last executing test programs: 10.756122726s ago: executing program 0 (id=440): r0 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="901240", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="2cbcedf8b16008760ee7f28de0904b14ede9f132070298758ea9b700e7020b02662637cd3a34b6734c49ee78f896523211", 0x31}, {&(0x7f0000000240)="e989a4038a3468e52f", 0x9}, {&(0x7f0000000480)="82b8a4767a48a6d03cb22c2bbeaee9", 0xf}], 0x3}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000440), 0x4) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.461983923s ago: executing program 0 (id=442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x4, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setfsgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), 0x0}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0xf, 0x4000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x10, 0x2) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000140)=""/47, 0x2f) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) 8.008652306s ago: executing program 3 (id=450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x9, @remote, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1}}], 0x1, 0x4000001) listen(r0, 0x1fc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xf2b, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fefffffff9ffff0000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff000000000000000000000000000000000000000000000000000000000000e96a0000000000000000f9ffff00feffffff00000000"]}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) accept(r0, 0xfffffffffffffffd, &(0x7f0000000500)=0xfffffffffffffc9f) 7.269740667s ago: executing program 2 (id=453): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000280010800b0001006d616373656300001800028005003a698f03e598420b01008fffffffffffffff08000500", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x32a1ef91}}, './file0\x00'}) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000300)) (async) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x8080000, 0x2, r9, 0xb}) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x3, r5, 0x1, r9}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r12, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) (async) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r13, 0xc080aebe, &(0x7f00000005c0)={{0x0, 0x0, 0x80}}) 6.981427835s ago: executing program 0 (id=455): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x36) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$notify(r2, 0x402, 0x4) 6.836060568s ago: executing program 2 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x22020600) io_uring_setup(0x2fc1, &(0x7f0000000340)={0x0, 0x69d3, 0x2, 0x1, 0xfffffffe}) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f00000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.7561057s ago: executing program 3 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x459a02, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d8200e5ff000000000000f7ffffff00"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(r1, 0x121500) ioctl$TCSETS2(r3, 0x5435, 0x0) open$dir(&(0x7f00000010c0)='./file0\x00', 0x80002, 0x58) io_setup(0x7b, &(0x7f0000000040)=0x0) r5 = eventfd2(0x8, 0x80000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058422dbbcfcb238f"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0xc044810) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4005) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xee3f, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe, r1, &(0x7f0000000080)="736c181156904f9db6656235f76b2bd0756d3787f58de205ca7827c7928eea9e4743e7692c14fbc53a7f556bfda5ee058b4cba2c2db81ad637990824a017319954939fcce91dde00e77a870d4909f98bff0315d27d555da854b269c88caf19c6c53bec2dc72aa927971d0f4a67a57bb4a5448fa2a2ed4de0a7962a6fd60b14401baf9087bc7d7b7e57151a967dde4a3cd0319f9ced2fc79c6fd3215cd454831502165b899f9dc2d866f6edb3d2a1e0da56a81fc024774aefd3337c7d86", 0xbd, 0x2, 0x0, 0x6, r5}]) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000011c0)={0x40, 0x12, 0x9, 0x7, 0x58, 0x80, &(0x7f0000001140)="2f3b49325064f866851c812c36a2d27cd9df419ac7254f6440671fbe5059b2e31b2fb7a3471e87bf7668737e04e283fafe57521a69ec07d9c75b485f0c03c86cfd1918e581a24696878eda3ccd3105d1bd1280f4e9339170"}) 6.30372238s ago: executing program 0 (id=458): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x5, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x80000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/181) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.252514024s ago: executing program 2 (id=459): r0 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f24, 0x7, 0x81, 0x9, 0x8b, 0x14, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x4000010) (async) sendmsg$inet(r4, 0x0, 0x4048841) (async) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) sendmsg$NFT_BATCH(r9, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r10, @ANYBLOB="00000400ced02d84f00b238dc156e80dfaf5aaae123882e1caaa50a44d1e7c7baacbf2cf3b17cbea905f060d9a51fa8e5e9a521b9d93aee5233eb3296b5bd8709e6c662a61974bf201007cd03f"], 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) dup3(r11, r2, 0x80000) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r11, 0x4) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160039030000000000000000e000000100000000000000000000000000000000000000000000ffff00", @ANYRES32=0x0, @ANYRES32=0x0], 0xf8}}, 0x0) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) (async) sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 6.051319241s ago: executing program 3 (id=460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000a400)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xaf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000300)={{0x2, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e24, 0x10000003, 'fo\x00', 0x30, 0x8000b20, 0x2f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2000, 0x6, 0xd1e, 0xf4}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002c80), &(0x7f0000002cc0), &(0x7f0000002d00)=0x0) r11 = getegid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002e40)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000002f40)=0xe8) r13 = getgid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000480)="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", 0x2000, &(0x7f00000030c0)={&(0x7f0000002480)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3b40000, 0x1200000, 0x7b, 0x43cb, 0x2, 0xbb, 0x0, 0x0, 0x10, 0xc}}, &(0x7f0000000400)={0x18, 0x0, 0x7, {0x9c}}, &(0x7f0000002500)={0x18, 0x0, 0x1, {0x6}}, &(0x7f0000002540)={0x18, 0xfffffffffffffffe, 0x0, {0x400}}, &(0x7f0000002580)={0x18, 0x0, 0x3ff, {0x9}}, &(0x7f00000025c0)={0x28, 0xffffffffffffffda, 0x8000000000000000, {{0x10000, 0x2c37, 0x2}}}, &(0x7f0000002600)={0x60, 0x0, 0x1, {{0x7fff, 0x47, 0x4, 0xb9d, 0x0, 0x1ff, 0x2, 0x9}}}, &(0x7f0000002680)={0x18, 0x0, 0x2, {0x9}}, &(0x7f00000026c0)={0x13, 0x0, 0x23e3610f, {'-*\x00'}}, &(0x7f0000002700)={0x20, 0x0, 0xff}, &(0x7f0000002880)={0x78, 0x0, 0x1, {0x2, 0x9, 0x0, {0x6, 0xca, 0x28d973d, 0x0, 0xa2f, 0x6, 0x8499, 0x1000, 0xffff7fff, 0x0, 0x8, 0x0, 0x0, 0x80, 0x4}}}, &(0x7f0000002940)={0x90, 0xfffffffffffffff5, 0xfffffffffffffff9, {0x4, 0x2, 0x4, 0x8, 0x2, 0x5, {0x2, 0x802, 0x2, 0x2, 0xffffffffffffff85, 0x100000000, 0x1, 0x8, 0x5, 0x8000, 0x789, 0x0, 0xee01, 0x9, 0x9}}}, &(0x7f0000002a00)={0x50, 0x7fffffffffffffff, 0x4, [{0x3, 0xa, 0x1, 0x3, '!'}, {0x3, 0x3, 0x1, 0x9e, '@'}]}, &(0x7f0000002bc0)=ANY=[@ANYBLOB="a8000000000000006d000000000000000200000000000000010000000000000003000000000000000008000000000000070000002200000001000000000000003c000000000000008000000000000000e20a0000000000000500000000000000ff0000000000000002000000030000000400000000c0000000000000", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="58000000040000000000000002000100000000000700000000000000000000006d970000"], &(0x7f0000002d40)={0xa0, 0x0, 0x5, {{0x3, 0x1, 0xdb, 0x6, 0x5, 0xffff, {0x5, 0x8, 0x0, 0x5, 0x8, 0x9, 0x0, 0x9, 0x4, 0x8000, 0x1, r10, r11, 0x7, 0xbea}}, {0x0, 0x11}}}, &(0x7f0000002e00)={0x20, 0x0, 0x2, {0xcb03, 0x4, 0x2b9, 0x5}}, &(0x7f0000002f80)={0x130, 0xfffffffffffffff5, 0x4, {0x101, 0x6, 0x0, '\x00', {0x20, 0x8, 0xf49, 0xfffffffb, r12, r13, 0x6000, '\x00', 0x7fffffffffffffff, 0x8, 0x18000, 0x1, {0x4, 0x5826}, {0x8, 0x100}, {0x4, 0x1ff}, {0x7, 0x6}, 0x1, 0x7, 0xf94f, 0x6}}}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r14, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 5.537715283s ago: executing program 4 (id=462): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) (async) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 5.406108986s ago: executing program 4 (id=463): r0 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="901240", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="2cbcedf8b16008760ee7f28de0904b14ede9f132070298758ea9b700e7020b02662637cd3a34b6734c49ee78f896523211", 0x31}, {&(0x7f0000000240)="e989a4038a3468e52f", 0x9}, {&(0x7f0000000480)="82b8a4767a48a6d03cb22c2bbeaee9", 0xf}], 0x3}}], 0x2, 0xc8040) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), 0x4) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.168122635s ago: executing program 4 (id=464): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xa, &(0x7f00000000c0)={0x0, 0x8892, 0x2, 0x3, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x9, 0x4007, @fd_index=0x15, 0x3ff, 0x0, 0x0, 0x9, 0x0, {0x2}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0x6}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x5, 0x20a, 0xffff477b, 0xb, 0xf, 0x6, 0x2, r5}, &(0x7f0000000180)=0x20) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') syz_mount_image$fuse(&(0x7f0000019140), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000019140), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x4000000040000000, 0x1) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x4000000040000000, 0x1) dup(r6) (async) dup(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) syz_io_uring_setup(0x6d8a, 0x0, &(0x7f0000000200), 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 5.167213917s ago: executing program 0 (id=465): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f00000001c0)='6f', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0xe, @sliced={0x7, [0x8001, 0x1, 0x7ff, 0x8, 0x9, 0x7, 0x5, 0x347, 0xfff9, 0x5, 0x4, 0x2, 0x5, 0x140, 0x2, 0x7, 0x3, 0x1, 0x7, 0x2, 0x6, 0x32f, 0xe, 0x6, 0x5, 0x8000, 0x211, 0x7, 0x7, 0x1, 0x10, 0x2, 0xf, 0x74c, 0x57b, 0xa, 0x2f70, 0x9260, 0x9ee, 0xe, 0x6, 0xc, 0x6d92, 0x8, 0x7, 0x0, 0x8001, 0x6], 0xb}}) write$cgroup_type(r4, &(0x7f0000000040), 0x9) syz_usb_disconnect(r2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = syz_io_uring_setup(0x8ce, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x34d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x91f, &(0x7f0000000340)={0x0, 0x2919, 0x800, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x200000000000000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000200000000000000da02000000008e8c00000600000000000000"]) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500009000000000000190780a010101ac1414aa05009078e00000e04d0000000000000000110000ac1414aa00000000830329891f390000000000000000ffffffffffffffff64010102e0000002ffffffff443c0003e0000002000000000000000000000000e000000200000000ac1414bb0000e217ffffffff000000000a0101000000000000000000fffffffd0000"], 0x0) 4.979824943s ago: executing program 2 (id=466): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x40, 0xb5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x7fe, 0x6, 0xb, 0xf0}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x5, {0x5, 0x1, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x27, 0x1, 0x1dd882, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x9}}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x100, {0x2, 0x0, 0x0, {0x6, 0x10000000, 0x3, 0x7, 0x4, 0x1ffffffffffffffe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x3bf8, 0x400, 0x1, 0x34}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x6, 0x80, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xf9}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x1, 0x7], 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x3, 0x9, 0x6, 0x2], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x29, 0x3, {0x7, 0x25, 0x1, 0x1, 0xc4, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfd, 0x6, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0xf8, 0x6, {0x7, 0x25, 0x1, 0x80, 0xd, 0x9}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002340)=ANY=[@ANYBLOB="140000008d9bda9085bc8ee0b84715e7143a13f9a2152f4ccf1448fabe9929d78dbf9ff7b9dc499bb88ef7cb3c68063414956f1d1dea285f36e7738117c05970387cd30979040f474a2bcf435ca5648ad6dde10a13528c4954c4f77fb72a9306dd0c43eb53952c979c20637fc0d5ba5f415f545f103b953a10985ddf4fc9561410392e21df562c20a95287abd237b89d85d441cb22434f4bec57c1329e8fa055ee056434907eb69b3279ef5161f786cb64c9abaa527e34736f61f1fb76", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000081"], 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 4.979281174s ago: executing program 3 (id=467): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) mlock2(&(0x7f0000cc1000/0x3000)=nil, 0x3000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008902"]) mlock2(&(0x7f0000d82000/0x1000)=nil, 0x1000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000004f40)={'vxcan0\x00'}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$kcm(0xa, 0x7, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d462", 0x4, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x7fff, 0x100000000, 0x2, 0x0, 0x100000, 0x0, 0x2004c5, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x200], 0x0, 0x2b2081}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x310}], 0x1, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000020381010140000000000010902240001000040200904000002030000000921070000012205000905810300020600009f7c34d51e36d63a19aa02508963532541cb97fe85106c1a66a03a1b23587b0380055af239b0d914e7f1b3e03b66c8b2b5e901f91c66392347bcf1d34c2ee6aec9fdd1dfc2e8920e3db0278520104639b252338c1a22a644b0a788a7f14883fe71d261995ad259a18802f62f66cfb5cd792b54727e1f9d5e3fed36c0579ef40cb388f05853cff9261162e41df61f169e84911d95eb4093b55b8801d460cec9a441209755797261e2b10d0f61d3d0be87"], 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x40000000) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ff83fc6300"/15], 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000051c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000102000000025353f93e5e21"], &(0x7f0000000100)=ANY=[@ANYBLOB="00030200bf00009b871a8a719af3422b8000000203"], 0x0, 0x0, 0x0}, 0x0) 4.577939678s ago: executing program 1 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0088a8000002"], 0x110a) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 4.363700045s ago: executing program 4 (id=469): unshare(0x2a020400) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') read$FUSE(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) fcntl$notify(r1, 0x402, 0x8000003d) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x36) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r3, r5, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="ba9109cd247b5edc3dd0ce337e8263d9581f462d175c4c8cc77a14333dce0e6d9726eb6701afc850e3d383a985ebbaf76742f7373a861b236eee7cecaf294d898a8081", 0x43}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x110c230000, 0x2a, 0x2}) r8 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) listen(r8, 0x0) fcntl$notify(r7, 0x402, 0x4) 4.244078732s ago: executing program 1 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x459a02, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d8200e5ff000000000000f7ffffff00"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(r1, 0x121500) ioctl$TCSETS2(r3, 0x5435, 0x0) open$dir(&(0x7f00000010c0)='./file0\x00', 0x80002, 0x58) io_setup(0x7b, &(0x7f0000000040)=0x0) r5 = eventfd2(0x8, 0x80000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8a0a364817ef003005b984602c8e4496fc5dc9828dbb796bab0", 0x31, 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058422dbbcfcb238f"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0xc044810) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4005) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xee3f, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe, r1, &(0x7f0000000080)="736c181156904f9db6656235f76b2bd0756d3787f58de205ca7827c7928eea9e4743e7692c14fbc53a7f556bfda5ee058b4cba2c2db81ad637990824a017319954939fcce91dde00e77a870d4909f98bff0315d27d555da854b269c88caf19c6c53bec2dc72aa927971d0f4a67a57bb4a5448fa2a2ed4de0a7962a6fd60b14401baf9087bc7d7b7e57151a967dde4a3cd0319f9ced2fc79c6fd3215cd454831502165b899f9dc2d866f6edb3d2a1e0da56a81fc024774aefd3337c7d86", 0xbd, 0x2, 0x0, 0x6, r5}]) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000011c0)={0x40, 0x12, 0x9, 0x7, 0x58, 0x80, &(0x7f0000001140)="2f3b49325064f866851c812c36a2d27cd9df419ac7254f6440671fbe5059b2e31b2fb7a3471e87bf7668737e04e283fafe57521a69ec07d9c75b485f0c03c86cfd1918e581a24696878eda3ccd3105d1bd1280f4e9339170"}) 4.089963916s ago: executing program 1 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001100)="c110bc99fed6", 0x6}], 0x1}, 0x20000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000a3618e0b67aff52807000000002b049b9190194e051a7bfa9e274a2b"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x93, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x7, 0xf0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "43a4125848"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0xbe2, 0x1}, {0x6, 0x24, 0x1a, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0xfff, 0x4, 0x4b, 0x2, 0x93}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xba3a, 0xf7, 0x7}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xd, 0x81, 0x8}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0xf, 0xc, 0x6, 0x20, 0x4}, 0xc9, &(0x7f0000000700)={0x5, 0xf, 0xc9, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0xbb, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x1, 0x1}, @generic={0x70, 0x10, 0xa, "0c481fbd23c371c641d7754e17651b7392446ee904dadedf9b1533e24a85bb17a09a40a7099cf5b4527aedad9ff32d8020c3b886589d2ac5fb257bdfc738c6d8cfa58d3b382934faf6b57dc41f68c5fc04b7397f90028e2428657b9052821ccb3892611aab40b70b14e081df32"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x3, 0xf, 0xe, [0xff003f, 0x3f0f, 0xc0, 0xc030, 0xffc000, 0xffc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x0, 0xff00, 0x9, [0xc0, 0xf, 0x5f00, 0xc000]}]}, 0x1, [{0x0, 0x0}]}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000380)=[{r4, 0x2201}], 0x1, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f021}) r6 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x5}, 0x4) sendmsg$netlink(r3, 0x0, 0x0) 4.022303161s ago: executing program 4 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000140)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000340)={0x6, 0x0, [{0x0, 0x5, 0x0, 0x0, @sint={0x8, 0xa17}}, {0x1, 0x5, 0x0, 0x0, @adapter={0xffffffffffff17bb, 0xffffffffffffff8e, 0x4, 0x5, 0xe}}, {0x80000001, 0x2, 0x1, 0x0, @irqchip={0x4d, 0x2}}, {0x37, 0x3, 0x1, 0x0, @adapter={0x32e1, 0x3, 0xc, 0xffff, 0xd6e}}, {0x8, 0x2, 0x0, 0x0, @sint={0x3, 0x436ab4bc}}, {0x1, 0x4, 0x0, 0x0, @msi={0x5, 0x9, 0xe, 0x8}}]}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xfffffffb, 0xfff, 0x49, 0x0, [{0x8, 0x6, 0xe, '\x00', 0x6}, {0x0, 0xa, 0x5, '\x00', 0x4}, {0x1, 0x7, 0x1}, {0xc7, 0x3, 0x5}, {0x0, 0x5, 0x13}, {0x9, 0x9, 0x7f, '\x00', 0x10}, {0x6, 0xfe, 0x8, '\x00', 0x38}, {0x6, 0xfe, 0x4, '\x00', 0x5}, {0x3, 0x4, 0xfa, '\x00', 0x6}, {0x60, 0x4, 0x6, '\x00', 0x5}, {0x5, 0x7, 0x8}, {0x5, 0xb7, 0x7, '\x00', 0x74}, {0x6, 0xf, 0x0, '\x00', 0xd2}, {0x9, 0x80, 0x7f, '\x00', 0x5}, {0x5c, 0x1f, 0x9, '\x00', 0x7f}, {0x8, 0x40, 0x7}, {0x7f, 0xc, 0xf3, '\x00', 0xfe}, {0x0, 0x1, 0x3, '\x00', 0xff}, {0xb3, 0x6, 0x7f, '\x00', 0x4}, {0x1, 0x9, 0x6, '\x00', 0xd}, {0x1, 0x2, 0x1, '\x00', 0x4}, {0x7, 0x4f, 0xf9, '\x00', 0x40}, {0x4, 0x8, 0xe0, '\x00', 0x40}, {0x54, 0x6, 0x98, '\x00', 0xf}]}}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xfffffffb, 0xfff, 0x49, 0x0, [{0x8, 0x6, 0xe, '\x00', 0x6}, {0x0, 0xa, 0x5, '\x00', 0x4}, {0x1, 0x7, 0x1}, {0xc7, 0x3, 0x5}, {0x0, 0x5, 0x13}, {0x9, 0x9, 0x7f, '\x00', 0x10}, {0x6, 0xfe, 0x8, '\x00', 0x38}, {0x6, 0xfe, 0x4, '\x00', 0x5}, {0x3, 0x4, 0xfa, '\x00', 0x6}, {0x60, 0x4, 0x6, '\x00', 0x5}, {0x5, 0x7, 0x8}, {0x5, 0xb7, 0x7, '\x00', 0x74}, {0x6, 0xf, 0x0, '\x00', 0xd2}, {0x9, 0x80, 0x7f, '\x00', 0x5}, {0x5c, 0x1f, 0x9, '\x00', 0x7f}, {0x8, 0x40, 0x7}, {0x7f, 0xc, 0xf3, '\x00', 0xfe}, {0x0, 0x1, 0x3, '\x00', 0xff}, {0xb3, 0x6, 0x7f, '\x00', 0x4}, {0x1, 0x9, 0x6, '\x00', 0xd}, {0x1, 0x2, 0x1, '\x00', 0x4}, {0x7, 0x4f, 0xf9, '\x00', 0x40}, {0x4, 0x8, 0xe0, '\x00', 0x40}, {0x54, 0x6, 0x98, '\x00', 0xf}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x26a, 0x8, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x26a, 0x8, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) socket$qrtr(0x2a, 0x2, 0x0) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(r2) (async) close(r2) recvfrom$inet(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async) recvfrom$inet(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 2.000223297s ago: executing program 0 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0xc0b71de71b8dd5d}, [@remote]}}}]}, 0x4c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="401106000000"], 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe, 0x7, "1ec8646db9d3cb"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf9}, 0x0, 0x0}) r2 = syz_io_uring_setup(0x4409, &(0x7f00000000c0)={0x0, 0x7db6, 0x20000, 0x0, 0x258}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r2, 0x2c0b, 0xc942, 0x40, &(0x7f00000001c0)={[0x3]}, 0x8) 761.86909ms ago: executing program 2 (id=474): r0 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="901240", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="2cbcedf8b16008760ee7f28de0904b14ede9f132070298758ea9b700e7020b02662637cd3a34b6734c49ee78f896523211", 0x31}, {&(0x7f0000000240)="e989a4038a3468e52f", 0x9}, {&(0x7f0000000480)="82b8a4767a48a6d03cb22c2bbeaee9", 0xf}], 0x3}}], 0x2, 0xc8040) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), 0x4) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 735.931121ms ago: executing program 3 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x100000000000024e, 0x141, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "94751d14e040154d", "7e1b3361ef8f658fc40298ebcb0f43fc", "cece653b", "ea90f097c80bdff4"}, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x4}, 0x10) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 668.229999ms ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 664.819554ms ago: executing program 4 (id=477): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x1, 0x9, 0x8}, 0x10, 0xa814, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x0, 0x10, 0x7b23, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x7) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x2c004801) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000019400)=[{r4, 0x220}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) 414.064109ms ago: executing program 3 (id=478): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000) r1 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000799000/0x3000)=nil, 0x3000, 0x300000b) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x1) open(&(0x7f0000000000)='./file0\x00', 0x801, 0x119) unshare(0x2c020400) bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x30}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000100001000010cc9ecf33b6885eeb431a63574d80433246666758fe235500000000000000fc0000000000741d261a4e680000000000000000000800"/74, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x200088c0}, 0x0) epoll_create1(0xc247a82949ce9376) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/92) 229.710321ms ago: executing program 1 (id=479): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x8, 0x0, 0x31) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x26, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000240)=[0x0], 0x1, r5, r6, 0x3, 0xffff84f7, 0x1, 0x68, {0x0, 0xfff4, 0x0, 0x4, 0x5, 0x5, 0x8a, 0x1, 0xfff, 0x6, 0x7, 0x0, 0x5, 0x8, "e888644db7581d29f2844883bb7ce35ee42a83e2ff63df61268994504642cc3b"}}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 152.196295ms ago: executing program 2 (id=480): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x260802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='-1\x00', 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 1 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x459a02, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d8200e5ff000000000000f7ffffff00"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(r1, 0x121500) ioctl$TCSETS2(r3, 0x5435, 0x0) open$dir(&(0x7f00000010c0)='./file0\x00', 0x80002, 0x58) io_setup(0x7b, &(0x7f0000000040)=0x0) r5 = eventfd2(0x8, 0x80000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8a0a364817ef003005b984602c8e4496fc5dc9828dbb796bab0", 0x31, 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058422dbbcfcb238f"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0xc044810) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4005) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xee3f, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe, r1, &(0x7f0000000080)="736c181156904f9db6656235f76b2bd0756d3787f58de205ca7827c7928eea9e4743e7692c14fbc53a7f556bfda5ee058b4cba2c2db81ad637990824a017319954939fcce91dde00e77a870d4909f98bff0315d27d555da854b269c88caf19c6c53bec2dc72aa927971d0f4a67a57bb4a5448fa2a2ed4de0a7962a6fd60b14401baf9087bc7d7b7e57151a967dde4a3cd0319f9ced2fc79c6fd3215cd454831502165b899f9dc2d866f6edb3d2a1e0da56a81fc024774aefd3337c7d86", 0xbd, 0x2, 0x0, 0x6, r5}]) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000011c0)={0x40, 0x12, 0x9, 0x7, 0x58, 0x80, &(0x7f0000001140)="2f3b49325064f866851c812c36a2d27cd9df419ac7254f6440671fbe5059b2e31b2fb7a3471e87bf7668737e04e283fafe57521a69ec07d9c75b485f0c03c86cfd1918e581a24696878eda3ccd3105d1bd1280f4e9339170"}) kernel console output (not intermixed with test programs): ip=0x7f99ccf8e169 code=0x7ffc0000 [ 144.780595][ T30] audit: type=1326 audit(1745268009.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f99ccf8e169 code=0x7ffc0000 [ 144.814467][ T30] audit: type=1326 audit(1745268009.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccf8e169 code=0x7ffc0000 [ 144.858221][ T968] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 144.915932][ T30] audit: type=1326 audit(1745268009.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99ccf8e169 code=0x7ffc0000 [ 144.940648][ T30] audit: type=1326 audit(1745268009.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccf8e169 code=0x7ffc0000 [ 145.023597][ T968] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 145.032539][ T5931] steelseries 0003:1038:1410.0009: missing HID_OUTPUT_REPORT 0 [ 145.040221][ T968] usb 2-1: config 5 has no interface number 0 [ 145.046594][ T968] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 145.076901][ T968] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 145.116626][ T5931] usb 3-1: USB disconnect, device number 10 [ 145.127500][ T968] usb 2-1: config 5 interface 123 has no altsetting 0 [ 145.176842][ T968] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 145.264847][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.303003][ T968] usb 2-1: Product: syz [ 145.317221][ T968] usb 2-1: Manufacturer: syz [ 145.327812][ T968] usb 2-1: SerialNumber: syz [ 145.653596][ T968] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 145.804502][ T968] usb 2-1: USB disconnect, device number 22 [ 146.149484][ T5931] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 146.733172][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.743142][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 146.761630][ T5931] usb 4-1: can't read configurations, error -71 [ 146.788528][ T5839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 146.952809][ T5839] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.976292][ T968] usb 1-1: USB disconnect, device number 17 [ 146.983059][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.014792][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.035238][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.072008][ T5839] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 147.096967][ T5839] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 147.119339][ T5839] usb 5-1: Manufacturer: syz [ 147.128276][ T5889] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.147392][ T5839] usb 5-1: config 0 descriptor?? [ 147.300548][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.331756][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.364419][ T5889] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 147.388569][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.407286][ T5889] usb 3-1: Product: syz [ 147.414735][ T5889] usb 3-1: Manufacturer: syz [ 147.428110][ T5889] usb 3-1: SerialNumber: syz [ 147.446927][ T5889] usb 3-1: config 0 descriptor?? [ 147.470715][ T5889] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 147.514973][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.561511][ T5889] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 147.581245][ T5889] usb 3-1: media controller created [ 147.592148][ T5839] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 147.636956][ T5839] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 147.690491][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.732967][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.744604][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.808409][ T5839] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 147.868106][ T5931] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.900037][ T5889] DVB: Unable to find symbol tda10046_attach() [ 147.906635][ T5889] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 147.917520][ T5889] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 147.944245][ T5839] usb 5-1: USB disconnect, device number 11 [ 148.138140][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 148.156647][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.185891][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.198925][ T5931] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.217005][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.235410][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 148.268953][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 148.306556][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.308269][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 148.320043][ T5931] usb 4-1: config 0 descriptor?? [ 148.651750][ T5889] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 148.671501][ T5889] usb 3-1: USB disconnect, device number 11 [ 150.030675][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.043680][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.083086][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 150.150891][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 150.322089][ T6633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.342294][ T6633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.747314][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.756624][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.790043][ T24] usb 1-1: can't read configurations, error -71 [ 151.217467][ T5839] usb 4-1: USB disconnect, device number 18 [ 151.606319][ T6650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.692298][ T6650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.788134][ T6650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.818427][ T6650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 151.882227][ T6655] IPVS: set_ctl: invalid protocol: 2 172.20.20.67:20004 [ 151.948925][ T6650] geneve2: entered promiscuous mode [ 152.009495][ T6650] geneve2: entered allmulticast mode [ 153.254685][ T6666] tap0: tun_chr_ioctl cmd 1074025677 [ 153.278439][ T6666] tap0: linktype set to 823 [ 154.498129][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.704508][ T5889] usb 4-1: config 252 has an invalid interface number: 254 but max is 0 [ 154.725451][ T5889] usb 4-1: config 252 has no interface number 0 [ 154.745948][ T5889] usb 4-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 154.776488][ T5889] usb 4-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 154.795530][ T5889] usb 4-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 154.816113][ T5889] usb 4-1: config 252 interface 254 has no altsetting 0 [ 154.826830][ T5889] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 154.837804][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.846415][ T5889] usb 4-1: Product: syz [ 154.852063][ T5889] usb 4-1: Manufacturer: syz [ 154.856717][ T5889] usb 4-1: SerialNumber: syz [ 154.894098][ T5889] bfusb 4-1:252.254: probe with driver bfusb failed with error -5 [ 154.937250][ T6699] netlink: 2 bytes leftover after parsing attributes in process `syz.2.206'. [ 155.058093][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.122790][ T6700] block device autoloading is deprecated and will be removed. [ 155.134051][ T6700] syz.2.206: attempt to access beyond end of device [ 155.134051][ T6700] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 155.152408][ T6689] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 155.265671][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.297920][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.336737][ T6702] ip6erspan0: entered promiscuous mode [ 155.354365][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.417170][ T6702] bond1: (slave ip6erspan0): making interface the new active one [ 155.503199][ T6702] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 155.622060][ T6705] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 155.932727][ T5889] usb 4-1: USB disconnect, device number 19 [ 156.273717][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.289118][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 156.323954][ T24] usb 5-1: can't read configurations, error -71 [ 156.707574][ T6723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.211' sets config #9 [ 158.491442][ T6765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.220'. [ 158.651697][ T6768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 161.422886][ T6786] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.671045][ T5891] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.910955][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.961634][ T6803] FAULT_INJECTION: forcing a failure. [ 161.961634][ T6803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.961728][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.996046][ T6803] CPU: 1 UID: 0 PID: 6803 Comm: syz.1.233 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 161.996080][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.996093][ T6803] Call Trace: [ 161.996102][ T6803] [ 161.996111][ T6803] dump_stack_lvl+0x241/0x360 [ 161.996150][ T6803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.996181][ T6803] ? __pfx__printk+0x10/0x10 [ 161.996222][ T6803] should_fail_ex+0x424/0x570 [ 161.996261][ T6803] prepare_alloc_pages+0x220/0x610 [ 161.996303][ T6803] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 161.996336][ T6803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 161.996388][ T6803] alloc_pages_mpol+0x339/0x690 [ 161.996416][ T6803] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 161.996449][ T6803] vma_alloc_folio_noprof+0x12d/0x260 [ 161.996474][ T6803] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 161.996507][ T6803] folio_prealloc+0x2e/0x170 [ 161.996535][ T6803] handle_pte_fault+0x2e45/0x61c0 [ 161.996585][ T6803] ? __pfx_handle_pte_fault+0x10/0x10 [ 161.996625][ T6803] ? rcu_is_watching+0x15/0xb0 [ 161.996650][ T6803] ? __lock_acquire+0xad5/0xd80 [ 161.996695][ T6803] ? __lock_acquire+0xad5/0xd80 [ 161.996737][ T6803] ? do_raw_spin_lock+0x151/0x370 [ 161.996769][ T6803] handle_mm_fault+0x1129/0x1bf0 [ 161.996823][ T6803] ? __pfx_handle_mm_fault+0x10/0x10 [ 161.996845][ T6803] ? follow_page_pte+0x9ff/0x15e0 [ 161.996883][ T6803] ? __pfx_find_vma+0x10/0x10 [ 161.996906][ T6803] ? vma_is_secretmem+0xd/0x50 [ 161.996924][ T6803] ? check_vma_flags+0x51b/0x590 [ 161.996954][ T6803] __get_user_pages+0x1adc/0x4180 [ 161.997017][ T6803] ? __pfx___get_user_pages+0x10/0x10 [ 161.997044][ T6803] ? __pfx_mt_find+0x10/0x10 [ 161.997085][ T6803] populate_vma_page_range+0x266/0x340 [ 161.997112][ T6803] ? __pfx_populate_vma_page_range+0x10/0x10 [ 161.997140][ T6803] ? do_mlock+0x6a7/0x860 [ 161.997180][ T6803] __mm_populate+0x27d/0x460 [ 161.997209][ T6803] ? __pfx___mm_populate+0x10/0x10 [ 161.997242][ T6803] do_mlock+0x6cf/0x860 [ 161.997278][ T6803] ? __fget_files+0x2a/0x420 [ 161.997301][ T6803] ? __pfx_do_mlock+0x10/0x10 [ 161.997328][ T6803] ? fput+0x9b/0xd0 [ 161.997348][ T6803] ? ksys_write+0x275/0x2d0 [ 161.997389][ T6803] __x64_sys_mlock2+0xad/0xd0 [ 161.997417][ T6803] do_syscall_64+0xf3/0x210 [ 161.997439][ T6803] ? clear_bhb_loop+0x45/0xa0 [ 161.997463][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.997481][ T6803] RIP: 0033:0x7f9ebb78e169 [ 161.997500][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.997516][ T6803] RSP: 002b:00007f9ebc5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 161.997538][ T6803] RAX: ffffffffffffffda RBX: 00007f9ebb9b5fa0 RCX: 00007f9ebb78e169 [ 161.997553][ T6803] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 161.997566][ T6803] RBP: 00007f9ebc5be090 R08: 0000000000000000 R09: 0000000000000000 [ 161.997578][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.997590][ T6803] R13: 0000000000000000 R14: 00007f9ebb9b5fa0 R15: 00007f9ebbadfa28 [ 161.997621][ T6803] [ 162.335486][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 162.578440][ T968] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 162.716553][ T24] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 162.725039][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 162.745223][ T24] usb 1-1: config 4 has no interface number 0 [ 162.754000][ T24] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.782970][ T24] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 162.792411][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 162.805236][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.814873][ T24] usb 1-1: Product: syz [ 162.818120][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 162.826206][ T24] usb 1-1: Manufacturer: syz [ 162.831108][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.831342][ T24] usb 1-1: SerialNumber: syz [ 162.872722][ T968] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 162.918092][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.945209][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.958250][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 162.959973][ T968] usb 2-1: config 0 descriptor?? [ 162.978559][ T5891] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 162.999643][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 163.007256][ T5891] usb 3-1: can't read configurations, error -71 [ 163.022506][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.035079][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.045821][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.068443][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.088804][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.379557][ T968] steelseries 0003:1038:1410.000B: missing HID_OUTPUT_REPORT 0 [ 163.388643][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.414101][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.088135][ T5891] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 164.244836][ T5891] usb 3-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 164.277059][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.302879][ T5891] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 164.326255][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.346627][ T5891] usb 3-1: Product: syz [ 164.354856][ T5891] usb 3-1: Manufacturer: syz [ 164.364162][ T5891] usb 3-1: SerialNumber: syz [ 164.381703][ T5891] usb 3-1: config 0 descriptor?? [ 164.605337][ T5891] usb 3-1: USB disconnect, device number 13 [ 164.739779][ T24] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 164.820511][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 164.841996][ T5889] usb 4-1: usb_control_msg returned -71 [ 164.867430][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 164.876793][ T24] dib0700: firmware download failed at 7 with -22 [ 164.924860][ T24] usb 1-1: USB disconnect, device number 20 [ 164.931902][ T6809] syz.3.237 uses obsolete (PF_INET,SOCK_PACKET) [ 164.940297][ T5889] usb 4-1: USB disconnect, device number 20 [ 165.044732][ T5891] usb 2-1: USB disconnect, device number 23 [ 165.348555][ T6815] delete_channel: no stack [ 165.398509][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 165.569095][ T5889] usb 4-1: no configurations [ 165.573910][ T5889] usb 4-1: can't read configurations, error -22 [ 165.911122][ T5890] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 165.942178][ T6825] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.240' sets config #0 [ 165.948154][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 165.978250][ T6825] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.240' sets config #1 [ 166.089935][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.113882][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.115598][ T5889] usb 4-1: no configurations [ 166.141813][ T5889] usb 4-1: can't read configurations, error -22 [ 166.154843][ T5889] usb usb4-port1: attempt power cycle [ 166.208210][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.223586][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.240125][ T6822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 166.252758][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.539813][ T5889] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 166.609631][ T5889] usb 4-1: no configurations [ 166.614603][ T5889] usb 4-1: can't read configurations, error -22 [ 166.748239][ T5889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.770213][ T5889] usb 4-1: no configurations [ 166.775062][ T5889] usb 4-1: can't read configurations, error -22 [ 166.785208][ T5889] usb usb4-port1: unable to enumerate USB device [ 166.938198][ T968] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 167.100399][ T968] usb 1-1: config 16 has an invalid interface number: 73 but max is 0 [ 167.108906][ T968] usb 1-1: config 16 has an invalid interface number: 81 but max is 0 [ 167.118775][ T968] usb 1-1: config 16 has 2 interfaces, different from the descriptor's value: 1 [ 167.127898][ T968] usb 1-1: config 16 has no interface number 0 [ 167.134207][ T968] usb 1-1: config 16 has no interface number 1 [ 167.140878][ T968] usb 1-1: config 16 interface 73 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 167.154424][ T968] usb 1-1: too many endpoints for config 16 interface 81 altsetting 237: 75, using maximum allowed: 30 [ 167.165728][ T968] usb 1-1: config 16 interface 81 altsetting 237 endpoint 0x8 has invalid maxpacket 2047, setting to 64 [ 167.177358][ T968] usb 1-1: config 16 interface 81 altsetting 237 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 167.189481][ T968] usb 1-1: config 16 interface 81 altsetting 237 endpoint 0x83 has invalid maxpacket 14658, setting to 64 [ 167.201199][ T968] usb 1-1: config 16 interface 81 altsetting 237 has a duplicate endpoint with address 0x3, skipping [ 167.212360][ T968] usb 1-1: config 16 interface 81 altsetting 237 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 167.224874][ T968] usb 1-1: config 16 interface 81 altsetting 237 has a duplicate endpoint with address 0x5, skipping [ 167.236041][ T968] usb 1-1: config 16 interface 81 altsetting 237 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 167.247667][ T968] usb 1-1: config 16 interface 81 altsetting 237 has 9 endpoint descriptors, different from the interface descriptor's value: 75 [ 167.261587][ T968] usb 1-1: config 16 interface 81 has no altsetting 0 [ 167.271341][ T968] usb 1-1: Dual-Role OTG device on HNP port [ 167.277709][ T968] usb 1-1: New USB device found, idVendor=0c52, idProduct=a02d, bcdDevice=cb.63 [ 167.287286][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.295637][ T968] usb 1-1: Product: ᠌ [ 167.300111][ T968] usb 1-1: Manufacturer: Ё [ 167.304923][ T968] usb 1-1: SerialNumber: 풎㕍퐁㤡蝮ꇗ밖쑼짓霓槛⳺὇窎훣༪줍ꐺᇠ噈沋ᙁ圴쎻坚ᇩ渱ʈ岼燉賦귎稸圓 [ 167.735557][ T968] ftdi_sio 1-1:16.73: FTDI USB Serial Device converter detected [ 167.752308][ T968] ftdi_sio ttyUSB0: unknown device type: 0xcb63 [ 167.767114][ T968] ftdi_sio 1-1:16.81: FTDI USB Serial Device converter detected [ 167.776555][ T968] ftdi_sio ttyUSB1: unknown device type: 0xcb63 [ 167.803580][ T968] usb 1-1: USB disconnect, device number 21 [ 167.838593][ T968] ftdi_sio 1-1:16.73: device disconnected [ 167.873803][ T968] ftdi_sio 1-1:16.81: device disconnected [ 167.926205][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 168.212950][ T5931] usb 2-1: USB disconnect, device number 24 [ 168.338137][ T5891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 168.428318][ T968] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.447183][ T6847] netlink: 'syz.2.247': attribute type 21 has an invalid length. [ 168.456608][ T6847] netlink: 'syz.2.247': attribute type 20 has an invalid length. [ 168.502313][ T30] audit: type=1800 audit(1745268033.174:12): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.247" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 168.538587][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 168.555139][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.567199][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.592246][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.612809][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.628170][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 168.643864][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.656741][ T968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 168.677407][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.689224][ T968] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 168.708479][ T968] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 168.720666][ T968] usb 4-1: Product: syz [ 168.724970][ T968] usb 4-1: Manufacturer: syz [ 168.741481][ T968] usb 4-1: SerialNumber: syz [ 168.772732][ T968] usb 4-1: config 0 descriptor?? [ 168.784544][ T6843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 168.796213][ T968] hub 4-1:0.0: bad descriptor, ignoring hub [ 168.809157][ T968] hub 4-1:0.0: probe with driver hub failed with error -5 [ 168.923270][ T5891] usb 5-1: GET_CAPABILITIES returned 0 [ 168.935023][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 169.224624][ T6863] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.502767][ T6871] process 'syz.2.252' launched './file0' with NULL argv: empty string added [ 169.528372][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.538477][ T5891] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.577694][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.640847][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 169.654533][ T6841] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 169.672954][ T52] usb 5-1: USB disconnect, device number 14 [ 169.698073][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 169.721960][ T5891] usb 2-1: config index 0 descriptor too short (expected 64767, got 94) [ 169.766379][ T5891] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 169.796882][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.824506][ T5891] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 169.841999][ T968] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.856811][ T5891] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 169.885109][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 169.921209][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.932912][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.945580][ T5891] usb 2-1: SerialNumber: syz [ 169.970845][ T6856] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 169.986027][ T6856] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 170.015254][ T5891] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 170.023322][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 170.046088][ T968] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.065313][ T968] usb 3-1: config 0 has no interface number 0 [ 170.076100][ T968] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 170.097935][ T968] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.122452][ T968] usb 3-1: config 0 interface 85 has no altsetting 0 [ 170.152092][ T968] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.188104][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.218284][ T968] usb 3-1: Product: syz [ 170.229034][ T5891] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 170.260289][ T968] usb 3-1: Manufacturer: syz [ 170.264951][ T968] usb 3-1: SerialNumber: syz [ 170.284839][ T5891] usb 2-1: USB disconnect, device number 25 [ 170.295971][ T968] usb 3-1: config 0 descriptor?? [ 170.678425][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.712030][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.218800][ T52] usb 4-1: USB disconnect, device number 25 [ 171.411137][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 171.509865][ T52] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.568137][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 171.575507][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.583985][ T24] usb 2-1: config 0 has no interface number 0 [ 171.591364][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 171.601136][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 171.610560][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.618899][ T24] usb 2-1: Product: syz [ 171.624404][ T24] usb 2-1: Manufacturer: syz [ 171.630026][ T24] usb 2-1: SerialNumber: syz [ 171.637692][ T24] usb 2-1: config 0 descriptor?? [ 171.678988][ T52] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 171.698339][ T5839] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 171.717086][ T52] usb 5-1: New USB device found, idVendor=20b7, idProduct=00fa, bcdDevice=ff.ff [ 171.727642][ T52] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 171.736520][ T52] usb 5-1: Product: syz [ 171.740873][ T52] usb 5-1: Manufacturer: syz [ 171.745527][ T52] usb 5-1: SerialNumber: syz [ 171.753989][ T52] usb 5-1: config 0 descriptor?? [ 171.868233][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 171.878603][ T5839] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 171.887918][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.896092][ T5839] usb 4-1: Product: syz [ 171.900526][ T5839] usb 4-1: Manufacturer: syz [ 171.905590][ T5839] usb 4-1: SerialNumber: syz [ 171.914607][ T5839] usb 4-1: config 0 descriptor?? [ 171.984009][ T6887] netlink: 'syz.4.256': attribute type 39 has an invalid length. [ 172.123051][ T5839] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.178238][ T52] usb 5-1: USB disconnect, device number 15 [ 172.333269][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.352113][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.407307][ T5839] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 172.441434][ T5839] usb 4-1: USB disconnect, device number 26 [ 172.517498][ T968] appletouch 3-1:0.85: Failed to read mode from device. [ 172.526867][ T968] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 172.592663][ T6899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.608689][ T968] usb 3-1: USB disconnect, device number 14 [ 172.848118][ T52] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 172.874213][ T6907] netlink: 'syz.4.261': attribute type 10 has an invalid length. [ 172.884097][ T6907] hsr_slave_0: left promiscuous mode [ 172.890706][ T6907] hsr_slave_1: left promiscuous mode [ 173.034901][ T52] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.039831][ T968] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 173.046645][ T52] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.066478][ T52] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.086154][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.169853][ T6896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.212077][ T52] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.254186][ T968] usb 3-1: config 0 has no interfaces? [ 173.265296][ T968] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.293244][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.331484][ T968] usb 3-1: Product: syz [ 173.345070][ T968] usb 3-1: Manufacturer: syz [ 173.356155][ T968] usb 3-1: SerialNumber: syz [ 173.393433][ T968] usb 3-1: config 0 descriptor?? [ 173.412109][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.451975][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.656164][ T6904] 8021q: VLANs not supported on caif0 [ 173.664419][ T6904] netlink: 108 bytes leftover after parsing attributes in process `syz.2.260'. [ 174.992688][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 175.032717][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 175.050351][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 175.074050][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 175.132851][ T6936] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6936] [ 175.203169][ T24] usb 2-1: USB disconnect, device number 26 [ 175.298168][ T5891] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 175.413695][ T968] usb 1-1: USB disconnect, device number 22 [ 175.463636][ T5891] usb 4-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 175.530779][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.588142][ T5891] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 175.614360][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.706115][ T5931] usb 3-1: USB disconnect, device number 15 [ 175.724603][ T5891] usb 4-1: config 0 descriptor?? [ 175.738842][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 175.842978][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.270'. [ 176.193164][ T5891] usb 4-1: string descriptor 0 read error: -71 [ 176.211851][ T5891] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 176.268092][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 176.281645][ T5891] usb 4-1: USB disconnect, device number 27 [ 176.336760][ T6477] udevd[6477]: setting mode of /dev/bus/usb/004/027 to 020664 failed: No such file or directory [ 176.417860][ T6477] udevd[6477]: setting owner of /dev/bus/usb/004/027 to uid=0, gid=0 failed: No such file or directory [ 176.659621][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 176.749766][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.778065][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.791964][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 176.804015][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.866524][ T24] usb 2-1: config 0 descriptor?? [ 178.724939][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 178.731123][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.758481][ T24] usb 2-1: USB disconnect, device number 27 [ 178.800336][ T5888] udevd[5888]: setting mode of /dev/bus/usb/002/027 to 020664 failed: No such file or directory [ 178.825093][ T5888] udevd[5888]: setting owner of /dev/bus/usb/002/027 to uid=0, gid=0 failed: No such file or directory [ 179.285958][ T6987] fuse: Bad value for 'fd' [ 179.408095][ T24] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 179.638167][ T24] usb 3-1: device descriptor read/64, error -71 [ 179.899817][ T24] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 179.975663][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 179.998104][ T5931] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 180.041718][ T24] usb 3-1: device descriptor read/64, error -71 [ 180.193637][ T24] usb usb3-port1: attempt power cycle [ 180.226047][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 180.474991][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.570089][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.606296][ T5931] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 180.695208][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.711461][ T5931] usb 2-1: config 0 descriptor?? [ 180.821490][ T24] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 180.848993][ T24] usb 3-1: device descriptor read/8, error -71 [ 180.908500][ T3404] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 181.148115][ T24] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 181.178985][ T24] usb 3-1: device descriptor read/8, error -71 [ 181.268893][ T5931] usb 2-1: string descriptor 0 read error: -71 [ 181.348937][ T24] usb usb3-port1: unable to enumerate USB device [ 181.373688][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 181.418368][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 181.428961][ T3404] usb 4-1: config 0 has no interfaces? [ 181.460026][ T3404] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 181.478121][ T3404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.496564][ T3404] usb 4-1: Product: syz [ 181.503006][ T5931] usb 2-1: USB disconnect, device number 28 [ 181.508084][ T3404] usb 4-1: Manufacturer: syz [ 181.530563][ T3404] usb 4-1: SerialNumber: syz [ 181.583786][ T3404] usb 4-1: config 0 descriptor?? [ 181.658919][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.839167][ T24] usb 5-1: config 0 has no interfaces? [ 181.885766][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 181.929816][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.955212][ T24] usb 5-1: Product: syz [ 181.973220][ T24] usb 5-1: Manufacturer: syz [ 181.984966][ T24] usb 5-1: SerialNumber: syz [ 181.993875][ T7019] vlan2: entered allmulticast mode [ 182.005058][ T7019] geneve0: entered allmulticast mode [ 182.020914][ T7019] bridge0: port 3(vlan2) entered blocking state [ 182.052999][ T24] usb 5-1: config 0 descriptor?? [ 182.059903][ T7019] bridge0: port 3(vlan2) entered disabled state [ 182.086172][ T7019] vlan2: entered promiscuous mode [ 182.086210][ T7019] geneve0: entered promiscuous mode [ 182.101824][ T7019] bridge0: port 3(vlan2) entered blocking state [ 182.102001][ T7019] bridge0: port 3(vlan2) entered forwarding state [ 182.201042][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.239660][ T7021] bridge_slave_0: left allmulticast mode [ 182.262002][ T7021] bridge_slave_0: left promiscuous mode [ 182.308256][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.332029][ T7021] bridge_slave_1: left allmulticast mode [ 182.431540][ T7021] bridge_slave_1: left promiscuous mode [ 182.442856][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.463616][ T7021] bond0: (slave bond_slave_0): Releasing backup interface [ 182.581994][ T7021] bond0: (slave bond_slave_1): Releasing backup interface [ 182.631966][ T7021] team0: Port device team_slave_0 removed [ 182.678155][ T7021] team0: Port device team_slave_1 removed [ 182.729108][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.754304][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.782333][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.818441][ T5931] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 182.836216][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.933864][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.983821][ T7032] usb usb8: usbfs: process 7032 (syz.0.293) did not claim interface 0 before use [ 183.015286][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 183.039660][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.052896][ T7032] netlink: 'syz.0.293': attribute type 2 has an invalid length. [ 183.070517][ T7021] vlan2: left promiscuous mode [ 183.075687][ T7021] geneve0: left promiscuous mode [ 183.086507][ T5931] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 183.098505][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 183.107000][ T5931] usb 3-1: Product: syz [ 183.118875][ T7021] bridge0: port 3(vlan2) entered disabled state [ 183.127265][ T5931] usb 3-1: SerialNumber: syz [ 183.142978][ T5931] usb 3-1: config 0 descriptor?? [ 183.388935][ T7032] : entered promiscuous mode [ 183.618482][ T5931] usb 4-1: USB disconnect, device number 28 [ 185.153548][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 185.209367][ T5931] usb 5-1: USB disconnect, device number 16 [ 185.308115][ T5839] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 185.488109][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 185.521495][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.538466][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.552582][ T5839] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 185.572006][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.590751][ T5839] usb 4-1: config 0 descriptor?? [ 185.708276][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 185.815220][ T5839] corsair 0003:1B1C:1B02.000C: item fetching failed at offset 3/5 [ 186.351831][ T5839] corsair 0003:1B1C:1B02.000C: parse failed [ 186.357863][ T5839] corsair 0003:1B1C:1B02.000C: probe with driver corsair failed with error -22 [ 186.501851][ T5839] usb 4-1: USB disconnect, device number 29 [ 186.548384][ T7071] sctp: [Deprecated]: syz.4.303 (pid 7071) Use of int in maxseg socket option. [ 186.548384][ T7071] Use struct sctp_assoc_value instead [ 186.670731][ T7076] netlink: 'syz.4.303': attribute type 27 has an invalid length. [ 186.875696][ T5931] usb 3-1: USB disconnect, device number 20 [ 187.225437][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.233087][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.991549][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.052352][ T7076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.408854][ T7076] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.428802][ T7076] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.458173][ T5839] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 188.658161][ T7076] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.691760][ T7076] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.823322][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.306'. [ 188.840951][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.874060][ T5839] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.924167][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.963578][ T5839] usb 2-1: config 0 descriptor?? [ 189.196875][ T5839] usbhid 2-1:0.0: can't add hid device: -71 [ 189.216568][ T5839] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.264269][ T5839] usb 2-1: USB disconnect, device number 29 [ 189.768456][ T5839] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 189.776104][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 189.989083][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 189.996244][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 190.011398][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.030511][ T5839] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 190.042916][ T24] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 190.067670][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.077709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.119603][ T5839] usb 2-1: config 0 descriptor?? [ 190.142832][ T24] usb 5-1: config 0 descriptor?? [ 190.448707][ T5839] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 190.484503][ T24] aquacomputer_d5next 0003:0C70:F011.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 190.497235][ T5839] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 190.828548][ T24] usb 5-1: USB disconnect, device number 17 [ 190.918573][ T7124] No such timeout policy "syz0" [ 191.618082][ T5892] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 191.758110][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 191.787385][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 191.797651][ T5891] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 191.812097][ T5892] usb 3-1: config 254 has an invalid interface number: 61 but max is 1 [ 191.831080][ T5892] usb 3-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 191.841539][ T5892] usb 3-1: config 254 has an invalid interface number: 190 but max is 1 [ 191.856310][ T5892] usb 3-1: config 254 contains an unexpected descriptor of type 0x1, skipping [ 191.866869][ T5892] usb 3-1: config 254 has an invalid interface number: 182 but max is 1 [ 191.881065][ T5892] usb 3-1: config 254 has 3 interfaces, different from the descriptor's value: 2 [ 191.894281][ T5892] usb 3-1: config 254 has no interface number 0 [ 191.910076][ T5892] usb 3-1: config 254 has no interface number 1 [ 191.916668][ T5892] usb 3-1: config 254 has no interface number 2 [ 191.926056][ T5892] usb 3-1: config 254 interface 61 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 191.938305][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 191.942836][ T5892] usb 3-1: config 254 interface 61 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 191.955316][ T5892] usb 3-1: config 254 interface 61 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 191.969866][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 191.973247][ T5892] usb 3-1: config 254 interface 61 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 191.988250][ T24] usb 1-1: config 0 has no interface number 0 [ 192.001015][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.011354][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.011413][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.011436][ T24] usb 1-1: Product: syz [ 192.011453][ T24] usb 1-1: Manufacturer: syz [ 192.011469][ T24] usb 1-1: SerialNumber: syz [ 192.019367][ T24] usb 1-1: config 0 descriptor?? [ 192.040180][ T5892] usb 3-1: config 254 interface 61 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 192.063155][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.110187][ T5891] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 192.121056][ T24] smsc95xx v2.0.0 [ 192.125193][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 192.161193][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 192.169377][ T5892] usb 3-1: config 254 interface 61 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 192.179745][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 192.184610][ T5891] usb 4-1: SerialNumber: syz [ 192.198240][ T5892] usb 3-1: config 254 interface 61 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 192.242062][ T5892] usb 3-1: config 254 interface 61 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 192.276536][ C1] powermate: config urb returned -71 [ 192.277090][ T968] usb 2-1: USB disconnect, device number 30 [ 192.281874][ C1] powermate: usb_submit_urb(config) failed [ 192.282441][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 192.315887][ T5892] usb 3-1: config 254 interface 61 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 192.337399][ T5892] usb 3-1: config 254 interface 61 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 192.411729][ T5892] usb 3-1: config 254 interface 190 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 192.444399][ T5891] usb 4-1: 0:2 : does not exist [ 192.464077][ T5892] usb 3-1: config 254 interface 190 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 192.511153][ T5891] usb 4-1: USB disconnect, device number 30 [ 192.522948][ T5892] usb 3-1: config 254 interface 190 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 192.560991][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 192.587008][ T7148] sctp: [Deprecated]: syz.1.322 (pid 7148) Use of int in maxseg socket option. [ 192.587008][ T7148] Use struct sctp_assoc_value instead [ 192.601590][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 192.601627][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 192.601654][ T5892] usb 3-1: config 254 interface 190 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 192.601684][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 192.601710][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 192.601734][ T5892] usb 3-1: config 254 interface 190 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.601763][ T5892] usb 3-1: too many endpoints for config 254 interface 182 altsetting 44: 150, using maximum allowed: 30 [ 192.742442][ T7148] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 192.769889][ T7148] netlink: 'syz.1.322': attribute type 27 has an invalid length. [ 192.828713][ T5892] usb 3-1: config 254 interface 182 altsetting 44 has a duplicate endpoint with address 0xE, skipping [ 192.869486][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.886142][ T5892] usb 3-1: config 254 interface 182 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 192.948122][ T5892] usb 3-1: config 254 interface 182 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 192.977560][ T5892] usb 3-1: config 254 interface 182 altsetting 44 has 4 endpoint descriptors, different from the interface descriptor's value: 150 [ 193.094268][ T5892] usb 3-1: config 254 interface 61 has no altsetting 0 [ 193.136674][ T5892] usb 3-1: config 254 interface 190 has no altsetting 0 [ 193.150690][ T5892] usb 3-1: config 254 interface 182 has no altsetting 0 [ 193.182603][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=c3.0e [ 193.192279][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.202950][ T5892] usb 3-1: Product: 墭◞竝桻ဗᣋ씮墒弣翄뀧⿉㚵芘晜풑刅憓㴽풉揘譙깁ꣿʝ皷ꋅ㲝볓ㄭ鸁哔虳☦箢펎 [ 193.284935][ T5892] usb 3-1: Manufacturer: 턜⃦抡庘苍馩㉆슀ǻ㐖휾௳滦ౚ갪規컹ஙꖺ볾੖ڊ鱐茮喠톉虀鿛俜⭃Ꮽ勨劷ゝ쉏挲杲뤗㉕䴁〷亖쵧◜〞䙝襖䖍㸸⥷ड养⮩ﯝ쾏钡Ḱ欣刟鬱샼ꈯ⺲㩃畇晐휬뮧｟䓥৻ᱯ呫䙺廃鎖庍꾹Ⓩ啊簵檂孩爧砐畿咎潊ﾏჀ䪁뛓Ќᴯ㫂ꀫ [ 193.317924][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.369914][ T5892] usb 3-1: SerialNumber: Ђ [ 193.408767][ T7126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 193.735773][ T5892] appletouch 3-1:254.61: Could not find int-in endpoint [ 193.784433][ T5892] appletouch 3-1:254.61: probe with driver appletouch failed with error -5 [ 193.798649][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 193.817736][ T5892] usbhid 3-1:254.61: couldn't find an input interrupt endpoint [ 193.869752][ T7148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.894012][ T5892] usb 3-1: USB disconnect, device number 21 [ 193.906657][ T7148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.983770][ T7148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.989851][ T7162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.325'. [ 194.052879][ T5931] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 194.063377][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.072532][ T7148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.082480][ T5931] usb 4-1: Product: syz [ 194.086693][ T5931] usb 4-1: Manufacturer: syz [ 194.093238][ T5931] usb 4-1: SerialNumber: syz [ 194.217892][ T5931] usb 4-1: config 0 descriptor?? [ 194.261604][ T5931] go7007 4-1:0.0: Sensoray 2250 found [ 194.277941][ T5931] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 194.394712][ T7148] vlan2: left allmulticast mode [ 194.400046][ T7148] geneve0: left allmulticast mode [ 194.419227][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425576][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.500990][ T3404] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.534273][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.543224][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.634234][ T5891] usb 4-1: USB disconnect, device number 31 [ 194.742697][ T3404] usb 5-1: config 0 has no interfaces? [ 194.775382][ T5892] usb 1-1: USB disconnect, device number 23 [ 194.855615][ T3404] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 194.882130][ T3404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.017640][ T3404] usb 5-1: Product: syz [ 195.030359][ T3404] usb 5-1: Manufacturer: syz [ 195.076994][ T3404] usb 5-1: SerialNumber: syz [ 195.277814][ T3404] usb 5-1: config 0 descriptor?? [ 195.414545][ T55] Bluetooth: hci4: unexpected event 0x03 length: 6 < 11 [ 195.560554][ T7162] Cannot find del_set index 0 as target [ 195.571208][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.580402][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.748113][ T5891] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 195.908302][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 195.940726][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.033300][ T5891] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 196.071618][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.093275][ T5891] usb 4-1: config 0 descriptor?? [ 196.618354][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 196.758175][ T5892] usb 2-1: device descriptor read/64, error -71 [ 197.068269][ T5892] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 197.241353][ T5892] usb 2-1: device descriptor read/64, error -71 [ 197.309310][ T3404] usb 5-1: USB disconnect, device number 18 [ 197.423245][ T5892] usb usb2-port1: attempt power cycle [ 197.480721][ T7185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.690837][ T5891] steelseries 0003:1038:1410.000E: missing HID_OUTPUT_REPORT 0 [ 197.808120][ T5892] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 197.818080][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 197.829281][ T5892] usb 2-1: device descriptor read/8, error -71 [ 197.848837][ T3404] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 197.944172][ T7195] fuse: Bad value for 'group_id' [ 197.951504][ T7195] fuse: Bad value for 'group_id' [ 198.008229][ T3404] usb 5-1: device descriptor read/64, error -71 [ 198.069335][ T5892] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 198.248931][ T3404] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 198.342067][ T5892] usb 2-1: device descriptor read/8, error -71 [ 198.363680][ T7198] sctp: [Deprecated]: syz.0.336 (pid 7198) Use of int in maxseg socket option. [ 198.363680][ T7198] Use struct sctp_assoc_value instead [ 198.387864][ T7198] netlink: 'syz.0.336': attribute type 27 has an invalid length. [ 198.407697][ T3404] usb 5-1: device descriptor read/64, error -71 [ 198.422851][ T7198] batadv_slave_0: left promiscuous mode [ 198.430224][ T7198] batadv_slave_0: left allmulticast mode [ 198.438098][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 198.447152][ T7198] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.457366][ T7198] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.467498][ T7198] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.478204][ T7198] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 198.488675][ T5892] usb usb2-port1: unable to enumerate USB device [ 198.489365][ T7198] geneve2: left promiscuous mode [ 198.501705][ T7198] geneve2: left allmulticast mode [ 198.521036][ T3404] usb usb5-port1: attempt power cycle [ 198.591394][ T24] usb 3-1: config 0 has no interfaces? [ 198.616966][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.652758][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.664337][ T7201] program syz.0.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.676259][ T24] usb 3-1: Product: syz [ 198.687835][ T24] usb 3-1: Manufacturer: syz [ 198.696322][ T24] usb 3-1: SerialNumber: syz [ 198.714905][ T24] usb 3-1: config 0 descriptor?? [ 198.868121][ T3404] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.892878][ T3404] usb 5-1: device descriptor read/8, error -71 [ 198.934993][ T7196] xfrm0: entered promiscuous mode [ 198.946578][ T7196] xfrm0: entered allmulticast mode [ 199.246669][ T3404] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 199.285962][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 199.298301][ T3404] usb 5-1: device descriptor read/8, error -71 [ 199.359648][ T5839] usb 4-1: USB disconnect, device number 32 [ 199.428548][ T3404] usb usb5-port1: unable to enumerate USB device [ 199.428736][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 199.557065][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.573954][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.598871][ T52] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 199.790640][ T52] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 199.831712][ T52] usb 2-1: config 0 has no interface number 0 [ 199.848077][ T52] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 199.870802][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.880613][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 199.890859][ T24] usb 1-1: can't read configurations, error -71 [ 199.898822][ T52] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 199.910766][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.919060][ T52] usb 2-1: Product: syz [ 199.923278][ T52] usb 2-1: Manufacturer: syz [ 199.927917][ T52] usb 2-1: SerialNumber: syz [ 199.946523][ T52] usb 2-1: config 0 descriptor?? [ 199.963676][ T52] usb 2-1: Found UVC 0.00 device syz (1b3b:2951) [ 199.970924][ T52] usb 2-1: No valid video chain found. [ 200.164488][ T52] usb 2-1: USB disconnect, device number 35 [ 201.117340][ T7239] sctp: [Deprecated]: syz.1.347 (pid 7239) Use of int in maxseg socket option. [ 201.117340][ T7239] Use struct sctp_assoc_value instead [ 201.173434][ T7239] netlink: 'syz.1.347': attribute type 27 has an invalid length. [ 201.330084][ T24] usb 3-1: USB disconnect, device number 23 [ 201.521317][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 201.630291][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.639498][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.711389][ T5931] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 201.875899][ T7260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.888102][ T5839] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 201.911913][ T5931] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 201.920608][ T5931] usb 5-1: config 0 has no interface number 0 [ 201.933533][ T5931] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 201.943940][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.952641][ T5931] usb 5-1: Product: syz [ 201.967408][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 201.994875][ T5931] usb 5-1: Manufacturer: syz [ 201.999944][ T5931] usb 5-1: SerialNumber: syz [ 202.038584][ T5839] usb 2-1: device descriptor read/64, error -71 [ 202.083079][ T5931] usb 5-1: config 0 descriptor?? [ 202.118471][ T5931] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 202.126446][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 202.152859][ T7261] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 202.180953][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.218439][ T5931] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 202.288168][ T5839] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 202.307007][ T5931] usb 5-1: media controller created [ 202.453800][ T5839] usb 2-1: device descriptor read/64, error -71 [ 202.593002][ T5839] usb usb2-port1: attempt power cycle [ 202.813846][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.978080][ T5839] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 202.999064][ T5839] usb 2-1: device descriptor read/8, error -71 [ 203.238176][ T5839] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 203.277821][ T5839] usb 2-1: device descriptor read/8, error -71 [ 203.373706][ T5931] cxusb: set interface failed [ 203.388589][ T5839] usb usb2-port1: unable to enumerate USB device [ 203.407420][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 203.525738][ T5931] DVB: Unable to find symbol mt352_attach() [ 203.545032][ T5931] dvb-usb: bulk message failed: -22 (5/0) [ 203.552767][ T5931] zl10353_read_register: readreg error (reg=127, ret==-121) [ 203.615980][ T5931] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 203.900857][ T5931] rc_core: IR keymap rc-dvico-mce not found [ 203.924495][ T5931] Registered IR keymap rc-empty [ 203.956614][ T5931] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 203.989156][ T5931] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13 [ 204.032106][ T5931] dvb-usb: schedule remote query interval to 100 msecs. [ 204.056081][ T5931] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 204.096742][ T7279] sctp: [Deprecated]: syz.2.357 (pid 7279) Use of int in maxseg socket option. [ 204.096742][ T7279] Use struct sctp_assoc_value instead [ 204.118216][ T5839] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 204.163597][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 204.205296][ T7279] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 204.235140][ T7279] netlink: 'syz.2.357': attribute type 27 has an invalid length. [ 204.298121][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 204.415137][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.425092][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 204.548804][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 204.570589][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.707793][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 204.844317][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.852134][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.869622][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 204.881335][ T7286] sctp: [Deprecated]: syz.1.359 (pid 7286) Use of int in maxseg socket option. [ 204.881335][ T7286] Use struct sctp_assoc_value instead [ 204.978087][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 205.019082][ T5892] usb 5-1: USB disconnect, device number 23 [ 205.046680][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.082912][ T5839] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 205.094811][ T5839] usb 1-1: can't read configurations, error -71 [ 205.151174][ T7288] netlink: 'syz.1.359': attribute type 27 has an invalid length. [ 205.183238][ T5892] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 205.347231][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.377941][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.400491][ T7279] xfrm0: left promiscuous mode [ 205.407920][ T7279] xfrm0: left allmulticast mode [ 205.563458][ T7279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.581727][ T7279] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.591906][ T5892] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 205.620019][ T7279] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.669399][ T7279] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.762908][ T7279] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 205.773082][ T5892] usb 5-1: config 6 has an invalid interface number: 135 but max is 3 [ 205.786045][ T5892] usb 5-1: config 6 has an invalid interface number: 22 but max is 3 [ 205.804820][ T7279] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 205.822050][ T5892] usb 5-1: config 6 has an invalid interface number: 228 but max is 3 [ 205.851704][ T5892] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 206.017710][ T5892] usb 5-1: config 6 has an invalid interface number: 235 but max is 3 [ 206.118130][ T968] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 206.129701][ T5892] usb 5-1: config 6 has an invalid interface number: 230 but max is 3 [ 206.254335][ T5892] usb 5-1: config 6 has an invalid interface number: 211 but max is 3 [ 206.263357][ T5892] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 206.277921][ T5892] usb 5-1: config 6 has 6 interfaces, different from the descriptor's value: 4 [ 206.287915][ T5892] usb 5-1: config 6 has no interface number 0 [ 206.296433][ T5892] usb 5-1: config 6 has no interface number 1 [ 206.303185][ T5892] usb 5-1: config 6 has no interface number 2 [ 206.368718][ T5892] usb 5-1: config 6 has no interface number 3 [ 206.389556][ T5892] usb 5-1: config 6 has no interface number 4 [ 206.398420][ T5892] usb 5-1: config 6 has no interface number 5 [ 206.428176][ T5892] usb 5-1: config 6 interface 135 altsetting 9 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 206.445102][ T968] usb 4-1: config 0 has no interfaces? [ 206.470751][ T968] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 206.480067][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.496723][ T5892] usb 5-1: config 6 interface 135 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 206.508827][ T968] usb 4-1: Product: syz [ 206.513045][ T968] usb 4-1: Manufacturer: syz [ 206.517671][ T968] usb 4-1: SerialNumber: syz [ 206.532079][ T5892] usb 5-1: config 6 interface 135 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 206.557627][ T968] usb 4-1: config 0 descriptor?? [ 206.578235][ T5892] usb 5-1: config 6 interface 135 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 206.664810][ T5892] usb 5-1: config 6 interface 135 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 206.689377][ T7306] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 206.697469][ T7306] veth1_macvtap: left promiscuous mode [ 206.708036][ T7306] team0: Device veth1_macvtap failed to register rx_handler [ 206.725282][ T5892] usb 5-1: config 6 interface 135 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.836710][ T5892] usb 5-1: too many endpoints for config 6 interface 22 altsetting 53: 216, using maximum allowed: 30 [ 206.893856][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.905169][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.932815][ T5892] usb 5-1: config 6 interface 22 altsetting 53 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 206.962580][ T5892] usb 5-1: config 6 interface 22 altsetting 53 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 206.987431][ T5892] usb 5-1: config 6 interface 22 altsetting 53 has a duplicate endpoint with address 0xB, skipping [ 207.014930][ T5892] usb 5-1: config 6 interface 22 altsetting 53 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 207.045364][ T5892] usb 5-1: config 6 interface 22 altsetting 53 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 207.070331][ T5892] usb 5-1: config 6 interface 22 altsetting 53 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 207.088576][ T5892] usb 5-1: config 6 interface 22 altsetting 53 has 7 endpoint descriptors, different from the interface descriptor's value: 216 [ 207.108858][ T7312] CUSE: unknown device info "H" [ 207.126468][ T7312] CUSE: unknown device info "$" [ 207.135309][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 207.151386][ T7312] CUSE: unknown device info "Ae-p" [ 207.159570][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 207.171183][ T7312] CUSE: unknown device info "%" [ 207.177235][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 207.194188][ T7312] CUSE: unknown device info "" [ 207.194658][ T5892] usb 5-1: config 6 interface 228 altsetting 8 endpoint 0x8E is Bulk; changing to Interrupt [ 207.215278][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 207.219541][ T7312] CUSE: unknown device info "" [ 207.227255][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 207.245640][ T5892] usb 5-1: config 6 interface 228 altsetting 8 endpoint 0xF has invalid maxpacket 32, setting to 8 [ 207.257102][ T5892] usb 5-1: config 6 interface 228 altsetting 8 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 207.268952][ T5892] usb 5-1: config 6 interface 228 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 207.291658][ T5892] usb 5-1: too many endpoints for config 6 interface 235 altsetting 26: 208, using maximum allowed: 30 [ 207.304946][ T7312] CUSE: unknown device info "$" [ 207.318636][ T7312] CUSE: unknown device info "" [ 207.334250][ T7312] CUSE: unknown device info "" [ 207.345797][ T7312] CUSE: unknown device info "р" [ 207.346308][ T5892] usb 5-1: config 6 interface 235 altsetting 26 has a duplicate endpoint with address 0x6, skipping [ 207.372113][ T7312] CUSE: unknown device info "" [ 207.418319][ T5892] usb 5-1: config 6 interface 235 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 208 [ 207.434629][ T7312] CUSE: unknown device info "" [ 207.441094][ T5892] usb 5-1: config 6 interface 211 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.441407][ T7312] CUSE: zero length info key specified [ 207.519554][ T5892] usb 5-1: config 6 interface 135 has no altsetting 0 [ 207.578250][ T5892] usb 5-1: config 6 interface 22 has no altsetting 0 [ 207.619142][ T5892] usb 5-1: config 6 interface 228 has no altsetting 0 [ 207.646169][ T5892] usb 5-1: config 6 interface 235 has no altsetting 0 [ 207.682419][ T5892] usb 5-1: config 6 interface 230 has no altsetting 0 [ 207.722344][ T5892] usb 5-1: config 6 interface 211 has no altsetting 0 [ 208.293176][ T5892] usb 5-1: New USB device found, idVendor=12d1, idProduct=143e, bcdDevice= 0.00 [ 208.314181][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.382693][ T5892] usb 5-1: can't set config #6, error -71 [ 208.475271][ T5892] usb 5-1: USB disconnect, device number 24 [ 208.924090][ T52] usb 4-1: USB disconnect, device number 33 [ 208.988161][ T5892] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 209.000111][ T7337] sctp: [Deprecated]: syz.2.374 (pid 7337) Use of int in maxseg socket option. [ 209.000111][ T7337] Use struct sctp_assoc_value instead [ 209.079273][ T7337] netlink: 'syz.2.374': attribute type 27 has an invalid length. [ 209.174966][ T7342] FAULT_INJECTION: forcing a failure. [ 209.174966][ T7342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.278138][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.0.376 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 209.278173][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.278183][ T7342] Call Trace: [ 209.278190][ T7342] [ 209.278197][ T7342] dump_stack_lvl+0x241/0x360 [ 209.278229][ T7342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.278252][ T7342] ? __pfx__printk+0x10/0x10 [ 209.278281][ T7342] should_fail_ex+0x424/0x570 [ 209.278309][ T7342] prepare_alloc_pages+0x220/0x610 [ 209.278336][ T7342] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 209.278360][ T7342] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.278396][ T7342] alloc_pages_mpol+0x339/0x690 [ 209.278416][ T7342] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.278438][ T7342] vma_alloc_folio_noprof+0x12d/0x260 [ 209.278456][ T7342] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 209.278480][ T7342] folio_prealloc+0x2e/0x170 [ 209.278500][ T7342] handle_pte_fault+0x2e45/0x61c0 [ 209.278534][ T7342] ? __pfx_handle_pte_fault+0x10/0x10 [ 209.278562][ T7342] ? rcu_is_watching+0x15/0xb0 [ 209.278580][ T7342] ? __lock_acquire+0xad5/0xd80 [ 209.278612][ T7342] ? __lock_acquire+0xad5/0xd80 [ 209.278636][ T7342] ? do_raw_spin_lock+0x151/0x370 [ 209.278661][ T7342] handle_mm_fault+0x1129/0x1bf0 [ 209.278698][ T7342] ? __pfx_handle_mm_fault+0x10/0x10 [ 209.278715][ T7342] ? follow_page_pte+0x9ff/0x15e0 [ 209.278750][ T7342] ? __pfx_find_vma+0x10/0x10 [ 209.278768][ T7342] ? vma_is_secretmem+0xd/0x50 [ 209.278781][ T7342] ? check_vma_flags+0x51b/0x590 [ 209.278802][ T7342] __get_user_pages+0x1adc/0x4180 [ 209.278847][ T7342] ? __pfx___get_user_pages+0x10/0x10 [ 209.278866][ T7342] ? __pfx_mt_find+0x10/0x10 [ 209.278896][ T7342] populate_vma_page_range+0x266/0x340 [ 209.278915][ T7342] ? __pfx_populate_vma_page_range+0x10/0x10 [ 209.278935][ T7342] ? do_mlock+0x6a7/0x860 [ 209.278960][ T7342] __mm_populate+0x27d/0x460 [ 209.278981][ T7342] ? __pfx___mm_populate+0x10/0x10 [ 209.279005][ T7342] do_mlock+0x6cf/0x860 [ 209.279030][ T7342] ? __fget_files+0x2a/0x420 [ 209.279046][ T7342] ? __pfx_do_mlock+0x10/0x10 [ 209.279070][ T7342] ? fput+0x9b/0xd0 [ 209.279086][ T7342] ? ksys_write+0x275/0x2d0 [ 209.279117][ T7342] __x64_sys_mlock2+0xad/0xd0 [ 209.279141][ T7342] do_syscall_64+0xf3/0x210 [ 209.279157][ T7342] ? clear_bhb_loop+0x45/0xa0 [ 209.279175][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.279190][ T7342] RIP: 0033:0x7f78b278e169 [ 209.279204][ T7342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.279217][ T7342] RSP: 002b:00007f78b35a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 209.279233][ T7342] RAX: ffffffffffffffda RBX: 00007f78b29b5fa0 RCX: 00007f78b278e169 [ 209.279245][ T7342] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 209.279255][ T7342] RBP: 00007f78b35a1090 R08: 0000000000000000 R09: 0000000000000000 [ 209.279264][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.279272][ T7342] R13: 0000000000000000 R14: 00007f78b29b5fa0 R15: 00007f78b2adfa28 [ 209.279295][ T7342] [ 209.738165][ T52] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 209.864078][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.872653][ T5839] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 209.908196][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 209.915664][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.923183][ T52] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 209.951422][ T52] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 209.989672][ T52] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 210.028163][ T52] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.041978][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 210.051634][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.092172][ T5839] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 210.116294][ T52] usb 3-1: config 1 interface 0 has no altsetting 0 [ 210.149287][ T52] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.161133][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.177073][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.196137][ T5839] usb 1-1: config 0 descriptor?? [ 210.210201][ T52] usb 3-1: SerialNumber: syz [ 210.314364][ T7345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.358403][ T7345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.522329][ T7359] macvtap1: entered allmulticast mode [ 210.578659][ T7345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.586180][ T7345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.594644][ T7359] veth0_macvtap: entered allmulticast mode [ 210.627179][ T5839] steelseries 0003:1038:1410.000F: missing HID_OUTPUT_REPORT 0 [ 210.755001][ T52] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 210.839890][ T52] usb 3-1: USB disconnect, device number 24 [ 211.217648][ T7369] netlink: 11108 bytes leftover after parsing attributes in process `syz.2.381'. [ 211.665101][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'. [ 211.808197][ T968] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 211.850557][ T7354] Bluetooth: hci2: command 0x0406 tx timeout [ 211.856766][ T7354] Bluetooth: hci3: command 0x0406 tx timeout [ 211.863279][ T7354] Bluetooth: hci0: command 0x0406 tx timeout [ 211.867666][ T7384] Bluetooth: hci1: command 0x0406 tx timeout [ 211.869838][ T7354] Bluetooth: hci4: command 0x0406 tx timeout [ 211.980730][ T968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.991507][ T968] usb 3-1: config 8 has an invalid interface number: 122 but max is 1 [ 212.000529][ T968] usb 3-1: config 8 has an invalid interface number: 49 but max is 1 [ 212.009098][ T7388] sctp: [Deprecated]: syz.1.387 (pid 7388) Use of int in maxseg socket option. [ 212.009098][ T7388] Use struct sctp_assoc_value instead [ 212.009147][ T968] usb 3-1: config 8 has no interface number 0 [ 212.036572][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.067004][ T968] usb 3-1: config 8 has no interface number 1 [ 212.074056][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 212.095740][ T7388] netlink: 'syz.1.387': attribute type 27 has an invalid length. [ 212.108081][ T5892] usb 5-1: can't read configurations, error -71 [ 212.114614][ T968] usb 3-1: config 8 interface 122 has no altsetting 0 [ 212.128892][ T7388] veth0_macvtap: left allmulticast mode [ 212.145019][ T968] usb 3-1: config 8 interface 49 has no altsetting 0 [ 212.158664][ T7388] macvtap1: left allmulticast mode [ 212.173402][ T968] usb 3-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=7b.80 [ 212.207413][ T968] usb 3-1: New USB device strings: Mfr=246, Product=1, SerialNumber=3 [ 212.258103][ T5931] usb 1-1: USB disconnect, device number 28 [ 212.310435][ T968] usb 3-1: Product: syz [ 212.324461][ T968] usb 3-1: Manufacturer: syz [ 212.337318][ T968] usb 3-1: SerialNumber: syz [ 212.681960][ T968] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 212.703817][ T968] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 212.716057][ T7404] hsr0: entered promiscuous mode [ 212.724761][ T968] dib0700: firmware download failed at 7 with -8 [ 212.736508][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 212.765515][ T968] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 212.789665][ T7404] hsr_slave_0: left promiscuous mode [ 212.796270][ T7404] hsr_slave_1: left promiscuous mode [ 212.806376][ T968] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 212.818540][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 212.846910][ T968] dib0700: firmware download failed at 7 with -8 [ 212.883007][ T7404] hsr0 (unregistering): left promiscuous mode [ 212.944928][ T968] usb 3-1: USB disconnect, device number 25 [ 213.165731][ T7417] IPVS: set_ctl: invalid protocol: 2 172.20.20.67:20004 [ 213.285500][ T7419] netlink: 80 bytes leftover after parsing attributes in process `syz.4.394'. [ 213.314663][ T7419] netlink: 80 bytes leftover after parsing attributes in process `syz.4.394'. [ 213.578187][ T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 213.738120][ T5889] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.746436][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 213.760184][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.780540][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.812933][ T52] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 213.841018][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=7 [ 213.859910][ T52] usb 1-1: SerialNumber: syz [ 213.873533][ T52] usb 1-1: config 0 descriptor?? [ 213.930762][ T5889] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 213.944722][ T5889] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 213.967600][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.990706][ T5889] usb 3-1: config 0 descriptor?? [ 214.002057][ T5889] usb 3-1: bad CDC descriptors [ 214.098889][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.118966][ T7435] FAULT_INJECTION: forcing a failure. [ 214.118966][ T7435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.138528][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.154052][ T7433] trusted_key: encrypted_key: master key parameter '%s9p+.EKU"2,|*`q<`w:ywXj d@oWdrL.eM_+[܇mF8rÑzn}º(/M2= 4HI<9;{c'kUEMW ZL 6yiydkd#Dpy' is invalid [ 214.179964][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.200464][ T968] usb 3-1: USB disconnect, device number 26 [ 214.213334][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.1.399 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 214.213368][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.213380][ T7435] Call Trace: [ 214.213389][ T7435] [ 214.213397][ T7435] dump_stack_lvl+0x241/0x360 [ 214.213435][ T7435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.213458][ T7435] ? __pfx__printk+0x10/0x10 [ 214.213496][ T7435] should_fail_ex+0x424/0x570 [ 214.213534][ T7435] prepare_alloc_pages+0x220/0x610 [ 214.213570][ T7435] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 214.213598][ T7435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.213635][ T7435] alloc_pages_mpol+0x339/0x690 [ 214.213665][ T7435] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.213698][ T7435] vma_alloc_folio_noprof+0x12d/0x260 [ 214.213722][ T7435] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 214.213750][ T7435] folio_prealloc+0x2e/0x170 [ 214.213769][ T7435] handle_pte_fault+0x2e45/0x61c0 [ 214.213814][ T7435] ? __pfx_handle_pte_fault+0x10/0x10 [ 214.213854][ T7435] ? rcu_is_watching+0x15/0xb0 [ 214.213877][ T7435] ? __lock_acquire+0xad5/0xd80 [ 214.213919][ T7435] ? __lock_acquire+0xad5/0xd80 [ 214.213943][ T7435] ? do_raw_spin_lock+0x151/0x370 [ 214.213988][ T7435] handle_mm_fault+0x1129/0x1bf0 [ 214.214043][ T7435] ? __pfx_handle_mm_fault+0x10/0x10 [ 214.214061][ T7435] ? follow_page_pte+0x9ff/0x15e0 [ 214.214089][ T7435] ? __pfx_find_vma+0x10/0x10 [ 214.214113][ T7435] ? vma_is_secretmem+0xd/0x50 [ 214.214132][ T7435] ? check_vma_flags+0x51b/0x590 [ 214.214161][ T7435] __get_user_pages+0x1adc/0x4180 [ 214.214217][ T7435] ? __pfx___get_user_pages+0x10/0x10 [ 214.214237][ T7435] ? __pfx_mt_find+0x10/0x10 [ 214.214277][ T7435] populate_vma_page_range+0x266/0x340 [ 214.214305][ T7435] ? __pfx_populate_vma_page_range+0x10/0x10 [ 214.214331][ T7435] ? do_mlock+0x6a7/0x860 [ 214.214363][ T7435] __mm_populate+0x27d/0x460 [ 214.214384][ T7435] ? __pfx___mm_populate+0x10/0x10 [ 214.214408][ T7435] do_mlock+0x6cf/0x860 [ 214.214447][ T7435] ? __fget_files+0x2a/0x420 [ 214.214468][ T7435] ? __pfx_do_mlock+0x10/0x10 [ 214.214517][ T7435] __x64_sys_mlock2+0xad/0xd0 [ 214.214541][ T7435] do_syscall_64+0xf3/0x210 [ 214.214557][ T7435] ? clear_bhb_loop+0x45/0xa0 [ 214.214584][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.214604][ T7435] RIP: 0033:0x7f9ebb78e169 [ 214.214622][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.214639][ T7435] RSP: 002b:00007f9ebc5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 214.214662][ T7435] RAX: ffffffffffffffda RBX: 00007f9ebb9b5fa0 RCX: 00007f9ebb78e169 [ 214.214673][ T7435] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 214.214683][ T7435] RBP: 00007f9ebc5be090 R08: 0000000000000000 R09: 0000000000000000 [ 214.214692][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.214701][ T7435] R13: 0000000000000000 R14: 00007f9ebb9b5fa0 R15: 00007f9ebbadfa28 [ 214.214729][ T7435] [ 214.554212][ T52] usbhid 1-1:0.0: can't add hid device: -71 [ 214.561087][ T52] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 214.584824][ T52] usb 1-1: USB disconnect, device number 29 [ 214.854026][ T7440] sctp: [Deprecated]: syz.0.400 (pid 7440) Use of int in maxseg socket option. [ 214.854026][ T7440] Use struct sctp_assoc_value instead [ 214.883101][ T7440] netlink: 'syz.0.400': attribute type 27 has an invalid length. [ 214.898095][ T5892] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 214.908115][ T5889] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 214.966418][ T7442] mmap: syz.4.401 (7442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.061407][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 215.068229][ T5889] usb 4-1: device descriptor read/64, error -71 [ 215.093667][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.120991][ T5892] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 215.148437][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.193085][ T5892] usb 2-1: config 0 descriptor?? [ 215.348215][ T5889] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 215.508357][ T5839] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.516154][ T5889] usb 4-1: device descriptor read/64, error -71 [ 215.608121][ T5890] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 215.625044][ T5892] steelseries 0003:1038:1410.0010: missing HID_OUTPUT_REPORT 0 [ 215.639260][ T5889] usb usb4-port1: attempt power cycle [ 215.648777][ T5839] usb 3-1: device descriptor read/64, error -71 [ 215.761356][ T5890] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.770776][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.781623][ T5890] usb 5-1: config 0 descriptor?? [ 215.789287][ T5890] cp210x 5-1:0.0: cp210x converter detected [ 215.888137][ T5839] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.988252][ T5889] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 216.001864][ T5890] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 216.010084][ T5889] usb 4-1: device descriptor read/8, error -71 [ 216.026701][ T5839] usb 3-1: device descriptor read/64, error -71 [ 216.138596][ T5839] usb usb3-port1: attempt power cycle [ 216.229101][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.238210][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.252247][ T5889] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 216.303521][ T5889] usb 4-1: device descriptor read/8, error -71 [ 216.325524][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 216.419103][ T5889] usb usb4-port1: unable to enumerate USB device [ 216.490049][ T5839] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 216.653195][ T5839] usb 3-1: device descriptor read/8, error -71 [ 216.928136][ T5839] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 217.356928][ T5839] usb 3-1: device descriptor read/8, error -71 [ 217.528684][ T5839] usb usb3-port1: unable to enumerate USB device [ 217.727388][ T5890] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 217.815242][ T5890] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 217.833259][ T5890] usb 5-1: cp210x converter now attached to ttyUSB0 [ 217.878736][ T5890] usb 5-1: USB disconnect, device number 27 [ 217.937613][ T5839] usb 2-1: USB disconnect, device number 40 [ 217.982338][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.057188][ T5890] cp210x 5-1:0.0: device disconnected [ 218.273522][ T7472] netlink: 'syz.0.410': attribute type 13 has an invalid length. [ 218.576490][ T7479] sctp: [Deprecated]: syz.3.412 (pid 7479) Use of int in maxseg socket option. [ 218.576490][ T7479] Use struct sctp_assoc_value instead [ 218.637558][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.646161][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.661180][ T7472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.677540][ T5889] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 218.783773][ T7479] netlink: 'syz.3.412': attribute type 27 has an invalid length. [ 218.830388][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.838206][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.870969][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 218.900636][ T5889] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 218.943515][ T5889] usb 3-1: config 0 has no interface number 0 [ 218.972140][ T5889] usb 3-1: config 0 interface 12 has no altsetting 0 [ 219.008891][ T5889] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 219.026932][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.082777][ T7479] veth0_to_bond: left allmulticast mode [ 219.093296][ T5889] usb 3-1: Product: syz [ 219.097704][ T5889] usb 3-1: Manufacturer: syz [ 219.104873][ T5889] usb 3-1: SerialNumber: syz [ 219.125409][ T5889] usb 3-1: config 0 descriptor?? [ 219.365062][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.420584][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.428721][ T52] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 219.599886][ T52] usb 1-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.615867][ T52] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.679611][ T52] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.694273][ T52] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.710600][ T7479] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.720044][ T7479] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.730275][ T7479] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.742244][ T52] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 219.751999][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.760864][ T7479] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.770744][ T52] usb 1-1: Product: syz [ 219.775030][ T52] usb 1-1: Manufacturer: syz [ 219.781115][ T52] usb 1-1: SerialNumber: syz [ 219.798765][ T7479] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 219.806981][ T52] usb 1-1: config 0 descriptor?? [ 219.959996][ T7479] ip6erspan0: left promiscuous mode [ 219.967848][ T7487] bridge_slave_1: left allmulticast mode [ 219.976398][ T7487] bridge_slave_1: left promiscuous mode [ 219.983914][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.002441][ T7487] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 220.050237][ T52] usbtest 1-1:0.0: Linux user mode ISO test driver [ 220.056879][ T52] usbtest 1-1:0.0: high-speed {control iso-in} tests (+alt) [ 220.268300][ T5839] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 220.280064][ T52] usb 1-1: USB disconnect, device number 30 [ 220.468331][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 220.485617][ T5839] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 220.501339][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.551470][ T5839] usb 5-1: Product: syz [ 220.567769][ T5839] usb 5-1: Manufacturer: syz [ 220.605791][ T5839] usb 5-1: SerialNumber: syz [ 220.653469][ T5839] usb 5-1: config 0 descriptor?? [ 220.678430][ T3404] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 220.830939][ T3404] usb 2-1: config 0 has no interfaces? [ 220.851430][ T3404] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 220.890876][ T3404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.910485][ T3404] usb 2-1: Product: syz [ 220.915559][ T3404] usb 2-1: Manufacturer: syz [ 220.927660][ T5839] usb_8dev 5-1:0.0 can0: sending command message failed [ 220.948173][ T3404] usb 2-1: SerialNumber: syz [ 220.958373][ T5839] usb_8dev 5-1:0.0 can0: can't get firmware version [ 220.969733][ T3404] usb 2-1: config 0 descriptor?? [ 221.049518][ T5839] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 221.070347][ T5839] usb 5-1: USB disconnect, device number 28 [ 221.238479][ T5892] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.291332][ T7503] FAULT_INJECTION: forcing a failure. [ 221.291332][ T7503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.305380][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.3.419 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 221.305409][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.305420][ T7503] Call Trace: [ 221.305431][ T7503] [ 221.305437][ T7503] dump_stack_lvl+0x241/0x360 [ 221.305470][ T7503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.305495][ T7503] ? __pfx__printk+0x10/0x10 [ 221.305527][ T7503] should_fail_ex+0x424/0x570 [ 221.305563][ T7503] prepare_alloc_pages+0x220/0x610 [ 221.305593][ T7503] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 221.305620][ T7503] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.305660][ T7503] alloc_pages_mpol+0x339/0x690 [ 221.305682][ T7503] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 221.305707][ T7503] vma_alloc_folio_noprof+0x12d/0x260 [ 221.305727][ T7503] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 221.305753][ T7503] folio_prealloc+0x2e/0x170 [ 221.305774][ T7503] handle_pte_fault+0x2e45/0x61c0 [ 221.305813][ T7503] ? __pfx_handle_pte_fault+0x10/0x10 [ 221.305844][ T7503] ? rcu_is_watching+0x15/0xb0 [ 221.305864][ T7503] ? __lock_acquire+0xad5/0xd80 [ 221.305899][ T7503] ? __lock_acquire+0xad5/0xd80 [ 221.305926][ T7503] ? do_raw_spin_lock+0x151/0x370 [ 221.305953][ T7503] handle_mm_fault+0x1129/0x1bf0 [ 221.305994][ T7503] ? __pfx_handle_mm_fault+0x10/0x10 [ 221.306013][ T7503] ? follow_page_pte+0x9ff/0x15e0 [ 221.306043][ T7503] ? __pfx_find_vma+0x10/0x10 [ 221.306061][ T7503] ? vma_is_secretmem+0xd/0x50 [ 221.306076][ T7503] ? check_vma_flags+0x51b/0x590 [ 221.306099][ T7503] __get_user_pages+0x1adc/0x4180 [ 221.306148][ T7503] ? __pfx___get_user_pages+0x10/0x10 [ 221.306169][ T7503] ? __pfx_mt_find+0x10/0x10 [ 221.306202][ T7503] populate_vma_page_range+0x266/0x340 [ 221.306223][ T7503] ? __pfx_populate_vma_page_range+0x10/0x10 [ 221.306245][ T7503] ? do_mlock+0x6a7/0x860 [ 221.306272][ T7503] __mm_populate+0x27d/0x460 [ 221.306295][ T7503] ? __pfx___mm_populate+0x10/0x10 [ 221.306323][ T7503] do_mlock+0x6cf/0x860 [ 221.306350][ T7503] ? __fget_files+0x2a/0x420 [ 221.306368][ T7503] ? __pfx_do_mlock+0x10/0x10 [ 221.306394][ T7503] ? fput+0x9b/0xd0 [ 221.306411][ T7503] ? ksys_write+0x275/0x2d0 [ 221.306445][ T7503] __x64_sys_mlock2+0xad/0xd0 [ 221.306470][ T7503] do_syscall_64+0xf3/0x210 [ 221.306488][ T7503] ? clear_bhb_loop+0x45/0xa0 [ 221.306508][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.306524][ T7503] RIP: 0033:0x7f99ccf8e169 [ 221.306539][ T7503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.306554][ T7503] RSP: 002b:00007f99cdea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 221.306577][ T7503] RAX: ffffffffffffffda RBX: 00007f99cd1b5fa0 RCX: 00007f99ccf8e169 [ 221.306590][ T7503] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 221.306600][ T7503] RBP: 00007f99cdea1090 R08: 0000000000000000 R09: 0000000000000000 [ 221.306611][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.306621][ T7503] R13: 0000000000000000 R14: 00007f99cd1b5fa0 R15: 00007f99cd2dfa28 [ 221.306646][ T7503] [ 221.615721][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.708136][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 221.715539][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 221.724451][ T5892] usb 1-1: can't read configurations, error -61 [ 221.842553][ T5889] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 221.850675][ T5889] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 221.858080][ T5889] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 221.858305][ T5892] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 221.865793][ T5889] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 221.885860][ T5889] usb 3-1: USB disconnect, device number 31 [ 221.929450][ T5890] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 221.939218][ T968] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 222.028191][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 222.035449][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 222.043211][ T5892] usb 1-1: can't read configurations, error -61 [ 222.050061][ T5892] usb usb1-port1: attempt power cycle [ 222.088405][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 222.103553][ T968] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 222.114760][ T968] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 222.127734][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.141403][ T968] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 222.151843][ T5890] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 222.161005][ T968] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 222.171011][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.179110][ T968] usb 5-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.193466][ T968] usb 5-1: config 48 interface 0 has no altsetting 0 [ 222.201358][ T5890] usb 4-1: config 0 descriptor?? [ 222.212645][ T968] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 222.222079][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.230193][ T968] usb 5-1: Product: syz [ 222.234423][ T968] usb 5-1: Manufacturer: syz [ 222.239173][ T968] usb 5-1: SerialNumber: syz [ 222.409498][ T5892] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 222.463410][ T968] usb 5-1: USB disconnect, device number 29 [ 222.470391][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 222.480379][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 222.491289][ T5892] usb 1-1: can't read configurations, error -61 [ 222.615430][ T5890] steelseries 0003:1038:1410.0011: missing HID_OUTPUT_REPORT 0 [ 222.628293][ T5892] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 222.648485][ T5931] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 222.656677][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 222.666061][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 222.674151][ T5892] usb 1-1: can't read configurations, error -61 [ 222.681074][ T5892] usb usb1-port1: unable to enumerate USB device [ 222.808296][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 222.815057][ T5931] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 222.823666][ T5931] usb 3-1: config 0 has no interface number 0 [ 222.830043][ T5931] usb 3-1: config 0 interface 78 has no altsetting 0 [ 222.839684][ T5931] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9b.26 [ 222.848882][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.856880][ T5931] usb 3-1: Product: syz [ 222.861118][ T5931] usb 3-1: Manufacturer: syz [ 222.865741][ T5931] usb 3-1: SerialNumber: syz [ 222.873739][ T5931] usb 3-1: config 0 descriptor?? [ 222.882353][ T5931] (null): radio-mr800 - initialization failed [ 222.889062][ T5931] radio-mr800 3-1:0.78: probe with driver radio-mr800 failed with error -8 [ 222.898252][ T5931] usbhid 3-1:0.78: couldn't find an input interrupt endpoint [ 223.096891][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.108588][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.176974][ T5931] usb 3-1: USB disconnect, device number 32 [ 223.270325][ T5889] usb 2-1: USB disconnect, device number 41 [ 223.386110][ T7525] sctp: [Deprecated]: syz.4.427 (pid 7525) Use of int in maxseg socket option. [ 223.386110][ T7525] Use struct sctp_assoc_value instead [ 223.414984][ T7525] netlink: 'syz.4.427': attribute type 27 has an invalid length. [ 224.088787][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 224.238252][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 224.245698][ T5931] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.256922][ T5931] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.266776][ T5931] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.277771][ T5931] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.290790][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.308065][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.316126][ T5931] usb 5-1: Product: syz [ 224.337750][ T968] usb 4-1: USB disconnect, device number 38 [ 224.343797][ T5931] usb 5-1: Manufacturer: syz [ 224.353650][ T5931] usb 5-1: SerialNumber: syz [ 224.418330][ T5892] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 224.602723][ T5892] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 224.609113][ T7551] capability: warning: `syz.1.435' uses deprecated v2 capabilities in a way that may be insecure [ 224.641492][ T5892] usb 1-1: config 0 has no interface number 0 [ 224.647694][ T5892] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 224.745936][ T5892] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.860571][ T5892] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 224.870087][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.879473][ T5892] usb 1-1: Product: syz [ 224.883893][ T5892] usb 1-1: Manufacturer: syz [ 224.889950][ T5892] usb 1-1: SerialNumber: syz [ 224.897444][ T7556] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 224.913688][ T7550] netlink: 68 bytes leftover after parsing attributes in process `syz.2.434'. [ 224.957598][ T5889] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 225.054045][ T5892] usb 1-1: config 0 descriptor?? [ 225.069912][ T7543] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.084032][ T5892] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 225.094720][ T30] audit: type=1326 audit(1745268089.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.4.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x0 [ 225.116295][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.155925][ T5892] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 225.218988][ T5889] usb 2-1: device descriptor read/64, error -71 [ 225.550371][ T5889] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 225.734620][ T5889] usb 2-1: device descriptor read/64, error -71 [ 225.918640][ T5889] usb usb2-port1: attempt power cycle [ 226.156288][ T5892] usb 1-1: USB disconnect, device number 35 [ 226.184913][ T5892] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 226.221958][ T5892] cyberjack 1-1:0.69: device disconnected [ 226.289040][ T5889] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 226.291108][ T7569] sctp: [Deprecated]: syz.0.440 (pid 7569) Use of int in maxseg socket option. [ 226.291108][ T7569] Use struct sctp_assoc_value instead [ 226.314733][ T7569] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 226.329537][ T5889] usb 2-1: device descriptor read/8, error -71 [ 226.345395][ T7569] netlink: 'syz.0.440': attribute type 27 has an invalid length. [ 226.578221][ T5889] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 226.578247][ T968] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.648783][ T5889] usb 2-1: device descriptor read/8, error -71 [ 226.730481][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 226.739222][ T968] usb 3-1: config 0 has an invalid interface number: 25 but max is 1 [ 226.781523][ T968] usb 3-1: config 0 has an invalid interface number: 30 but max is 1 [ 226.783397][ T5889] usb usb2-port1: unable to enumerate USB device [ 226.791899][ T968] usb 3-1: config 0 has an invalid interface number: 24 but max is 1 [ 226.806885][ T968] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 226.816484][ T968] usb 3-1: config 0 has no interface number 0 [ 226.824078][ T968] usb 3-1: config 0 has no interface number 1 [ 226.830673][ T968] usb 3-1: config 0 has no interface number 2 [ 226.901914][ T968] usb 3-1: config 0 interface 30 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 226.906469][ T30] audit: type=1326 audit(1745268091.554:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 226.917018][ T968] usb 3-1: config 0 interface 30 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 227.092390][ T30] audit: type=1326 audit(1745268091.554:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.114617][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.133814][ T968] usb 3-1: config 0 interface 30 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 227.203537][ T30] audit: type=1326 audit(1745268091.554:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.227289][ T968] usb 3-1: too many endpoints for config 0 interface 24 altsetting 167: 149, using maximum allowed: 30 [ 227.253744][ T5931] usb 5-1: USB disconnect, device number 30 [ 227.275279][ T968] usb 3-1: config 0 interface 24 altsetting 167 endpoint 0x89 has an invalid bInterval 94, changing to 10 [ 227.276782][ T30] audit: type=1326 audit(1745268091.554:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.316525][ T30] audit: type=1326 audit(1745268091.554:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.343857][ T30] audit: type=1326 audit(1745268091.564:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.365962][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.376861][ T30] audit: type=1326 audit(1745268091.564:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.399012][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.418436][ T968] usb 3-1: config 0 interface 24 altsetting 167 endpoint 0xA has invalid maxpacket 1536, setting to 64 [ 227.433847][ T30] audit: type=1326 audit(1745268091.564:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.433902][ T30] audit: type=1326 audit(1745268091.564:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.0.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b278e169 code=0x7ffc0000 [ 227.464876][ T968] usb 3-1: config 0 interface 24 altsetting 167 endpoint 0x6 has invalid wMaxPacketSize 0 [ 227.464906][ T968] usb 3-1: config 0 interface 24 altsetting 167 has a duplicate endpoint with address 0x6, skipping [ 227.464926][ T968] usb 3-1: config 0 interface 24 altsetting 167 has a duplicate endpoint with address 0xA, skipping [ 227.464943][ T968] usb 3-1: config 0 interface 24 altsetting 167 has a duplicate endpoint with address 0xB, skipping [ 227.464961][ T968] usb 3-1: config 0 interface 24 altsetting 167 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 227.464982][ T968] usb 3-1: config 0 interface 24 altsetting 167 has a duplicate endpoint with address 0xB, skipping [ 227.465003][ T968] usb 3-1: config 0 interface 24 altsetting 167 has 13 endpoint descriptors, different from the interface descriptor's value: 149 [ 227.465025][ T968] usb 3-1: config 0 interface 24 has no altsetting 0 [ 227.467258][ T968] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0106, bcdDevice=5a.20 [ 227.467282][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.467297][ T968] usb 3-1: Product: syz [ 227.467308][ T968] usb 3-1: Manufacturer: syz [ 227.467320][ T968] usb 3-1: SerialNumber: syz [ 227.470390][ T968] usb 3-1: config 0 descriptor?? [ 227.474597][ T968] ftdi_sio 3-1:0.25: FTDI USB Serial Device converter detected [ 227.475864][ T968] ftdi_sio ttyUSB0: unknown device type: 0x5a20 [ 227.481822][ T968] ftdi_sio 3-1:0.30: FTDI USB Serial Device converter detected [ 227.483553][ T968] ftdi_sio ttyUSB1: unknown device type: 0x5a20 [ 227.637500][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.682982][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.696715][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.699047][ T968] ftdi_sio 3-1:0.24: FTDI USB Serial Device converter detected [ 227.700335][ T968] ftdi_sio ttyUSB2: unknown device type: 0x5a20 [ 227.734472][ T968] usb 3-1: USB disconnect, device number 33 [ 227.749700][ T968] ftdi_sio 3-1:0.25: device disconnected [ 227.784735][ T968] ftdi_sio 3-1:0.30: device disconnected [ 227.815384][ T968] ftdi_sio 3-1:0.24: device disconnected [ 227.826952][ T7589] IPVS: set_ctl: invalid protocol: 2 172.20.20.67:20004 [ 228.328182][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 228.423057][ T7592] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 228.424057][ T7592] batman_adv: batadv0: Adding interface: wlan1 [ 228.424075][ T7592] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.424106][ T7592] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 229.412877][ T7612] sctp: [Deprecated]: syz.2.452 (pid 7612) Use of int in maxseg socket option. [ 229.412877][ T7612] Use struct sctp_assoc_value instead [ 229.470964][ T7612] netlink: 'syz.2.452': attribute type 27 has an invalid length. [ 229.548078][ T968] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 229.687245][ T7616] netlink: 'syz.2.453': attribute type 16 has an invalid length. [ 229.699884][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 229.718202][ T968] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.724874][ T968] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 229.778339][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.789162][ T968] usb 2-1: config 0 descriptor?? [ 230.211607][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 230.211635][ T30] audit: type=1326 audit(1745268094.884:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.239921][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.377488][ T968] sony 0003:054C:0268.0012: hiddev0,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 230.403394][ T30] audit: type=1326 audit(1745268094.914:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.464088][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 230.474840][ T968] sony 0003:054C:0268.0012: failed to claim input [ 230.638568][ T30] audit: type=1326 audit(1745268095.174:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.666426][ T30] audit: type=1326 audit(1745268095.174:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.688572][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.726099][ T30] audit: type=1326 audit(1745268095.174:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.830949][ T30] audit: type=1326 audit(1745268095.174:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 230.853002][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.021218][ T30] audit: type=1326 audit(1745268095.174:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 231.072817][ T7642] IPVS: set_ctl: invalid protocol: 2 172.20.20.67:20004 [ 231.090397][ T30] audit: type=1326 audit(1745268095.174:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 231.163688][ T30] audit: type=1326 audit(1745268095.184:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 231.259114][ T30] audit: type=1326 audit(1745268095.254:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.4.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f480f38e169 code=0x7ffc0000 [ 231.490233][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.462'. [ 231.516806][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.462'. [ 231.646901][ T7650] sctp: [Deprecated]: syz.4.463 (pid 7650) Use of int in maxseg socket option. [ 231.646901][ T7650] Use struct sctp_assoc_value instead [ 231.699701][ T7650] netlink: 'syz.4.463': attribute type 27 has an invalid length. [ 232.169166][ T5839] usb 2-1: USB disconnect, device number 46 [ 232.218367][ T5889] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 232.388120][ T5889] usb 1-1: device descriptor read/64, error -71 [ 232.478154][ T968] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 232.548308][ T5931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 232.639055][ T5889] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 232.728682][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 232.735998][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.755095][ T5931] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 232.778188][ T5889] usb 1-1: device descriptor read/64, error -71 [ 232.818433][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.831112][ T5931] usb 4-1: config 0 descriptor?? [ 232.839774][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.857324][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.902119][ T5889] usb usb1-port1: attempt power cycle [ 233.188760][ T5839] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 233.248073][ T5889] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 233.268788][ T5889] usb 1-1: device descriptor read/8, error -71 [ 233.338061][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 233.345375][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.356627][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.365999][ T5839] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 233.375533][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.387293][ T5839] usb 2-1: config 0 descriptor?? [ 233.518114][ T5889] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 233.539047][ T5889] usb 1-1: device descriptor read/8, error -71 [ 233.651869][ T5889] usb usb1-port1: unable to enumerate USB device [ 235.130083][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 235.138492][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.165105][ T5931] usb 4-1: USB disconnect, device number 39 [ 235.208209][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 235.214455][ T7677] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 236.022199][ T7677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.034263][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.044821][ T7677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.056068][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.062900][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.070390][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.076446][ T7677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.085540][ T7677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.091968][ T7677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.176575][ T968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.187679][ T968] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 236.195981][ T968] usb 3-1: can't read configurations, error -71 [ 236.254783][ T5890] usb 2-1: USB disconnect, device number 47 [ 236.368472][ T5931] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 236.461190][ T7688] sctp: [Deprecated]: syz.2.474 (pid 7688) Use of int in maxseg socket option. [ 236.461190][ T7688] Use struct sctp_assoc_value instead [ 236.481464][ T7688] netlink: 'syz.2.474': attribute type 27 has an invalid length. [ 236.496303][ T7694] kvm: pic: non byte read [ 236.503640][ T7694] kvm: pic: level sensitive irq not supported [ 236.503714][ T7694] kvm: pic: non byte read [ 236.562197][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 236.577031][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 236.586548][ T5931] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 236.586574][ T5931] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 236.586590][ T5931] usb 1-1: Product: syz [ 236.586601][ T5931] usb 1-1: Manufacturer: syz [ 236.586613][ T5931] usb 1-1: SerialNumber: syz [ 236.835509][ T5931] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 236.835541][ T5931] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 236.835562][ T5931] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 236.835584][ T5931] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 236.908224][ T5892] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 237.042258][ T5931] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 237.067025][ T5931] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 237.079793][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 237.083384][ T5892] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 237.083414][ T5892] usb 4-1: config 0 has no interface number 0 [ 237.083457][ T5892] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.083486][ T5892] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.085184][ T5892] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 237.085216][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 237.085239][ T5892] usb 4-1: Product: syz [ 237.085256][ T5892] usb 4-1: SerialNumber: syz [ 237.118318][ T5892] usb 4-1: config 0 descriptor?? [ 237.146684][ T5892] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 237.161345][ T5892] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14 [ 237.163071][ T5931] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 237.183607][ T5892] ------------[ cut here ]------------ [ 237.183688][ T5892] URB ffff888028e39100 submitted while active [ 237.184502][ T5892] WARNING: CPU: 0 PID: 5892 at drivers/usb/core/urb.c:379 usb_submit_urb+0x103d/0x18c0 [ 237.184542][ T5892] Modules linked in: [ 237.184585][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: kworker/0:5 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 237.184605][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.184618][ T5892] Workqueue: usb_hub_wq hub_event [ 237.184655][ T5892] RIP: 0010:usb_submit_urb+0x103d/0x18c0 [ 237.184678][ T5892] Code: 00 eb 66 e8 15 6b 32 fa e9 75 f0 ff ff e8 0b 6b 32 fa c6 05 32 89 b9 08 01 90 48 c7 c7 60 59 f2 8c 4c 89 ee e8 04 c4 f1 f9 90 <0f> 0b 90 90 e9 3c f0 ff ff e8 e5 6a 32 fa eb 12 e8 de 6a 32 fa 41 [ 237.184694][ T5892] RSP: 0018:ffffc9000411eab8 EFLAGS: 00010246 [ 237.184710][ T5892] RAX: 92800c19d0042000 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 237.184723][ T5892] RDX: ffffc900199da000 RSI: 0000000000011fe0 RDI: 0000000000011fe1 [ 237.184735][ T5892] RBP: ffff888028e39108 R08: ffffffff818218d2 R09: 1ffffffff20bfcae [ 237.184747][ T5892] R10: dffffc0000000000 R11: fffffbfff20bfcaf R12: 1ffff110045d310a [ 237.184760][ T5892] R13: ffff888028e39100 R14: dffffc0000000000 R15: ffff888022e98850 [ 237.184791][ T5892] FS: 0000000000000000(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 237.184805][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.184817][ T5892] CR2: 000000110c459d17 CR3: 000000006568a000 CR4: 00000000003526f0 [ 237.184832][ T5892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.184843][ T5892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.184854][ T5892] Call Trace: [ 237.184861][ T5892] [ 237.184872][ T5892] ? __pm_runtime_resume+0x12d/0x180 [ 237.184897][ T5892] cm109_input_open+0x1f9/0x480 [ 237.184950][ T5892] input_open_device+0x1eb/0x360 [ 237.184978][ T5892] kbd_connect+0xe9/0x130 [ 237.185002][ T5892] input_register_device+0xce2/0x10c0 [ 237.185033][ T5892] cm109_usb_probe+0x1177/0x16d0 [ 237.185092][ T5892] usb_probe_interface+0x650/0xbc0 [ 237.185122][ T5892] ? __pfx_usb_probe_interface+0x10/0x10 [ 237.185140][ T5892] really_probe+0x2b9/0xad0 [ 237.185168][ T5892] __driver_probe_device+0x1a2/0x390 [ 237.185209][ T5892] driver_probe_device+0x50/0x430 [ 237.185233][ T5892] __device_attach_driver+0x2d6/0x530 [ 237.185257][ T5892] bus_for_each_drv+0x258/0x2e0 [ 237.185283][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 237.185305][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 237.185355][ T5892] __device_attach+0x341/0x530 [ 237.185380][ T5892] ? __pfx___device_attach+0x10/0x10 [ 237.185400][ T5892] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.185428][ T5892] bus_probe_device+0x189/0x260 [ 237.185456][ T5892] device_add+0x856/0xbf0 [ 237.185497][ T5892] usb_set_configuration+0x1999/0x1fe0 [ 237.185536][ T5892] usb_generic_driver_probe+0x88/0x140 [ 237.185562][ T5892] usb_probe_device+0x1b8/0x380 [ 237.185583][ T5892] ? __pfx_usb_probe_device+0x10/0x10 [ 237.185599][ T5892] really_probe+0x2b9/0xad0 [ 237.185642][ T5892] __driver_probe_device+0x1a2/0x390 [ 237.185667][ T5892] driver_probe_device+0x50/0x430 [ 237.185690][ T5892] __device_attach_driver+0x2d6/0x530 [ 237.185714][ T5892] bus_for_each_drv+0x258/0x2e0 [ 237.185740][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 237.185778][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 237.185812][ T5892] __device_attach+0x341/0x530 [ 237.185837][ T5892] ? __pfx___device_attach+0x10/0x10 [ 237.185865][ T5892] bus_probe_device+0x189/0x260 [ 237.185896][ T5892] device_add+0x856/0xbf0 [ 237.185937][ T5892] usb_new_device+0x1052/0x19a0 [ 237.185976][ T5892] ? __pfx_usb_new_device+0x10/0x10 [ 237.186003][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.186027][ T5892] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.186064][ T5892] hub_event+0x2bfd/0x50f0 [ 237.186123][ T5892] ? __pfx_hub_event+0x10/0x10 [ 237.186140][ T5892] ? __lock_acquire+0xad5/0xd80 [ 237.186199][ T5892] ? process_scheduled_works+0x9cb/0x18e0 [ 237.186226][ T5892] process_scheduled_works+0xac3/0x18e0 [ 237.186275][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.186308][ T5892] ? assign_work+0x367/0x3d0 [ 237.186354][ T5892] worker_thread+0x870/0xd50 [ 237.186383][ T5892] ? __kthread_parkme+0x1a8/0x200 [ 237.186403][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 237.186420][ T5892] kthread+0x7b7/0x940 [ 237.186441][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 237.186458][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186493][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186512][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186530][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186549][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.186572][ T5892] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.186589][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186609][ T5892] ret_from_fork+0x4b/0x80 [ 237.186640][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.186660][ T5892] ret_from_fork_asm+0x1a/0x30 [ 237.186690][ T5892] [ 237.186699][ T5892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 237.186711][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: kworker/0:5 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 237.186730][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.186741][ T5892] Workqueue: usb_hub_wq hub_event [ 237.186756][ T5892] Call Trace: [ 237.186766][ T5892] [ 237.186772][ T5892] dump_stack_lvl+0x241/0x360 [ 237.186799][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.186822][ T5892] ? __pfx__printk+0x10/0x10 [ 237.186850][ T5892] ? vscnprintf+0x5d/0x90 [ 237.186874][ T5892] panic+0x349/0x880 [ 237.186897][ T5892] ? __warn+0x174/0x4d0 [ 237.186918][ T5892] ? __pfx_panic+0x10/0x10 [ 237.186954][ T5892] ? ret_from_fork_asm+0x1a/0x30 [ 237.186974][ T5892] __warn+0x344/0x4d0 [ 237.186994][ T5892] ? usb_submit_urb+0x103d/0x18c0 [ 237.187019][ T5892] report_bug+0x2b3/0x500 [ 237.187034][ T5892] ? usb_submit_urb+0x103d/0x18c0 [ 237.187057][ T5892] ? usb_submit_urb+0x103d/0x18c0 [ 237.187079][ T5892] ? usb_submit_urb+0x103f/0x18c0 [ 237.187100][ T5892] handle_bug+0x89/0x170 [ 237.187119][ T5892] exc_invalid_op+0x1a/0x50 [ 237.187138][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 237.187154][ T5892] RIP: 0010:usb_submit_urb+0x103d/0x18c0 [ 237.187176][ T5892] Code: 00 eb 66 e8 15 6b 32 fa e9 75 f0 ff ff e8 0b 6b 32 fa c6 05 32 89 b9 08 01 90 48 c7 c7 60 59 f2 8c 4c 89 ee e8 04 c4 f1 f9 90 <0f> 0b 90 90 e9 3c f0 ff ff e8 e5 6a 32 fa eb 12 e8 de 6a 32 fa 41 [ 237.187189][ T5892] RSP: 0018:ffffc9000411eab8 EFLAGS: 00010246 [ 237.187203][ T5892] RAX: 92800c19d0042000 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 237.187216][ T5892] RDX: ffffc900199da000 RSI: 0000000000011fe0 RDI: 0000000000011fe1 [ 237.187228][ T5892] RBP: ffff888028e39108 R08: ffffffff818218d2 R09: 1ffffffff20bfcae [ 237.187240][ T5892] R10: dffffc0000000000 R11: fffffbfff20bfcaf R12: 1ffff110045d310a [ 237.187252][ T5892] R13: ffff888028e39100 R14: dffffc0000000000 R15: ffff888022e98850 [ 237.187270][ T5892] ? __warn_printk+0x2a2/0x360 [ 237.187297][ T5892] ? usb_submit_urb+0x103c/0x18c0 [ 237.187322][ T5892] ? __pm_runtime_resume+0x12d/0x180 [ 237.187344][ T5892] cm109_input_open+0x1f9/0x480 [ 237.187374][ T5892] input_open_device+0x1eb/0x360 [ 237.187399][ T5892] kbd_connect+0xe9/0x130 [ 237.187421][ T5892] input_register_device+0xce2/0x10c0 [ 237.187451][ T5892] cm109_usb_probe+0x1177/0x16d0 [ 237.187493][ T5892] usb_probe_interface+0x650/0xbc0 [ 237.187521][ T5892] ? __pfx_usb_probe_interface+0x10/0x10 [ 237.187539][ T5892] really_probe+0x2b9/0xad0 [ 237.187566][ T5892] __driver_probe_device+0x1a2/0x390 [ 237.187590][ T5892] driver_probe_device+0x50/0x430 [ 237.187613][ T5892] __device_attach_driver+0x2d6/0x530 [ 237.187636][ T5892] bus_for_each_drv+0x258/0x2e0 [ 237.187661][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 237.187682][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 237.187714][ T5892] __device_attach+0x341/0x530 [ 237.187738][ T5892] ? __pfx___device_attach+0x10/0x10 [ 237.187758][ T5892] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.187784][ T5892] bus_probe_device+0x189/0x260 [ 237.187812][ T5892] device_add+0x856/0xbf0 [ 237.187835][ T5892] usb_set_configuration+0x1999/0x1fe0 [ 237.187871][ T5892] usb_generic_driver_probe+0x88/0x140 [ 237.187896][ T5892] usb_probe_device+0x1b8/0x380 [ 237.187915][ T5892] ? __pfx_usb_probe_device+0x10/0x10 [ 237.187937][ T5892] really_probe+0x2b9/0xad0 [ 237.187972][ T5892] __driver_probe_device+0x1a2/0x390 [ 237.188003][ T5892] driver_probe_device+0x50/0x430 [ 237.188035][ T5892] __device_attach_driver+0x2d6/0x530 [ 237.188066][ T5892] bus_for_each_drv+0x258/0x2e0 [ 237.188099][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 237.188126][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 237.188170][ T5892] __device_attach+0x341/0x530 [ 237.188201][ T5892] ? __pfx___device_attach+0x10/0x10 [ 237.188237][ T5892] bus_probe_device+0x189/0x260 [ 237.188272][ T5892] device_add+0x856/0xbf0 [ 237.188302][ T5892] usb_new_device+0x1052/0x19a0 [ 237.188357][ T5892] ? __pfx_usb_new_device+0x10/0x10 [ 237.188394][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.188425][ T5892] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.188452][ T5892] hub_event+0x2bfd/0x50f0 [ 237.188537][ T5892] ? __pfx_hub_event+0x10/0x10 [ 237.188561][ T5892] ? __lock_acquire+0xad5/0xd80 [ 237.188622][ T5892] ? process_scheduled_works+0x9cb/0x18e0 [ 237.188656][ T5892] process_scheduled_works+0xac3/0x18e0 [ 237.188725][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.188772][ T5892] ? assign_work+0x367/0x3d0 [ 237.188812][ T5892] worker_thread+0x870/0xd50 [ 237.188853][ T5892] ? __kthread_parkme+0x1a8/0x200 [ 237.188881][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 237.188904][ T5892] kthread+0x7b7/0x940 [ 237.188941][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 237.188966][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.188990][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.189015][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.189040][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.189066][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.189096][ T5892] ? lockdep_hardirqs_on+0x9d/0x150 [ 237.189119][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.189146][ T5892] ret_from_fork+0x4b/0x80 [ 237.189169][ T5892] ? __pfx_kthread+0x10/0x10 [ 237.189195][ T5892] ret_from_fork_asm+0x1a/0x30 [ 237.189238][ T5892] [ 237.189495][ T5892] Kernel Offset: disabled