last executing test programs: 7.19081069s ago: executing program 2 (id=1909): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x10a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "ac92", "2c0f61", 0x88fb, "a22a6f3b9dc8f2073e2950b28f7e4a1487cca5a34a2046d4408d8a5eacda3f7f62daf381dad2c2b07f2d962bc9f7afd28ccbac9146c13393ec1abd285117a184a22fdff0e0867ec95652f70b477b6740e61511f941d6ecf53c18b04783cb3b61d73c36607941d1b3e3a77ea8eedf1bc48a9f3fa871ec7a9ef1ea67e80e6d080ac1471e27fd8dc6900fa8c019efee747ef9d578efaa633825f8e1e35cdd623156e3632614d1873ed1d1f6613f8a6eb1347172ce261427f291e0e490c41e2a022671d5b47e05a287eeccefb08f69819bd6c2b008a3b7cea0a12168e8605222cbcd5ce765f547e5621abc20fb3cb097209aec3918"}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00'}) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 7.061582934s ago: executing program 2 (id=1910): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@v2={0x3, 0x1, 0x9, 0xfffffffd, 0x44, "6e173e124ecbf5bb5e1707396daa3d8d1f7fb94f5e4507a12d49f7541b4e98266327b897985b527574c39185f607bfaf65a232939ebf245689d19f236f8cb358a588cdb4"}, 0x4d, 0x2) r2 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, 0x0, 0xffdd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x8000, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000240)={0xc, 0x10, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000400)={{0xc, @multicast2, 0x4e21, 0x0, 'lc\x00', 0x1, 0x1, 0x16}, {@empty, 0x4e23, 0x2, 0x6, 0x4, 0x2}}, 0x44) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000100)=@buf) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000780)=""/265, 0x0, 0x26000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0xfffffffa) 6.911046097s ago: executing program 2 (id=1911): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000140)) 6.725387381s ago: executing program 2 (id=1912): keyctl$session_to_parent(0x12) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000001}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="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"}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x2, 0x7, 0xfffffffffffffffe, 0x547b, 0x1035, 0xfffffffffffffff9, 0x0, 0x32d, 0xfffffffffffffffe, 0xffffffff, 0xbf1, 0xfff, 0x8000000000005, 0x5], 0x8000000, 0x52011}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.412377497s ago: executing program 2 (id=1915): syz_usb_connect(0x0, 0x7c, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4c, 0x73, 0x16, 0x10, 0x19d2, 0x200, 0x238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x0, 0x0, 0x48, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x6a, 0xa3, 0xcf, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "65b246c1d4c7"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x6, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xda0a, 0x8001, 0x5, 0x4, 0xa, 0x56}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x1, 0xfffe}, @obex={0x5, 0x24, 0x15, 0x200}]}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x140}, 0x20004090) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x0, &(0x7f0000000140)) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, 0x0, 0x0) 6.348192193s ago: executing program 0 (id=1916): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' ', @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x1f, 0x3fe, 0x3ff, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x9]}}) 6.188201655s ago: executing program 1 (id=1918): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x25, 0x1, 0x60, @mcast2, @loopback={0x103, 0x460c6}, 0x1, 0x700, 0x80025a1, 0x40}}) 5.750893638s ago: executing program 1 (id=1920): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) (async) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(r1, 0x0, 0x0) inotify_init() (async) inotify_init() syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) (async) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0x23a1, 0x89b1}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006d000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000004003480875e7f4357ceb2cb69d5e6d8"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="b0") 5.71277251s ago: executing program 4 (id=1921): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listxattr(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100)=0xf8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8071, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) read(r3, 0x0, 0x1b00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) 5.165224604s ago: executing program 3 (id=1922): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, 0x0) 5.086637309s ago: executing program 3 (id=1923): r0 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1br\x14\xdb\xd3\xcd\xfd\xbdnC\xec)\x86\x14\x13\xeb\xb5\n-\xfeha\xfef\xecUO(\x91\x8d\x14\xec\x02u\xd9_FT\xaa\xda\x0e \xa0;\x10', 0x4) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1}) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x27800000003, 0x6000, 0x1, r5, 0xd}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.790083837s ago: executing program 4 (id=1924): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xffffffff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0x5, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x3, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0xaef, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x3ff, 0x7, 0x3326ea06, 0x7, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773815, 0x8, 0x8001, 0x6, 0x5, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x100, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x40010000, 0x3, 0x0, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0xffffff01, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x91, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4346, 0x7, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0x401, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x3e3, 0x6, 0x1, 0x9, 0x80, 0x2, 0x2, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x5, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x1ff, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x8, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x90, 0x0, 0x1, 0x10, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x7, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x0, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x0, 0x8, 0x7fff, 0x1, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x7, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1000001, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb5, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x10, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x8, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x7e31, 0x0, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x80000001, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x7, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x89c}}, 0x24040084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}, {&(0x7f0000000200)="88b0192b4878d245ea153f9b6e20209377abc30d527061ad6a767d7c66eaeabd563a876b4c0ee034d98245a7e3e3d23fe4d684217af2d3e5bf253a8d79ee487e74bd2da0394fb0d602c4042e092846f6308026a4fd8920da86483a9789a30b07985d7e9c768f74c8effaf6a52d934ac2acc2281d44a0a0fd9cec9b8963de71ba51881b6961bd11702a03d96b7addde4fc05a18c9cc0b383908d586373e9f2b09dc9a1e38167f02e527a814b0fc0e488c", 0xb0}], 0x2}, 0x5059) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.646990676s ago: executing program 3 (id=1925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x3414, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e1e, 0x5, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xffffffff}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4.584808902s ago: executing program 4 (id=1926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, &(0x7f00000000c0)=""/34) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000a80)={0x1, 0x0, [{0x400000b6, 0x0, 0x1}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 3.986272111s ago: executing program 0 (id=1927): syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e780cc08c0070515c5b80102030109023400010000800009040000038e4ee2000905000000041a06010905010300021007c109050c04400003030f07059acb"], 0x0) socket(0x10, 0x3, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000d80)=""/258, 0xf9}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f0000000c80)=""/227, 0x6}], 0x3, &(0x7f00000004c0)=""/39, 0x27}, 0x6}, {{&(0x7f00000006c0)=@in, 0x80, &(0x7f0000000740)=[{&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000500)}, {&(0x7f0000000880)=""/145, 0x91}, {&(0x7f0000000940)=""/108, 0x6c}], 0x4, &(0x7f00000009c0)=""/221, 0xdd}, 0x4}], 0x2, 0x40000121, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffc6e) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000), 0x0) (async) write(r3, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$inet_smc(0x2b, 0x1, 0x0) r6 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x18) openat2(r7, 0x0, &(0x7f0000000380)={0x821082, 0x2, 0xb059184e4dd77197}, 0x18) (async) openat2(r7, 0x0, &(0x7f0000000380)={0x821082, 0x2, 0xb059184e4dd77197}, 0x18) 3.628209607s ago: executing program 3 (id=1928): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r5, 0xffffffffffffffff}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r4, r9, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r13, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r13, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) 3.164849324s ago: executing program 4 (id=1929): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x0, 0x0, [0x6]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0xff, 0x1, 0xff00, 0x40}, &(0x7f00000000c0)=0x20) 3.06993191s ago: executing program 4 (id=1930): landlock_create_ruleset(&(0x7f00000001c0)={0x910, 0x0, 0x1}, 0x18, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="2838828e0f8bd5ba2fbdd72556551135fb3dc7b7b5c6172409", 0x19}], 0x1, 0x0, 0x0, 0x50}], 0x1, 0x20040800) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x310) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002208000000a20100c34e1e17467f3bc0bc7ae193c9ffa7c5269cc2720497f9e7e7190dde9b2ce1a0fbd941038112efb9ec3f31f9ba082d8b"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000840) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, &(0x7f0000000180)) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x800248a0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=r7], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.910066615s ago: executing program 0 (id=1931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000580)=""/28, 0x1c}], 0x2}, 0x102) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4000, 0x7, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x9]}, 0x45c) 2.874081365s ago: executing program 2 (id=1932): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x8000, 0x2, 0xa, 0xb0}, 0x26, [0xf0d, 0x8, 0x5, 0x10001, 0x4, 0x84cc, 0x3, 0x6, 0xa, 0x7, 0x7, 0xc, 0x81, 0x6, 0x2, 0x6, 0x23f17a65, 0x800, 0x7, 0x1, 0x7, 0x0, 0x3, 0x7, 0x40, 0x7, 0xfffffffc, 0x7, 0x6, 0x7, 0xe0000, 0x4, 0xffff, 0x1ff, 0xffffff01, 0x7, 0x0, 0x3, 0x627, 0x0, 0x6, 0x800, 0x2, 0x8000, 0x16f1, 0x6, 0x9c89, 0xff, 0x9, 0x24, 0xffffffff, 0x85, 0x6, 0x2, 0xfffffff2, 0x3, 0x8, 0x8, 0x8, 0x3, 0xffffffff, 0x6, 0xb, 0x3d], [0xa8, 0x0, 0xfffffff2, 0x7ff, 0x5, 0x2, 0x7f8, 0x5938, 0x8, 0x1, 0x9, 0xfffffffe, 0x8, 0x2, 0x1, 0xf, 0x0, 0x3, 0x9, 0x3, 0x8, 0x0, 0x9, 0xfffffffd, 0x0, 0x24b00000, 0x8, 0x5, 0x3, 0x0, 0xb014, 0x7, 0x4, 0x3, 0x80000001, 0x8, 0x8, 0x7, 0xa1, 0xffff, 0x6, 0x3, 0x5, 0x9, 0x5, 0x4, 0x8000, 0x2, 0x6, 0x8, 0x8, 0x80000001, 0x40, 0x59, 0x5, 0x10, 0x3, 0xe60, 0x0, 0x6, 0x8, 0x3, 0x10, 0x4], [0x100, 0x7, 0x6, 0xc, 0x7fff, 0x3, 0x918, 0x80, 0x4, 0xb1a, 0x4, 0x7, 0xc, 0x6a, 0x1, 0x2, 0x8, 0x7, 0x2, 0x9, 0xfff, 0x6, 0xffffffff, 0x1, 0x8, 0xcba8, 0xc, 0x5, 0xfffffffa, 0xc0, 0x7fffffff, 0x6ff, 0x4, 0x3c, 0x7, 0xfc, 0x5, 0x3, 0x0, 0x6, 0x9, 0x5, 0x5, 0x9, 0x80000000, 0x8, 0x2, 0xa5, 0x9, 0x1, 0x39, 0x6c6, 0x8000, 0x8, 0x9, 0x5, 0xba14, 0x9b8e, 0xa8, 0xe4, 0x0, 0xc7, 0x710, 0x5], [0x5, 0xb8000, 0x4, 0x7, 0x1, 0x0, 0x200, 0x3, 0x2, 0x7, 0x4, 0x8c48, 0xfffffff8, 0xf, 0xc, 0x0, 0x6, 0x4873, 0x1fa4e05b, 0x1, 0x4, 0x9, 0x8, 0x10, 0x6, 0x7ff, 0x10, 0x28, 0x8, 0x9, 0x80, 0x3bc, 0x9394, 0xe, 0x0, 0xffffffff, 0x2, 0xaf1, 0x17, 0x5, 0x4, 0x9, 0xfffffffe, 0xd, 0x5, 0x18f2210a, 0x7ff, 0x0, 0x3, 0x3, 0x9, 0x0, 0x4, 0x2, 0x9, 0xdaa, 0x2, 0x1, 0x49, 0x7, 0xa, 0x3, 0x3, 0x2b]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.869487219s ago: executing program 1 (id=1933): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, 0x0) 1.73560736s ago: executing program 1 (id=1934): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x1, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0x5, "f025afb758eb09b94b79d331783b01419d8e06fe325c0d05bd0ffaaf1543501b", 0x3, 0x20, 0x3ff, 0x4, 0x0, 0x3, 0x9, 0x1ff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, &(0x7f0000000100)) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33) close(r0) 1.642736266s ago: executing program 0 (id=1935): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'bridge_slave_1\x00', {0x5}, 0x2}) close_range(r0, r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0xff, 0x2, 0x1, 0x9}, &(0x7f0000000080)=0x20) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x202) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/112) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180)) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000200), 0x8, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000340)=0x7fffffff, 0x4) execve(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={[&(0x7f00000003c0)=')\xea\x00', &(0x7f0000000400)='/proc/thread-self\x00', &(0x7f0000000440)='!\x00', &(0x7f0000000480)='C-)^]-.%#\x00']}, &(0x7f0000000700)={[&(0x7f0000000500)='bridge_slave_1\x00', &(0x7f0000000540)='bridge_slave_1\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0)='\x00']}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000780)={{r2}, {@void, @max}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x402, &(0x7f00000028c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x1be8}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}]}}) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000029c0)={0x4f15, 0x6, 0x2, 0x0, 0x0, [{{r11}, 0xf22}, {{r2}, 0x6d21}]}) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002a40), 0x189040, 0x0) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000002a80)=0x400930) r13 = syz_open_procfs(r10, &(0x7f0000002ac0)='net/ip6_mr_cache\x00') ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000002b00)=0x1c) write$FUSE_IOCTL(r13, &(0x7f0000002b40)={0x20, 0x0, r8, {0x401, 0x4, 0x40, 0x2}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e40)={r13, 0xe0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000002c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002c80), &(0x7f0000002cc0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000002d00)}}, 0x10) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002e80)=""/245) 1.615698687s ago: executing program 1 (id=1936): syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1.600533782s ago: executing program 0 (id=1937): r0 = syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xe0680, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x1000000, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x471) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000180)="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") setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x9, 0x101, 0x8, {0x2, 0x4, 0x0, 0xc}}) 626.500136ms ago: executing program 0 (id=1938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000040)=0xbc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0xf, 0x3, 0x2) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r6 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) listen(r10, 0x0) listen(r5, 0x81) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) syz_io_uring_setup(0x5115, &(0x7f0000000240)={0x0, 0x2712, 0x2, 0x3, 0x184}, &(0x7f0000000080), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x80, r2, 0x0, 0x7}, 0x38) 443.50534ms ago: executing program 3 (id=1939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) r3 = socket(0x2000000000000021, 0x2, 0x2) r4 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40a923, 0x0) (async) r5 = dup(0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0) socket(0x2, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000005e80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000480)="edbd4fe3de939aa72018a4efec9e1b4553ddd79d1d49abb9a641fcc38fd272e0990de7e2d3db749573d9aaa9d6c0ec6198a5c0b4ecf1af5ae740379393e8352873572d0588c9a4394feb0c5521ac89276c68db51813a76c57a3c3731cadc95d10dd403704b7ae19eea1e48029b16c978027cb5d70e69a128cc2346af553efc0baa626c92036746818ddc07085df733da0eed8821c61aaaa2489ed53e6e84dda945ff978e7c90d52ae08870731940076960a513d18e818083de73950b004652be524d5b2401e82786f7b5f74d2b6c96a96dd54d1232b28ad0c9ee5cc41722004d10a672130cba06de81c978", 0xeb}, {&(0x7f0000000600)="9d68b00c20d381c5b89d3490e7ec2c65d484b0317184d353b04e288031ba2b3ca63b67d62e95751d00efe2ae976659c855baf3162ee1c1924b3cad920fefcdd711e15e84cb6f47b21f3ea00854abe2b9ea82c4af67a59aff25a339170a3673cba9d73cff09a97f773475265cff88a0c764f677d32c752d43fa417d753f490af37320aae57c816a318a9825703872ba9767785ce92c9c21e298272b7c7553f6e7b321e7531d544eae5c065a8ddaed7237d0f6745f26e58383de393e2919447365e90593b21dfc5e0da55cb10b341364", 0xcf}, {&(0x7f0000000700)="d1c2542feeaefece693d4a23eed91a16929784837823950b4f4e34c634f8dece78406d6ca15d4b233b6c92fa0b558979e0f98a4b3da9b0fc838b2225464fac8f0fa056785ed245749c2545f5ce0ff85da0fe2876eb05bb049306634f088dd792849760ae4dd3941e9cb74bc515b9983a90a757dfaa2c6419b805f467cb404e8f071d38cd08c68616c14d2384ef2344f0487200130da33e0f9d18fb4bb95fb797948be3753c191e558dcb4beb27bb0db8d34e7949bed8fca1827938cf1c7dd30d2d91c8505cdec7fe71cf190f32a6f9001d1d9e1889d13c80686210093b2c1027781458a51ef3e8acf167e3fb9afc5e3d5e50b1a7", 0xf4}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000001000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r0, @ANYRES16=r8, @ANYRESOCT=r1, @ANYRESOCT=r8, @ANYRES8=r6], 0x78, 0x845}}, {{&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)="bfd58d604ba23b994f5eaedccb2c32da5234153c446dfd0b841165e130d7756ba1809174667a17a922e904943494f7a8c16b4699617fab6008a6f952da781865ef6db9288df79973186e937456515eeb5fd9795648ca22488440f077c8d5b3df916f1383139c7773bf68a003efa47a91fbaed12f20ae0d6f914ca6dafac967e23bc2c22d81ed", 0x86}, {&(0x7f0000000a40)="f6efb9c93b0f94ac3c8ae2eb0e9ec220bc8da3fb2540610c74ac3e4b5e2d6e71328e656892c676e0a1cb8adc8dcd133d1cae95003f301cd930008e36b1d7dce762d3ec78305055234fda12a6949fee6be9eb4087d8aab36365f8ff34d4a3f50d454a7abaf95d2e9b202dd1c7f46e1ea800d08322ee7e6311a94e5b04a4aec4c4ededffd600bb9187a52b80257c02e55b3b5c354903673b6bd12ee8de14c0b69fddd9b882", 0xa4}, {&(0x7f0000000b00)}], 0x3, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000000b80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000c00)="9787926ec2c7e2772294164cfa865b3c0818dfd72377d461cfbf9bac90aa6d3c42cd6fb6c353950b9f1c374cda19a39d648e30df4bd8fd6830b2a5112f3a6d51ee3556b738211443bf880d0f867dbff5", 0x50}], 0x1, &(0x7f0000000800)=ANY=[@ANYRES16=r7, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRES32=r8, @ANYRES16=r0, @ANYRES32=r7, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1ce9e312000000b515999118b94a05ccc3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x5}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000e00)="b83c7f3881f26887cc7c836a9b0c00ee5c345f7e8396bbcc9c2ed685ad5770e18ca7cbd4737e0dd87d507482c146d0f9d7db0bb638569cee89443fd5d92a978d8dbfe5b5f278c15ea2b35e3a60aaa991b7dee5b75bd119bbdb596070e1", 0x5d}, {&(0x7f0000000e80)="f2334b281ee346d428dbac6ceadb1447945e36326add325fe68e46153bf25282adfdd31b5bbaff1ccaffb988e18d9935ceb060d9de61ea65855bedacbd4b9eb5984b8eb3f75d099ea6d8cc7ab4461f7502088f96833da86cba531582fc2a6f2c564cecf85d00a1a1050d67163a1f06", 0x6f}, {&(0x7f0000000f00)="69c56fc1669b70a7017cdc1bc9b237b7e298acc0ba327ce07d0a92acd4e0e62c8df791a04610ccaf1fff6b19ef6117fe4699b18a04982bd88e96bfe21616a972e0c0357dd86dda7e0c30c44a6205c60669ffa7a647d86b670e8025a8425a4afb2e3d1845136fc0d4197e791dc135acacd3301d86ab3a7042939d3f21dfee47becd0f450bd453a233353195744be0592389db7a2baee88e1c0a02f383b5b1f5c8ebf9b0ea9d8b27c9a4c0f159261ddc863bb7344443b642ae125243c65c2c75946fefc676b39679fe78b42a977edd1cdc387eeb78c659a49e03cf99be27116d3183d75347f33dcbc81289aaeecec55e76b5", 0xf1}, {&(0x7f0000001000)="e7cfb52359e8662876c452b5002f9fa32b9e", 0x12}, {&(0x7f0000001040)="03a83431da02a2e1264d499275d5a4ec9a9f23389e946fd0a4906b37f6b414663129645be28d314386fcb2001b394d9eb5b061fb57767002d7f4b6b055f435c70dda74fdb8b389932aa5b00846ec617297248e8683b854723f99745c96018e0288ff0dab586937a6ef7b409a28642f2cb33b260c8422e130770a198d3d32bb435b4be47e982bc6f74f02ad92a1d0269dd13e9663a715b9", 0x97}, {&(0x7f0000001100)="35f74a1664a1b75964644258c09d5f77bdc31bdb9b4c6507c152fef9e73c730dd033cdfb8184ec7dda54e9eb5a49626887d55549d738d95ed42936bc0293944f0434a1b2050fe49fe22e1945b859a1ba9a1b1c197835fc64be36622494a91feee772ce5efc3894dbb8ab23c226d05cea9fc0", 0x72}], 0x6, 0x0, 0x0, 0x81}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)="18d0c251aae63dd9d1e92223c7019a09ddce818e1a7849d95dea1cc7c7c3a41ebb6e4fd09ae01f8d52a4636860d79558b6635b4b012de17bb9aa1c4e02eb0c4c78edeedd4eb2ee40bd3a9aed1fff54a6d8767f999535d3ed9284f62e3890c25166d8832f98cc2a882382687ae2020eb2b815c052033d62fb270a0c872dccda1a6d20dd56621ba09b2aae7fb949b3b90d62b224e4c7609cbeaf3d87feb5a48b2d83f0f519c683c8f6ffaacc1759f9b9", 0xaf}, {&(0x7f00000012c0)="8f1fc40d5dc99ba8b96a8f6e3ddb77", 0xf}, {&(0x7f0000001300)}, {&(0x7f0000001400)="b4835946de0dc0fdecc2bdbc070267549423e230b1098c582542e5bd3926568adb13e95f4bdd64319eb47c704e7b5b37e520b8311596d29d3639f4167695100f1f86dbc4e067384d9154b6d392ea690d4f46026df9770ff4d7d4a6e10a3809460f38d4a02c7cdaab74d4dec73736c356e4df07a492080403346099fa5ef3365ebb7e5b8b429b4c7e81211cda887c72ea8cd42d0b3e7d8a364a5becdcb1c2fa90b67bc3c87d2aea91dd8b", 0xaa}], 0x4, 0x0, 0x0, 0x20008010}}, {{&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001540)="ddd42107ce92747bf1a124537f21be53bd0f4f0ff0b5ade4d50cf428e6e47779f63fb491b31ca855ec8f4d18", 0x2c}, {&(0x7f0000001580)="227286f63c5e53ea6aa88cf5f462a0086c3c01dfab9d27504863b152ca3cfb525043b74802275f746066cb96ede47f9029c74f7401de322340e8a888d4fa25d259ad97ff", 0x44}, {&(0x7f0000001600)='\\', 0x1}, {&(0x7f0000001640)="21d17b02947d1ea7f37f112defd5693945dc896f59306c6def4359c5b731cc972794ff5b0fb4112a11f14cdbde6ef740a933cc7dc01b644c79d2d0165b12ef6e7aa605d7007da7c4fad2220473f036a05d46e0d84bc9d3fb9651e46d856eba4bbb76f751d34017931418dc7af7290cd4eea1978b9041cf094c4bda841219ff871a2662fce61704f168c80239defb0ef3f4c5cbff9f22392a4c0ff5abe12669315f5fee6c40bda764e8c68f8a4be2b7", 0xaf}], 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000ec0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40001}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002580)="8618e3e3bd07290333f1e6caeaf6bfbfb8ae7c7ec249c6f465c15f1e6a90e74a2a26cb4ea067bd098e169ae4072ae6226f6d03bb7c7da55d7cc2c3ba0d034fa519924b6c9ba2c7fd0600d6f4ac13653a8225ec88017ac1773929adba5ad2e0aaf3335b369ab4c468b8718799616a05d8b176c8dc0298b0a9ba725ca55b0d9652597aafa65024ec9009edbeab73bbc5902ec7ec28728df99349cc1a3145bc2a5eedf0c7841dd6f8be673278c6ba8c541a3b7e48dbe259d70d1d913d6c5bbecb556d49c961df44636e0a4b14b52723b85fb6db47c7a4a89a72efe774e0531cb963f440a01a7c223277e26ceab2117b1910200b6d", 0xf3}, {&(0x7f0000002200)}, {&(0x7f0000002400)="383b1ced4bdd4457d3b108635e7364bd4be7b12ca889e2dd8290b2b39907a41ef914a277efe95d3a7c3237914b6e61c18154e6a467c7597c16c8097b332f00796f2e927903b429b9123da932431a04eba26b896bcef91abdebf73b68338b95977600a07501f6bd8d4ffbeb7b2a", 0x6d}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}], 0x20, 0x20004014}}, {{&(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005d40)=[{&(0x7f0000004940)="09e1d5cafcb96a0bc6c60dcf35eabafb40e1db8e1a59c5bfb7d391e2a84825c6b763d7ed4e5a96bea669ef135cbc28daccf241b28475e15c4b7ad2cd10bb1e93f72a8dd4517ae49cab76443b7af627c3bb87e528de8007a8c1725711ff37368af18f8274ede27ad4e9dfcfd481f460764571a390a92c1a7aca83f0ee8340ab49475b8b8a1421cd7f5f8d6349712f11124aaecd789f3f04286fe8ad12341db84991c17f33a0cfb5439237bf867e40ea9734c1ae6b09cdbd34411ffffb483e10a9878f2139cb8d9c1c9e2b725c83c63ef914c81db8c1c0161d6ab8105624a06d1281e97d24faf95abc4b409e8e6afff4", 0xef}, {&(0x7f0000004a40)="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", 0x1000}, {&(0x7f0000002840)="9c3504dfc90d417a61f599b93d402d088c8028deab455b201230522037b749d9dfb3472896555424c35f9481795d03781df3c0e0451fc3ba0f4ca48dd30d3a050a32b29a250370e68a1ea9c342cca5e488aa22629dc23cd77bbac9a1b8e662f45885bb4c0f9ea10a6dfe7dfa9b9d827b1037642d75581a13ad0f7226ee26da0b6d8a", 0x82}, {&(0x7f0000005a40)="f7e924ef534c0182fd613c989efc801180ea1f35beb22fcb0c8ff07b845e0ff7301719635482d81649b8d5dde197ea40f7e1b305d14dc843791d3011b1bcf9a536627dca05a01429befbffb3b1d06955fdde939936c69aedf43974010fd55da82b2c82a7e03f5a2061ec3446bffdb06aa1edf8e9daaffb4599616fbb5925ab8a16c8dbce1770bd0a43", 0x89}, {&(0x7f0000005b00)="3e01ff5a3e3d6b98e3e88ef0dc4f3e9936a2b825694aec5d091c8869d46d4c4d432b1b44935cc03cc52cc582832f09e5007fc4922b6689a6d113389cecaaaeddf684f53f05b5e7e6f3cc5bea34974d4a22e547b90015", 0x56}, {&(0x7f0000005b80)="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", 0xfd}, {&(0x7f000000d080)="ad0a9c173c24cd7201908d142028f7131eea1d85095f2e103794dd43f00653347475b0a646e21c852ee3c4983badcd394eabad76c8450aa3cc9e9e9c6e796538bb1eafefc6c92c6e7b15320e9dd6b88dbec22f43fdb69f333db254d7cbcc10b5d5475d3c010206bb5d086699fed3a26eecfb0dcea4f48b05dacfa18effc24b87618fdb0ddd218e3e534358b03d47194ab5f465f50ab9090199dacd7c2f9b30dd6ee00d548f6f2b884397fad314733217ed589962be1bad17a7cadd81fe8f82c71fed172dbbc0bcc3b1e4b0c84615742d5574119e6039b0cc03d559d8c8b4f0ae4354c3c41fa14ee5a12e1201404ae2e2195bd94f3972a47bdf90345e0c3f25ff7741a6a9eec685e5e1318c41ec17fac50e9ee6eb55d55a702a26fad7007e32149b87be8bd257a2592c7b273a032ccc80f9f6f9e0b02ce39c4ac10e2b22e17ee171ea985725a53c8f990ca35383546c3194a552473c10ec11b5351548d55ed36bf4faf2afbfc6c59ebc2b7e98cb6bbf0c0878142366c750a4603189031a92947a0d28be48a69526049f065790d58eba276aaa711c8f293a06ae2509b3ae0164239397fdc31082aaacb7cf9b2c8e6777db9d2867ff23e59fbe96c181206510393ffee0f12063d364f3c14ca5b07a39ef90a5cc8e9f1dfd93ee9b7602c222de9b9d87bb8e4f2302c2936a68eb90b3244aba73df0e550e10faa4e8938f80610970f7025eeae34b9420ca22fe11fadc334ae957a9fcb3b3e20d1498cae4097e54d282e2738a1e8c4c7b869ed66d07e86f67677673711919ba4766ca3fc48842364ae2c1e7c0b02a0560e9bae0f27f39b09bb5438cb4079e098712de9c8e236b60d4193b30bc8f6b0a82eea2434a3671cd71f1551280fb0fedd7fd329a6f6e9f1e9f3482b91f5b06824d7f8725c9c4b0e8cbe226bb9f878db138f3a23da2c50a3ac676461a9938e6bc97b51ce133a689668f23e6c3dbfa7ab0b6e75e0ba666f99e1c4c23fb64680129a0fdc6fc5b7ff4077e253a0cae9615eed83fc363daa573c6c0502081da6cc0ac3ce731f4273f0a3b295191ecb198092d035b6e37e41b2ce402b99b80339dc43a983d3be266a3f394205d4f9cc0a8fff9acc895ff800f895ffa6ad66ed7b87370a6bff948932a1ff28227f7f412ea573d187e5bf7ae36bbd81eabbb393790ba68a0e994dd4004d32518633e9a37f922cf803f7aef3effbf5fb013f6ea35a3cd23ee68436bdd7b3a6526e2b8221c1265c57aad159d1b4bb4a3e20d79149d5252b14603795ad4739b6c9f992b7b99cf87e91f97409550eba62fc93cccbe12c42cc940d1ff4691261a766b5b1b9961d649d2ce4deb322909055dd1831ed8739ac1404e7213dca472d1b8ab25c5381fcb3052ce002e4f00751289828c4ef955552b3cf278451bf3b0332dee2bfb929e6a96fbb3ea0d3aa7d5406f5fbde88eb0c21ab3d9ba2a0a647282a3c0a0e10280568364f82effbd03ccb42dd31f3e40bd237c63ed6e143ab0fa4879efa036650ef5b6075e4236fb0bb509bb9009e3854436ec1ad182e74788615a0693918bca8e46a0b50c887c235da20e431d1ac1287e838d4299a23d8be91b32094907bdf39de986db38863328745ccf0de808554240a95fe04b198382a403bb1c0a5880ea2db70d9a1711423de317a9e54e6080eb2bc4d5e7d3da7832158a9c42e50dc981c5b1cdb3dc1e6d8e69fc87ef90a78bd828cce0cbc1709035689ad7764f27959fd48287983d810c824b449071ed2ddee593254e7dd15525f814b15edd6ba847ed80e306632f95b6e8e1feeafaa3344694ca84262db0cfcc40e1303ccf934681c3892b72d09a38c6d1715d119ff0e39b466b82802461be2a5a3df7d332530d2cedd6d21255a3b0d1efe023c109ca102110d1cfa1f2ef8f365d3a16f1330c21f6951d4d63f0753fbacb62b4465cbf2e12bf67538039f3486be3c751362ea16cb682d17d7c3a0a2ea2be9a737a2d731f7694ab115a2c9a31cfc652944e5235dffd682c98e6775fa71031b860dbdac8c691b77be81fae83abee8342b63dc1498cfbb8e44d9355274dc9b631d4e94c55dbf7fe2593d5bc1c20894b09a462add148c9a8ea8e925b79d60eab801d3eb983c83b33f22634ce9bb7dbe1f5e6b0300a18a977b41b0f6d1511eb76e4bae0271a38665ab2adad46352fdb480efb745655bfcda76a1357f47b9c01f549e68e0e53b11ef45e4a6bc143ad146b434316bdc4b51bbb119bd44e25900e2ad0508156bea1078142020e05cde9ccc59f1351af35c5a2bf7a67ca55ddfccadd337b8551f0f5b0a65738003daaa04a1f3ee55806fda0319316ebb77968f2066eaf7b7f094ee0ad74a64de169a81f6952b9e3ed6acdaa8585896218b86ed12ddb7c5c50df5c1865419e19b2b7fa46ef989313666f6b539020fe1c9d2c36ffcf4c2550fa5adc0bb5793b72902cf865d8b3d264de335412ce95e8ac6f0d434f48fea7d9b14bb6278b0a514a6fde74fc58b2af3c3a491104b368ebffc14be0ddf4bef89eccff908b03d53c8902e2478d44000081fcc534e3ba2c0b7f608965a3bd454596ea05fee197f6744bdf18650cd16a90215ddd35e951f276e5e2a942502f60afd4b403eba29bafe05f19a5a44b8822dc2e2decfe068e876449663d9a84d1adc3890df5e47b596d44a0957b24a93cac0e704b189771b93ad1ca099b767172bb7d508448e998e79c1597101837924d446683add2177ace8446b8a2841a790e49767aecb77aeeba56542b540848a42e67f16d8f5c0152ae838e020928f7b512514dd970269e7e12f8737e569175a2e2969d5c7f9cc7938d86f7b7ac9b5b9b2373274c915153cba77aa642d90a3f12159b93f62be62ab38fb7a338c2ce86852e11138a16020fa3bb2f500bad44f7cf6136753660158c8b43e823cfdf292f114476d5eace52a12ce2e0bfe03c7ca9efeec7e9a743bc4ec889828506a759ee73b85287cedae1a6701c4319aab47d601e3125466004be1c941a4fcaefcd2eb78fc16ddcbc56482564604034118f9b6d76cce0a838e062b4b222c4819b951117269e86929c7e9fcab66617853d8c4c488adcb6fe940d48fe0553f838e9e535a845bd1e94e7d96c731ffb118655bd706de63fad5cc72a227d1dae35be1f813104138262e376bf8052b1f805bb8f3fb4c941d55136a6df6dc6cf1128e42bf7be847b1192121c66cd7c740733d3d82155bac4eedc5614b75ffbd85030dcbffb47db6ced92f7e3d587ff90f42ed155f0bc15751ec1247afa8255a0c3ba4bee37e444c71b86866f903d2141057f5ab3fcd88f08c516dab41d226470c1cb8c2fee7fccf2ed96a09af3f9e4d9d2dbccf4e51b554725678ec118ebe55ad90842daf6945b55dd2ac412609549206956d9cdd215bcfb8fc2eed9828a2ce0916cc0959bf53e2abb1176933dde434ba8970f61b4fa1de9902fa8f07ab4881ba9dcfd67e6cf9d78ea8c8bb298f8eb99b53458518f89813168994dc2d4d77302a6605aec9357f43f9302376abc0e9dd68af2d6549aa5da41bf90d22f8f56f20beccacfc52ab5253cfc52a1bbefc906ae6c27bff4442f51d2c07715c0ef7e484af94eec765d3bcfc80e645743cc314db62ea55c31c743ec09d4de008740d6daad138330da7ee77228c66c9b94a0980067983738a17fad86275eb9e3060b58d0afc8fc37074f5873b27bec636c0670ee0beb680d65392d92e28d818ccc811eac749175138ec36ba1845839f2a5c3278fa1892a13f01fee64bc8b52602428ec208d088c26b8f70126007165acbc2b23b70ec0514cfd1245e42df1a5b9ba508ca6cdce2e9eb6baa36dd63c18fe82d12125a55ec287b1e547edce9e31ed9071b48c06e97f2425804618439e4556a30afa3cd343db71e98800cec01f3c3b17cd70c0c09b0c8e6b65b2cc79c8522d51ce590c582371075c12734002f3fae6ae03edce5aa6a411a52aec750ff0545fee2d639d445b7fa3a9e6cb210e756b2b8165494efcebedc4dd62cc576f6bb755bf079288d2b3ce126f8f48294779fd127b02676812907d62305f032998b970d64ad388cdd7e29bd5585c091d618fd2011acb02483e3cc82808ad149980748564625481aea1a262cb034bd8e0bf467db3ec2719c7525bd4184bd563b57f4312c2f162492e250c634023908609ec174c1ac9df909478d94d803a7cde37d2c3923facb3346579a89a2283d210ea933dcad9166eb67bfeada19d7e46419ccaf862444d25bad4f65dc24df63a3c41a8058d1ed92e36dacd3f04710cdec72b8ad296cf78f611bc6957aa6d4365839b5ca87043a8055674b63520d9ee2bafeb2b8f7ead7ea7ef87848efff6a02fac1edda93e1634c6a06544a4b56c3601db0ab511add5e790031fd9efc2415e833d0e16ff3ee6e415f99e749d83933d25b584259a1ab801440815d43a4f71a65fb1d5e910ce30c5c81cd3c626cf1233932cd22bc5e716cd4c19b877e399f9f04c9a1e6e5f740ca4382e2fc124d23d4aebbd00a72be11153852880608a937698f85c8a13392718ce4a32f8f622436b8f7b043985d87ab8203acd9c7fe1e7b2b9680fc1c553505fc1ca60a8f6eebc29e5ee739443cc2f6f9d3efd570428c192bc6caafe281d59876c3a4648dd83847b44f8613cb30eb24a4afde6459b1e8c018351c3f51c2f8b5020059dde8a97f56127e6d359d774a7f314c92afbd379bcd2bf35187d895d7c0f1e3333f67103b32476e748efbc22ffe2202e0273a920169ff437cf9c2af14cc4a25850c3bbe57e2da7114fb6d7692d8fb43e2251c1e6a5dfa5b066b7772080c9bcef1362bc794bf59c93d4c0c63d6fbd5e2865602f45c978f9feb53a4896f1697c169b15a465a8775bbca3098a25b4331337c101e2903742cc9214057aa43d5c14baed3a11ddedc4d69c21f444840f71ec57170adb92f79cc8999866c857d9958322820cd94709f060ce028f354ab7b2b34378014a59bac074becf33dac07f1c97b60550b3d9410c6720222a413adf4be9b6696c5541c3a70ccb024d54ff287c2adb915f1ee89fc77e628995b8af6f3803546b168725b9793437d16697a24ebd62cb4429a975163b1900d1e376eca1c935d9082a533451a95fb229f1f44a41d9115709d0b3ad91237ebc62596ec0c1c5bab414b91a6652c1932bacac5f48acd5940bb2d986e1bf930a549c9247f6ceff70ac7697f1bb6feb2448b1b2690553a483fe8eaa05e4b20079d4096b4bf56cd8f97f36750566a707fa98cbba09c80c99490cd5369e6624756882173a9f945c3ea11ccfc174604f942487720a0412b5d53a092add30aaa42a30f46bc42bb06ea6e29ddafaf07240f93cfbec70eeaa565cebe2723a261d9604ab32bf765fbcd2d3a1bf3766da4750da05c3aa35646953ae951bae5f8e98ac522311048726cfb849b6f7781040059b592f8d234ee9080e300264fd6105434e9f68a8cc1533c712ecfb602349526b08d3a7c4fef900d0730d047b21e6add7af95a1c1efdc00a7958cd6f79ca5ef3fae157541b17f88fa10e1ca58929f5110c77aa866858421063bc19ebf07865243b37ec823d226efc305ec33a4a2e79ba5e0e5d36c376ed468e774d3867237ca1c84a7374870345c98b90f314942f15a83934e184a4fa2243657c1d76c5e971c4345c926ce3a8f5a205d192db57f8c3bc055eb27f947384874d013fe9f695923f9229d29e52fb35b1d19eabd7db27f5f98e99cb6e0047696a2de6a93ace355ca5e5f6397bf37391a9c19e68d8ff94844c70b267627b8eeb973da4005ac268af2", 0x1000}, {&(0x7f00000026c0)}, {&(0x7f0000005c80)="cddf00643b6b3904515849f6fc27321c5999a0bbc1737b6648bbbf04c35e37dba6d5b3e3a9a301b0d62293776ff3c9ee4034e01b5dc36de77627707fbc60a40f44dc2823bf676756bb8e8f062c77ffd76a2ef7321436356e1ac40a8afcb27acd1c276fc49e8ce3e8b1fc687fcc7f9a074812908d3ac53b", 0x77}, {&(0x7f0000005d00)="ec4e4098fc5e2cb91542f8ccdc5725e45b3f036399a2dff41e5d74c3", 0x1c}], 0xa, &(0x7f0000005e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0xd0}}], 0x8, 0x8000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x20000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000400000000c2e4e51334f3df2fc9ffdf37c1a1138b407c79ee6bd0ec0c137c4aa6b86c4f6ec399dbc1c0cbb7fa0312d928978bd8d8a87df9e60fb687851929b8fc51aee4e7b0e349d32e8603af510d47927424dca8bad9c29a51395c62", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) poll(&(0x7f0000000200)=[{r9, 0x1000}], 0x1, 0x52d6) (async) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf37c9000) write$sndseq(r10, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x21}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {0x5}, @control={0x1}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 357.354742ms ago: executing program 3 (id=1940): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async) r3 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) (async) syz_usb_connect(0x6, 0x4be, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x69, 0x5a, 0xc3, 0x20, 0x403, 0xfd4b, 0x748a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ac, 0x3, 0x1, 0x2, 0x20, 0xb, [{{0x9, 0x4, 0xd5, 0x8, 0x2, 0xbd, 0xc3, 0xb5, 0x1, [], [{{0x9, 0x5, 0x83, 0xc, 0x0, 0x4, 0x0, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0xfffc}]}}, {{0x9, 0x5, 0xcc92dc3d029859f3, 0x10, 0x40, 0x9, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}]}}, {{0x9, 0x4, 0xbc, 0x2, 0x2, 0xff, 0x4, 0x17, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '_-'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xff, 0x2f, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x37}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x40, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x5d, 0x80, 0x9}]}], [{{0x9, 0x5, 0x52d132eb75a7e533, 0x4, 0x10, 0x1, 0x6, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6a, 0x101}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x6, 0x30, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}, @generic={0x67, 0x76b0b757f2e6545a, "caf89e2bb8cee47f1304a9ebade8d4cc2096e6bfa42a9fb2e8a34d7fde7bada0ba6e2fdb5cb2c5fa7f8dbc2338c1d44317f4d93d0bfdf4822943fa41253363d9bcb0c276e0559518ace1d8f58a92f21505f49b271dcff6701c3c466664378132c490a541f2"}]}}]}}, {{0x9, 0x4, 0x42, 0x1, 0xb, 0x95, 0x88, 0xd8, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0xca, 0x1, {0x22, 0xec1}}], [{{0x9, 0x5, 0xb, 0x8, 0x0, 0xd, 0xe, 0xf, [@generic={0xdb, 0x6, "81fea5adcb26f6566206a0b4b5c662bbf380b23573cad4d076f92f38f216f2bdd7c9641b34bd3fe519f52bc2de8cd8d18062038ae7fb256c2ac46694d6e186d2a53ed41c441d85370068ed9fc03b6a08631025cb2f44387bd45373b49d1f442cb09edc33837f5f8ce040deb8837edbf3d10d06e6fb78377c8dc89feb119a44e81490f087722efd1e2bd9d65b0ce54f5f7c50170afc16cb3beb58adf340f50ce7d61082de53f2e45e1a7f2e198cb68ce89076aec05446e3ec1daf947b21f9854d645f2c2730aef8f8adcba141a567b4aa035e32eaa14b8bce9c"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xf0, 0xfb, 0x7, [@generic={0xf4, 0x2, "715524a6d82f5b2e543040140481402ea6cb00493a3a6b5deca6e7ff5ce491f436564f0753e56c81c86832c72ff400d91969131715be05de3677ed67817597b9b3e104fd8ebd6f829755b981dff4a6135cc39a929ed9be4b89fea65131a16adc6e74ee3970f2a6da530d47d0a56fb0ef2d441d7b298f71b829b8c98c9196f24325a283fc4b078cd05d7074e931b11fe29df298710b3695c106f3b7171c9b2909da818f8cb74b2cead94b5e041c09a10921090cc1c8de2d84d8043a9e60b4b00d9480f970829f0652e2fb007433ee1ece5c028c60bef22d595e65de2989ee1b530b27ad497f50c5cf5dc5319e80169632d59a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc8, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0x13, 0x400, 0x6, 0x38, 0x81}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xc9, 0x40, 0xd}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0xf7, 0xf5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4000}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xd, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @generic={0xc4, 0x2, "610abee088f9908bb4bae5d58da06998a208bce60757df2d706dbb96080cb875fe4b3ff2637c3fe989c3dea6408bffab8b98c9886543b43ea5da05254f22f2e935d7fdb91052d1197491997486c87e21030609347a5899ed2f8e71728300d35fe37bc2d9013a773971cfe338b9e6ab3fc7cc42101dcd5e58dcb7372b696b875274ff72fd46e616bfc21a6bca70f6e558527e3d2911b224f37b88bccb68e8023ae6d8ab2db2920848bcfd8199cee1cfb072713a3006186950dc430d411fdeccf32c60"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x4, 0x7, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xdf, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x70, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x200}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x7, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa1, 0x2}]}}, {{0x9, 0x5, 0x4, 0x1, 0x48, 0x1, 0x68, 0x1, [@generic={0x53, 0x3, "4d416433df6b336d6cdf3616523cb72eb876bcdbaece6845b7eb1f9e9e78fecd86b94c16fad05141e9a0d9b4f0c1561e0a2d3da3b63f03a59b7e5e9ad1e716eb630a7d8d82b310b5b492e98ccd7eccfbbb"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x0, 0x1, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x57, 0x97, 0x0, 0xff, 0xca}, 0x170, &(0x7f0000000200)={0x5, 0xf, 0x170, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "3712a96e7e0657db12dbddd5fd99c41d"}, @generic={0xa0, 0x10, 0xb, "d095f90ca808eb285ae72b2c4fbc17923819e168675d76a412abf26fa13edc312114ea386e0636decb3af1d202fc7c8ce42a3a9cc24d1c59654600eadea1f4de239491f8286fcdd309e355e2723ca2e638cf0481ca29a03b778f3b91492b1fb92696d81048e205409ff856c29d9452076d380dcc788e497499c5f62b3f76a3e165755a930182b6d40063e6d4314edec6450d80490789c723231cedc310"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0xf, 0x1, 0x9}, @generic={0xac, 0x10, 0xb, "52ceafe83f7bf9a94f8b2580082bb0ac1dcd19eebe680600366e4bb0d5f4deb8417e9514a9410c205829c4a4f022249c31592a6203e48f8529539e3db38b03a66b3eba06c82e46578be5179a062f199acbf471521b05d3767a544011a2b6641c8aa5cb183eb02f1aae6ffbbddb3f09878485e11582d0b7c844d3f45bccf9a93ffa136ba62dc43814f0354ba078f94d7a82b40ec4294c66932a5513fc1edc9a2fc9a661662f94b8e8e6"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x861}}]}) (async, rerun: 64) read$FUSE(r3, 0x0, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) setxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0x17, "4ecc99650d466559e90c30ed4fc31a08e0cf1942"}, 0x16, 0x2) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000b80)={0x7, [[0x4, 0x1, 0x88, 0x3, 0x205, 0x0, 0x7, 0xbc6], [0x1, 0x10001, 0x4, 0x80000000, 0x1, 0x9, 0x153e, 0x7], [0x2, 0x8000, 0x5, 0xd, 0xff, 0x9, 0xfffffff9, 0x9]], '\x00', [{0x4, 0xd0, 0x0, 0x1, 0x1}, {0xfffffffb, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x100, 0xb92, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1}, {0x13, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x80000000, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x787, 0x7fff, 0x0, 0x1}, {0x8299, 0xe, 0x1, 0x0, 0x1}, {0x7, 0x8000, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x7f}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, r6) (rerun: 64) 278.849203ms ago: executing program 1 (id=1941): r0 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r0, 0x2007ffb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x10000201, 0x0, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee5}) sendfile(r0, r0, 0x0, 0x1000000201005) ftruncate(r0, 0x6) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e354"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "7f08"}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "7d8f0ae4"}]}}, 0x0}, 0x0) 0s ago: executing program 4 (id=1942): socket$inet6(0xa, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa037090780009800145"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504e8ffff0b000c00010000008b642e56"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca010203010902240001000000000904d800020805010009050abe02100000fa00090582025004"], 0x0) sendmsg$nl_route(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): 0.630284][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.658214][ T5972] usb 5-1: USB disconnect, device number 126 [ 480.692618][ T5902] usb 2-1: Product: syz [ 480.721632][ T5902] usb 2-1: Manufacturer: syz [ 480.763619][ T5902] usb 2-1: SerialNumber: syz [ 480.776238][ T5902] usb 2-1: config 0 descriptor?? [ 480.794980][T12204] FAULT_INJECTION: forcing a failure. [ 480.794980][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 480.849252][T12205] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1591'. [ 480.913634][T12204] CPU: 1 UID: 0 PID: 12204 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.913663][T12204] Tainted: [L]=SOFTLOCKUP [ 480.913669][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 480.913680][T12204] Call Trace: [ 480.913687][T12204] [ 480.913694][T12204] dump_stack_lvl+0xe8/0x150 [ 480.913718][T12204] should_fail_ex+0x412/0x560 [ 480.913744][T12204] should_failslab+0xa8/0x100 [ 480.913763][T12204] kmem_cache_alloc_noprof+0x87/0x6e0 [ 480.913788][T12204] ? sk_prot_alloc+0x57/0x210 [ 480.913814][T12204] sk_prot_alloc+0x57/0x210 [ 480.913834][T12204] ? sk_alloc+0x27/0x390 [ 480.913855][T12204] sk_alloc+0x3a/0x390 [ 480.913885][T12204] inet_create+0x7a0/0x1000 [ 480.913907][T12204] ? inet_create+0x9c/0x1000 [ 480.913929][T12204] __sock_create+0x4b2/0x9d0 [ 480.913960][T12204] mptcp_subflow_create_socket+0xfb/0x800 [ 480.913987][T12204] ? aa_label_sk_perm+0x529/0x6d0 [ 480.914004][T12204] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 480.914020][T12204] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 480.914031][T12204] ? look_up_lock_class+0x57/0x110 [ 480.914046][T12204] __mptcp_nmpc_sk+0x155/0x790 [ 480.914061][T12204] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 480.914080][T12204] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 480.914107][T12204] mptcp_connect+0x71/0x830 [ 480.914133][T12204] __inet_stream_connect+0x25a/0xdd0 [ 480.914154][T12204] ? do_raw_spin_lock+0x12b/0x2f0 [ 480.914167][T12204] ? lock_sock_nested+0x6a/0x100 [ 480.914179][T12204] ? __pfx___inet_stream_connect+0x10/0x10 [ 480.914194][T12204] ? __local_bh_enable_ip+0xd0/0x130 [ 480.914207][T12204] inet_stream_connect+0x66/0xa0 [ 480.914227][T12204] __sys_connect+0x312/0x450 [ 480.914251][T12204] ? __pfx___sys_connect+0x10/0x10 [ 480.914281][T12204] ? __pfx_ksys_write+0x10/0x10 [ 480.914306][T12204] __x64_sys_connect+0x7a/0x90 [ 480.914329][T12204] do_syscall_64+0xe2/0xf80 [ 480.914356][T12204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.914366][T12204] ? trace_irq_disable+0x37/0x100 [ 480.914385][T12204] ? clear_bhb_loop+0x60/0xb0 [ 480.914415][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.914433][T12204] RIP: 0033:0x7fe33799acb9 [ 480.914449][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.914462][T12204] RSP: 002b:00007fe338899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 480.914473][T12204] RAX: ffffffffffffffda RBX: 00007fe337c15fa0 RCX: 00007fe33799acb9 [ 480.914481][T12204] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 480.914487][T12204] RBP: 00007fe338899090 R08: 0000000000000000 R09: 0000000000000000 [ 480.914493][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.914499][T12204] R13: 00007fe337c16038 R14: 00007fe337c15fa0 R15: 00007fe337d3fa48 [ 480.914514][T12204] [ 481.412709][ T5902] keyspan_pda 2-1:0.145: required endpoints missing [ 481.430253][ T5902] keyspan_pda 2-1:0.43: Keyspan PDA converter detected [ 481.484453][ T5902] usb 2-1: Keyspan PDA converter now attached to ttyUSB0 [ 481.503687][ T5972] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 481.559916][ T5902] usb 2-1: USB disconnect, device number 96 [ 481.653638][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 481.660254][ T5972] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 481.672957][T12222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1596'. [ 481.693932][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.697388][ T5902] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 481.736454][ T5902] keyspan_pda 2-1:0.43: device disconnected [ 481.746670][ T5972] usb 3-1: config 0 has no interface number 0 [ 481.779861][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 481.813647][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 481.821413][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.857505][ T5972] usb 3-1: Product: syz [ 481.875853][ T5972] usb 3-1: Manufacturer: syz [ 481.896009][ T5972] usb 3-1: SerialNumber: syz [ 481.927319][ T5972] usb 3-1: config 0 descriptor?? [ 481.985548][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 481.999421][ T10] usb 5-1: config 1 has no interface number 0 [ 482.022737][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 482.056564][ T10] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 482.097861][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.125178][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 482.139027][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.162181][ T10] usb 5-1: Product: syz [ 482.179921][ T10] usb 5-1: Manufacturer: syz [ 482.191250][ T10] usb 5-1: SerialNumber: syz [ 482.244962][T12221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 482.314407][T12221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 482.346908][ T10] usb 5-1: Expected 3 endpoints, found: 1 [ 482.575573][ T10] usb 5-1: USB disconnect, device number 127 [ 482.736782][T12233] loop8: detected capacity change from 0 to 7 [ 482.746157][ C0] blk_print_req_error: 30 callbacks suppressed [ 482.746176][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.761968][ C0] buffer_io_error: 30 callbacks suppressed [ 482.761985][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.776258][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.785903][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.794623][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.804236][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.813712][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.823290][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.835324][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.845050][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.853229][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.863034][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.871974][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.881632][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.890682][ T5848] ldm_validate_partition_table(): Disk read failed. [ 482.898019][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.907643][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.916498][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.919478][T12236] binder: 12235:12236 unknown command 0 [ 482.926139][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.926457][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.949319][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 482.957792][ T5848] Dev loop8: unable to read RDB block 0 [ 482.958339][T12236] binder: 12235:12236 ioctl c0306201 200000000640 returned -22 [ 482.965862][ T5848] loop8: unable to read partition table [ 482.980903][ T5848] loop8: partition table beyond EOD, truncated [ 482.991579][T12233] ldm_validate_partition_table(): Disk read failed. [ 483.001656][T12233] Dev loop8: unable to read RDB block 0 [ 483.008312][T12233] loop8: unable to read partition table [ 483.014939][T12233] loop8: partition table beyond EOD, truncated [ 483.021281][T12233] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.372502][T12247] netlink: 'syz.4.1603': attribute type 10 has an invalid length. [ 483.932178][T12247] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 484.040548][T12247] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 484.058821][T12247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 484.077063][T12256] »»»»»»: renamed from vlan0 [ 484.277375][T12258] FAULT_INJECTION: forcing a failure. [ 484.277375][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 484.306806][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.0.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.306836][T12258] Tainted: [L]=SOFTLOCKUP [ 484.306843][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 484.306858][T12258] Call Trace: [ 484.306865][T12258] [ 484.306874][T12258] dump_stack_lvl+0xe8/0x150 [ 484.306902][T12258] should_fail_ex+0x412/0x560 [ 484.306930][T12258] should_failslab+0xa8/0x100 [ 484.306953][T12258] __kmalloc_noprof+0xde/0x7e0 [ 484.306971][T12258] ? rcu_is_watching+0x15/0xb0 [ 484.306991][T12258] ? security_sk_alloc+0x52/0x360 [ 484.307012][T12258] security_sk_alloc+0x52/0x360 [ 484.307031][T12258] sk_prot_alloc+0x101/0x210 [ 484.307057][T12258] sk_alloc+0x3a/0x390 [ 484.307084][T12258] inet_create+0x7a0/0x1000 [ 484.307106][T12258] ? inet_create+0x9c/0x1000 [ 484.307130][T12258] __sock_create+0x4b2/0x9d0 [ 484.307161][T12258] mptcp_subflow_create_socket+0xfb/0x800 [ 484.307189][T12258] ? aa_label_sk_perm+0x529/0x6d0 [ 484.307214][T12258] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 484.307243][T12258] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 484.307263][T12258] ? look_up_lock_class+0x57/0x110 [ 484.307290][T12258] __mptcp_nmpc_sk+0x155/0x790 [ 484.307310][T12258] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 484.307336][T12258] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 484.307364][T12258] mptcp_connect+0x71/0x830 [ 484.307389][T12258] __inet_stream_connect+0x25a/0xdd0 [ 484.307411][T12258] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.307433][T12258] ? lock_sock_nested+0x6a/0x100 [ 484.307456][T12258] ? __pfx___inet_stream_connect+0x10/0x10 [ 484.307483][T12258] ? __local_bh_enable_ip+0xd0/0x130 [ 484.307506][T12258] inet_stream_connect+0x66/0xa0 [ 484.307528][T12258] __sys_connect+0x312/0x450 [ 484.307554][T12258] ? __pfx___sys_connect+0x10/0x10 [ 484.307589][T12258] ? __pfx_ksys_write+0x10/0x10 [ 484.307614][T12258] __x64_sys_connect+0x7a/0x90 [ 484.307639][T12258] do_syscall_64+0xe2/0xf80 [ 484.307662][T12258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.307679][T12258] ? trace_irq_disable+0x37/0x100 [ 484.307701][T12258] ? clear_bhb_loop+0x60/0xb0 [ 484.307722][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.307740][T12258] RIP: 0033:0x7fda45b9acb9 [ 484.307757][T12258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.307771][T12258] RSP: 002b:00007fda469b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 484.307790][T12258] RAX: ffffffffffffffda RBX: 00007fda45e15fa0 RCX: 00007fda45b9acb9 [ 484.307803][T12258] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 484.307815][T12258] RBP: 00007fda469b4090 R08: 0000000000000000 R09: 0000000000000000 [ 484.307826][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.307837][T12258] R13: 00007fda45e16038 R14: 00007fda45e15fa0 R15: 00007fda45f3fa48 [ 484.307866][T12258] [ 485.404701][ T5972] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 485.423760][ T5972] uvcvideo 3-1:0.31: No valid video chain found. [ 485.442679][ T5972] usb 3-1: USB disconnect, device number 105 [ 485.462373][T12269] loop5: detected capacity change from 0 to 7 [ 485.470132][T12269] loop5: p1 < > p4 [ 485.479964][T12269] loop5: partition table partially beyond EOD, truncated [ 485.603341][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 485.624495][ T5834] udevd[5834]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 485.774760][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 486.193318][T12280] binder: 12279:12280 ioctl c080661a 200000000180 returned -22 [ 486.694517][ T5902] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 486.843664][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 486.885764][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.903635][ T5972] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 487.001490][ T5902] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 487.022955][ T5902] usb 2-1: config 7 has no interface number 0 [ 487.033199][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.048039][T12296] FAULT_INJECTION: forcing a failure. [ 487.048039][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 487.071711][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.091106][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 487.099419][ T5902] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 487.118938][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.129123][T12296] CPU: 0 UID: 0 PID: 12296 Comm: syz.3.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.129154][T12296] Tainted: [L]=SOFTLOCKUP [ 487.129161][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 487.129173][T12296] Call Trace: [ 487.129184][T12296] [ 487.129200][T12296] dump_stack_lvl+0xe8/0x150 [ 487.129226][T12296] should_fail_ex+0x412/0x560 [ 487.129254][T12296] should_failslab+0xa8/0x100 [ 487.129277][T12296] __kmalloc_cache_noprof+0x83/0x6e0 [ 487.129296][T12296] ? subflow_ulp_init+0xd0/0x620 [ 487.129320][T12296] subflow_ulp_init+0xd0/0x620 [ 487.129336][T12296] ? tcp_set_ulp+0xb1/0x5f0 [ 487.129363][T12296] tcp_set_ulp+0x53c/0x5f0 [ 487.129389][T12296] mptcp_subflow_create_socket+0x359/0x800 [ 487.129420][T12296] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 487.129447][T12296] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 487.129467][T12296] ? look_up_lock_class+0x57/0x110 [ 487.129494][T12296] __mptcp_nmpc_sk+0x155/0x790 [ 487.129513][T12296] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 487.129533][T12296] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 487.129560][T12296] mptcp_connect+0x71/0x830 [ 487.129586][T12296] __inet_stream_connect+0x25a/0xdd0 [ 487.129612][T12296] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.129633][T12296] ? lock_sock_nested+0x6a/0x100 [ 487.129656][T12296] ? __pfx___inet_stream_connect+0x10/0x10 [ 487.129683][T12296] ? __local_bh_enable_ip+0xd0/0x130 [ 487.129705][T12296] inet_stream_connect+0x66/0xa0 [ 487.129726][T12296] __sys_connect+0x312/0x450 [ 487.129752][T12296] ? __pfx___sys_connect+0x10/0x10 [ 487.129786][T12296] ? __pfx_ksys_write+0x10/0x10 [ 487.129809][T12296] __x64_sys_connect+0x7a/0x90 [ 487.129833][T12296] do_syscall_64+0xe2/0xf80 [ 487.129855][T12296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.129872][T12296] ? trace_irq_disable+0x37/0x100 [ 487.129892][T12296] ? clear_bhb_loop+0x60/0xb0 [ 487.129913][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.129930][T12296] RIP: 0033:0x7fe33799acb9 [ 487.129945][T12296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.129959][T12296] RSP: 002b:00007fe338899028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 487.129978][T12296] RAX: ffffffffffffffda RBX: 00007fe337c15fa0 RCX: 00007fe33799acb9 [ 487.129991][T12296] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 487.130002][T12296] RBP: 00007fe338899090 R08: 0000000000000000 R09: 0000000000000000 [ 487.130013][T12296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.130023][T12296] R13: 00007fe337c16038 R14: 00007fe337c15fa0 R15: 00007fe337d3fa48 [ 487.130052][T12296] [ 487.130139][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.409922][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 487.419573][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.471394][ T10] usb 1-1: config 0 descriptor?? [ 487.541944][ T5972] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 487.558059][ T5902] usb 2-1: Product: 㯑 [ 487.581863][ T5902] usb 2-1: Manufacturer: ë–’ [ 487.581936][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.642785][ T5972] usb 5-1: config 0 descriptor?? [ 487.690595][ T5972] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 487.838811][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 487.871985][ T5902] usb 2-1: USB disconnect, device number 97 [ 488.023769][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 488.113610][ T7574] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 488.185041][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 488.192998][ T10] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 488.202032][ T10] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 488.212788][ T10] usb 4-1: config 6 has no interface number 0 [ 488.221389][ T10] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 488.236602][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 488.250432][ T10] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.267144][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 488.279296][ T7574] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 488.288138][ T7574] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 488.298484][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.306997][ T10] usb 4-1: Product: syz [ 488.311496][ T7574] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.318480][ T10] usb 4-1: Manufacturer: syz [ 488.324781][ T10] usb 4-1: SerialNumber: syz [ 488.330576][ T7574] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 488.353624][ T7574] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 488.373715][ T10] hso 4-1:6.2: Failed to find INT IN ep [ 488.386989][ T7574] usb 3-1: Product: syz [ 488.391189][ T7574] usb 3-1: Manufacturer: syz [ 488.403267][ T7574] usb 3-1: SerialNumber: syz [ 488.429794][ T7574] usb 3-1: config 0 descriptor?? [ 488.443222][ T7574] hub 3-1:0.0: bad descriptor, ignoring hub [ 488.450145][ T7574] hub 3-1:0.0: probe with driver hub failed with error -5 [ 488.464717][T12315] tipc: Enabling of bearer rejected, failed to enable media [ 488.466499][ T7574] usb 3-1: selecting invalid altsetting 0 [ 488.587467][ T5972] usb 4-1: USB disconnect, device number 96 [ 489.320982][T12333] netlink: 'syz.3.1625': attribute type 12 has an invalid length. [ 489.332821][ T6429] usb 3-1: USB disconnect, device number 106 [ 489.483811][ T6429] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 489.530312][ T5972] usb 5-1: USB disconnect, device number 2 [ 489.635954][ T5839] usb 1-1: USB disconnect, device number 103 [ 489.672103][T12344] netlink: 'syz.1.1626': attribute type 12 has an invalid length. [ 489.694336][ T6429] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 489.743268][ T6429] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 489.743758][ T7574] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 489.822848][ T6429] usb 3-1: config 0 interface 0 has no altsetting 0 [ 489.901431][ T6429] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.929186][ T6429] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.986726][ T6429] usb 3-1: Product: syz [ 489.996217][ T6429] usb 3-1: Manufacturer: syz [ 490.000859][ T6429] usb 3-1: SerialNumber: syz [ 490.023579][ T7574] usb 4-1: Using ep0 maxpacket: 16 [ 490.036960][ T7574] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 490.046280][ T7574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.079987][ T6429] usb 3-1: config 0 descriptor?? [ 490.102660][ T7574] usb 4-1: config 0 has no interface number 0 [ 490.118088][ T6429] hub 3-1:0.0: bad descriptor, ignoring hub [ 490.140155][ T6429] hub 3-1:0.0: probe with driver hub failed with error -5 [ 490.149168][ T7574] usb 4-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 490.181663][ T7574] usb 4-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 490.201084][ T7574] usb 4-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.215984][ T6429] usb 3-1: selecting invalid altsetting 0 [ 490.223769][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 490.246367][ T7574] usb 4-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 490.271354][ T7574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.296888][ T7574] usb 4-1: Product: syz [ 490.310364][ T7574] usb 4-1: Manufacturer: syz [ 490.323339][ T7574] usb 4-1: SerialNumber: syz [ 490.345952][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.357012][ T7574] usb 4-1: config 0 descriptor?? [ 490.363488][T12333] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 490.398189][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.413682][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 490.422691][ T7574] usb-storage 4-1:0.216: USB Mass Storage device detected [ 490.454651][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.473901][ T5839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 490.524471][ T5839] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 490.567142][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.586992][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.593622][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.624371][ T5839] usb 5-1: Product: й [ 490.642922][ T5839] usb 5-1: Manufacturer: ã´»ë¸ä¦…∦羳蔆᫹퉆횴綧ȡ뢻â°á»½ç«ƒä«Œæ½‰ç落⟢㑵ï¤ï¡‚懨ﶄྃ镂拟澤⦻ᶯ੺솕뻋ʷ͉쇆 [ 490.700269][ T5839] usb 5-1: SerialNumber: syz [ 490.940043][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.977856][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.013226][ T5839] cdc_ncm 5-1:1.0: bind() failure [ 491.057448][ T5839] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 491.073415][ T5839] cdc_ncm 5-1:1.1: bind() failure [ 491.110266][ T5839] usb 5-1: USB disconnect, device number 3 [ 491.652720][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1633'. [ 491.793626][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 491.813762][ T5839] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 491.955132][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.966541][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 491.975810][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.987048][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.999236][ T5839] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 492.000816][ T10] usb 2-1: config 0 descriptor?? [ 492.019465][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.038657][ T5839] usb 1-1: config 0 descriptor?? [ 492.265006][ T5839] usbhid 1-1:0.0: can't add hid device: -71 [ 492.271824][ T5839] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 492.287151][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1634'. [ 492.296574][ T5839] usb 1-1: USB disconnect, device number 104 [ 492.454879][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.492929][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.510652][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.533123][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.548651][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.567543][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.589533][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.604356][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.618941][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.634581][ T10] elecom 0003:056E:00FE.001F: unknown main item tag 0x0 [ 492.665453][ T10] elecom 0003:056E:00FE.001F: collection stack underflow [ 492.680751][ T10] elecom 0003:056E:00FE.001F: item 0 0 0 12 parsing failed [ 492.698550][ T10] elecom 0003:056E:00FE.001F: probe with driver elecom failed with error -22 [ 492.716630][ T5839] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 492.738334][ T10] usb 2-1: USB disconnect, device number 98 [ 492.873705][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 492.885335][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.912735][ T5839] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 492.933655][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.959435][ T5839] usb 1-1: config 0 descriptor?? [ 492.989717][ T5839] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 493.029312][ T5839] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 493.049917][ T5972] usb 4-1: USB disconnect, device number 97 [ 493.219507][T12382] netlink: 'syz.3.1636': attribute type 13 has an invalid length. [ 493.403622][T12366] ldusb 1-1:0.0: Read buffer overflow, 316 bytes dropped [ 493.479780][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'. [ 493.580518][T12394] veth3: entered promiscuous mode [ 493.593028][T12394] veth3: entered allmulticast mode [ 493.703767][ T5972] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 493.745510][T12366] veth3: entered promiscuous mode [ 493.757405][ T6429] usb 3-1: USB disconnect, device number 107 [ 493.763575][T12366] veth3: entered allmulticast mode [ 493.865188][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 493.890550][ T5972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 493.920539][ T5972] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 493.947848][ T5972] usb 4-1: config 7 has no interface number 0 [ 493.963664][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 493.977591][ T5972] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 494.001458][ T10] usb 1-1: USB disconnect, device number 105 [ 494.009119][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.037539][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 494.037940][ T5972] usb 4-1: Product: syz [ 494.080425][ T5972] usb 4-1: Manufacturer: syz [ 494.090005][ T5972] usb 4-1: SerialNumber: syz [ 494.140689][ T5839] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 494.173131][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.196866][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.228271][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 494.261686][ T5839] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 494.286488][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.314412][ T5839] usb 5-1: config 0 descriptor?? [ 494.336232][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.785857][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.799080][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 494.810593][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 494.839090][ T5839] usb 5-1: USB disconnect, device number 4 [ 494.913014][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 494.922225][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 494.931416][T12414] netlink: 'syz.2.1644': attribute type 19 has an invalid length. [ 494.943381][T12414] netlink: 'syz.2.1644': attribute type 20 has an invalid length. [ 495.274900][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 495.454160][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 495.469171][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 495.491459][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.546540][T12430] ipt_REJECT: TCP_RESET invalid for non-tcp [ 495.556017][ T10] usb 5-1: config 0 descriptor?? [ 495.775228][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 495.894735][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.997390][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 496.011505][T12446] netlink: 'syz.2.1649': attribute type 12 has an invalid length. [ 496.052492][ T10] usb 5-1: media controller created [ 496.181368][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.318850][ T5972] usb 4-1: USB disconnect, device number 98 [ 496.352641][ T10] az6027: usb out operation failed. (-71) [ 496.366697][ T10] az6027: usb out operation failed. (-71) [ 496.450597][ T10] stb0899_attach: Driver disabled by Kconfig [ 496.486631][ T10] az6027: no front-end attached [ 496.486631][ T10] [ 496.538361][ T10] az6027: usb out operation failed. (-71) [ 496.559502][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 496.612716][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 496.686444][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 496.724769][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 496.791840][ T10] usb 5-1: USB disconnect, device number 5 [ 496.820313][T12454] netlink: 'syz.3.1651': attribute type 11 has an invalid length. [ 496.999006][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 497.824107][ T5839] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 498.003796][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 498.039354][ T5839] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 498.071397][T12473] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 498.080032][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.100346][ T5839] usb 2-1: Product: syz [ 498.120833][ T5839] usb 2-1: Manufacturer: syz [ 498.135346][ T5839] usb 2-1: SerialNumber: syz [ 498.139034][T12473] bond2: entered promiscuous mode [ 498.163594][T12473] bond2: entered allmulticast mode [ 498.165491][ T5839] usb 2-1: config 0 descriptor?? [ 498.169234][T12473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.192016][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 498.255751][T12478] erspan1: entered allmulticast mode [ 498.281959][T12478] bond2: (slave erspan1): making interface the new active one [ 498.298472][T12478] erspan1: entered promiscuous mode [ 498.313111][T12478] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 498.437922][ T5839] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 498.539372][ T10] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 498.627408][T12480] bond2 (unregistering): (slave erspan1): Releasing active interface [ 498.636548][T12480] erspan1: left promiscuous mode [ 498.650418][T12480] bond2 (unregistering): Released all slaves [ 498.693581][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 498.700277][ T10] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 498.723595][ T10] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 498.746904][ T10] usb 1-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 498.770418][ T10] usb 1-1: config 162 has no interface number 0 [ 498.777270][ T10] usb 1-1: config 162 has no interface number 1 [ 498.785870][ T10] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 498.802387][ T10] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 498.813219][ T10] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0x7B, changing to 0xB [ 498.841402][ T10] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.851338][ T10] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 498.861209][ T10] usb 1-1: config 162 interface 84 has no altsetting 0 [ 498.868377][ T10] usb 1-1: config 162 interface 2 has no altsetting 0 [ 498.883832][ T10] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 498.892889][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.923581][ T10] usb 1-1: Product: syz [ 498.927789][ T10] usb 1-1: Manufacturer: syz [ 498.932399][ T10] usb 1-1: SerialNumber: syz [ 499.041540][T12488] FAULT_INJECTION: forcing a failure. [ 499.041540][T12488] name failslab, interval 1, probability 0, space 0, times 0 [ 499.055840][T12488] CPU: 1 UID: 0 PID: 12488 Comm: syz.4.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.055867][T12488] Tainted: [L]=SOFTLOCKUP [ 499.055877][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 499.055887][T12488] Call Trace: [ 499.055894][T12488] [ 499.055903][T12488] dump_stack_lvl+0xe8/0x150 [ 499.055931][T12488] should_fail_ex+0x412/0x560 [ 499.055966][T12488] should_failslab+0xa8/0x100 [ 499.055989][T12488] kmem_cache_alloc_noprof+0x87/0x6e0 [ 499.056015][T12488] ? __inet_hash_connect+0xd48/0x2440 [ 499.056041][T12488] __inet_hash_connect+0xd48/0x2440 [ 499.056068][T12488] ? __pfx___inet_check_established+0x10/0x10 [ 499.056097][T12488] ? __inet_hash_connect+0x4cf/0x2440 [ 499.056126][T12488] ? __pfx___inet_hash_connect+0x10/0x10 [ 499.056145][T12488] ? lockdep_hardirqs_on+0x7a/0x110 [ 499.056173][T12488] ? inet_hash_connect+0x12f/0x240 [ 499.056196][T12488] tcp_v4_connect+0xd73/0x1a90 [ 499.056233][T12488] ? __pfx_tcp_v4_connect+0x10/0x10 [ 499.056255][T12488] ? __local_bh_enable_ip+0xd0/0x130 [ 499.056279][T12488] mptcp_connect+0x56b/0x830 [ 499.056306][T12488] __inet_stream_connect+0x25a/0xdd0 [ 499.056332][T12488] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.056354][T12488] ? lock_sock_nested+0x6a/0x100 [ 499.056377][T12488] ? __pfx___inet_stream_connect+0x10/0x10 [ 499.056405][T12488] ? __local_bh_enable_ip+0xd0/0x130 [ 499.056434][T12488] inet_stream_connect+0x66/0xa0 [ 499.056456][T12488] __sys_connect+0x312/0x450 [ 499.056483][T12488] ? __pfx___sys_connect+0x10/0x10 [ 499.056517][T12488] ? rcu_is_watching+0x15/0xb0 [ 499.056546][T12488] __x64_sys_connect+0x7a/0x90 [ 499.056572][T12488] do_syscall_64+0xe2/0xf80 [ 499.056595][T12488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.056612][T12488] ? trace_irq_disable+0x37/0x100 [ 499.056634][T12488] ? clear_bhb_loop+0x60/0xb0 [ 499.056655][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.056672][T12488] RIP: 0033:0x7fa165f9acb9 [ 499.056690][T12488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.056705][T12488] RSP: 002b:00007fa1641f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 499.056724][T12488] RAX: ffffffffffffffda RBX: 00007fa166215fa0 RCX: 00007fa165f9acb9 [ 499.056737][T12488] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 499.056748][T12488] RBP: 00007fa1641f6090 R08: 0000000000000000 R09: 0000000000000000 [ 499.056760][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.056771][T12488] R13: 00007fa166216038 R14: 00007fa166215fa0 R15: 00007fa16633fa48 [ 499.056801][T12488] [ 499.342675][ T10] usb 1-1: USB disconnect, device number 106 [ 499.663603][ T6429] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 499.753598][ T5972] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 499.813799][ T6429] usb 5-1: Using ep0 maxpacket: 8 [ 499.831112][ T6429] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.868290][ T6429] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.879226][ T6429] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.910565][ T6429] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.938472][ T6429] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.948309][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 499.958102][ T6429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.966493][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.978913][ T5972] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 500.007351][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.035448][ T5972] usb 3-1: config 0 descriptor?? [ 500.062379][ T5972] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 500.094498][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.211791][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.232825][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.247783][ T6429] usb 5-1: GET_CAPABILITIES returned 0 [ 500.273047][ T6429] usbtmc 5-1:16.0: can't read capabilities [ 500.348601][ T5839] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.361931][ T5839] dvbdev: DVB: registering new adapter (Terratec H7) [ 500.368920][ T5839] usb 2-1: media controller created [ 500.453325][ T10] usb 5-1: USB disconnect, device number 6 [ 500.466665][ T6429] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 500.561975][ T5839] usb read operation failed. (-71) [ 500.590402][ T5839] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 500.616654][ T6429] usb 1-1: device descriptor read/64, error -71 [ 500.628027][ T5839] usb 2-1: USB disconnect, device number 99 [ 500.873630][ T6429] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 500.953679][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 501.005194][ T6429] usb 1-1: device descriptor read/64, error -71 [ 501.106392][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.114026][ T6429] usb usb1-port1: attempt power cycle [ 501.134339][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.149763][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.177925][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.187620][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.217883][ T10] usb 4-1: config 0 descriptor?? [ 501.219547][T12525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.374164][T12533] FAULT_INJECTION: forcing a failure. [ 501.374164][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 501.387408][T12533] CPU: 1 UID: 0 PID: 12533 Comm: syz.4.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.387435][T12533] Tainted: [L]=SOFTLOCKUP [ 501.387442][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 501.387452][T12533] Call Trace: [ 501.387459][T12533] [ 501.387467][T12533] dump_stack_lvl+0xe8/0x150 [ 501.387496][T12533] should_fail_ex+0x412/0x560 [ 501.387524][T12533] should_failslab+0xa8/0x100 [ 501.387546][T12533] kmem_cache_alloc_noprof+0x87/0x6e0 [ 501.387571][T12533] ? __inet_hash_connect+0x1497/0x2440 [ 501.387597][T12533] __inet_hash_connect+0x1497/0x2440 [ 501.387630][T12533] ? __inet_hash_connect+0x4cf/0x2440 [ 501.387655][T12533] ? __pfx___inet_hash_connect+0x10/0x10 [ 501.387675][T12533] ? lockdep_hardirqs_on+0x7a/0x110 [ 501.387702][T12533] ? inet_hash_connect+0x12f/0x240 [ 501.387725][T12533] tcp_v4_connect+0xd73/0x1a90 [ 501.387760][T12533] ? __pfx_tcp_v4_connect+0x10/0x10 [ 501.387779][T12533] ? __local_bh_enable_ip+0xd0/0x130 [ 501.387802][T12533] mptcp_connect+0x56b/0x830 [ 501.387830][T12533] __inet_stream_connect+0x25a/0xdd0 [ 501.387856][T12533] ? do_raw_spin_lock+0x12b/0x2f0 [ 501.387882][T12533] ? lock_sock_nested+0x6a/0x100 [ 501.387906][T12533] ? __pfx___inet_stream_connect+0x10/0x10 [ 501.387935][T12533] ? __local_bh_enable_ip+0xd0/0x130 [ 501.387955][T12533] inet_stream_connect+0x66/0xa0 [ 501.387976][T12533] __sys_connect+0x312/0x450 [ 501.388000][T12533] ? __pfx___sys_connect+0x10/0x10 [ 501.388032][T12533] ? __pfx_ksys_write+0x10/0x10 [ 501.388058][T12533] __x64_sys_connect+0x7a/0x90 [ 501.388080][T12533] do_syscall_64+0xe2/0xf80 [ 501.388110][T12533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.388127][T12533] ? trace_irq_disable+0x37/0x100 [ 501.388147][T12533] ? clear_bhb_loop+0x60/0xb0 [ 501.388167][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.388185][T12533] RIP: 0033:0x7fa165f9acb9 [ 501.388202][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.388216][T12533] RSP: 002b:00007fa1641f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 501.388236][T12533] RAX: ffffffffffffffda RBX: 00007fa166215fa0 RCX: 00007fa165f9acb9 [ 501.388250][T12533] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 501.388261][T12533] RBP: 00007fa1641f6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.388272][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.388283][T12533] R13: 00007fa166216038 R14: 00007fa166215fa0 R15: 00007fa16633fa48 [ 501.388313][T12533] [ 501.390566][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.667615][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.724856][ T6429] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 501.754240][ T6429] usb 1-1: device descriptor read/8, error -71 [ 502.003832][ T6429] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 502.034131][ T6429] usb 1-1: device descriptor read/8, error -71 [ 502.154552][ T6429] usb usb1-port1: unable to enumerate USB device [ 502.263660][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 502.442534][ T5839] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 502.469631][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.483410][ T6429] usb 3-1: USB disconnect, device number 108 [ 502.510231][ T5839] usb 5-1: Product: syz [ 502.534248][ T5839] usb 5-1: Manufacturer: syz [ 502.549196][ T5839] usb 5-1: SerialNumber: syz [ 502.594116][ T5902] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 502.685244][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.706029][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.734136][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 502.740132][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 502.775004][ T10] usb 4-1: USB disconnect, device number 99 [ 502.781261][ T5902] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 502.792479][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.804088][ T5902] usb 2-1: Product: syz [ 502.810433][ T5902] usb 2-1: Manufacturer: syz [ 502.815644][ T5902] usb 2-1: SerialNumber: syz [ 502.822949][ T5902] usb 2-1: config 0 descriptor?? [ 502.833271][ T5902] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 502.903685][ T6429] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 502.999952][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 503.012935][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 503.073660][ T6429] usb 3-1: Using ep0 maxpacket: 16 [ 503.080977][ T6429] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.091348][ T6429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.102478][ T6429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.112421][ T6429] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 503.122251][ T6429] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.138508][ T6429] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.147843][ T6429] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.156014][ T6429] usb 3-1: Manufacturer: syz [ 503.163326][ T6429] usb 3-1: config 0 descriptor?? [ 503.264653][ T5902] gspca_sunplus: reg_r err -71 [ 503.288161][ T5902] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 503.316443][ T5902] usb 2-1: USB disconnect, device number 100 [ 503.483670][ T6429] rc_core: IR keymap rc-hauppauge not found [ 503.500907][ T6429] Registered IR keymap rc-empty [ 503.513833][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.543845][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.566084][ T6429] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 503.596043][ T6429] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 503.628506][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.664017][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.693659][ T5972] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 503.701467][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.733681][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.764021][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.803652][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.833693][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.863703][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 503.869155][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.888971][ T5972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 503.901066][ T5972] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 503.910488][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.918838][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.935479][ T5972] usb 4-1: config 0 descriptor?? [ 503.953790][ T6429] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 503.962745][T12560] binder: 12543:12560 ioctl c0045006 0 returned -22 [ 503.986060][ T6429] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 504.009043][ T6429] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.042264][ T6429] usb 3-1: USB disconnect, device number 109 [ 504.054590][T12538] qrtr: Invalid version 7 [ 504.372582][ T5972] usbhid 4-1:0.0: can't add hid device: -71 [ 504.401249][ T5972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 504.447629][ T5972] usb 4-1: USB disconnect, device number 100 [ 504.794032][ T5972] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 504.904110][ T5902] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 504.934054][ T5972] usb 1-1: device descriptor read/64, error -71 [ 505.068942][ T5902] usb 3-1: device descriptor read/64, error -71 [ 505.112398][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 505.143672][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 505.168166][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 505.193644][ T5972] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 505.202579][ T5839] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 505.231367][ T5839] usb 5-1: USB disconnect, device number 7 [ 505.314226][ T5902] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 505.354024][ T5972] usb 1-1: device descriptor read/64, error -71 [ 505.474558][ T5902] usb 3-1: device descriptor read/64, error -71 [ 505.484078][ T5972] usb usb1-port1: attempt power cycle [ 505.594100][ T5902] usb usb3-port1: attempt power cycle [ 505.833600][ T5972] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 505.856608][ T5972] usb 1-1: device descriptor read/8, error -71 [ 505.944356][ T5902] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 505.984592][ T5902] usb 3-1: device descriptor read/8, error -71 [ 506.103670][ T5972] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 506.164393][ T5972] usb 1-1: device descriptor read/8, error -71 [ 506.254355][ T5902] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 506.284059][ T5972] usb usb1-port1: unable to enumerate USB device [ 506.284334][ T5902] usb 3-1: device descriptor read/8, error -71 [ 506.318060][T12605] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1617207373 (3234414746 ns) > initial count (443187862 ns). Using initial count to start timer. [ 506.414209][ T5902] usb usb3-port1: unable to enumerate USB device [ 506.614605][ T5972] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 506.680989][T12613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1696'. [ 506.753632][ T7574] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 506.773727][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 506.793356][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.814025][ T5972] usb 4-1: config 0 has no interfaces? [ 506.823607][ T5972] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 506.850209][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.879504][ T5972] usb 4-1: config 0 descriptor?? [ 506.923836][ T7574] usb 5-1: Using ep0 maxpacket: 32 [ 506.937630][ T7574] usb 5-1: config 7 has an invalid interface number: 108 but max is 2 [ 506.953350][ T7574] usb 5-1: config 7 has an invalid interface number: 3 but max is 2 [ 506.970166][ T7574] usb 5-1: config 7 has an invalid interface number: 12 but max is 2 [ 506.987366][ T7574] usb 5-1: config 7 has no interface number 0 [ 507.000107][ T7574] usb 5-1: config 7 has no interface number 1 [ 507.012826][ T7574] usb 5-1: config 7 has no interface number 2 [ 507.026380][ T7574] usb 5-1: config 7 interface 108 has no altsetting 0 [ 507.040610][ T7574] usb 5-1: config 7 interface 3 has no altsetting 0 [ 507.054785][ T7574] usb 5-1: config 7 interface 12 has no altsetting 0 [ 507.071749][ T7574] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=fa.39 [ 507.090818][ T7574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.108892][ T7574] usb 5-1: Product: syz [ 507.117797][ T7574] usb 5-1: Manufacturer: syz [ 507.127552][ T7574] usb 5-1: SerialNumber: syz [ 507.368381][ T7574] qmi_wwan 5-1:7.3: probe with driver qmi_wwan failed with error -22 [ 507.393669][ T7574] usb 5-1: USB disconnect, device number 8 [ 507.576317][T12619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'. [ 507.615426][T12619] delete_channel: no stack [ 507.772133][T12627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1698'. [ 508.053753][ T7574] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 508.213602][ T7574] usb 3-1: Using ep0 maxpacket: 8 [ 508.220313][ T7574] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 508.229391][ T7574] usb 3-1: config 0 has no interface number 1 [ 508.236188][ T7574] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 508.245535][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 508.253026][ T7574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.266558][ T7574] usb 3-1: config 0 descriptor?? [ 508.403808][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 508.411194][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 508.420855][ T5902] usb 5-1: config 6 has an invalid interface number: 46 but max is 0 [ 508.429405][ T5902] usb 5-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 508.439415][ T5902] usb 5-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 508.449832][ T5902] usb 5-1: config 6 has no interface number 0 [ 508.456191][ T5902] usb 5-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.470115][ T5902] usb 5-1: config 6 interface 46 has no altsetting 0 [ 508.483722][ T5902] usb 5-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 508.506060][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.517988][ T5902] usb 5-1: Product: syz [ 508.522611][ T5902] usb 5-1: Manufacturer: syz [ 508.527334][ T5902] usb 5-1: SerialNumber: syz [ 508.551695][ T7574] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 508.626768][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 508.626786][ T30] audit: type=1326 audit(1769119261.721:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.660572][ T30] audit: type=1326 audit(1769119261.721:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.683476][ T30] audit: type=1326 audit(1769119261.751:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.706530][ T30] audit: type=1326 audit(1769119261.751:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.730139][ T30] audit: type=1326 audit(1769119261.751:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.797528][ T30] audit: type=1326 audit(1769119261.751:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.825963][ T5902] usb 5-1: USB disconnect, device number 9 [ 508.863300][ T30] audit: type=1326 audit(1769119261.751:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.909891][ T30] audit: type=1326 audit(1769119261.751:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 508.932907][ T30] audit: type=1326 audit(1769119261.751:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f797f59acb9 code=0x7ffc0000 [ 509.253487][ T5972] usb 4-1: USB disconnect, device number 101 [ 509.367977][T12648] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1705'. [ 509.382159][T12650] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1705'. [ 509.753644][ T5902] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 509.917622][ T5902] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.938737][ T5902] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 509.960282][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.980418][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 510.002719][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 510.032193][ T5902] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 510.050414][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.068683][ T5902] usb 4-1: Product: syz [ 510.078855][ T5902] usb 4-1: Manufacturer: syz [ 510.098537][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 510.104850][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 510.118301][ T5902] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 510.132839][ T5902] cdc_wdm 4-1:1.0: Unknown control protocol [ 510.153637][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 510.313679][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 510.326375][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.357983][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.376728][ T10] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 510.396298][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.418602][ T10] usb 2-1: config 0 descriptor?? [ 510.704085][T12665] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1712'. [ 510.728190][ T10] usb 2-1: string descriptor 0 read error: -71 [ 510.740494][ T10] usb 2-1: USB disconnect, device number 101 [ 510.847035][ T5902] usb 3-1: USB disconnect, device number 114 [ 510.855038][ T5902] qcserial 3-1:0.2: device disconnected [ 512.094724][T12700] loop5: detected capacity change from 0 to 7 [ 512.120966][T12700] Dev loop5: unable to read RDB block 7 [ 512.146098][T12700] loop5: unable to read partition table [ 512.171516][T12700] loop5: partition table beyond EOD, truncated [ 512.186365][T12700] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.854868][ T10] usb 4-1: USB disconnect, device number 102 [ 512.935149][T12712] program syz.1.1721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.103701][ T5972] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 513.151612][T12718] program syz.4.1726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.253664][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 513.262411][ T5972] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.283290][ T6429] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 513.294484][ T5972] usb 1-1: config 0 interface 0 has no altsetting 0 [ 513.301705][ T5972] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 513.322623][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.338948][ T5972] usb 1-1: config 0 descriptor?? [ 513.364355][ T5839] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 513.398123][T12730] tipc: Started in network mode [ 513.463157][T12731] binder: 12726:12731 ioctl 4018620d 0 returned -22 [ 513.475012][T12732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.479132][ T6429] usb 3-1: unable to get BOS descriptor or descriptor too short [ 513.490564][T12731] binder: 12726:12731 ioctl c0306201 200000000080 returned -14 [ 513.500084][ T6429] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 513.510524][ T6429] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 513.554454][ T6429] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 513.569591][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 513.579901][ T6429] usb 3-1: config 129 has no interface number 0 [ 513.594931][ T6429] usb 3-1: config 129 has no interface number 1 [ 513.601423][ T6429] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 513.618350][ T5839] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 513.631811][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.639975][ T6429] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 513.652085][ T5839] usb 2-1: Product: syz [ 513.656769][ T5839] usb 2-1: Manufacturer: syz [ 513.661416][ T5839] usb 2-1: SerialNumber: syz [ 513.666116][ T6429] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 513.685620][ T6429] usb 3-1: config 129 interface 135 has no altsetting 0 [ 513.693376][ T5839] usb 2-1: config 0 descriptor?? [ 513.707217][ T6429] usb 3-1: config 129 interface 5 has no altsetting 0 [ 513.725214][ T6429] usb 3-1: string descriptor 0 read error: -22 [ 513.731652][ T6429] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 513.755200][ T6429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.778225][T12730] tipc: Node identity , cluster identity 4711 [ 513.794387][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.803829][ T7562] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 513.842857][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.930852][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.944071][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.952967][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.953707][ T7562] usb 4-1: device descriptor read/64, error -71 [ 513.963365][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.977254][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.007505][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.036741][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.066477][ T6429] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.073690][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.074115][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.108410][ T6429] usb 3-1: MIDIStreaming interface descriptor not found [ 514.144431][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.253859][ T7562] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 514.313019][ T6429] usb 3-1: USB disconnect, device number 115 [ 514.354862][T12730] tipc: Failed to obtain node identity [ 514.423623][ T7562] usb 4-1: device descriptor read/64, error -71 [ 514.480276][T12730] tipc: Enabling of bearer rejected, failed to enable media [ 514.513258][T12729] tmpfs: Unknown parameter '' [ 514.554300][T12729] binder: 12726:12729 ioctl d000941e 0 returned -22 [ 514.614589][ T7562] usb usb4-port1: attempt power cycle [ 514.963681][ T7562] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 514.984228][ T7562] usb 4-1: device descriptor read/8, error -71 [ 515.245100][ T7562] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 515.264330][ T7562] usb 4-1: device descriptor read/8, error -71 [ 515.374006][ T7562] usb usb4-port1: unable to enumerate USB device [ 515.674903][T12748] veth1_to_bond: entered allmulticast mode [ 515.681396][T12747] veth1_to_bond: left allmulticast mode [ 515.699156][T12746] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 515.875728][T12753] netlink: 'syz.4.1735': attribute type 7 has an invalid length. [ 515.894542][ T5972] usbhid 1-1:0.0: can't add hid device: -71 [ 515.904695][ T5972] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 515.932315][ T5972] usb 1-1: USB disconnect, device number 115 [ 515.969946][T12755] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 516.020849][T12755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.101729][ T6429] usb 2-1: USB disconnect, device number 102 [ 516.353944][ T5972] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 516.463763][ T5836] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 516.496922][ T6429] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 516.533614][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 516.541246][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.553079][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.564047][ T5972] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 516.573302][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.588317][ T5972] usb 1-1: config 0 descriptor?? [ 516.620250][ T5972] hub 1-1:0.0: USB hub found [ 516.666239][ T6429] usb 2-1: Using ep0 maxpacket: 32 [ 516.667514][T12772] netlink: 'syz.2.1740': attribute type 13 has an invalid length. [ 516.673923][ T6429] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.710084][ T6429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.762555][ T6429] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 516.817691][ T5972] hub 1-1:0.0: 1 port detected [ 517.018786][T12755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1736'. [ 517.234781][ T7562] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 517.288884][T12780] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1743'. [ 517.377503][T12755] bond5: entered allmulticast mode [ 517.403625][ T7562] usb 5-1: Using ep0 maxpacket: 8 [ 517.407537][T12759] bond5: (slave dummy0): Enslaving as an active interface with a down link [ 517.423980][ T7562] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 517.434183][ T7562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.442378][ T7562] usb 5-1: Product: syz [ 517.453095][ T5972] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 517.461515][ T7562] usb 5-1: Manufacturer: syz [ 517.466495][ T5972] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 517.474757][ T7562] usb 5-1: SerialNumber: syz [ 517.481731][T12782] xt_hashlimit: size too large, truncated to 1048576 [ 517.487682][ T7562] usb 5-1: config 0 descriptor?? [ 517.494374][ T5972] usbhid 1-1:0.0: can't add hid device: -71 [ 517.508824][ T5972] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.520326][ T7562] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 517.525667][T12786] –: renamed from vxcan1 [ 517.547802][ T5972] usb 1-1: USB disconnect, device number 116 [ 517.597029][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.632430][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.153649][ T5902] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 518.280365][ T7574] usb 2-1: USB disconnect, device number 103 [ 518.303960][ T5902] usb 4-1: device descriptor read/64, error -71 [ 518.385712][T12803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.414042][T12803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.485620][T12803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.563722][ T5902] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 518.669397][T12807] sit1: entered allmulticast mode [ 518.713611][ T5902] usb 4-1: device descriptor read/64, error -71 [ 518.845956][ T5902] usb usb4-port1: attempt power cycle [ 518.938961][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 518.951808][T12809] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 519.167713][T12778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1742'. [ 519.181034][T12778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1742'. [ 519.193652][ T5902] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 519.218780][ T7562] gspca_sonixj: i2c_w8 err -71 [ 519.245084][ T5902] usb 4-1: device descriptor read/8, error -71 [ 519.293058][ T7562] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 519.311588][ T7562] usb 5-1: USB disconnect, device number 11 [ 519.338631][T12816] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 519.361772][T12816] bond3 (unregistering): Released all slaves [ 519.523644][ T5902] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 519.602502][ T5902] usb 4-1: device descriptor read/8, error -71 [ 519.735224][ T5902] usb usb4-port1: unable to enumerate USB device [ 520.103758][ T5902] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 520.280577][ T5902] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 520.299543][ T5902] usb 5-1: config 2 has no interface number 0 [ 520.316254][ T5902] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 520.343767][ T5902] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 520.374762][ T5902] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 520.411578][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 520.440748][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.459240][ T5902] usb 5-1: Product: syz [ 520.463438][ T5902] usb 5-1: Manufacturer: syz [ 520.479571][ T5902] usb 5-1: SerialNumber: syz [ 520.505281][T12828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 520.517236][T12828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 520.662707][T12843] kAFS: unable to lookup cell '(,c¾Ì' [ 520.763825][ T5902] usb 5-1: probing VID:PID(0424:012C) [ 520.779118][ T5902] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 520.795260][ T5902] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 520.808487][ T5902] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 520.826355][ T5902] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 520.869975][ T5902] usb 5-1: USB disconnect, device number 12 [ 520.886761][ T30] audit: type=1326 audit(1769119273.961:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 520.968426][ T30] audit: type=1326 audit(1769119273.961:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.017122][ T30] audit: type=1326 audit(1769119273.961:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.041780][ T30] audit: type=1326 audit(1769119273.961:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.068555][ T30] audit: type=1326 audit(1769119273.961:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.091959][ T30] audit: type=1326 audit(1769119273.961:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.119046][ T30] audit: type=1326 audit(1769119274.111:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.142500][ T30] audit: type=1326 audit(1769119274.161:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.184429][ T30] audit: type=1326 audit(1769119274.161:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 521.212018][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 521.545414][ T5902] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 521.703682][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 521.711720][ T5902] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 521.736201][ T5902] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 521.798751][ T5902] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.867817][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0 [ 521.893829][ T7574] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 521.905963][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 521.948928][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.989463][ T5902] usb 3-1: Product: syz [ 522.002728][ T5902] usb 3-1: Manufacturer: syz [ 522.023895][ T5902] usb 3-1: SerialNumber: syz [ 522.070143][ T7574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.121217][ T7574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.153728][ T7574] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 522.203400][ T7574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.242298][ T7574] usb 5-1: config 0 descriptor?? [ 522.271288][ T5902] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 522.343707][ T7562] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 522.495957][ T7562] usb 4-1: device descriptor read/64, error -71 [ 522.658657][T12851] usblp0:failed reading printer status (-32) [ 522.733658][ T7562] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 522.735469][ T7574] hid_parser_main: 481 callbacks suppressed [ 522.735488][ T7574] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 522.809701][ T7574] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 522.843620][ T6429] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 522.851500][ T7574] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 522.873677][ T7562] usb 4-1: device descriptor read/64, error -71 [ 522.879143][ T7574] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 522.926334][ T7574] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0 [ 522.963312][ T7574] hid-steam 0003:28DE:1142.0020: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 522.998088][ T7562] usb usb4-port1: attempt power cycle [ 523.033589][ T6429] usb 1-1: Using ep0 maxpacket: 16 [ 523.052398][ T7574] usb 3-1: USB disconnect, device number 116 [ 523.056454][ T6429] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 523.078498][ T7574] usblp0: removed [ 523.099817][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.128624][ T6429] usb 1-1: Product: syz [ 523.143094][ T6429] usb 1-1: Manufacturer: syz [ 523.161162][ T6429] usb 1-1: SerialNumber: syz [ 523.187197][ T6429] usb 1-1: config 0 descriptor?? [ 523.353615][ T7562] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 523.385617][ T7562] usb 4-1: device descriptor read/8, error -71 [ 523.621257][T12887] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1770'. [ 523.633776][ T7562] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 523.666801][ T7562] usb 4-1: device descriptor read/8, error -71 [ 523.749590][ T6429] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 523.772118][ T6429] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.792849][ T7562] usb usb4-port1: unable to enumerate USB device [ 523.812471][ T6429] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 523.840078][ T6429] usb 1-1: media controller created [ 523.909145][ T6429] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.026420][ T6429] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 524.045486][ T6429] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 524.229178][T12882] dtv5100: wlen = 0, aborting. [ 524.903696][T12918] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1777'. [ 525.049137][ T6429] usb 5-1: USB disconnect, device number 13 [ 525.454100][ T6429] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 525.633693][ T6429] usb 5-1: Using ep0 maxpacket: 8 [ 525.654825][ T5972] usb 1-1: USB disconnect, device number 117 [ 525.675097][ T6429] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 525.710025][ T6429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.750467][ T6429] usb 5-1: Product: syz [ 525.774011][ T6429] usb 5-1: Manufacturer: syz [ 525.797435][ T6429] usb 5-1: SerialNumber: syz [ 525.805858][ T5972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 525.877818][ T6429] usb 5-1: config 0 descriptor?? [ 525.945005][ T6429] gspca_main: se401-2.14.0 probing 047d:5003 [ 526.390037][ T6429] gspca_se401: Bayer format not supported! [ 526.443697][ T5972] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 526.600597][ T7574] usb 5-1: USB disconnect, device number 14 [ 526.627682][ T5972] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 526.651989][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.667612][ T5972] usb 3-1: Product: syz [ 526.682000][ T5972] usb 3-1: Manufacturer: syz [ 526.691903][ T5972] usb 3-1: SerialNumber: syz [ 526.700324][ T5972] usb 3-1: config 0 descriptor?? [ 526.723202][ T5972] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 526.971140][ T6429] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 527.144108][ T6429] usb 4-1: Using ep0 maxpacket: 32 [ 527.182971][ T6429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.195915][ T6429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.227791][ T6429] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 527.253982][ T7574] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 527.257742][ T6429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.267030][T12967] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 527.298972][ T6429] usb 4-1: config 0 descriptor?? [ 527.455554][ T7574] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.476224][ T7574] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.496570][ T7574] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.516596][ T7574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.533752][ T5902] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 527.557698][T12962] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 527.593705][ T7574] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.683613][ T5902] usb 1-1: device descriptor read/64, error -71 [ 527.749214][ T6429] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 527.758312][ T6429] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 527.797503][ T5836] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 527.808914][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.845688][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.923731][ T5902] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 527.966219][ T5972] gspca_stk1135: reg_w 0xd err -71 [ 527.978925][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 527.986156][ T5972] gspca_stk1135: Sensor write failed [ 527.991559][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.007022][T12971] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1787'. [ 528.020207][ T5972] gspca_stk1135: Sensor write failed [ 528.050631][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1787'. [ 528.050668][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.080135][ T6429] ft260 0003:0403:6030.0021: chip code: 6424 8183 [ 528.093620][ T5902] usb 1-1: device descriptor read/64, error -71 [ 528.123146][ T5972] gspca_stk1135: Sensor read failed [ 528.135130][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.157161][ T5972] gspca_stk1135: Sensor read failed [ 528.175807][ T5972] gspca_stk1135: Detected sensor type unknown (0x0) [ 528.186688][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.194832][ T5972] gspca_stk1135: Sensor read failed [ 528.200698][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.210937][ T5972] gspca_stk1135: Sensor read failed [ 528.224030][ T5902] usb usb1-port1: attempt power cycle [ 528.245710][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.252346][ T5972] gspca_stk1135: Sensor write failed [ 528.259850][ T5972] gspca_stk1135: serial bus timeout: status=0x00 [ 528.267319][ T5972] gspca_stk1135: Sensor write failed [ 528.272884][ T5972] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 528.315173][ T5972] usb 3-1: USB disconnect, device number 117 [ 528.327275][ T6429] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 528.593661][ T5902] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 528.644504][ T5902] usb 1-1: device descriptor read/8, error -71 [ 528.802896][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1792'. [ 528.904437][ T5902] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 528.954286][ T5902] usb 1-1: device descriptor read/8, error -71 [ 529.094137][ T5902] usb usb1-port1: unable to enumerate USB device [ 529.781351][ T6429] ft260 0003:0403:6030.0021: failed to retrieve status: -71 [ 529.814199][ T6429] ft260 0003:0403:6030.0021: failed to reset I2C controller: -71 [ 529.879239][ T6429] usb 4-1: USB disconnect, device number 115 [ 530.169509][T12997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1797'. [ 530.203778][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 530.353617][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 530.361181][ T5902] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 530.371596][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.386144][ T5902] usb 5-1: config 0 descriptor?? [ 530.473966][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 530.602941][ T5902] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 530.623677][ T5902] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 530.641548][ T5902] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 530.657143][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.681171][ T10] usb 3-1: config 3 has an invalid interface number: 8 but max is 3 [ 530.696929][ T10] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 530.719874][ T10] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 530.738643][ T10] usb 3-1: config 3 has no interface number 0 [ 530.756049][ T10] usb 3-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 530.787215][ T7574] usb 2-1: USB disconnect, device number 104 [ 530.794733][ T10] usb 3-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 530.839250][ T10] usb 3-1: config 3 interface 8 has no altsetting 0 [ 530.842069][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.889177][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 530.889265][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.911940][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.922491][ T10] usb 3-1: Product: syz [ 530.924178][T12990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.932337][ T10] usb 3-1: Manufacturer: syz [ 530.941633][ T10] usb 3-1: SerialNumber: syz [ 530.949286][T12990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.362755][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1799'. [ 532.093786][ T9345] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.353026][T13023] binder: 13022:13023 ioctl c0306201 200000000680 returned -14 [ 532.424146][T13025] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 533.298353][ T10] appledisplay 3-1:3.8: Error while getting initial brightness: -71 [ 533.356499][ T10] appledisplay 3-1:3.8: probe with driver appledisplay failed with error -71 [ 533.415445][ T10] usbhid 3-1:3.8: fixing wrong optional hid class descriptors count [ 533.438918][ T10] usbhid 3-1:3.8: can't add hid device: -22 [ 533.455743][T13043] fuse: Unknown parameter '' [ 533.463010][ T10] usbhid 3-1:3.8: probe with driver usbhid failed with error -22 [ 533.532175][ T10] usb 3-1: USB disconnect, device number 118 [ 533.658180][T13047] netlink: 'syz.4.1813': attribute type 46 has an invalid length. [ 534.382531][T13079] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 534.623671][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 534.801231][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.853081][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.884435][T13091] xt_socket: unknown flags 0xc [ 534.891478][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.929016][ T10] usb 3-1: config 0 descriptor?? [ 535.190242][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 535.220744][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.296835][ T10] usb 3-1: USB disconnect, device number 119 [ 535.486267][T13096] program syz.4.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.149614][T13116] tipc: Enabling of bearer rejected, failed to enable media [ 536.162546][T13103] netdevsim netdevsim4: Direct firmware load for / [ 536.162546][T13103] failed with error -2 [ 536.173243][T13103] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 536.173243][T13103] [ 536.891674][T13133] netlink: 'syz.4.1832': attribute type 12 has an invalid length. [ 537.374087][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 537.533787][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 537.548625][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 537.560192][ T10] usb 2-1: config 0 has no interface number 0 [ 537.567093][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 537.594402][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 537.622090][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 537.659665][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.715409][ T10] usb 2-1: Product: syz [ 537.719618][ T10] usb 2-1: Manufacturer: syz [ 537.754847][ T10] usb 2-1: SerialNumber: syz [ 537.774420][ T10] usb 2-1: config 0 descriptor?? [ 537.794842][T13146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.810443][T13146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.029847][T13146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.044964][T13146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.268000][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 538.293571][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 538.314236][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 538.338941][ T10] usb 2-1: USB disconnect, device number 105 [ 538.647852][T13189] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1838'. [ 539.013593][ T30] audit: type=1326 audit(1769119292.101:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.062811][ T30] audit: type=1326 audit(1769119292.101:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.135912][ T30] audit: type=1326 audit(1769119292.101:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.194933][ T30] audit: type=1326 audit(1769119292.101:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.293672][ T6429] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 539.295356][ T30] audit: type=1326 audit(1769119292.101:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.358916][ T30] audit: type=1326 audit(1769119292.101:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.416059][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1845'. [ 539.462205][ T30] audit: type=1326 audit(1769119292.101:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.486467][ T30] audit: type=1326 audit(1769119292.101:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.509505][ T30] audit: type=1326 audit(1769119292.101:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 539.583816][ T30] audit: type=1326 audit(1769119292.121:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fda45b9acb9 code=0x7ffc0000 [ 541.153585][ T6429] usb 1-1: Using ep0 maxpacket: 16 [ 541.177297][ T6429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.204399][ T6429] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 541.227839][ T6429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 541.261929][ T6429] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 541.283567][ T6429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.316671][ T6429] usb 1-1: config 0 descriptor?? [ 542.329733][T13249] random: crng reseeded on system resumption [ 542.347713][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1852'. [ 542.601936][T13251] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1853'. [ 542.695619][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1854'. [ 542.984933][ T6429] usb 1-1: USB disconnect, device number 122 [ 543.270989][T13264] sctp: [Deprecated]: syz.2.1857 (pid 13264) Use of int in max_burst socket option. [ 543.270989][T13264] Use struct sctp_assoc_value instead [ 543.384452][ T6429] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 543.523604][ T6429] usb 1-1: device descriptor read/64, error -71 [ 543.628909][T13275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.652792][T13274] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.662977][T13274] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 543.733937][ T6397] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.753446][ T6397] bond2: (slave macvlan2): link status up again after 0 ms [ 543.775018][ T6429] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 543.783609][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 543.853749][ T9347] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.903739][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 543.923819][ T6429] usb 1-1: device descriptor read/64, error -71 [ 544.014461][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.044297][ T6429] usb usb1-port1: attempt power cycle [ 544.144371][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.293607][T11913] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.354571][T13285] vti0: entered promiscuous mode [ 544.390146][T13285] vti0: entered allmulticast mode [ 544.395625][ T6429] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 544.454417][ T6429] usb 1-1: device descriptor read/8, error -71 [ 544.464317][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.593673][T11915] bond2: (slave macvlan2): failed to get link speed/duplex [ 544.675368][ T5972] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 544.723720][ T6429] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 544.776021][ T6429] usb 1-1: device descriptor read/8, error -71 [ 544.853587][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 544.864973][ T5972] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 544.883955][ T5972] usb 2-1: config 0 has no interface number 0 [ 544.890713][ T6429] usb usb1-port1: unable to enumerate USB device [ 544.903952][ T5972] usb 2-1: config 0 interface 146 has no altsetting 0 [ 544.933107][ T5972] usb 2-1: New USB device found, idVendor=0421, idProduct=a3a5, bcdDevice= 0.f9 [ 544.953145][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.962679][ T5972] usb 2-1: Product: syz [ 544.967804][ T5972] usb 2-1: Manufacturer: syz [ 544.972492][ T5972] usb 2-1: SerialNumber: syz [ 544.995850][ T5972] usb 2-1: config 0 descriptor?? [ 545.277005][ T5972] cdc_phonet 2-1:0.146: skipping garbage [ 545.299069][ T5972] cdc_phonet 2-1:0.146: probe with driver cdc_phonet failed with error -22 [ 545.348640][ T5972] usb 2-1: USB disconnect, device number 106 [ 545.471776][T13304] input: syz0 as /devices/virtual/input/input50 [ 545.587050][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.627655][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.823593][ T5916] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 546.025034][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 546.039189][ T5916] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.056005][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.093903][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.126381][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.144860][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.194872][ T5916] usb 2-1: Product: syz [ 546.205068][ T5916] usb 2-1: Manufacturer: syz [ 546.223827][ T5916] usb 2-1: SerialNumber: syz [ 546.425898][T13317] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 546.665190][ T5916] usb 2-1: 0:2 : does not exist [ 547.337539][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.338031][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.627735][ T5916] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 547.741026][ T5916] usb 2-1: USB disconnect, device number 107 [ 547.806385][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.273708][ T5916] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 548.467197][ T5916] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 548.488696][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.504597][ T5916] usb 2-1: Product: syz [ 548.511153][ T5916] usb 2-1: Manufacturer: syz [ 548.544660][ T5916] usb 2-1: SerialNumber: syz [ 548.598039][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 548.814720][T11915] net_ratelimit: 31 callbacks suppressed [ 548.814762][T11915] bond2: (slave macvlan2): failed to get link speed/duplex [ 548.873944][ T10] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 548.963801][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 548.975842][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 549.006947][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 549.056549][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.067161][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 549.078387][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.088625][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 549.098758][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 549.114902][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 549.124257][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 549.132277][ T10] usb 1-1: Manufacturer: syz [ 549.144565][ T10] usb 1-1: config 0 descriptor?? [ 549.183714][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.303734][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.413717][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.503610][ T10] rc_core: IR keymap rc-hauppauge not found [ 549.518635][ T10] Registered IR keymap rc-empty [ 549.532131][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.547561][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.571089][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.586062][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.610154][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.634379][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 549.663908][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.688195][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51 [ 549.734119][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.787236][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.823677][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.823708][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 549.882301][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.933865][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.963699][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 549.983869][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 550.063816][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 550.104313][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 550.128617][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 550.173965][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 550.218976][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 550.280350][ T10] usb 1-1: USB disconnect, device number 127 [ 550.663633][ T7574] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 550.821910][ T7574] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 550.840224][ T7574] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 550.862261][ T7574] usb 3-1: config 0 interface 0 has no altsetting 0 [ 550.870778][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 550.889743][ T7574] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 550.910529][ T7574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.928471][ T7574] usb 3-1: Product: syz [ 550.933871][ T7574] usb 3-1: Manufacturer: syz [ 550.939632][ T7574] usb 3-1: SerialNumber: syz [ 550.948680][ T7574] usb 3-1: config 0 descriptor?? [ 550.966492][ T7574] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 550.974718][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 550.988240][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 550.996995][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 551.012993][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 551.030077][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 551.039251][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 551.048252][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.061238][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 551.069201][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.080267][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 551.091776][ T7574] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 551.113457][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 551.135003][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.148558][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 551.165749][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 551.174201][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 551.203385][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 551.211795][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.231266][ T7574] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 551.251553][ T10] usb 4-1: config 0 descriptor?? [ 551.263235][ T7574] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 551.308876][ T7574] usb 3-1: USB disconnect, device number 120 [ 551.358303][ T7574] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 551.419533][ T7574] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 551.432623][ T7574] keyspan 3-1:0.0: device disconnected [ 551.682334][ T10] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 551.697345][ T10] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 551.711707][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 551.722580][ T10] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 551.731819][ T5916] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 551.744306][ T10] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 551.754860][ T10] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 551.764727][ T5916] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 551.787505][T13389] hub 9-0:1.0: USB hub found [ 551.799241][ T10] hid-u2fzero 0003:10C4:8ACF.0022: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 551.812244][T13389] hub 9-0:1.0: 1 port detected [ 551.844687][ T5916] usb 2-1: USB disconnect, device number 108 [ 551.852286][ T10] hid-u2fzero 0003:10C4:8ACF.0022: U2F Zero LED initialised [ 551.874702][ T7574] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 551.890972][ T10] hid-u2fzero 0003:10C4:8ACF.0022: U2F Zero RNG initialised [ 551.896469][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.940428][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.033009][ T6429] usb 4-1: USB disconnect, device number 116 [ 552.096166][ T7574] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.154838][ T7574] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.211221][ T7574] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.237412][T13404] loop9: detected capacity change from 0 to 7 [ 552.252314][ T7574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.285194][ T5834] Dev loop9: unable to read RDB block 7 [ 552.293759][ T7574] usb 1-1: SerialNumber: syz [ 552.315970][ T5834] loop9: unable to read partition table [ 552.351089][ T5834] loop9: partition table beyond EOD, truncated [ 552.406682][T13404] Dev loop9: unable to read RDB block 7 [ 552.432918][T13404] loop9: unable to read partition table [ 552.459589][T13404] loop9: partition table beyond EOD, truncated [ 552.476022][T13404] loop_reread_partitions: partition scan of loop9 (þ被xü^>Ñà– ) failed (rc=-5) [ 552.539129][ T7574] usb 1-1: 0:2 : does not exist [ 552.588095][ T7574] usb 1-1: USB disconnect, device number 2 [ 552.632745][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.941927][ T6429] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 552.969092][ T6429] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 553.007169][ T6429] hid-generic 0003:0004:0000.0023: unknown main item tag 0x0 [ 553.054620][ T6429] hid-generic 0003:0004:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 553.493868][ T7574] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 553.673871][ T7574] usb 1-1: Using ep0 maxpacket: 16 [ 553.700591][ T7574] usb 1-1: config 0 interface 0 has no altsetting 0 [ 553.721388][ T7574] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 553.757008][ T7574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.849505][ T7574] usb 1-1: config 0 descriptor?? [ 553.855531][T11913] net_ratelimit: 39 callbacks suppressed [ 553.855547][T11913] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.063711][T11913] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.083619][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 554.173809][T11917] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.283635][T11913] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.343576][ T10] usb 4-1: device descriptor read/64, error -71 [ 554.393607][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.444356][ T7574] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0024/input/input52 [ 554.536425][ T7574] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0024/input/input53 [ 554.589818][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.609680][ T7574] kye 0003:0458:5013.0024: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 554.673592][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 554.727053][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.794665][ T7574] usb 1-1: USB disconnect, device number 3 [ 554.913594][T11913] bond2: (slave macvlan2): failed to get link speed/duplex [ 554.924357][ T10] usb 4-1: device descriptor read/64, error -71 [ 555.073630][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 555.144103][ T10] usb usb4-port1: attempt power cycle [ 555.213093][T13437] fido_id[13437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 555.291334][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 555.573589][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 555.604172][ T10] usb 4-1: device descriptor read/8, error -71 [ 555.833641][ T7574] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 555.853558][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 555.938159][ T10] usb 4-1: device descriptor read/8, error -71 [ 556.043676][ T7574] usb 1-1: Using ep0 maxpacket: 32 [ 556.084172][ T10] usb usb4-port1: unable to enumerate USB device [ 556.096758][ T7574] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.132117][ T7574] usb 1-1: config 0 interface 0 has no altsetting 0 [ 556.150573][ T7574] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 556.181540][ T7574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.220514][ T7574] usb 1-1: config 0 descriptor?? [ 556.513712][ T6429] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 556.673944][ T6429] usb 3-1: Using ep0 maxpacket: 8 [ 556.726937][ T6429] usb 3-1: config 162 has an invalid interface number: 197 but max is 0 [ 556.790776][ T6429] usb 3-1: config 162 has no interface number 0 [ 556.836798][ T6429] usb 3-1: config 162 interface 197 has no altsetting 0 [ 556.891538][ T6429] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 556.936706][ T6429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.980906][ T6429] usb 3-1: Product: syz [ 557.004818][ T6429] usb 3-1: Manufacturer: syz [ 557.038207][ T6429] usb 3-1: SerialNumber: syz [ 557.333762][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.383375][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.469750][ T6429] usb 3-1: USB disconnect, device number 121 [ 558.403716][T13476] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 558.683541][T13481] fuse: Bad value for 'fd' [ 558.943972][ T13] net_ratelimit: 31 callbacks suppressed [ 558.943988][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.253670][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.444568][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.573635][T11915] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.704107][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.900964][ T7574] usbhid 1-1:0.0: can't add hid device: -71 [ 559.930693][ T7574] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 559.933956][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 559.949432][ T7574] usb 1-1: USB disconnect, device number 4 [ 560.093922][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 560.146418][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1913'. [ 560.225232][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 560.354962][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 560.476027][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 560.498761][T13511] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1917'. [ 560.516642][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 560.706609][T13514] vivid-000: ================= START STATUS ================= [ 560.723633][ T7574] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 560.731748][T13514] vivid-000: Generate PTS: true [ 560.752679][T13514] vivid-000: Generate SCR: true [ 560.757843][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 560.765422][T13516] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 560.777706][T13514] tpg source WxH: 720x576 (R'G'B) [ 560.785037][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.796635][T13514] tpg field: 3 [ 560.804506][T13514] tpg crop: (0,0)/64x64 [ 560.808677][T13514] tpg compose: (0,560)/16x16 [ 560.813287][ T10] usb 3-1: config 0 has no interface number 0 [ 560.828411][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=0200, bcdDevice= 2.38 [ 560.840454][T13514] tpg colorspace: 1 [ 560.846410][T13514] tpg transfer function: 1/0 [ 560.854025][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.862517][T13514] tpg quantization: 2/0 [ 560.868061][T13514] tpg RGB range: 0/2 [ 560.872334][ T10] usb 3-1: Product: syz [ 560.878441][T13514] vivid-000: ================== END STATUS ================== [ 560.887320][ T10] usb 3-1: Manufacturer: syz [ 560.892545][ T10] usb 3-1: SerialNumber: syz [ 560.897998][ T7574] usb 1-1: Using ep0 maxpacket: 8 [ 560.918186][ T7574] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 560.931451][ T10] usb 3-1: config 0 descriptor?? [ 560.955025][ T7574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.967650][ T7574] usb 1-1: Product: syz [ 560.973086][ T7574] usb 1-1: Manufacturer: syz [ 560.980189][ T7574] usb 1-1: SerialNumber: syz [ 561.001970][ T7574] usb 1-1: config 0 descriptor?? [ 561.217180][ T7574] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.253667][ T5917] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 561.415795][T13526] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1915'. [ 561.446197][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.463887][ T5917] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 561.491771][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.507991][ T5917] usb 2-1: config 0 descriptor?? [ 561.720541][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 561.728822][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.855675][T13505] loop4: detected capacity change from 0 to 7 [ 561.863414][ T5917] usb 2-1: USB disconnect, device number 109 [ 561.869838][T13505] Dev loop4: unable to read RDB block 7 [ 561.878209][T13505] loop4: unable to read partition table [ 561.887168][T13505] loop4: partition table beyond EOD, truncated [ 561.907446][T13505] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 561.950547][ T7574] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 561.998462][ T7574] usb 1-1: USB disconnect, device number 5 [ 562.223728][ T5917] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 562.405467][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.439647][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.484989][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.527398][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.564665][ T5917] usb 2-1: config 0 descriptor?? [ 562.816913][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.823975][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.943636][ T6429] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 563.062955][ T5917] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 563.123795][ T6429] usb 1-1: Using ep0 maxpacket: 8 [ 563.146547][ T6429] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.182531][ T6429] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 563.222050][ T6429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 563.249558][ T6429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 563.274432][ T6429] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.300923][ T6429] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 563.311898][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.320563][ T6429] usb 1-1: Product: syz [ 563.326059][ T6429] usb 1-1: Manufacturer: syz [ 563.330799][ T6429] usb 1-1: SerialNumber: syz [ 563.344971][ T5972] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 563.364010][ T6429] usb 1-1: config 0 descriptor?? [ 563.426390][ C0] plantronics 0003:047F:FFFF.0025: hid_field_extract() called with n (132) > 32! (swapper/0) [ 563.518208][ T5972] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.535128][ T5972] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.554893][ T5972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 563.579594][ T5972] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 563.597882][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.609598][ T5972] usb 4-1: config 0 descriptor?? [ 563.664030][ T6429] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior1 [ 563.704719][ T6429] usb 1-1: USB disconnect, device number 6 [ 563.785570][ T10] usb 3-1: USB disconnect, device number 122 [ 564.013784][ T9347] net_ratelimit: 31 callbacks suppressed [ 564.013824][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.051632][ T5972] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 564.066678][ T5972] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 564.081802][ T5972] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 564.096776][ T6397] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.108898][ T5972] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 564.123346][ T5972] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 564.136178][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.152870][ T5972] lenovo 0003:17EF:60EE.0026: hidraw1: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 564.173724][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 564.273890][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.333577][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 564.346247][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 564.362331][ T10] usb 3-1: config 0 has no interface number 0 [ 564.378251][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.393728][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.402791][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 564.412844][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 564.423387][ T10] usb 3-1: Product: syz [ 564.427863][ T10] usb 3-1: SerialNumber: syz [ 564.455533][ T10] usb 3-1: config 0 descriptor?? [ 564.475654][ T10] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 564.508189][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input56 [ 564.518830][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.643778][ T1312] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.757767][ T6429] usb 2-1: USB disconnect, device number 110 [ 564.773795][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 564.893779][ T9347] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.023806][ T6397] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.133994][ T9346] bond2: (slave macvlan2): failed to get link speed/duplex [ 565.333787][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 565.499085][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 565.511801][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.521383][ T10] usb 2-1: Product: syz [ 565.531160][ T10] usb 2-1: Manufacturer: syz [ 565.541626][ T10] usb 2-1: SerialNumber: syz [ 565.558694][ T10] usb 2-1: config 0 descriptor?? [ 565.778439][ T5836] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 565.782575][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 565.879173][ T10] usb 2-1: USB disconnect, device number 111 [ 566.165952][ T5972] lenovo 0003:17EF:60EE.0026: Failed to switch middle button: -71 [ 566.175525][ T5972] lenovo 0003:17EF:60EE.0026: Fn-lock setting failed: -71 [ 566.183200][ T5972] lenovo 0003:17EF:60EE.0026: Sensitivity setting failed: -71 [ 566.196422][ T5972] usb 4-1: USB disconnect, device number 121 [ 566.243283][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 566.254962][ T6429] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 566.436139][ T6429] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.453842][ T6429] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.474972][ T6429] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.484564][ T6429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.511932][T13584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 566.546592][ T6429] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.793658][ T7574] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 566.798830][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.854265][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.874974][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 566.882006][ C0] ------------[ cut here ]------------ [ 566.887963][ C0] URB ffff88814c6f7a00 submitted while active [ 566.894065][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.2.1932/13562 [ 566.904274][ C0] Modules linked in: [ 566.908641][ C0] CPU: 0 UID: 0 PID: 13562 Comm: syz.2.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.919627][ C0] Tainted: [L]=SOFTLOCKUP [ 566.923974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 566.934076][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 566.939652][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 b7 0a 17 fb 49 83 3e 00 74 40 e8 ec 05 b0 fa 48 8d 3d 55 02 c9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 05 b0 fa eb 05 e8 ca 05 [ 566.959309][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00010087 [ 566.965436][ C0] RAX: ffffffff87129324 RBX: ffff88814c6f7a00 RCX: 0000000000040000 [ 566.973459][ C0] RDX: ffffc90002181000 RSI: ffff88814c6f7a00 RDI: ffffffff8fdb9580 [ 566.976215][ T6429] usb 1-1: USB disconnect, device number 7 [ 566.981474][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 566.981549][ C0] R10: dffffc0000000000 R11: fffff52000000f30 R12: 0000000000000820 [ 567.003341][ C0] R13: ffff888055c30830 R14: ffff88814c6f7a08 R15: dffffc0000000000 [ 567.011509][ C0] FS: 0000000000000000(0000) GS:ffff888125928000(0000) knlGS:0000000000000000 [ 567.020457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.027062][ C0] CR2: 00002000003bb030 CR3: 0000000075d5a000 CR4: 00000000003526f0 [ 567.035061][ C0] Call Trace: [ 567.038361][ C0] [ 567.041216][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 567.047047][ C0] ? ___ratelimit+0x58c/0x8d0 [ 567.051753][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 567.057193][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 567.062595][ C0] dummy_timer+0xbbd/0x45d0 [ 567.067128][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 567.072127][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.077105][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 567.082945][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.087915][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.092912][ C0] __hrtimer_run_queues+0x527/0xc30 [ 567.098179][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 567.103922][ C0] ? read_tsc+0x9/0x20 [ 567.108037][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 567.113180][ C0] handle_softirqs+0x22a/0x7c0 [ 567.117966][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 567.122779][ C0] __irq_exit_rcu+0x5f/0x150 [ 567.127398][ C0] irq_exit_rcu+0x9/0x30 [ 567.131662][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 567.137333][ C0] [ 567.140276][ C0] [ 567.143213][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.149212][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 567.155660][ C0] Code: f7 e8 6d 9e 24 f6 f7 c3 00 02 00 00 74 05 e8 d0 32 4f f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 94 16 f6 65 8b 05 4d 48 54 07 85 c0 74 18 5b 41 5e c3 cc cc [ 567.175283][ C0] RSP: 0018:ffffc9000e9277a0 EFLAGS: 00000206 [ 567.181372][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 567.189360][ C0] RDX: 0000000000000006 RSI: ffffffff8dacf7a1 RDI: 0000000000000001 [ 567.197349][ C0] RBP: 0000000000000000 R08: ffffffff8fced577 R09: 1ffffffff1f9daae [ 567.205425][ C0] R10: dffffc0000000000 R11: fffffbfff1f9daaf R12: 0000000000000246 [ 567.213414][ C0] R13: 1ffff110286f097f R14: ffff888143784000 R15: ffff888028e2b408 [ 567.221437][ C0] dummy_pullup+0x18c/0x200 [ 567.225979][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 567.231043][ C0] usb_gadget_disconnect_locked+0x143/0x480 [ 567.236968][ C0] gadget_unbind_driver+0xc7/0x450 [ 567.242121][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 567.247883][ C0] device_release_driver_internal+0x46f/0x800 [ 567.253983][ C0] driver_detach+0x1f3/0x2d0 [ 567.258604][ C0] bus_remove_driver+0x226/0x320 [ 567.263567][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 567.269324][ C0] raw_release+0xd7/0x260 [ 567.273678][ C0] ? __pfx_raw_release+0x10/0x10 [ 567.278634][ C0] __fput+0x44f/0xa70 [ 567.282658][ C0] task_work_run+0x1d9/0x270 [ 567.287281][ C0] ? __pfx_task_work_run+0x10/0x10 [ 567.292418][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 567.297569][ C0] do_exit+0x69b/0x2310 [ 567.301766][ C0] ? __pfx_do_exit+0x10/0x10 [ 567.306384][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 567.311449][ C0] do_group_exit+0x21b/0x2d0 [ 567.316066][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.321302][ C0] get_signal+0x1284/0x1330 [ 567.325841][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 567.331404][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 567.336584][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 567.342726][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 567.348881][ C0] exit_to_user_mode_loop+0x86/0x480 [ 567.354153][ C0] ? rcu_is_watching+0x15/0xb0 [ 567.358899][ C0] do_syscall_64+0x2b7/0xf80 [ 567.363473][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.369540][ C0] ? clear_bhb_loop+0x60/0xb0 [ 567.374383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.380259][ C0] RIP: 0033:0x7fab5415b58e [ 567.384662][ C0] Code: Unable to access opcode bytes at 0x7fab5415b564. [ 567.391749][ C0] RSP: 002b:00007fab5453fb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 567.400244][ C0] RAX: 0000000000000000 RBX: 000055557b437500 RCX: 00007fab5415b58e [ 567.408203][ C0] RDX: 00007fab5453fb80 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.416191][ C0] RBP: 00007fab54417da0 R08: 0000000000000000 R09: 0000000000000000 [ 567.424176][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008aab3 [ 567.432430][ C0] R13: 00007fab5441609c R14: 0000000000089f8b R15: 00007fab54416090 [ 567.440404][ C0] [ 567.443425][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 567.450695][ C0] CPU: 0 UID: 0 PID: 13562 Comm: syz.2.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.461615][ C0] Tainted: [L]=SOFTLOCKUP [ 567.465918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 567.476130][ C0] Call Trace: [ 567.479397][ C0] [ 567.482227][ C0] vpanic+0x1e0/0x670 [ 567.486201][ C0] panic+0xc5/0xd0 [ 567.489907][ C0] ? __pfx_panic+0x10/0x10 [ 567.494318][ C0] __warn+0x315/0x4a0 [ 567.498293][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 567.503155][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 567.508006][ C0] __report_bug+0x29a/0x540 [ 567.512500][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 567.517870][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 567.522714][ C0] ? __pfx___report_bug+0x10/0x10 [ 567.527900][ C0] ? mark_lock+0x180/0x190 [ 567.532308][ C0] ? dev_printk_emit+0xee/0x140 [ 567.537145][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 567.542064][ C0] report_bug_entry+0x19a/0x290 [ 567.546899][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 567.551820][ C0] ? usb_submit_urb+0x83/0x18b0 [ 567.556658][ C0] handle_bug+0xca/0x200 [ 567.560885][ C0] exc_invalid_op+0x1a/0x50 [ 567.565369][ C0] asm_exc_invalid_op+0x1a/0x20 [ 567.570200][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 567.575649][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 b7 0a 17 fb 49 83 3e 00 74 40 e8 ec 05 b0 fa 48 8d 3d 55 02 c9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 05 b0 fa eb 05 e8 ca 05 [ 567.595247][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00010087 [ 567.601302][ C0] RAX: ffffffff87129324 RBX: ffff88814c6f7a00 RCX: 0000000000040000 [ 567.609254][ C0] RDX: ffffc90002181000 RSI: ffff88814c6f7a00 RDI: ffffffff8fdb9580 [ 567.617205][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 567.625160][ C0] R10: dffffc0000000000 R11: fffff52000000f30 R12: 0000000000000820 [ 567.633116][ C0] R13: ffff888055c30830 R14: ffff88814c6f7a08 R15: dffffc0000000000 [ 567.641090][ C0] ? usb_submit_urb+0x74/0x18b0 [ 567.645945][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 567.651763][ C0] ? ___ratelimit+0x58c/0x8d0 [ 567.656429][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 567.661793][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 567.667151][ C0] dummy_timer+0xbbd/0x45d0 [ 567.671643][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 567.676585][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.681511][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 567.687303][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.692223][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 567.697145][ C0] __hrtimer_run_queues+0x527/0xc30 [ 567.702336][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 567.708037][ C0] ? read_tsc+0x9/0x20 [ 567.712097][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 567.717196][ C0] handle_softirqs+0x22a/0x7c0 [ 567.721945][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 567.726707][ C0] __irq_exit_rcu+0x5f/0x150 [ 567.731301][ C0] irq_exit_rcu+0x9/0x30 [ 567.735534][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 567.741502][ C0] [ 567.744418][ C0] [ 567.747416][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.753378][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 567.759774][ C0] Code: f7 e8 6d 9e 24 f6 f7 c3 00 02 00 00 74 05 e8 d0 32 4f f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 94 16 f6 65 8b 05 4d 48 54 07 85 c0 74 18 5b 41 5e c3 cc cc [ 567.779363][ C0] RSP: 0018:ffffc9000e9277a0 EFLAGS: 00000206 [ 567.785414][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 567.793394][ C0] RDX: 0000000000000006 RSI: ffffffff8dacf7a1 RDI: 0000000000000001 [ 567.801346][ C0] RBP: 0000000000000000 R08: ffffffff8fced577 R09: 1ffffffff1f9daae [ 567.809306][ C0] R10: dffffc0000000000 R11: fffffbfff1f9daaf R12: 0000000000000246 [ 567.817275][ C0] R13: 1ffff110286f097f R14: ffff888143784000 R15: ffff888028e2b408 [ 567.825246][ C0] dummy_pullup+0x18c/0x200 [ 567.829740][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 567.834745][ C0] usb_gadget_disconnect_locked+0x143/0x480 [ 567.840636][ C0] gadget_unbind_driver+0xc7/0x450 [ 567.845745][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 567.851451][ C0] device_release_driver_internal+0x46f/0x800 [ 567.857506][ C0] driver_detach+0x1f3/0x2d0 [ 567.862077][ C0] bus_remove_driver+0x226/0x320 [ 567.867000][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 567.872704][ C0] raw_release+0xd7/0x260 [ 567.877026][ C0] ? __pfx_raw_release+0x10/0x10 [ 567.881945][ C0] __fput+0x44f/0xa70 [ 567.885921][ C0] task_work_run+0x1d9/0x270 [ 567.890508][ C0] ? __pfx_task_work_run+0x10/0x10 [ 567.895601][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 567.900710][ C0] do_exit+0x69b/0x2310 [ 567.904864][ C0] ? __pfx_do_exit+0x10/0x10 [ 567.909460][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 567.914475][ C0] do_group_exit+0x21b/0x2d0 [ 567.919052][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.924238][ C0] get_signal+0x1284/0x1330 [ 567.928731][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 567.934262][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 567.939448][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 567.945789][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 567.951606][ C0] exit_to_user_mode_loop+0x86/0x480 [ 567.957009][ C0] ? rcu_is_watching+0x15/0xb0 [ 567.962201][ C0] do_syscall_64+0x2b7/0xf80 [ 567.966888][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.972954][ C0] ? clear_bhb_loop+0x60/0xb0 [ 567.977754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.983822][ C0] RIP: 0033:0x7fab5415b58e [ 567.988433][ C0] Code: Unable to access opcode bytes at 0x7fab5415b564. [ 567.995537][ C0] RSP: 002b:00007fab5453fb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 568.004393][ C0] RAX: 0000000000000000 RBX: 000055557b437500 RCX: 00007fab5415b58e [ 568.012357][ C0] RDX: 00007fab5453fb80 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.020326][ C0] RBP: 00007fab54417da0 R08: 0000000000000000 R09: 0000000000000000 [ 568.028285][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008aab3 [ 568.036257][ C0] R13: 00007fab5441609c R14: 0000000000089f8b R15: 00007fab54416090 [ 568.044226][ C0] [ 568.047623][ C0] Kernel Offset: disabled [ 568.051939][ C0] Rebooting in 86400 seconds..