671.880:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.081153][T13083] bond2: entered promiscuous mode [ 563.086365][T13083] syz_tun: entered promiscuous mode [ 563.091939][T13083] bond2: entered allmulticast mode [ 563.102080][ T30] audit: type=1326 audit(1775737671.880:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.102134][T13083] syz_tun: entered allmulticast mode [ 563.143422][ T30] audit: type=1326 audit(1775737671.880:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.173554][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.189371][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.218928][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.237569][ T30] audit: type=1326 audit(1775737671.880:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.267286][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.276731][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.318330][ T30] audit: type=1326 audit(1775737671.880:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.353809][ T9] usb 2-1: config 0 descriptor?? [ 563.372288][ T30] audit: type=1326 audit(1775737671.880:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.404928][ T30] audit: type=1326 audit(1775737671.880:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.430640][ T30] audit: type=1326 audit(1775737671.890:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.654028][ T30] audit: type=1326 audit(1775737671.890:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 563.802039][ T9] plantronics 0003:047F:FFFF.001B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 563.984208][ T9] usb 2-1: USB disconnect, device number 98 [ 564.727350][ T5887] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 564.797388][ T5918] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 564.857332][ T5887] usb 3-1: device descriptor read/64, error -71 [ 564.919065][ T5944] usb 5-1: USB disconnect, device number 114 [ 564.993322][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.008687][ T5944] Unregistered device nBox DVB-T Dongle [ 565.010741][ T5944] as10x_usb: device has been disconnected [ 565.032624][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.048374][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.065399][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.075242][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.089090][ T5918] usb 2-1: config 0 descriptor?? [ 565.097723][ T5887] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 565.238490][ T5887] usb 3-1: device descriptor read/64, error -71 [ 565.259548][T13113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.370266][ T5887] usb usb3-port1: attempt power cycle [ 565.520417][ T5918] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 565.717462][ T5887] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 565.738117][ T5887] usb 3-1: device descriptor read/8, error -71 [ 565.897411][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 565.979931][ T5887] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 566.009019][ T5887] usb 3-1: device descriptor read/8, error -71 [ 566.059301][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.071056][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.086072][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 566.095812][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.104117][ T9] usb 4-1: SerialNumber: syz [ 566.127797][ T5887] usb usb3-port1: unable to enumerate USB device [ 566.347330][ T5944] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 566.537346][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 566.544907][ T5944] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.556779][ T5944] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.567242][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 566.574027][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 566.583557][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.595557][ T5944] usb 5-1: config 0 descriptor?? [ 566.835358][T13122] fuse: Unknown parameter ' [ 566.835358][T13122] 0x000000000000000a' [ 566.922432][ T9] usb 4-1: 0:2 : does not exist [ 567.003556][ T9] usb 4-1: USB disconnect, device number 104 [ 567.057088][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.596994][ T5944] usb 2-1: USB disconnect, device number 99 [ 568.113575][T13146] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.1811'. [ 568.930971][T13150] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1812'. [ 569.300816][ T5918] usb 5-1: USB disconnect, device number 115 [ 570.059655][T13166] IPVS: length: 4096 != 24 [ 570.626644][T13170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1819'. [ 570.872878][T13178] syz_tun: entered allmulticast mode [ 570.900503][T13178] dvmrp0: left allmulticast mode [ 571.786140][T13182] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 571.875347][T13182] batman_adv: batadv0: Adding interface: dummy0 [ 571.978275][T13182] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.085637][T13182] batman_adv: batadv0: Interface activated: dummy0 [ 572.497638][ T5887] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 572.669825][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.703825][ T5887] usb 4-1: config 2 has an invalid interface number: 32 but max is 0 [ 572.827338][ T5887] usb 4-1: config 2 has no interface number 0 [ 572.843493][ T5887] usb 4-1: config 2 interface 32 has no altsetting 0 [ 572.872260][ T5887] usb 4-1: string descriptor 0 read error: -22 [ 572.887557][ T5887] usb 4-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=3f.a4 [ 572.907023][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 572.915774][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.976015][ T5887] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 573.123442][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 573.123464][ T30] audit: type=1326 audit(1775737682.190:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.183363][ T30] audit: type=1326 audit(1775737682.230:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.212767][ T30] audit: type=1326 audit(1775737682.230:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.277708][ T30] audit: type=1326 audit(1775737682.230:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.388807][ T30] audit: type=1326 audit(1775737682.230:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.412384][ T30] audit: type=1326 audit(1775737682.230:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.438983][ T30] audit: type=1326 audit(1775737682.230:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.464198][ T30] audit: type=1326 audit(1775737682.230:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.487990][ T30] audit: type=1326 audit(1775737682.230:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 573.637378][ T5894] usb 3-1: device descriptor read/64, error -71 [ 573.887655][T13178] syz_tun: left allmulticast mode [ 573.892896][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 573.995171][T13232] loop5: detected capacity change from 0 to 7 [ 574.002877][T13232] Dev loop5: unable to read RDB block 7 [ 574.013925][T13232] loop5: unable to read partition table [ 574.020720][T13232] loop5: partition table beyond EOD, truncated [ 574.028428][T13232] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 574.049286][ T5894] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.059697][ T5894] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 574.081463][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.103105][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 574.154157][T13235] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 574.176408][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 574.216142][ T5894] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.226137][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.236305][ T5894] usb 3-1: Product: syz [ 574.248267][ T5894] usb 3-1: Manufacturer: syz [ 574.263233][ T5894] cdc_wdm 3-1:1.0: skipping garbage [ 574.268822][ T5894] cdc_wdm 3-1:1.0: skipping garbage [ 574.278002][ T5894] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 574.284297][ T5894] cdc_wdm 3-1:1.0: Unknown control protocol [ 574.601729][ T5894] usb 3-1: USB disconnect, device number 17 [ 575.241573][ T9] usb 4-1: USB disconnect, device number 105 [ 575.418279][ T5894] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 575.474677][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 575.540868][T13252] kernel profiling enabled (shift: 0) [ 575.587313][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 575.593924][T13256] @ÿ: renamed from bond_slave_0 [ 575.610488][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.657836][ T5894] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 575.687552][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.753459][ T5894] usb 5-1: Product: syz [ 575.777436][ T5894] usb 5-1: Manufacturer: syz [ 575.782103][ T5894] usb 5-1: SerialNumber: syz [ 575.830017][ T5894] usb 5-1: config 0 descriptor?? [ 575.977339][ T5887] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 576.230032][ T5894] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 576.280295][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 576.292752][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.317335][ T5887] usb 4-1: Product: syz [ 576.321564][ T5887] usb 4-1: Manufacturer: syz [ 576.327462][ T5887] usb 4-1: SerialNumber: syz [ 576.335526][ T5887] usb 4-1: config 0 descriptor?? [ 576.553669][ T5887] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 577.297646][ T1147] usb 5-1: Failed to submit usb control message: -110 [ 577.305332][ T1147] usb 5-1: unable to send the bmi data to the device: -110 [ 577.318965][ T1147] usb 5-1: unable to get target info from device [ 577.325634][ T1147] usb 5-1: could not get target info (-110) [ 577.344523][ T1147] usb 5-1: could not probe fw (-110) [ 577.621469][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1845'. [ 578.272057][ T5887] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 578.466782][T13287] loop5: detected capacity change from 0 to 7 [ 578.489593][T13287] Dev loop5: unable to read RDB block 7 [ 578.506467][T13287] loop5: unable to read partition table [ 578.523649][T13287] loop5: partition table beyond EOD, truncated [ 578.547576][T13287] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.658645][ T9] usb 4-1: USB disconnect, device number 106 [ 578.824128][ T5918] usb 5-1: USB disconnect, device number 116 [ 578.825681][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 578.846396][T13292] bridge_slave_0: entered promiscuous mode [ 578.859057][T13292] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 579.103475][T13307] netlink: 'syz.3.1852': attribute type 13 has an invalid length. [ 579.210965][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 579.357571][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 579.433380][T13316] program syz.1.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.612011][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 579.622653][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 579.638531][ T9] usb 3-1: config 27 has too many interfaces: 183, using maximum allowed: 32 [ 580.190897][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.228907][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 183 [ 580.249588][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=70.ed [ 580.269076][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.287337][ T9] usb 3-1: Product: syz [ 580.291648][ T9] usb 3-1: Manufacturer: syz [ 580.296276][ T9] usb 3-1: SerialNumber: syz [ 580.724464][T13330] loop5: detected capacity change from 0 to 7 [ 580.743959][T13330] Dev loop5: unable to read RDB block 7 [ 580.762892][T13330] loop5: unable to read partition table [ 580.783686][T13330] loop5: partition table beyond EOD, truncated [ 580.810114][T13330] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 581.237455][ T5918] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 581.452730][ T5918] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 581.462302][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.501326][ T5918] usb 2-1: config 0 has no interface number 0 [ 581.552543][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 581.574472][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.588695][ T5918] usb 2-1: Product: syz [ 581.597007][ T5918] usb 2-1: Manufacturer: syz [ 581.606376][ T5918] usb 2-1: SerialNumber: syz [ 581.625178][ T5918] usb 2-1: config 0 descriptor?? [ 581.643671][ T5918] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 582.052954][ T9] usb 3-1: USB disconnect, device number 18 [ 582.417127][T13349] netlink: 'syz.4.1864': attribute type 4 has an invalid length. [ 583.528289][T13363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1867'. [ 583.622395][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 583.932280][ T9] usb 2-1: USB disconnect, device number 100 [ 584.309049][T13372] loop5: detected capacity change from 0 to 7 [ 584.319143][T13372] Dev loop5: unable to read RDB block 7 [ 584.324787][T13372] loop5: unable to read partition table [ 584.342570][T13372] loop5: partition table beyond EOD, truncated [ 584.351540][T13372] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.549177][ T30] audit: type=1326 audit(1775737693.570:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.577858][ T30] audit: type=1326 audit(1775737693.570:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.605056][ T30] audit: type=1326 audit(1775737693.570:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.725841][T13383] fuse: Bad value for 'fd' [ 584.736685][ T30] audit: type=1326 audit(1775737693.570:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.741625][T13383] macvlan0: entered promiscuous mode [ 584.778010][ T30] audit: type=1326 audit(1775737693.570:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.805178][T13383] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 584.818069][ T30] audit: type=1326 audit(1775737693.570:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 584.847473][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 585.080711][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 585.096440][ T30] audit: type=1326 audit(1775737693.580:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 585.179138][ T30] audit: type=1326 audit(1775737693.580:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 585.232261][ T30] audit: type=1326 audit(1775737693.810:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 585.364193][ T30] audit: type=1326 audit(1775737693.810:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13369 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd259c819 code=0x7ffc0000 [ 585.397604][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 585.629105][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 585.677453][ T9] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 585.705309][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 585.723941][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.742062][ T9] usb 2-1: Product: syz [ 585.748108][ T9] usb 2-1: Manufacturer: syz [ 585.828622][ T9] usb 2-1: SerialNumber: syz [ 585.912924][ T9] usb 2-1: config 0 descriptor?? [ 586.007414][ T5918] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 586.135575][ T9] usb 2-1: USB disconnect, device number 101 [ 586.162533][ T5918] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.183415][ T5918] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 586.249271][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 586.277445][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 586.302586][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 586.333319][ T5918] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 586.343364][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 586.357343][ T5918] usb 5-1: Product: syz [ 586.383326][ T5918] usb 5-1: Manufacturer: syz [ 586.416863][ T5918] cdc_wdm 5-1:1.0: skipping garbage [ 586.437784][ T5918] cdc_wdm 5-1:1.0: skipping garbage [ 586.465476][ T5918] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 586.483771][ T5918] cdc_wdm 5-1:1.0: Unknown control protocol [ 586.618122][ T5918] usb 5-1: USB disconnect, device number 117 [ 587.701987][T13417] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.1882'. [ 587.812169][T13422] loop5: detected capacity change from 0 to 7 [ 587.867276][T13422] Dev loop5: unable to read RDB block 7 [ 587.924592][T13422] loop5: unable to read partition table [ 587.966169][T13422] loop5: partition table beyond EOD, truncated [ 587.991060][T13422] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 588.007358][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 588.228864][T13427] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1885'. [ 588.377374][ T9] usb 3-1: device descriptor read/64, error -71 [ 588.640765][T13435] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.1886'. [ 588.739889][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 588.957435][ T9] usb 3-1: device descriptor read/64, error -71 [ 589.184870][ T9] usb usb3-port1: attempt power cycle [ 589.647938][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 589.695307][ T9] usb 3-1: device descriptor read/8, error -71 [ 589.988030][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 590.017366][ T9] usb 3-1: device descriptor read/8, error -71 [ 590.178369][ T9] usb usb3-port1: unable to enumerate USB device [ 590.346807][T13461] loop2: detected capacity change from 0 to 7 [ 590.393179][ T5824] Dev loop2: unable to read RDB block 7 [ 590.413877][ T5824] loop2: AHDI p1 p2 [ 590.423239][ T5824] loop2: partition table partially beyond EOD, truncated [ 590.435210][ T5824] loop2: p1 start 1700753509 is beyond EOD, truncated [ 590.446769][T13461] Dev loop2: unable to read RDB block 7 [ 590.454803][T13461] loop2: AHDI p1 p2 [ 590.464318][T13461] loop2: partition table partially beyond EOD, truncated [ 590.473710][T13461] loop2: p1 start 1700753509 is beyond EOD, truncated [ 591.818276][T13515] 8021q: VLANs not supported on caif0 [ 592.088468][T13521] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1904'. [ 592.179822][ T9] IPVS: starting estimator thread 0... [ 592.365453][T13522] IPVS: using max 38 ests per chain, 91200 per kthread [ 593.299521][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 593.648729][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 593.658373][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.667883][ T9] usb 5-1: Product: syz [ 593.753583][ T9] usb 5-1: Manufacturer: syz [ 593.774397][ T9] usb 5-1: SerialNumber: syz [ 593.815212][ T9] usb 5-1: config 0 descriptor?? [ 594.136105][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 594.195293][ T9] usb 5-1: Please update to version 0.2 or newer [ 594.448487][ T1226] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 594.510497][ T9] usb 5-1: USB disconnect, device number 118 [ 594.607334][ T1226] usb 4-1: Using ep0 maxpacket: 8 [ 594.677618][ T1226] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 594.694742][ T1226] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 594.710556][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.728054][ T1226] usb 4-1: Product: syz [ 594.737458][ T1226] usb 4-1: Manufacturer: syz [ 594.744406][ T1226] usb 4-1: SerialNumber: syz [ 594.808525][ T1226] usb 4-1: config 0 descriptor?? [ 594.832913][T13564] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1912'. [ 594.880382][ T1226] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 594.897416][ T1226] usb 4-1: setting power ON [ 594.902254][ T1226] dvb-usb: bulk message failed: -22 (2/0) [ 595.036126][T13558] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 595.041786][ T1226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 595.080897][T13558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 595.101098][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 595.165680][T13575] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1911'. [ 595.186470][ T1226] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 595.317849][ T1226] usb 4-1: media controller created [ 595.414365][T13575] 0·: renamed from hsr_slave_1 (while UP) [ 595.430209][ T1226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.474410][ T1226] usb 4-1: selecting invalid altsetting 6 [ 595.496263][ T1226] usb 4-1: digital interface selection failed (-22) [ 595.508209][T13575] 0·: entered allmulticast mode [ 595.518589][ T1226] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 595.534387][T13575] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 595.567613][ T1226] usb 4-1: setting power OFF [ 595.574122][ T1226] dvb-usb: bulk message failed: -22 (2/0) [ 595.581263][ T1226] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 595.608673][ T1226] (NULL device *): no alternate interface [ 595.760682][ T5894] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 595.787842][ T1226] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 595.920931][ T5894] usb 2-1: device descriptor read/64, error -71 [ 596.207404][ T5894] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 596.347346][ T5894] usb 2-1: device descriptor read/64, error -71 [ 596.628036][ T5894] usb usb2-port1: attempt power cycle [ 596.977353][ T5894] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 597.008061][ T5894] usb 2-1: device descriptor read/8, error -71 [ 597.192203][ T5895] usb 4-1: USB disconnect, device number 107 [ 597.277337][ T5894] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 597.298553][ T5894] usb 2-1: device descriptor read/8, error -71 [ 597.458360][ T5894] usb usb2-port1: unable to enumerate USB device [ 597.837380][ T5894] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 597.989718][ T5894] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 598.003883][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.014629][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 598.036393][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.070294][ T5894] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 598.081326][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 598.090821][ T5894] usb 5-1: Product: syz [ 598.095229][ T5894] usb 5-1: Manufacturer: syz [ 598.129597][ T5894] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 598.253084][T13626] fuse: Bad value for 'fd' [ 598.270281][T13622] bond0 (unregistering): Released all slaves [ 598.797712][ T1226] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 598.967374][ T1226] usb 3-1: Using ep0 maxpacket: 16 [ 598.975648][ T1226] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.990690][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 599.000916][ T1226] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.014519][ T1226] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.029151][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.038885][ T1226] usb 3-1: Product: syz [ 599.043424][ T1226] usb 3-1: Manufacturer: syz [ 599.048388][ T1226] usb 3-1: SerialNumber: syz [ 599.292841][T13654] sctp: [Deprecated]: syz.1.1938 (pid 13654) Use of int in max_burst socket option deprecated. [ 599.292841][T13654] Use struct sctp_assoc_value instead [ 599.644102][T13667] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1943'. [ 599.796416][T13669] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1945'. [ 599.915337][T13673] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 599.996161][T13673] bond3: entered promiscuous mode [ 600.026774][T13673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.068471][ T1226] usb 3-1: 0:2 : does not exist [ 600.102008][ T1226] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 600.111275][T13676] bond3: (slave bridge2): making interface the new active one [ 600.124089][T13676] bridge2: entered promiscuous mode [ 600.131460][T13676] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 600.202016][ T1226] usb 3-1: USB disconnect, device number 23 [ 600.304850][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.681082][ T5895] usb 5-1: USB disconnect, device number 119 [ 600.827321][ T1226] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 600.987507][ T1226] usb 3-1: device descriptor read/64, error -71 [ 601.089691][T13691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1950'. [ 601.150700][T13692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.247663][ T1226] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 601.427397][ T1226] usb 3-1: device descriptor read/64, error -71 [ 601.485434][T13704] FAULT_INJECTION: forcing a failure. [ 601.485434][T13704] name failslab, interval 1, probability 0, space 0, times 0 [ 601.508997][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.3.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.509036][T13704] Tainted: [L]=SOFTLOCKUP [ 601.509045][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 601.509060][T13704] Call Trace: [ 601.509069][T13704] [ 601.509080][T13704] dump_stack_lvl+0xe8/0x150 [ 601.509126][T13704] should_fail_ex+0x412/0x560 [ 601.509168][T13704] should_failslab+0xa8/0x100 [ 601.509198][T13704] ? skb_clone+0x212/0x3a0 [ 601.509229][T13704] kmem_cache_alloc_noprof+0x87/0x650 [ 601.509263][T13704] skb_clone+0x212/0x3a0 [ 601.509298][T13704] __netlink_deliver_tap+0x404/0x850 [ 601.509338][T13704] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.509364][T13704] netlink_deliver_tap+0x19c/0x1b0 [ 601.509390][T13704] netlink_sendskb+0x68/0x140 [ 601.509427][T13704] netlink_unicast+0x3a3/0x9b0 [ 601.509469][T13704] ? __pfx_netlink_unicast+0x10/0x10 [ 601.509514][T13704] netlink_rcv_skb+0x2b6/0x4b0 [ 601.509540][T13704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.509572][T13704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.509608][T13704] ? down_read+0x272/0x2e0 [ 601.509635][T13704] ? genl_rcv+0xd/0x40 [ 601.509659][T13704] genl_rcv+0x28/0x40 [ 601.509682][T13704] netlink_unicast+0x80f/0x9b0 [ 601.509717][T13704] ? __pfx_netlink_unicast+0x10/0x10 [ 601.509747][T13704] ? netlink_sendmsg+0x650/0xb40 [ 601.509765][T13704] ? skb_put+0x11b/0x210 [ 601.509790][T13704] netlink_sendmsg+0x813/0xb40 [ 601.509818][T13704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.509840][T13704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.509873][T13704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.509897][T13704] ____sys_sendmsg+0x972/0x9f0 [ 601.509930][T13704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.509966][T13704] ? import_iovec+0x73/0xa0 [ 601.509991][T13704] ___sys_sendmsg+0x2a5/0x360 [ 601.510020][T13704] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.510073][T13704] ? __fget_files+0x2a/0x420 [ 601.510089][T13704] ? __fget_files+0x3a0/0x420 [ 601.510119][T13704] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.510147][T13704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.510180][T13704] ? __pfx_ksys_write+0x10/0x10 [ 601.510211][T13704] do_syscall_64+0x14d/0xf80 [ 601.510236][T13704] ? trace_irq_disable+0x3b/0x150 [ 601.510252][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.510271][T13704] ? clear_bhb_loop+0x40/0x90 [ 601.510293][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.510312][T13704] RIP: 0033:0x7f3455b9c819 [ 601.510330][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.510346][T13704] RSP: 002b:00007f3453df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.510366][T13704] RAX: ffffffffffffffda RBX: 00007f3455e15fa0 RCX: 00007f3455b9c819 [ 601.510380][T13704] RDX: 000000000400c810 RSI: 0000200000000200 RDI: 0000000000000003 [ 601.510393][T13704] RBP: 00007f3453df6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.510404][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.510415][T13704] R13: 00007f3455e16038 R14: 00007f3455e15fa0 R15: 00007f3455f3fa48 [ 601.510443][T13704] [ 601.949367][ T5918] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 601.964312][ T1226] usb usb3-port1: attempt power cycle [ 602.119716][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 602.126664][ T5918] usb 2-1: config 0 has no interfaces? [ 602.134750][ T5918] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 602.144531][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.152635][ T5918] usb 2-1: Product: syz [ 602.156851][ T5918] usb 2-1: Manufacturer: syz [ 602.162895][ T5918] usb 2-1: SerialNumber: syz [ 602.172074][ T5918] usb 2-1: config 0 descriptor?? [ 602.317407][ T1226] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 602.340417][ T1226] usb 3-1: device descriptor read/8, error -71 [ 602.349699][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 602.390385][ T5918] usb 2-1: USB disconnect, device number 106 [ 602.422046][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 602.504377][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 602.587309][ T1226] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 602.609102][ T1226] usb 3-1: device descriptor read/8, error -71 [ 602.728696][ T1226] usb usb3-port1: unable to enumerate USB device [ 603.177387][ T9] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 603.302349][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1964'. [ 603.314789][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1964'. [ 603.339689][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 603.365334][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 603.406775][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 603.432218][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 603.454594][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.470150][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 603.489875][ T9] usb 2-1: string descriptor 0 read error: -22 [ 603.496614][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 603.507580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.526898][ T9] usb 2-1: config 0 descriptor?? [ 603.544596][T13751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.553356][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 603.553388][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 603.567868][T13751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.583506][T13751] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1966'. [ 603.598739][T13751] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1966'. [ 603.945159][T13767] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.1969'. [ 604.118292][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 604.118314][ T30] audit: type=1804 audit(1775737713.150:5738): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1960" name="/newroot/403/file0" dev="fuse" ino=1 res=1 errno=0 [ 604.197031][T13771] FAULT_INJECTION: forcing a failure. [ 604.197031][T13771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.212556][T13771] CPU: 1 UID: 0 PID: 13771 Comm: syz.2.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.212591][T13771] Tainted: [L]=SOFTLOCKUP [ 604.212600][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.212619][T13771] Call Trace: [ 604.212632][T13771] [ 604.212639][T13771] dump_stack_lvl+0xe8/0x150 [ 604.212666][T13771] should_fail_ex+0x412/0x560 [ 604.212721][T13771] _copy_from_user+0x2d/0xb0 [ 604.212749][T13771] ___sys_sendmsg+0x1c6/0x360 [ 604.212785][T13771] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.212818][T13771] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.212846][T13771] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 604.212901][T13771] ? __fget_files+0x2a/0x420 [ 604.212921][T13771] ? __fget_files+0x3a0/0x420 [ 604.212953][T13771] __sys_sendmmsg+0x27c/0x4e0 [ 604.212990][T13771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 604.213018][T13771] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 604.213081][T13771] ? rcu_is_watching+0x15/0xb0 [ 604.213123][T13771] __x64_sys_sendmmsg+0xa0/0xc0 [ 604.213155][T13771] do_syscall_64+0x14d/0xf80 [ 604.213185][T13771] ? trace_irq_disable+0x3b/0x150 [ 604.213206][T13771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.213229][T13771] ? clear_bhb_loop+0x40/0x90 [ 604.213256][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.213279][T13771] RIP: 0033:0x7fadd259c819 [ 604.213300][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.213324][T13771] RSP: 002b:00007fadd3388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 604.213349][T13771] RAX: ffffffffffffffda RBX: 00007fadd2815fa0 RCX: 00007fadd259c819 [ 604.213366][T13771] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 604.213380][T13771] RBP: 00007fadd3388090 R08: 0000000000000000 R09: 0000000000000000 [ 604.213395][T13771] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 604.213409][T13771] R13: 00007fadd2816038 R14: 00007fadd2815fa0 R15: 00007fadd293fa48 [ 604.213443][T13771] [ 604.423616][ T9] usb 2-1: USB disconnect, device number 107 [ 605.108754][T13775] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1972' sets config #2 [ 606.053620][ T5944] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 606.219744][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 606.228312][ T5944] usb 4-1: not running at top speed; connect to a high speed hub [ 606.237305][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.248847][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.267023][ T5944] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 606.287251][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.301816][ T5944] usb 4-1: Product: syz [ 606.311475][ T5944] usb 4-1: Manufacturer: syz [ 606.321521][ T5944] usb 4-1: SerialNumber: syz [ 606.357285][ T1226] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 606.518440][ T1226] usb 2-1: Using ep0 maxpacket: 32 [ 606.531363][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.544766][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.556921][ T1226] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 606.571932][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.595620][ T1226] usb 2-1: config 0 descriptor?? [ 606.623464][ T1226] hub 2-1:0.0: USB hub found [ 606.729810][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.767930][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.816923][T13785] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1976'. [ 606.847367][T13785] .30ªX¹¦D: renamed from gretap0 (while UP) [ 606.871949][ T1226] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 606.891909][T13785] .30ªX¹¦D: entered allmulticast mode [ 606.934068][T13785] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 607.056052][ T5944] usb 4-1: 0:1 : does not exist [ 607.084218][ T5944] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 607.159052][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.167814][ T5895] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 607.203397][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.260238][ T5944] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 607.291872][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.309132][ T5944] usb 4-1: USB disconnect, device number 108 [ 607.327329][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 607.335461][ T5895] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.360214][ T5895] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.377529][ T5895] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 607.386863][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.510790][ T1226] usbhid 2-1:0.0: can't add hid device: -71 [ 607.516854][ T1226] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 607.579678][ T1226] usb 2-1: USB disconnect, device number 108 [ 607.833485][ T5895] hid_parser_main: 45 callbacks suppressed [ 607.833506][ T5895] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 607.848994][ T5895] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 608.229950][T13812] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.1983'. [ 608.318985][ T9] usb 5-1: USB disconnect, device number 120 [ 608.682015][T13815] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 608.807388][ T5894] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 609.069003][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 609.083506][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.104667][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.143265][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.155703][ T5894] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 609.176117][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.204043][ T5894] usb 3-1: config 0 descriptor?? [ 609.482035][T13814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.497023][T13814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.924062][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 609.938034][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.951462][ T5894] usb 3-1: USB disconnect, device number 28 [ 609.972867][T13828] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 610.017506][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 610.177417][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 610.184300][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.195533][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.205508][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 610.214704][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.248921][ T9] usb 4-1: config 0 descriptor?? [ 610.278619][ T5895] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 610.456663][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 610.550613][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 610.559412][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.576862][ T5895] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 610.586588][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.607774][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.625475][ T5895] usb 5-1: Product: syz [ 610.631650][ T5895] usb 5-1: Manufacturer: syz [ 610.636373][ T5895] usb 5-1: SerialNumber: syz [ 610.653495][ T5895] usb 5-1: config 0 descriptor?? [ 610.668883][ T5895] gspca_main: 2770:9120 too many config [ 610.675394][T13836] No such timeout policy "syz1" [ 610.831937][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.846660][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.866795][T13831] netlink: 'syz.4.1990': attribute type 11 has an invalid length. [ 610.961301][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 610.975115][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 610.994514][ T9] usb 4-1: USB disconnect, device number 109 [ 611.153884][T13832] delete_channel: no stack [ 611.181860][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 611.727312][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 611.879659][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 611.891850][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.903451][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.914588][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 611.930231][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 611.940795][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 611.949241][ T9] usb 2-1: Manufacturer: syz [ 611.960065][ T9] usb 2-1: config 0 descriptor?? [ 612.139819][T13861] netlink: 179596 bytes leftover after parsing attributes in process `syz.2.1998'. [ 612.183909][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.199249][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.492295][ T9] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 612.547751][ T9] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 719.957355][ C1] ------------[ cut here ]------------ [ 719.964102][ C1] 1 [ 719.964127][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall+0x2e4/0x470, CPU#1: syz-executor/5843 [ 719.977971][ C1] Modules linked in: [ 719.982693][ C1] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 719.993756][ C1] Tainted: [L]=SOFTLOCKUP [ 719.998108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.008183][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 720.014551][ C1] Code: ff ff 48 c7 c7 c0 55 2c 9a be 04 00 00 00 e8 43 b6 84 00 4c 89 f7 b8 01 00 00 00 87 05 15 f7 80 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 41 76 8e 74 47 48 c7 c0 c0 0b 12 90 48 c1 e8 [ 720.034173][ C1] RSP: 0000:ffffc90000a08db8 EFLAGS: 00010046 [ 720.040263][ C1] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab5e9d [ 720.048258][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e764140 [ 720.056336][ C1] RBP: ffffc90000a08f28 R08: 0000000000000003 R09: 0000000000000004 [ 720.064331][ C1] R10: dffffc0000000000 R11: fffffbfff3458ab8 R12: 0000000000002904 [ 720.072323][ C1] R13: dffffc0000000000 R14: ffffffff8e764140 R15: dffffc0000000000 [ 720.080349][ C1] FS: 000055557ab1b500(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 720.089322][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.095951][ C1] CR2: 000055557ab36a28 CR3: 0000000063b4a000 CR4: 00000000003526f0 [ 720.103956][ C1] Call Trace: [ 720.107264][ C1] [ 720.110155][ C1] rcu_core+0x3fe/0x1070 [ 720.114446][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 720.119947][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 720.125263][ C1] ? __pfx_rcu_core+0x10/0x10 [ 720.129978][ C1] handle_softirqs+0x22a/0x870 [ 720.134804][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 720.139624][ C1] __irq_exit_rcu+0x5f/0x150 [ 720.144252][ C1] irq_exit_rcu+0x9/0x30 [ 720.148525][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 720.154192][ C1] [ 720.157162][ C1] [ 720.160131][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.166243][ C1] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 720.172977][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 d4 eb 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 7f e7 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 63 e7 [ 720.192647][ C1] RSP: 0000:ffffc90004067820 EFLAGS: 00000293 [ 720.198755][ C1] RAX: ffffffff81b9d88d RBX: 1ffff110170c8525 RCX: ffff88807c999e80 [ 720.206765][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 720.214764][ C1] RBP: ffffc90004067950 R08: ffffffff9011d8b7 R09: 1ffffffff2023b16 [ 720.222758][ C1] R10: dffffc0000000000 R11: fffffbfff2023b17 R12: ffff8880b8642928 [ 720.230749][ C1] R13: dffffc0000000000 R14: ffff8880b873c000 R15: 0000000000000000 [ 720.238749][ C1] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 720.244879][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 720.250287][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 720.255535][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 720.261999][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.266811][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 720.272211][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 720.277436][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 720.282599][ C1] flush_tlb_mm_range+0x5c3/0x10c0 [ 720.287826][ C1] ? page_table_check_clear+0x4b8/0x5f0 [ 720.293404][ C1] ptep_clear_flush+0x120/0x170 [ 720.298300][ C1] do_wp_page+0x4129/0x5a00 [ 720.302846][ C1] ? do_wp_page+0x3b9f/0x5a00 [ 720.307558][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 720.312446][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.317506][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 720.322917][ C1] handle_mm_fault+0x1520/0x3310 [ 720.327927][ C1] ? handle_mm_fault+0xee/0x3310 [ 720.332911][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 720.338253][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 720.343503][ C1] do_user_addr_fault+0xa73/0x1340 [ 720.348653][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.353464][ C1] ? trace_page_fault_user+0x84/0x210 [ 720.358894][ C1] exc_page_fault+0x6a/0xc0 [ 720.363535][ C1] asm_exc_page_fault+0x26/0x30 [ 720.368410][ C1] RIP: 0033:0x7f85373613a0 [ 720.372851][ C1] Code: ba 28 00 48 8d 0c 1e 49 39 d0 49 89 48 60 0f 95 c2 48 29 d8 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 56 08 <48> 89 41 08 48 8d 4e 10 eb b0 48 8d 0d 37 df 0c 00 ba 9e 10 00 00 [ 720.392473][ C1] RSP: 002b:00007f853773fc50 EFLAGS: 00010206 [ 720.398570][ C1] RAX: 00000000000185e1 RBX: 0000000000008040 RCX: 000055557ab36a20 [ 720.406561][ C1] RDX: 0000000000008041 RSI: 000055557ab2e9e0 RDI: 0000000000000004 [ 720.414553][ C1] RBP: 0000000000000802 R08: 00007f85375ece20 R09: 0000000000000001 [ 720.422542][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 720.430556][ C1] R13: 0000000000000000 R14: 00007f85375ece80 R15: 0000000000000000 [ 720.438573][ C1] [ 720.441628][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 720.448925][ C1] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 720.460031][ C1] Tainted: [L]=SOFTLOCKUP [ 720.464370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.474445][ C1] Call Trace: [ 720.477743][ C1] [ 720.480604][ C1] vpanic+0x56c/0xa60 [ 720.484624][ C1] ? __pfx__printk+0x10/0x10 [ 720.489235][ C1] ? __pfx_vpanic+0x10/0x10 [ 720.493780][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 720.499096][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 720.504322][ C1] panic+0xc5/0xd0 [ 720.508100][ C1] ? __pfx_panic+0x10/0x10 [ 720.512730][ C1] __warn+0x315/0x4f0 [ 720.516737][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 720.522737][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 720.528482][ C1] __report_bug+0x29a/0x540 [ 720.533021][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 720.538766][ C1] ? __pfx___report_bug+0x10/0x10 [ 720.543819][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 720.548800][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 720.554546][ C1] report_bug+0x16a/0x220 [ 720.558904][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 720.564649][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 720.570395][ C1] handle_bug+0x9c/0x200 [ 720.574670][ C1] exc_invalid_op+0x1a/0x50 [ 720.579225][ C1] asm_exc_invalid_op+0x1a/0x20 [ 720.584097][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 720.590463][ C1] Code: ff ff 48 c7 c7 c0 55 2c 9a be 04 00 00 00 e8 43 b6 84 00 4c 89 f7 b8 01 00 00 00 87 05 15 f7 80 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 41 76 8e 74 47 48 c7 c0 c0 0b 12 90 48 c1 e8 [ 720.610275][ C1] RSP: 0000:ffffc90000a08db8 EFLAGS: 00010046 [ 720.616379][ C1] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ab5e9d [ 720.624394][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e764140 [ 720.632394][ C1] RBP: ffffc90000a08f28 R08: 0000000000000003 R09: 0000000000000004 [ 720.640400][ C1] R10: dffffc0000000000 R11: fffffbfff3458ab8 R12: 0000000000002904 [ 720.648396][ C1] R13: dffffc0000000000 R14: ffffffff8e764140 R15: dffffc0000000000 [ 720.656395][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 720.662151][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 720.668021][ C1] rcu_core+0x3fe/0x1070 [ 720.672296][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 720.677449][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 720.682764][ C1] ? __pfx_rcu_core+0x10/0x10 [ 720.687480][ C1] handle_softirqs+0x22a/0x870 [ 720.692288][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 720.697084][ C1] __irq_exit_rcu+0x5f/0x150 [ 720.701706][ C1] irq_exit_rcu+0x9/0x30 [ 720.705975][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 720.711639][ C1] [ 720.714593][ C1] [ 720.717540][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 720.723549][ C1] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 720.730249][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 d4 eb 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 7f e7 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 63 e7 [ 720.749897][ C1] RSP: 0000:ffffc90004067820 EFLAGS: 00000293 [ 720.756018][ C1] RAX: ffffffff81b9d88d RBX: 1ffff110170c8525 RCX: ffff88807c999e80 [ 720.764009][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 720.772004][ C1] RBP: ffffc90004067950 R08: ffffffff9011d8b7 R09: 1ffffffff2023b16 [ 720.779997][ C1] R10: dffffc0000000000 R11: fffffbfff2023b17 R12: ffff8880b8642928 [ 720.788020][ C1] R13: dffffc0000000000 R14: ffff8880b873c000 R15: 0000000000000000 [ 720.796034][ C1] ? smp_call_function_many_cond+0xcfd/0x12c0 [ 720.802189][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 720.807634][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 720.812951][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 720.819310][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.824108][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 720.829510][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 720.834731][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 720.839883][ C1] flush_tlb_mm_range+0x5c3/0x10c0 [ 720.845055][ C1] ? page_table_check_clear+0x4b8/0x5f0 [ 720.850640][ C1] ptep_clear_flush+0x120/0x170 [ 720.855534][ C1] do_wp_page+0x4129/0x5a00 [ 720.860083][ C1] ? do_wp_page+0x3b9f/0x5a00 [ 720.864890][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 720.869786][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.874931][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 720.880333][ C1] handle_mm_fault+0x1520/0x3310 [ 720.885331][ C1] ? handle_mm_fault+0xee/0x3310 [ 720.890309][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 720.895626][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 720.900889][ C1] do_user_addr_fault+0xa73/0x1340 [ 720.906057][ C1] ? rcu_is_watching+0x15/0xb0 [ 720.910938][ C1] ? trace_page_fault_user+0x84/0x210 [ 720.916341][ C1] exc_page_fault+0x6a/0xc0 [ 720.920875][ C1] asm_exc_page_fault+0x26/0x30 [ 720.925752][ C1] RIP: 0033:0x7f85373613a0 [ 720.930198][ C1] Code: ba 28 00 48 8d 0c 1e 49 39 d0 49 89 48 60 0f 95 c2 48 29 d8 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 56 08 <48> 89 41 08 48 8d 4e 10 eb b0 48 8d 0d 37 df 0c 00 ba 9e 10 00 00 [ 720.949831][ C1] RSP: 002b:00007f853773fc50 EFLAGS: 00010206 [ 720.955928][ C1] RAX: 00000000000185e1 RBX: 0000000000008040 RCX: 000055557ab36a20 [ 720.963917][ C1] RDX: 0000000000008041 RSI: 000055557ab2e9e0 RDI: 0000000000000004 [ 720.971910][ C1] RBP: 0000000000000802 R08: 00007f85375ece20 R09: 0000000000000001 [ 720.979913][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 720.987908][ C1] R13: 0000000000000000 R14: 00007f85375ece80 R15: 0000000000000000 [ 720.995918][ C1] [ 722.135101][ C1] Shutting down cpus with NMI [ 722.140454][ C1] Kernel Offset: disabled [ 722.144798][ C1] Rebooting in 86400 seconds..