last executing test programs: 13m41.029105778s ago: executing program 3 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) 13m38.168542823s ago: executing program 3 (id=514): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x60, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 13m37.839938185s ago: executing program 3 (id=516): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 13m35.65284859s ago: executing program 3 (id=527): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 13m34.701302275s ago: executing program 3 (id=532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) acct(0x0) r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) 13m34.012821654s ago: executing program 3 (id=544): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000700)="aa", 0x1, 0x18844, &(0x7f0000001440)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 13m32.949969809s ago: executing program 32 (id=544): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000700)="aa", 0x1, 0x18844, &(0x7f0000001440)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000000000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 16.382646534s ago: executing program 4 (id=2687): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00001196c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119940)={0x7, [], 0x7d, "e9f85915cabb3f"}) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/43, 0x2b) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000011a940)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000011ac00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000011ae00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000011be00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011ce00)={0x8, [], 0x3, "81df93786179dc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000011de00)={{0x0, 0x7fffffff, 0x9d, 0x1, 0x800000000000000, 0x40, 0x280, 0x1, 0x400, 0x5, 0x2, 0x10001, 0x1, 0x9, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011dec0)={0x2, [], 0x8e, "614e6e63a67297"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={r1, 0x1}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) creat(&(0x7f0000000100)='./file0/../file0\x00', 0x121) writev(r3, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000040)="2cbf", 0x2}], 0x2) 16.164404088s ago: executing program 2 (id=2689): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 14.783212364s ago: executing program 2 (id=2692): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x10}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) 13.800923312s ago: executing program 5 (id=2694): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 13.611686594s ago: executing program 5 (id=2695): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) close(r5) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r8, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) close(r0) 13.108201931s ago: executing program 4 (id=2696): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f000017a000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000000)=""/103, 0x67) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x6) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYBLOB="5a73381200853f387a6fb299a45f2f5becb29d6ffc72ece2bd9c0a89f4c3afcddf578481b6cb7687ad991c5c1b0fdf4d5f22739dc73946581119a85d1d42cc4fffe90de2eba4695c0b478379218defadf7db70b67065ddca2b3482ee77a41964a6c3bafde0867fdb32"]) syz_clone3(&(0x7f0000000300)={0x208008000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x24}, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/3, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) fcntl$lock(r1, 0x5, &(0x7f0000000380)={0x2, 0x4, 0x0, 0xa028, r6}) 11.923749196s ago: executing program 5 (id=2699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) link(0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, r4, 0xf03, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x2000d880}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) shutdown(0xffffffffffffffff, 0x2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) write$vhost_msg_v2(r5, 0x0, 0x0) 11.754469156s ago: executing program 4 (id=2700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = getpid() r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x9, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xa15c, 0x404, 0x7, 0xffffffff}}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008804) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) 11.604300624s ago: executing program 2 (id=2701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x900, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) 9.418222364s ago: executing program 1 (id=2702): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 9.215672943s ago: executing program 5 (id=2703): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r3 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000020000020000000900010073797a30000000001a00030091abc12404cf378042"], 0x98}}, 0x0) mbind(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x0, 0x7, 0x1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5b}, "f0bbac31aab069a99f4c130796c7557b99794d13edddb7ca4922fbedc4b1bb71ebdda60ce3e546678499f7c5d489daa208b01605d54d331c7e0f18da662c4274e8cba3c4bbaa113cfc5a3c36572daba0ca413eec65f85eee3e6571"}, 0x5f) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905832270f3a848b4a278483944cf6d3a"], 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 9.139134994s ago: executing program 4 (id=2704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="3000000012000916", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f0002000080"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) 8.231785277s ago: executing program 0 (id=2705): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 7.896501995s ago: executing program 1 (id=2706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) set_mempolicy(0x1, &(0x7f0000000180)=0x6c0d05c5, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000001) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000100)={0x6, 0x1, {0x1, 0x2, 0xfffff000, 0x1, 0xf}, 0xffffffff}) unshare(0x68040200) 7.392270621s ago: executing program 1 (id=2707): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r4, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000030037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r5, 0x5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 7.391373395s ago: executing program 0 (id=2717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r3, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 7.022784643s ago: executing program 2 (id=2708): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x100) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth1\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.926611085s ago: executing program 4 (id=2709): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xa0102}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xeb}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e28}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xfffffbff}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x64}}, 0x9c0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 5.393663198s ago: executing program 5 (id=2710): socket$netlink(0x10, 0x3, 0x10) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.577445087s ago: executing program 0 (id=2711): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x10}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) 4.08739325s ago: executing program 1 (id=2712): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x106, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r5, 0x2) 3.303994608s ago: executing program 5 (id=2713): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) close(r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r4, 0x141601) read$FUSE(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000000)={0x8001, 0x14, [0x30000000, 0x3, 0x4, 0x0, 0x83]}) 2.794697686s ago: executing program 2 (id=2714): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x10, 0x10000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xe, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="7bb95fe4792c10d98acd5439b45a43835014130b5e1f01c933a865ac0a3cf46d75aa74518910258ceef6350e2436fc0974e002bb8b", 0x35}], 0x1, 0x2, 0x8, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) userfaultfd(0x801) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r3, @ANYRESHEX], 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f0000000000)='.\x00', 0x0) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000240)) syz_emit_ethernet(0x101e, &(0x7f0000000f00)={@random="dcaeed31d68e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xab, "9f", "4ebf74", 0x8906, "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"}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100b062e0676fbd371098a74f32d00000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='B'], 0x144}}, 0x4000000) 2.689909122s ago: executing program 4 (id=2715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getegid() dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff000101"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7d00fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 1.742609445s ago: executing program 1 (id=2716): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 1.286774302s ago: executing program 2 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x11, r4, 0x2, 0x40d) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) unshare(0xa000c80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x7fffffff, 0x8001}}) 1.256577387s ago: executing program 0 (id=2719): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) 1.0768206s ago: executing program 0 (id=2720): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000005c0)=0x84) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2, @ANYRES16=r0, @ANYBLOB="a046a8bcb11a4b94911de5aceef14334bc4c410b40bdf0c40601053841ccf406c4ff23098c5566e4cc84b25e354558cc9009be5a1281d2aeccb1d7e63baa362c94e8640be33112688af09fab8306358d82089dd9f488d18f03afcb04f8cda8cdd3f74e90892aa4c429a5780b043bcc67343b94abe054efac139a70288949b4dc5df4a527a9e03b5e8412bc03886a9aaae815a05a488081ac914a7c7d", @ANYRESDEC=r1, @ANYBLOB]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha1-ni\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @private=0xa010102}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r7, {0xf}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) 521.966391ms ago: executing program 1 (id=2721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x356, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x5, 0x3, 0x5f, 0x202, 0x1, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) unshare(0x6a040000) 0s ago: executing program 0 (id=2722): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) mmap(&(0x7f00000bb000/0x3000)=nil, 0x3000, 0x3000000, 0x11, r6, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'bridge_slave_1\x00', &(0x7f0000000880)=@ethtool_test={0x1a, 0x8, 0xe}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000140)={0x0, 0x10, 0x5, "98acb668ee"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x5, 0x5, 0x8001, 0xfff8, 0x3, 0x7, 0x7, 0x0, 0xfffa, 0x4, 0x3ff, 0x5}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) io_uring_setup(0x483b, 0x0) kernel console output (not intermixed with test programs): 6 audit(1746497059.239:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 823.727160][ T30] audit: type=1326 audit(1746497059.239:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 823.733320][ T7209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.770224][T14713] : (slave vxlan0): Releasing backup interface [ 823.784536][ T30] audit: type=1326 audit(1746497059.239:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 823.807080][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.831447][T14713] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.840771][T14713] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.850047][T14713] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.859124][T14713] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.889383][ T7209] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 823.913188][ T7209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.949744][ T7209] usb 6-1: config 0 descriptor?? [ 823.960519][ T30] audit: type=1326 audit(1746497059.239:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 823.967644][ T7209] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22 [ 824.260995][ T30] audit: type=1326 audit(1746497059.239:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 824.288955][ T30] audit: type=1326 audit(1746497059.239:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 824.388456][ T7209] usb 6-1: USB disconnect, device number 57 [ 824.988373][ T7238] usb 2-1: USB disconnect, device number 60 [ 825.052641][T14727] input: syz1 as /devices/virtual/input/input52 [ 825.493127][T14734] syz_tun: entered allmulticast mode [ 825.622638][T14738] loop2: detected capacity change from 0 to 7 [ 825.692371][T14738] loop2: [POWERTEC] p1 p2 p3 p4 [ 825.722884][T14738] loop2: p1 start 1600481121 is beyond EOD, truncated [ 825.754013][T14738] loop2: p2 start 1986290036 is beyond EOD, truncated [ 825.771944][T14738] loop2: p3 size 134676480 extends beyond EOD, truncated [ 825.828838][T14738] loop2: p4 start 4294967295 is beyond EOD, truncated [ 825.966266][ T7137] udevd[7137]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 825.966643][T14744] kernel profiling enabled (shift: 17) [ 825.977016][T14734] syz_tun: left allmulticast mode [ 826.186954][ T30] audit: type=1326 audit(1746497061.829:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14752 comm="syz.5.2286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x0 [ 826.551485][T14763] netlink: 'syz.1.2285': attribute type 10 has an invalid length. [ 826.598162][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2285'. [ 826.607372][T14763] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 827.621158][T14775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 829.705249][T14791] netlink: 'syz.2.2295': attribute type 10 has an invalid length. [ 829.718005][ T7209] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 829.908188][ T7209] usb 1-1: Using ep0 maxpacket: 16 [ 829.925621][ T7209] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.953823][ T7209] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 829.996183][T14799] ptrace attach of "./syz-executor exec"[7890] was attempted by "./syz-executor exec"[14799] [ 830.045215][ T7209] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.102771][ T7209] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 830.116505][ T7209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.472473][ T7209] usb 1-1: Product: syz [ 830.478355][ T7209] usb 1-1: Manufacturer: syz [ 830.488330][ T7209] usb 1-1: SerialNumber: syz [ 830.523083][ T7209] usb 1-1: config 0 descriptor?? [ 830.532650][ T7209] appledisplay 1-1:0.0: Could not find int-in endpoint [ 830.631125][ T7209] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 830.662126][T14806] tipc: Enabling of bearer rejected, failed to enable media [ 831.225045][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2310'. [ 831.393467][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 831.414058][T14817] vlan3: left allmulticast mode [ 831.433303][T14817] veth0: left allmulticast mode [ 831.495103][T14817] bridge0: port 1(vlan3) entered disabled state [ 832.435413][T14820] netlink: 'syz.1.2301': attribute type 16 has an invalid length. [ 832.481750][T14820] netlink: 'syz.1.2301': attribute type 17 has an invalid length. [ 832.957988][ T7209] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 833.170922][T11630] usb 1-1: USB disconnect, device number 47 [ 833.262101][ T7209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.272728][ T7209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 833.326466][ T7209] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 833.336673][ T7209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.364381][ T7209] usb 2-1: Product: syz [ 833.380334][T14829] loop6: detected capacity change from 0 to 16384 [ 833.387029][ T7209] usb 2-1: Manufacturer: syz [ 833.399396][ T7209] usb 2-1: SerialNumber: syz [ 833.659024][ T7209] usb 2-1: 0:2 : does not exist [ 833.667989][ T5926] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 833.696755][ T7209] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 833.803581][ T7209] usb 2-1: USB disconnect, device number 61 [ 833.858385][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 833.865896][ T5926] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 833.875855][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.886957][ T5926] usb 6-1: config 0 descriptor?? [ 833.942622][ T5926] as10x_usb: device has been detected [ 833.964281][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.984358][ T5926] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 834.049814][ T5926] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 834.158694][ T5926] as10x_usb: error during firmware upload part1 [ 834.289697][ T5926] Registered device nBox DVB-T Dongle [ 834.298172][ T5926] usb 6-1: USB disconnect, device number 58 [ 834.384184][ T5926] Unregistered device nBox DVB-T Dongle [ 834.404816][ T5926] as10x_usb: device has been disconnected [ 834.527429][T14842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 834.572640][T14847] sch_tbf: peakrate 6 is lower than or equals to rate 6 ! [ 834.788033][ T5926] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 835.448074][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 835.466041][ T5926] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 835.678019][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.703925][ T5926] usb 6-1: config 0 descriptor?? [ 835.732306][ T5926] as10x_usb: device has been detected [ 835.793438][ T5926] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 835.921032][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.970682][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.998599][ T5926] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 836.162302][ T5926] as10x_usb: error during firmware upload part1 [ 836.339502][ T5926] Registered device nBox DVB-T Dongle [ 836.348098][T11630] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 836.439555][ T5926] usb 6-1: USB disconnect, device number 59 [ 836.529682][T11630] usb 1-1: config 0 has no interfaces? [ 836.545993][T11630] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 836.659262][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.678541][T11630] usb 1-1: Product: syz [ 836.686471][T11630] usb 1-1: Manufacturer: syz [ 836.705858][ T5926] Unregistered device nBox DVB-T Dongle [ 836.741248][T11630] usb 1-1: SerialNumber: syz [ 836.778499][ T5926] as10x_usb: device has been disconnected [ 836.808582][T11630] usb 1-1: config 0 descriptor?? [ 837.117151][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 837.130262][T14858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2311'. [ 837.397988][ T5926] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 837.899534][ T5926] usb 2-1: config 0 has no interfaces? [ 837.915507][ T5926] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 837.924973][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.936673][ T5926] usb 2-1: Product: syz [ 837.947895][ T5926] usb 2-1: Manufacturer: syz [ 837.961885][ T5926] usb 2-1: SerialNumber: syz [ 837.981242][ T5926] usb 2-1: config 0 descriptor?? [ 838.365588][T14875] netlink: 'syz.2.2317': attribute type 16 has an invalid length. [ 838.378042][ T5926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 838.426394][T14875] netlink: 'syz.2.2317': attribute type 17 has an invalid length. [ 838.538438][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 838.559982][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 838.645686][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 838.691348][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.705200][T14878] netlink: 'syz.2.2318': attribute type 16 has an invalid length. [ 838.735020][T14878] netlink: 'syz.2.2318': attribute type 17 has an invalid length. [ 838.757414][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 838.766860][ T7209] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 838.775169][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.784440][ T5926] usb 5-1: Product: syz [ 838.790593][ T5926] usb 5-1: Manufacturer: syz [ 838.812519][ T5926] usb 5-1: SerialNumber: syz [ 838.861569][ T5926] usb 5-1: config 0 descriptor?? [ 838.913329][ T5926] appledisplay 5-1:0.0: Could not find int-in endpoint [ 838.947123][ T5926] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 838.980243][ T7209] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 839.001678][ T7209] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 839.028021][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 839.039309][ T7209] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 839.054028][ T7209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.086222][ T7209] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 839.180942][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.194686][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.235781][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 839.248560][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.311941][ T7209] gspca_sn9c2028: read1 error -71 [ 839.318072][ T7209] gspca_sn9c2028: read1 error -71 [ 839.327054][ T24] usb 3-1: Product: syz [ 839.331986][ T7209] gspca_sn9c2028: read1 error -71 [ 839.337251][ T7209] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -71 [ 839.361985][ T24] usb 3-1: Manufacturer: syz [ 839.369507][ T7209] usb 6-1: USB disconnect, device number 60 [ 839.375649][ T24] usb 3-1: SerialNumber: syz [ 839.395403][T11630] usb 1-1: USB disconnect, device number 48 [ 839.929279][ T24] usb 3-1: 0:2 : does not exist [ 840.136957][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 840.294122][ T24] usb 3-1: USB disconnect, device number 60 [ 840.394289][ T7209] usb 2-1: USB disconnect, device number 62 [ 840.427306][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.869231][T14898] xt_hashlimit: invalid interval [ 840.879973][T14898] netlink: 'syz.5.2320': attribute type 27 has an invalid length. [ 840.888573][T14898] erspan0: left allmulticast mode [ 840.898211][T14898] veth0_vlan: left allmulticast mode [ 841.068989][T14898] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.157024][T14898] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.234211][T14898] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.243466][T14898] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.281210][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 841.436850][T14898] veth5: left promiscuous mode [ 841.442694][T14898] geneve2: left promiscuous mode [ 841.448173][T14898] gtp0: left promiscuous mode [ 842.375050][ T7209] usb 5-1: USB disconnect, device number 50 [ 842.438327][T11630] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 842.646596][T11630] usb 1-1: config 0 has no interfaces? [ 842.722309][T11630] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 842.860414][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.904019][T11630] usb 1-1: Product: syz [ 842.975732][T11630] usb 1-1: Manufacturer: syz [ 843.256515][T14919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 843.352023][T14916] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 843.389313][T11630] usb 1-1: SerialNumber: syz [ 843.520003][T11630] usb 1-1: config 0 descriptor?? [ 843.705290][ T7238] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 843.909856][ T7238] usb 5-1: config 0 has no interfaces? [ 843.920050][ T7238] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 843.929429][ T7238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.941999][ T7238] usb 5-1: Product: syz [ 843.946315][ T7238] usb 5-1: Manufacturer: syz [ 843.953332][ T7238] usb 5-1: SerialNumber: syz [ 843.990982][ T7238] usb 5-1: config 0 descriptor?? [ 845.338005][ T7209] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 845.657078][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7800 [ 845.756581][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x3800 [ 845.791895][T14943] ipt_REJECT: ECHOREPLY no longer supported. [ 845.828451][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3700 [ 845.837762][ T7209] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 845.838687][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x7700 [ 845.901902][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 845.912326][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 845.923361][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7600 [ 845.935047][ T24] usb 1-1: USB disconnect, device number 49 [ 845.953735][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 845.985194][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x3600 [ 846.023702][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.046477][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.067701][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3100 [ 846.088246][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.095283][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x7100 [ 846.154905][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.166840][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x7000 [ 846.241539][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.272755][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.344108][T14936] kvm: kvm [14935]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x3000 [ 846.362211][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.383767][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.404332][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.419835][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.433241][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.466050][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.482405][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.494684][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.515977][ T7238] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 846.829946][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.839585][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 846.917528][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 846.985376][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 846.988717][ T7238] usb 1-1: config 0 has no interfaces? [ 847.002866][ T7238] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 847.013335][ T7238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.033269][ T24] usb 5-1: USB disconnect, device number 51 [ 847.044048][ T7209] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 847.127945][ T7209] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 847.128075][ T7238] usb 1-1: Product: syz [ 847.174155][ T7209] usb 3-1: config 0 interface 0 has no altsetting 0 [ 847.188912][ T7238] usb 1-1: Manufacturer: syz [ 847.208665][ T7209] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 847.212465][ T7238] usb 1-1: SerialNumber: syz [ 847.250755][ T7238] usb 1-1: config 0 descriptor?? [ 847.312731][T14957] netlink: 'syz.4.2334': attribute type 5 has an invalid length. [ 847.327652][ T7209] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 847.360401][ T7209] usb 3-1: Product: syz [ 847.897942][ T7209] usb 3-1: Manufacturer: syz [ 847.904455][ T7209] usb 3-1: SerialNumber: syz [ 848.099486][ T7209] usb 3-1: config 0 descriptor?? [ 848.429425][ T7209] usb 3-1: can't set config #0, error -71 [ 848.456193][ T7209] usb 3-1: USB disconnect, device number 61 [ 849.758794][T14971] Cannot find add_set index 0 as target [ 849.778986][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 849.887830][ T7209] usb 1-1: USB disconnect, device number 50 [ 849.966651][ T24] usb 5-1: config 0 has no interfaces? [ 849.982475][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 849.992180][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.020406][ T24] usb 5-1: Product: syz [ 850.044814][ T24] usb 5-1: Manufacturer: syz [ 850.129747][ T24] usb 5-1: SerialNumber: syz [ 850.149311][ T24] usb 5-1: config 0 descriptor?? [ 850.227881][T14984] sch_tbf: peakrate 6 is lower than or equals to rate 6 ! [ 850.358902][ T7238] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 850.557009][T14987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2342'. [ 850.986334][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 851.052752][ T7238] usb 2-1: config 0 has no interfaces? [ 851.069438][ T7238] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 851.089198][ T7238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.113165][ T7238] usb 2-1: Product: syz [ 851.124891][ T7238] usb 2-1: Manufacturer: syz [ 851.141138][ T7238] usb 2-1: SerialNumber: syz [ 851.343891][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.363850][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.392894][ T7238] usb 2-1: config 0 descriptor?? [ 851.415611][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 851.473098][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.521488][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.574816][ T24] usb 1-1: config 0 descriptor?? [ 852.017046][ T24] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 852.032995][ T24] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 852.656639][T15002] lo: left promiscuous mode [ 852.666038][T15002] tunl0: left promiscuous mode [ 852.677374][T15002] gre0: left promiscuous mode [ 852.696934][T15002] gretap0: left promiscuous mode [ 852.712710][T15002] erspan0: left promiscuous mode [ 852.720775][T15002] ip_vti0: left promiscuous mode [ 852.727601][T15002] ip6_vti0: left promiscuous mode [ 852.736268][T15002] sit0: left promiscuous mode [ 852.747988][T15002] ip6tnl0: left promiscuous mode [ 852.756585][T15002] ip6gre0: left promiscuous mode [ 852.771013][T15002] syz_tun: left promiscuous mode [ 852.783272][T15002] bridge0: left promiscuous mode [ 852.831992][T15002] vcan0: left promiscuous mode [ 853.144919][T15002] dummy0: left promiscuous mode [ 853.182132][T15002] nlmon0: left promiscuous mode [ 853.190576][T15002] caif0: left promiscuous mode [ 853.195955][T15002] veth0_to_bridge: left allmulticast mode [ 853.227611][T15002] ip6erspan0: left promiscuous mode [ 853.241036][T15002] bridge2: left allmulticast mode [ 853.458129][ T7209] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 853.648076][ T7209] usb 1-1: device descriptor read/64, error -32 [ 853.915075][ T7209] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 854.025950][ T24] usb 2-1: USB disconnect, device number 63 [ 854.078070][ T7209] usb 1-1: device descriptor read/64, error -32 [ 854.272831][ T7238] usb 5-1: USB disconnect, device number 52 [ 854.321521][ T7209] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 854.338298][ T7209] usb 1-1: device descriptor read/8, error -32 [ 854.897981][ T7209] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 854.919267][ T7209] usb 1-1: device descriptor read/8, error -32 [ 855.028316][ T7209] raw-gadget.2 gadget.0: failed to queue suspend event [ 855.050444][ T5926] usb 1-1: USB disconnect, device number 51 [ 855.089351][ T5926] raw-gadget.2 gadget.0: failed to queue reset event [ 855.115176][T14985] raw-gadget.2 gadget.0: failed to queue disconnect event [ 855.659703][ T7238] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 855.664834][T15032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.518904][ T7238] usb 2-1: config 0 has no interfaces? [ 856.651621][ T7238] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 856.666375][ T7238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.696816][ T7238] usb 2-1: Product: syz [ 856.717968][ T7238] usb 2-1: Manufacturer: syz [ 856.725495][ T7238] usb 2-1: SerialNumber: syz [ 856.861262][ T7238] usb 2-1: config 0 descriptor?? [ 859.392051][T15062] Unknown options in mask 5 [ 859.542528][T15064] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[15064] [ 859.769400][ T7238] usb 2-1: USB disconnect, device number 64 [ 860.097642][T15065] wg1: entered promiscuous mode [ 860.102877][T15065] wg1: entered allmulticast mode [ 860.408150][ T5926] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 860.608033][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 860.615611][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.644082][ T5926] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 860.725408][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.774067][ T5926] usb 1-1: config 0 descriptor?? [ 861.347179][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 861.357236][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 861.406808][ T5926] usb 1-1: USB disconnect, device number 53 [ 862.177979][ T5926] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 862.360595][ T5926] usb 5-1: config 0 has no interfaces? [ 862.377621][ T5926] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.443391][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.507133][ T5926] usb 5-1: Product: syz [ 862.512728][ T5926] usb 5-1: Manufacturer: syz [ 862.517553][ T5926] usb 5-1: SerialNumber: syz [ 862.530769][ T5926] usb 5-1: config 0 descriptor?? [ 862.698320][ T7209] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 862.862281][ T7209] usb 1-1: config 0 has no interfaces? [ 862.872363][ T7209] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.881751][ T7209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.891889][ T7209] usb 1-1: Product: syz [ 862.901002][ T7209] usb 1-1: Manufacturer: syz [ 862.905782][ T7209] usb 1-1: SerialNumber: syz [ 862.924734][ T7209] usb 1-1: config 0 descriptor?? [ 865.603431][ T7209] usb 5-1: USB disconnect, device number 53 [ 865.960860][T15099] sch_tbf: peakrate 6 is lower than or equals to rate 6 ! [ 865.968179][T11630] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 866.052007][ T5926] usb 1-1: USB disconnect, device number 54 [ 866.133112][T11630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.143493][T11630] usb 2-1: config 0 has no interfaces? [ 866.159440][ T7209] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 866.188783][T11630] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 866.238997][T15103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 866.266186][T11630] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 866.278088][T11630] usb 2-1: Product: syz [ 866.283541][T11630] usb 2-1: Manufacturer: syz [ 866.304168][T11630] usb 2-1: SerialNumber: syz [ 866.437956][ T7209] usb 3-1: Using ep0 maxpacket: 8 [ 866.465818][ T7209] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 866.486085][ T7209] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.488800][T11630] usb 2-1: config 0 descriptor?? [ 866.506563][ T7209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.584217][ T7209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 866.595203][ T7209] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.630630][ T7209] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 866.665530][ T7209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.929129][ T5926] usb 2-1: USB disconnect, device number 65 [ 867.019247][ T7209] usb 3-1: GET_CAPABILITIES returned 0 [ 867.024848][ T7209] usbtmc 3-1:16.0: can't read capabilities [ 867.118052][T11630] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 867.294244][ T5926] usb 3-1: USB disconnect, device number 62 [ 867.306232][ T30] audit: type=1326 audit(1746497102.939:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fdf8e969 code=0x7ffc0000 [ 867.355355][T11630] usb 1-1: config 0 has no interfaces? [ 867.411200][T11630] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 867.426134][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.475068][T11630] usb 1-1: Product: syz [ 867.486116][ T30] audit: type=1326 audit(1746497102.939:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff5fdf8e969 code=0x7ffc0000 [ 867.518117][T11630] usb 1-1: Manufacturer: syz [ 867.654157][T11630] usb 1-1: SerialNumber: syz [ 867.698211][T11630] usb 1-1: config 0 descriptor?? [ 867.708174][ T30] audit: type=1326 audit(1746497102.939:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fdf8e969 code=0x7ffc0000 [ 867.883299][ T30] audit: type=1326 audit(1746497102.949:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fdf8e969 code=0x7ffc0000 [ 868.459643][T15121] vivid-000: disconnect [ 868.476604][T15121] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 868.921992][T15128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 869.089902][T15115] vivid-000: reconnect [ 870.108374][ T5926] usb 1-1: USB disconnect, device number 55 [ 870.242794][T15132] netlink: 'syz.1.2375': attribute type 16 has an invalid length. [ 870.255017][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.261661][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.268169][T15132] netlink: 'syz.1.2375': attribute type 17 has an invalid length. [ 871.018198][ T7209] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 871.420198][ T7209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.430594][ T7209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.443882][ T7209] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.453608][ T7209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.462087][ T7209] usb 2-1: Product: syz [ 871.466727][ T7209] usb 2-1: Manufacturer: syz [ 871.512890][ T7209] usb 2-1: SerialNumber: syz [ 871.728411][ T5926] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 871.803632][ T7209] usb 2-1: 0:2 : does not exist [ 872.009965][T15166] netlink: 'syz.4.2381': attribute type 20 has an invalid length. [ 872.292759][ T5926] usb 3-1: config 0 has no interfaces? [ 872.366858][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 872.415761][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.426053][ T7209] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 872.497764][ T5926] usb 3-1: Product: syz [ 872.512772][ T5926] usb 3-1: Manufacturer: syz [ 872.541515][ T5926] usb 3-1: SerialNumber: syz [ 872.587982][T11630] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 872.628499][ T7209] usb 2-1: USB disconnect, device number 66 [ 872.635619][ T5926] usb 3-1: config 0 descriptor?? [ 872.678133][ T7238] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 872.764144][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.994650][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.008455][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.073159][T11630] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.316041][T11630] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.592863][ T7238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.700201][ T7238] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 873.728548][ T7238] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 873.738906][ T7238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.747956][T11630] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.757397][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.765742][T11630] usb 1-1: Product: syz [ 873.778547][ T7238] usb 6-1: config 0 descriptor?? [ 873.793917][T11630] usb 1-1: Manufacturer: syz [ 873.803776][T11630] usb 1-1: SerialNumber: syz [ 875.174990][ T7238] usb 6-1: USB disconnect, device number 61 [ 875.907301][T15185] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 875.937413][T15185] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 875.998666][T15175] usb 3-1: USB disconnect, device number 63 [ 876.500149][T11630] usb 1-1: 0:2 : does not exist [ 876.612392][T11630] usb 1-1: USB disconnect, device number 56 [ 876.763509][T15190] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2387'. [ 877.008174][T15201] usb usb8: usbfs: process 15201 (syz.2.2386) did not claim interface 0 before use [ 877.288138][T11630] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 877.328005][ T5926] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 877.511972][T11630] usb 1-1: config 0 has no interfaces? [ 877.523056][T11630] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 877.532983][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.686572][T11630] usb 1-1: Product: syz [ 877.686587][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.701821][T11630] usb 1-1: Manufacturer: syz [ 877.710197][T11630] usb 1-1: SerialNumber: syz [ 877.845929][T11630] usb 1-1: config 0 descriptor?? [ 877.856214][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 877.872430][ T5926] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 877.897967][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.076351][ T5926] usb 2-1: config 0 descriptor?? [ 878.101520][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 878.193670][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 878.219467][ T30] audit: type=1326 audit(1746497113.869:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 878.235741][T15200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'. [ 878.261411][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 878.305609][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 878.338401][ T5926] usb 2-1: media controller created [ 878.344529][ T30] audit: type=1326 audit(1746497113.869:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 878.359826][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.429000][T15190] dibusb: i2c wr: len=164 is too big! [ 878.429000][T15190] [ 878.532899][ T30] audit: type=1326 audit(1746497113.869:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3dc518d2d0 code=0x7ffc0000 [ 878.586479][ T30] audit: type=1326 audit(1746497113.869:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 878.627934][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 878.766341][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 878.836351][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 878.868546][ T30] audit: type=1326 audit(1746497113.869:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 878.929758][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 878.957551][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 879.006521][ T5926] usb 2-1: USB disconnect, device number 67 [ 879.017638][ T30] audit: type=1326 audit(1746497113.869:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 879.184792][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 879.203486][ T30] audit: type=1326 audit(1746497113.869:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 879.320490][ T30] audit: type=1326 audit(1746497113.869:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 879.440195][ T30] audit: type=1326 audit(1746497113.869:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 879.488144][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 879.627598][ T30] audit: type=1326 audit(1746497113.869:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 879.650321][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.668444][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 879.703520][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.745904][ T24] usb 3-1: config 0 descriptor?? [ 879.771855][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 879.974874][ T24] pwc: send_video_command error -71 [ 879.992039][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 880.015484][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 880.115445][ T24] usb 3-1: USB disconnect, device number 64 [ 880.232681][ T5926] usb 1-1: USB disconnect, device number 57 [ 880.471129][T15228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.818469][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 881.148060][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.158366][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 881.167401][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.217336][ T24] usb 3-1: config 0 descriptor?? [ 881.271661][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 881.706992][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 881.963028][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 881.970685][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 881.978395][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 881.986449][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 881.998012][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 882.006910][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 882.019328][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 882.028233][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 882.039500][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 882.065059][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 882.274053][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 882.365239][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 882.377010][ T24] pwc: Registered as video103. [ 882.404277][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 882.633626][T15241] netlink: 'syz.5.2400': attribute type 16 has an invalid length. [ 882.666802][T15241] netlink: 'syz.5.2400': attribute type 17 has an invalid length. [ 882.684214][ T24] usb 3-1: USB disconnect, device number 65 [ 882.912657][T15249] block device autoloading is deprecated and will be removed. [ 882.993285][T15254] sch_tbf: peakrate 6 is lower than or equals to rate 6 ! [ 883.079985][T11630] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 883.846891][T11630] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.880348][T11630] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.900517][T11630] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 883.914894][T11630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.933691][T11630] usb 6-1: Product: syz [ 883.942000][T11630] usb 6-1: Manufacturer: syz [ 883.956338][T11630] usb 6-1: SerialNumber: syz [ 884.218741][T11630] usb 6-1: 0:2 : does not exist [ 884.230232][T11630] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 884.438112][T11630] usb 6-1: USB disconnect, device number 62 [ 884.514139][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.183229][T15272] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 885.183229][T15272] The task syz.5.2405 (15272) triggered the difference, watch for misbehavior. [ 885.874801][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 886.188981][ T10] usb 1-1: config 0 has no interfaces? [ 886.207087][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 886.216406][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.227986][ T10] usb 1-1: Product: syz [ 886.232221][ T10] usb 1-1: Manufacturer: syz [ 886.277806][ T10] usb 1-1: SerialNumber: syz [ 886.298577][ T10] usb 1-1: config 0 descriptor?? [ 886.544003][T15290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.551271][T15290] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 886.603889][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 886.603912][ T30] audit: type=1804 audit(1746497122.139:1322): pid=15292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2409" name="/newroot/493/bus" dev="tmpfs" ino=2588 res=1 errno=0 [ 887.423206][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 887.880837][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 887.899845][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.968052][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 888.035907][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.112588][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 888.153370][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 888.229701][ T10] usb 3-1: Product: syz [ 888.246554][ T10] usb 3-1: Manufacturer: syz [ 888.535438][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 888.616446][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.625221][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.865235][ T10] usb 1-1: USB disconnect, device number 58 [ 890.058628][ T24] usb 3-1: USB disconnect, device number 66 [ 890.569937][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 891.266879][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 891.749228][ T24] usb 6-1: config 0 has no interfaces? [ 891.766695][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 891.908617][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.987082][ T24] usb 6-1: Product: syz [ 892.016306][ T24] usb 6-1: Manufacturer: syz [ 892.109220][ T24] usb 6-1: SerialNumber: syz [ 892.148587][ T24] usb 6-1: config 0 descriptor?? [ 892.985274][T15334] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 893.608012][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 893.881245][ T24] usb 3-1: config 0 has no interfaces? [ 893.892570][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.966790][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.015796][ T24] usb 3-1: Product: syz [ 894.036123][ T24] usb 3-1: Manufacturer: syz [ 894.046248][ T24] usb 3-1: SerialNumber: syz [ 894.107539][ T24] usb 3-1: config 0 descriptor?? [ 894.188598][ T10] usb 6-1: USB disconnect, device number 63 [ 896.301896][ T24] usb 3-1: USB disconnect, device number 67 [ 896.473961][T15360] vlan0: entered promiscuous mode [ 896.479356][T15360] batadv0: entered promiscuous mode [ 897.639826][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 897.752776][T15374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 897.783367][ T24] usb 1-1: device descriptor read/64, error -71 [ 898.318010][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 898.577676][ T24] usb 1-1: device descriptor read/64, error -71 [ 898.698306][ T24] usb usb1-port1: attempt power cycle [ 899.048134][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 899.100742][ T24] usb 1-1: device descriptor read/8, error -71 [ 899.207044][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 899.246617][T15369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2427'. [ 899.408007][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 899.451615][ T24] usb 1-1: device descriptor read/8, error -71 [ 899.578389][ T24] usb usb1-port1: unable to enumerate USB device [ 900.120746][T15402] input: syz1 as /devices/virtual/input/input55 [ 901.838258][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 901.998171][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 902.005478][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 902.022493][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 902.033484][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 902.054453][ T24] usb 2-1: Product: syz [ 902.092329][ T24] usb 2-1: Manufacturer: syz [ 902.097091][ T24] usb 2-1: SerialNumber: syz [ 902.113054][ T24] usb 2-1: config 0 descriptor?? [ 902.172536][T15419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 902.739321][T15436] vivid-000: disconnect [ 902.991657][T15420] vivid-000: reconnect [ 904.031553][T15444] tipc: Enabled bearer , priority 10 [ 904.059620][ T24] usb 2-1: USB disconnect, device number 68 [ 904.779277][T15455] macsec0: entered promiscuous mode [ 904.786941][T15455] macsec0: left promiscuous mode [ 905.055969][ T24] tipc: Node number set to 366235306 [ 905.637947][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 905.915098][ T24] usb 3-1: config 0 has no interfaces? [ 906.103492][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 906.113404][T15469] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 906.148168][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.176823][ T24] usb 3-1: Product: syz [ 906.257558][ T24] usb 3-1: Manufacturer: syz [ 906.277948][ T24] usb 3-1: SerialNumber: syz [ 906.315117][ T24] usb 3-1: config 0 descriptor?? [ 907.658315][T15537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 909.063527][ T24] usb 3-1: USB disconnect, device number 68 [ 909.478143][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 909.680554][ T10] usb 5-1: config 0 has no interfaces? [ 909.694160][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 909.703554][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.731987][ T10] usb 5-1: Product: syz [ 909.743513][ T10] usb 5-1: Manufacturer: syz [ 909.759124][ T10] usb 5-1: SerialNumber: syz [ 909.793390][ T10] usb 5-1: config 0 descriptor?? [ 910.147999][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 910.300062][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 910.315364][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 910.338144][ T10] usb 2-1: config 0 has no interface number 0 [ 910.359400][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 910.451003][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 910.618626][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 910.653464][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.671860][ T10] usb 2-1: Product: syz [ 910.689811][ T10] usb 2-1: Manufacturer: syz [ 910.802267][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 910.901687][ T10] usb 2-1: SerialNumber: syz [ 910.940436][ T10] usb 2-1: config 0 descriptor?? [ 911.000068][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.058074][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 911.124669][ T24] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 911.160574][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.192525][ T24] usb 6-1: config 0 descriptor?? [ 911.659276][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 911.669111][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input56 [ 911.742630][ T24] hid-alps 0003:044E:1215.0015: unknown main item tag 0x5 [ 911.764443][ T24] hid-alps 0003:044E:1215.0015: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0 [ 912.016242][ T24] usb 2-1: USB disconnect, device number 69 [ 912.045574][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 912.933366][ T24] usb 6-1: USB disconnect, device number 64 [ 912.981397][T15596] netlink: 'syz.2.2468': attribute type 12 has an invalid length. [ 913.349156][ T24] usb 5-1: USB disconnect, device number 54 [ 914.057952][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 914.441445][ T10] usb 1-1: config 0 has no interfaces? [ 914.455716][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 914.472222][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.643291][ T10] usb 1-1: Product: syz [ 914.653270][ T10] usb 1-1: Manufacturer: syz [ 914.663819][ T10] usb 1-1: SerialNumber: syz [ 914.719380][ T10] usb 1-1: config 0 descriptor?? [ 914.744671][T15613] vivid-000: disconnect [ 914.960962][T15597] vivid-000: reconnect [ 915.463511][T15617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 916.264631][ T30] audit: type=1326 audit(1746497151.889:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 916.712241][ T30] audit: type=1326 audit(1746497151.899:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de458e969 code=0x7ffc0000 [ 916.816630][ T30] audit: type=1326 audit(1746497151.899:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 916.839653][ T30] audit: type=1326 audit(1746497151.899:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 916.867949][ T30] audit: type=1326 audit(1746497151.899:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 916.905992][ T30] audit: type=1326 audit(1746497151.899:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de458e969 code=0x7ffc0000 [ 917.236177][ T30] audit: type=1326 audit(1746497151.899:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 917.423029][ T30] audit: type=1326 audit(1746497151.899:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0de452ab39 code=0x7ffc0000 [ 917.545411][ T30] audit: type=1326 audit(1746497151.899:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de458e969 code=0x7ffc0000 [ 917.603855][T11630] usb 1-1: USB disconnect, device number 63 [ 917.644039][ T30] audit: type=1326 audit(1746497151.899:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de458e969 code=0x7ffc0000 [ 917.698074][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 918.083809][ T10] usb 3-1: config 0 has no interfaces? [ 918.194251][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 918.244981][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.277364][ T10] usb 3-1: Product: syz [ 918.281795][ T10] usb 3-1: Manufacturer: syz [ 918.286418][ T10] usb 3-1: SerialNumber: syz [ 918.300150][ T10] usb 3-1: config 0 descriptor?? [ 921.024423][ T10] usb 3-1: USB disconnect, device number 69 [ 922.185966][T15674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 922.197324][T15669] netlink: 'syz.2.2484': attribute type 20 has an invalid length. [ 923.214227][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2488'. [ 923.784031][T15695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.689983][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2493'. [ 924.721852][T15706] macvtap1: entered promiscuous mode [ 924.727385][T15706] batadv0: entered promiscuous mode [ 924.737237][T15706] macvtap1: entered allmulticast mode [ 924.745298][T15706] batadv0: entered allmulticast mode [ 924.766500][T15706] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 924.784946][T15708] batadv0: left allmulticast mode [ 924.792897][T15708] batadv0: left promiscuous mode [ 925.330975][T15718] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2495'. [ 925.546088][T15722] netlink: zone id is out of range [ 925.669161][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 925.863216][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.893699][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.924472][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.992026][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.037252][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.075710][ T10] usb 5-1: config 0 descriptor?? [ 926.695448][ T10] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 926.735837][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 926.970461][T15731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 927.546518][T15737] wg1: left promiscuous mode [ 927.574681][T15737] wg1: left allmulticast mode [ 927.672047][T15737] macsec0: left promiscuous mode [ 927.703833][T15737] macvlan2: left allmulticast mode [ 927.712109][T15737] ip6erspan0: left promiscuous mode [ 928.047946][ T24] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 928.157956][ T10] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 928.213656][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 928.253869][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 928.286926][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.307976][ T10] usb 5-1: device descriptor read/64, error -32 [ 928.313753][ T24] usb 6-1: Product: syz [ 928.338345][ T24] usb 6-1: Manufacturer: syz [ 928.347906][ T24] usb 6-1: SerialNumber: syz [ 928.359039][ T24] usb 6-1: config 0 descriptor?? [ 928.548006][ T10] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 928.608026][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 928.741048][T15743] loop2: detected capacity change from 0 to 7 [ 928.798155][T15743] loop2: [POWERTEC] p1 p2 p3 [ 928.807581][T15743] loop2: p1 start 1600481121 is beyond EOD, truncated [ 928.822020][T15743] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 928.833378][T15743] loop2: p3 start 4294967295 is beyond EOD, truncated [ 928.868299][ T10] usb 5-1: device descriptor read/64, error -32 [ 928.986300][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 929.108151][ T10] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 929.138598][ T10] usb 5-1: device descriptor read/8, error -32 [ 929.388320][ T10] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 929.460751][ T10] usb 5-1: device descriptor read/8, error -32 [ 929.578182][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 929.611250][T15747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 929.646896][T11630] usb 5-1: USB disconnect, device number 55 [ 929.800904][T11630] raw-gadget.0 gadget.4: failed to queue reset event [ 929.922060][T11630] raw-gadget.0 gadget.4: failed to queue resume event [ 929.940224][T15716] raw-gadget.0 gadget.4: failed to queue suspend event [ 929.943217][T11630] raw-gadget.0 gadget.4: failed to queue suspend event [ 929.970151][T15716] raw-gadget.0 gadget.4: failed to queue disconnect event [ 930.064566][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 930.067632][T11630] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 930.081865][ T24] usb 6-1: USB disconnect, device number 65 [ 930.974360][T15771] netlink: 'syz.2.2506': attribute type 27 has an invalid length. [ 931.006143][T15771] ip6erspan0: left promiscuous mode [ 931.063910][T15771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.070650][T11630] usb 5-1: device descriptor read/64, error -71 [ 931.105698][T15771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.307941][T11630] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 931.708706][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.715094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.785794][T11630] usb 5-1: config 0 has no interfaces? [ 931.800529][T11630] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 931.906015][T11630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.091781][T11630] usb 5-1: Product: syz [ 932.179665][T11630] usb 5-1: Manufacturer: syz [ 932.270028][T11630] usb 5-1: SerialNumber: syz [ 932.286363][T11630] usb 5-1: config 0 descriptor?? [ 932.907983][T11630] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 933.079807][T11630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.092268][T11630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.130107][T11630] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.145707][T15789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 933.155401][T11630] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.166047][T11630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.184262][T11630] usb 6-1: config 0 descriptor?? [ 933.643937][T11630] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 933.720153][T15801] tipc: Enabling of bearer rejected, failed to enable media [ 933.798436][T11630] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 934.756683][T11630] usb 5-1: USB disconnect, device number 57 [ 935.436024][T15815] netlink: 'syz.2.2520': attribute type 16 has an invalid length. [ 935.471396][T15815] netlink: 'syz.2.2520': attribute type 17 has an invalid length. [ 935.670893][ T10] usb 6-1: USB disconnect, device number 66 [ 935.728023][T11630] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 935.879850][T11630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.897171][T11630] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.958852][T11630] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.989459][T11630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.997675][T11630] usb 3-1: Product: syz [ 936.089749][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 936.151905][T11630] usb 3-1: Manufacturer: syz [ 936.161665][T11630] usb 3-1: SerialNumber: syz [ 936.313750][ T10] usb 6-1: config 0 has no interfaces? [ 936.332896][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 936.353407][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.429698][T15827] ip6t_srh: unknown srh match flags B153 [ 936.445375][ T10] usb 6-1: Product: syz [ 936.450556][ T10] usb 6-1: Manufacturer: syz [ 936.455383][ T10] usb 6-1: SerialNumber: syz [ 936.497556][T11630] usb 3-1: 0:2 : does not exist [ 936.512799][T11630] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 936.542616][T11630] usb 3-1: USB disconnect, device number 70 [ 936.579992][ T7238] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 936.619365][ T10] usb 6-1: config 0 descriptor?? [ 936.716762][T15827] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 936.803383][T15827] bond3: entered promiscuous mode [ 936.810759][T15827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.879692][T15830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.887768][T15830] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 936.904505][ T7238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.966864][ T7238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.979364][T15830] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 936.996876][ T7238] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 937.014251][ T7238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.034302][ T7238] usb 5-1: config 0 descriptor?? [ 937.050295][T15830] bond3: (slave ip6gre1): making interface the new active one [ 937.058068][T15830] ip6gre1: entered promiscuous mode [ 937.066037][T15830] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 937.260395][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.803342][ T30] kauditd_printk_skb: 520 callbacks suppressed [ 937.803360][ T30] audit: type=1804 audit(1746497173.449:1853): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2523" name="/newroot/509/file0" dev="tmpfs" ino=2670 res=1 errno=0 [ 937.862815][T15825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.790788][ T7238] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 938.802085][ T7238] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 939.015222][ T7238] cp2112 0003:10C4:EA90.0018: error requesting version [ 939.031748][ T7238] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 939.060500][ T7238] usb 5-1: USB disconnect, device number 58 [ 939.701196][ T5926] usb 6-1: USB disconnect, device number 67 [ 939.780224][T15850] fuse: Unknown parameter 'group_id00000000000000000000' [ 940.126190][T15858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.879145][T15867] netlink: zone id is out of range [ 941.719327][T15873] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2532'. [ 942.018016][T11630] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 942.180000][T11630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 942.222472][T11630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 942.286952][T11630] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 942.395681][T11630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.421727][T11630] usb 2-1: config 0 descriptor?? [ 942.578078][ T5926] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 942.775724][ T5926] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 942.851211][ T5926] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 942.884445][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 942.913925][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.048780][T15885] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 943.160673][ T5926] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.311640][T11630] ath6kl: Failed to submit usb control message: -71 [ 943.320186][T11630] ath6kl: unable to send the bmi data to the device: -71 [ 943.377865][T11630] ath6kl: Unable to send get target info: -71 [ 943.407353][T11630] ath6kl: Failed to init ath6kl core: -71 [ 943.477417][T11630] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 943.607969][T11630] usb 2-1: USB disconnect, device number 70 [ 944.368862][T15901] netlink: 'syz.1.2535': attribute type 10 has an invalid length. [ 944.386414][T15901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2535'. [ 944.425001][T15901] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 946.172094][T11630] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 946.430644][ T7238] usb 1-1: USB disconnect, device number 64 [ 946.491120][T11630] usb 2-1: config 0 has no interfaces? [ 946.647588][T11630] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 946.721776][T11630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.967283][T11630] usb 2-1: Product: syz [ 946.986392][T11630] usb 2-1: Manufacturer: syz [ 947.014505][T11630] usb 2-1: SerialNumber: syz [ 947.249118][T11630] usb 2-1: config 0 descriptor?? [ 949.607926][T11630] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 949.707582][ T24] usb 2-1: USB disconnect, device number 71 [ 949.898703][T11630] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 949.955781][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 949.987959][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.061292][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.098289][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.142076][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.238137][ T7238] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 950.248116][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.261618][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.272742][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.284652][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.294895][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.304278][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.404036][ T7238] usb 6-1: Using ep0 maxpacket: 32 [ 950.419981][ T7238] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 950.449018][ T7238] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 950.461123][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.468025][ T7238] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 950.477602][ T7238] usb 6-1: Product: syz [ 950.484348][ T7238] usb 6-1: Manufacturer: syz [ 950.490757][ T7238] usb 6-1: SerialNumber: syz [ 950.490863][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.512126][ T7238] usb 6-1: config 0 descriptor?? [ 950.517410][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.554256][T15950] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 950.568171][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.596583][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.613601][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.635983][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.645590][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.655063][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.666648][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.674831][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.702393][T11630] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.717080][T11630] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.727686][T11630] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 950.737688][T11630] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 950.746629][T11630] usb 5-1: Product: syz [ 950.752128][T11630] usb 5-1: Manufacturer: syz [ 950.757665][T11630] usb 5-1: SerialNumber: syz [ 950.799383][T11630] usb 5-1: config 0 descriptor?? [ 950.819635][T11630] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 951.074576][T11630] usb 5-1: USB disconnect, device number 59 [ 951.083129][T11630] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 951.826505][ T24] usb 6-1: USB disconnect, device number 68 [ 952.262095][T15966] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.2552'. [ 952.517930][ T5926] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 952.837718][ T5926] usb 6-1: config 0 has no interfaces? [ 952.880187][ T5926] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 953.190041][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.312701][ T5926] usb 6-1: config 0 descriptor?? [ 955.463332][T15993] netlink: 'syz.2.2557': attribute type 16 has an invalid length. [ 955.531438][T15993] netlink: 'syz.2.2557': attribute type 17 has an invalid length. [ 955.552168][T11630] usb 6-1: USB disconnect, device number 69 [ 955.682092][T16000] netlink: 'syz.0.2566': attribute type 5 has an invalid length. [ 956.091556][ T30] audit: type=1326 audit(1746497191.729:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 956.116780][ T30] audit: type=1326 audit(1746497191.729:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 956.184654][ T30] audit: type=1326 audit(1746497191.729:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 956.917921][ T30] audit: type=1326 audit(1746497191.729:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 957.016729][ T30] audit: type=1326 audit(1746497191.729:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 957.147963][ T30] audit: type=1326 audit(1746497191.729:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 957.595983][ T30] audit: type=1326 audit(1746497193.239:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 957.716315][ T30] audit: type=1326 audit(1746497193.239:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16001 comm="syz.5.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x7ffc0000 [ 958.871248][T16024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.022301][T16041] xt_hashlimit: invalid interval [ 959.035014][T16041] netlink: 'syz.1.2565': attribute type 27 has an invalid length. [ 959.043781][T16041] erspan0: left allmulticast mode [ 959.063345][T16041] dummy0: left promiscuous mode [ 959.093366][T16041] vlan3: left promiscuous mode [ 959.099551][T16041] bond1: left promiscuous mode [ 959.108888][T16041] veth5: left promiscuous mode [ 959.125853][T16041] bond3: left promiscuous mode [ 959.136120][T16041] ip6gre1: left promiscuous mode [ 959.177432][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 959.700766][T16046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.159068][T16049] tipc: Enabling of bearer rejected, failed to enable media [ 960.947694][T16056] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[16056] [ 961.848470][T16060] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 961.876360][T16060] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 963.635037][T11630] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 963.680937][ T30] audit: type=1804 audit(1746497199.119:1862): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2572" name="/newroot/551/bus" dev="tmpfs" ino=2855 res=1 errno=0 [ 963.894495][T11630] usb 6-1: config 0 has no interfaces? [ 963.903369][T11630] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 963.912924][T11630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.927956][T11630] usb 6-1: Product: syz [ 963.932154][T11630] usb 6-1: Manufacturer: syz [ 963.936763][T11630] usb 6-1: SerialNumber: syz [ 964.249789][T11630] usb 6-1: config 0 descriptor?? [ 965.303685][T16098] netlink: 'syz.0.2578': attribute type 12 has an invalid length. [ 966.278423][T11630] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 966.636610][T11630] usb 3-1: config 0 has no interfaces? [ 966.645841][T11630] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 966.665256][T11630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.718200][T11630] usb 3-1: Product: syz [ 966.728058][T11630] usb 3-1: Manufacturer: syz [ 966.773326][T11630] usb 3-1: SerialNumber: syz [ 966.919051][T11630] usb 3-1: config 0 descriptor?? [ 967.497418][ T5926] usb 6-1: USB disconnect, device number 70 [ 967.618076][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 967.912705][ T24] usb 5-1: config 0 has no interfaces? [ 967.984124][T16111] input: syz1 as /devices/virtual/input/input57 [ 968.014650][ T5926] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 968.097292][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 968.152282][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.169007][ T24] usb 5-1: Product: syz [ 968.177146][ T24] usb 5-1: Manufacturer: syz [ 968.187093][ T24] usb 5-1: SerialNumber: syz [ 968.212849][ T24] usb 5-1: config 0 descriptor?? [ 968.221812][ T5926] usb 1-1: not running at top speed; connect to a high speed hub [ 968.233826][ T5926] usb 1-1: config 1 interface 0 has no altsetting 0 [ 968.248859][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 968.258953][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.305981][ T5926] usb 1-1: Product: syz [ 968.328884][ T5926] usb 1-1: Manufacturer: syz [ 968.341563][ T5926] usb 1-1: SerialNumber: syz [ 968.695231][T16112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.705408][T16112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.277641][ T24] usb 3-1: USB disconnect, device number 71 [ 971.014893][T16122] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 971.241250][T11630] usb 5-1: USB disconnect, device number 60 [ 972.026914][T16128] xt_hashlimit: invalid interval [ 972.036460][T16128] netlink: 'syz.4.2584': attribute type 27 has an invalid length. [ 972.068640][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'. [ 972.200597][ T5926] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 972.286330][ T5926] usb 1-1: USB disconnect, device number 65 [ 972.311313][ T5926] usblp0: removed [ 972.946256][T16131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2585'. [ 973.884185][ T30] audit: type=1326 audit(1746497209.529:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.5.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x0 [ 973.967952][ T30] audit: type=1326 audit(1746497209.589:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16139 comm="syz.5.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a81b8e969 code=0x0 [ 974.117973][T15828] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 974.272135][T15828] usb 3-1: config 0 has no interfaces? [ 974.285367][T15828] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 974.344352][T15828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.366487][T15828] usb 3-1: Product: syz [ 974.377467][T15828] usb 3-1: Manufacturer: syz [ 974.393822][T15828] usb 3-1: SerialNumber: syz [ 974.718428][T15828] usb 3-1: config 0 descriptor?? [ 975.165445][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 975.471826][T16162] misc userio: Invalid payload size [ 976.227515][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2590'. [ 977.577576][ T5926] usb 3-1: USB disconnect, device number 72 [ 977.895347][T16177] input: syz1 as /devices/virtual/input/input58 [ 978.238314][ T24] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 978.958109][ T24] usb 6-1: config 0 has no interfaces? [ 978.993131][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 979.099632][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.126142][ T24] usb 6-1: Product: syz [ 979.147873][ T24] usb 6-1: Manufacturer: syz [ 979.160923][ T24] usb 6-1: SerialNumber: syz [ 979.188385][ T24] usb 6-1: config 0 descriptor?? [ 979.297953][T15828] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 979.458040][T15828] usb 1-1: Using ep0 maxpacket: 32 [ 980.053888][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.062458][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 980.082442][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.127662][T15828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 980.393230][T15828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 980.408371][ T24] usb 5-1: config 0 has no interfaces? [ 980.438110][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 980.448011][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.474732][ T24] usb 5-1: Product: syz [ 980.489160][ T24] usb 5-1: Manufacturer: syz [ 980.495111][ T24] usb 5-1: SerialNumber: syz [ 980.514804][ T24] usb 5-1: config 0 descriptor?? [ 980.569879][T15828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 980.622873][T15828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.668764][T15828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.723889][T15828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.793285][T16194] vlan0: entered promiscuous mode [ 980.809097][T16194] dummy0: entered promiscuous mode [ 980.872939][T15828] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 980.897675][T15828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.917021][T15828] usb 1-1: Product: syz [ 980.932825][ T5926] usb 5-1: USB disconnect, device number 61 [ 980.952900][T15828] usb 1-1: Manufacturer: syz [ 980.957576][T15828] usb 1-1: SerialNumber: syz [ 981.008059][T15828] usb 1-1: config 0 descriptor?? [ 981.111416][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 981.353899][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.369366][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.382758][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 981.396782][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.409720][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.430380][ T24] usb 2-1: config 0 descriptor?? [ 981.657046][T11630] usb 6-1: USB disconnect, device number 71 [ 982.050021][ T24] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 982.085535][ T24] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 982.494496][ T24] usb 2-1: USB disconnect, device number 72 [ 982.572336][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2602'. [ 982.716461][T11630] usb 1-1: USB disconnect, device number 66 [ 983.168514][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 983.237908][ T7209] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 983.735882][ T24] usb 3-1: config 0 has no interfaces? [ 983.823593][T11630] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 983.841385][ T7209] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 983.878027][ T7209] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 983.897536][ T7209] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 983.917185][ T7209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 983.940398][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 983.950103][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.969279][ T24] usb 3-1: Product: syz [ 983.983831][ T7209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 983.998294][ T24] usb 3-1: Manufacturer: syz [ 984.002925][ T24] usb 3-1: SerialNumber: syz [ 984.044525][ T24] usb 3-1: config 0 descriptor?? [ 984.054697][ T7209] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 984.075036][T11630] usb 1-1: config 0 has no interfaces? [ 984.091144][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 984.112306][T11630] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 984.134167][ T7209] usb 6-1: Product: syz [ 984.213293][ T7209] usb 6-1: Manufacturer: syz [ 984.249214][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.287497][T11630] usb 1-1: Product: syz [ 984.306297][T11630] usb 1-1: Manufacturer: syz [ 984.346147][ T7209] cdc_wdm 6-1:1.0: skipping garbage [ 984.368835][T11630] usb 1-1: SerialNumber: syz [ 984.392040][ T7209] cdc_wdm 6-1:1.0: skipping garbage [ 984.421463][ T7209] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 984.435126][T11630] usb 1-1: config 0 descriptor?? [ 984.534514][ T7209] cdc_wdm 6-1:1.0: Unknown control protocol [ 985.155929][T16229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 986.974942][T11630] usb 6-1: USB disconnect, device number 72 [ 987.244295][T16243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.486900][ T24] usb 3-1: USB disconnect, device number 73 [ 987.577944][ T7209] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 987.737893][ T7209] usb 6-1: Using ep0 maxpacket: 32 [ 987.747425][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 987.807917][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 987.838477][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 987.859835][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 987.894056][ T24] usb 1-1: USB disconnect, device number 67 [ 987.920619][ T7209] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 987.949984][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.038140][ T7209] usb 6-1: Product: syz [ 988.052008][ T7209] usb 6-1: Manufacturer: syz [ 988.056775][ T7209] usb 6-1: SerialNumber: syz [ 988.064628][ T7209] usb 6-1: config 0 descriptor?? [ 988.079224][ T7209] cypress_m8 6-1:0.0: HID->COM RS232 Adapter converter detected [ 988.094430][ T7209] cyphidcom ttyUSB0: required endpoint is missing [ 988.335435][T16243] x_tables: ip_tables: udp match: only valid for protocol 17 [ 988.798587][T11630] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 989.025545][T11630] usb 2-1: config 0 has no interfaces? [ 989.038755][T11630] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 989.048743][T11630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.340313][T11630] usb 2-1: Product: syz [ 989.357237][T11630] usb 2-1: Manufacturer: syz [ 989.367968][T11630] usb 2-1: SerialNumber: syz [ 989.386036][T11630] usb 2-1: config 0 descriptor?? [ 989.685777][T16264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.789061][T16264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.622859][T16266] netlink: 'syz.2.2613': attribute type 4 has an invalid length. [ 990.635089][T16266] netlink: 'syz.2.2613': attribute type 4 has an invalid length. [ 990.672400][T16266] binder: 16265:16266 ioctl 4018620d 0 returned -22 [ 990.716498][T16266] binder: 16265:16266 ioctl c0306201 2000000003c0 returned -14 [ 991.125301][T16269] binder: 16268:16269 ioctl 4018620d 0 returned -22 [ 991.344284][T11630] usb 6-1: USB disconnect, device number 73 [ 991.364594][T11630] cypress_m8 6-1:0.0: device disconnected [ 992.584608][ T24] usb 2-1: USB disconnect, device number 73 [ 993.148072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.162323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.173180][T16288] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20006 [ 993.189799][T16290] netlink: 'syz.4.2618': attribute type 16 has an invalid length. [ 993.197732][T16290] netlink: 'syz.4.2618': attribute type 17 has an invalid length. [ 993.230213][ T7209] IPVS: starting estimator thread 0... [ 993.242266][T16288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 993.368106][T16291] IPVS: using max 38 ests per chain, 91200 per kthread [ 993.468013][T11630] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 993.649747][T11630] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.660266][T11630] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.782060][T11630] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.855970][T11630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.926375][T11630] usb 5-1: Product: syz [ 993.931409][T11630] usb 5-1: Manufacturer: syz [ 993.939771][T11630] usb 5-1: SerialNumber: syz [ 994.160895][T11630] usb 5-1: 0:2 : does not exist [ 994.213325][T11630] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 994.249676][T11630] usb 5-1: USB disconnect, device number 62 [ 994.292970][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.276260][ T7209] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 995.287624][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2623'. [ 995.310339][T16311] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2623'. [ 995.324602][T16311] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 995.481386][T16314] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 995.562844][T16311] bond3: entered allmulticast mode [ 995.569742][T16311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 995.621092][ T7209] usb 1-1: config 0 has no interfaces? [ 995.762701][ T7209] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 995.778155][ T7209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.786211][ T7209] usb 1-1: Product: syz [ 995.795788][ T7209] usb 1-1: Manufacturer: syz [ 995.800875][ T7209] usb 1-1: SerialNumber: syz [ 995.813001][ T7209] usb 1-1: config 0 descriptor?? [ 996.176991][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.226881][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.784886][T16324] program syz.4.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.493581][T11630] usb 1-1: USB disconnect, device number 68 [ 998.797953][ T7238] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 999.166056][T16348] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2632'. [ 999.199763][ T7238] usb 3-1: config 0 has no interfaces? [ 999.260845][T16348] caif0: entered allmulticast mode [ 999.379479][ T7238] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 999.416008][ T7238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.460605][ T7238] usb 3-1: Product: syz [ 999.488814][T16352] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2632'. [ 999.503888][ T7238] usb 3-1: Manufacturer: syz [ 999.527910][ T7238] usb 3-1: SerialNumber: syz [ 999.537331][T16352] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 999.654888][ T7238] usb 3-1: config 0 descriptor?? [ 1001.298238][T16368] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.726041][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 1001.748716][T16373] vlan4: entered allmulticast mode [ 1001.753970][T16373] bridge_slave_0: entered allmulticast mode [ 1001.816598][ T7238] usb 3-1: USB disconnect, device number 74 [ 1002.037479][T16376] loop2: detected capacity change from 0 to 7 [ 1002.127747][T16376] Dev loop2: unable to read RDB block 7 [ 1002.190042][T16376] loop2: AHDI p3 [ 1002.260065][T16376] loop2: partition table partially beyond EOD, truncated [ 1002.332838][ T5919] Dev loop2: unable to read RDB block 7 [ 1002.338700][ T5919] loop2: AHDI p3 [ 1002.345987][ T5919] loop2: partition table partially beyond EOD, truncated [ 1002.423241][T16379] Dev loop2: unable to read RDB block 7 [ 1002.429129][T16379] loop2: AHDI p3 [ 1002.479105][T16379] loop2: partition table partially beyond EOD, truncated [ 1003.886725][T16389] netlink: 'syz.2.2641': attribute type 16 has an invalid length. [ 1003.917925][T16389] netlink: 'syz.2.2641': attribute type 17 has an invalid length. [ 1004.065601][T16380] syz.0.2639: attempt to access beyond end of device [ 1004.065601][T16380] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1004.178107][ T7209] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1004.359897][ T7209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.371019][ T7209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.402898][ T7209] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.427988][ T7209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.446327][ T7209] usb 3-1: Product: syz [ 1004.450697][ T7209] usb 3-1: Manufacturer: syz [ 1004.455331][ T7209] usb 3-1: SerialNumber: syz [ 1004.501863][T16394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1004.829301][ T7209] usb 3-1: 0:2 : does not exist [ 1004.851526][ T7209] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1004.949075][ T5926] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1005.097650][T16408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1005.212932][T16411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1005.235392][ T5926] usb 6-1: config 0 has no interfaces? [ 1005.284538][ T5926] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1005.298470][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.338085][ T7209] usb 3-1: USB disconnect, device number 75 [ 1005.351599][ T5926] usb 6-1: Product: syz [ 1005.475206][ T5926] usb 6-1: Manufacturer: syz [ 1005.572989][ T5926] usb 6-1: SerialNumber: syz [ 1005.591042][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.619589][ T5926] usb 6-1: config 0 descriptor?? [ 1006.187952][ T7238] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1006.499574][ T7238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.647901][ T7238] usb 3-1: config 0 has no interfaces? [ 1006.661580][ T7238] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1006.687866][ T7238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.718572][ T7238] usb 3-1: config 0 descriptor?? [ 1007.244215][T16421] pim6reg9: entered allmulticast mode [ 1008.875343][ T5926] usb 6-1: USB disconnect, device number 74 [ 1009.517954][ T5926] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1009.662559][ T7209] usb 3-1: USB disconnect, device number 76 [ 1009.669816][T11630] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1009.846060][ T5926] usb 1-1: config 0 has no interfaces? [ 1009.877675][ T5926] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1009.901969][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.964779][ T5926] usb 1-1: Product: syz [ 1009.978135][ T5926] usb 1-1: Manufacturer: syz [ 1009.988173][ T5926] usb 1-1: SerialNumber: syz [ 1010.030770][T11630] usb 6-1: Using ep0 maxpacket: 8 [ 1010.053790][T11630] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1010.071649][ T5926] usb 1-1: config 0 descriptor?? [ 1010.080284][T11630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.108422][T11630] usb 6-1: Product: syz [ 1010.125323][T11630] usb 6-1: Manufacturer: syz [ 1010.160758][T11630] usb 6-1: SerialNumber: syz [ 1010.213219][T11630] usb 6-1: config 0 descriptor?? [ 1010.265188][T11630] hub 6-1:0.0: bad descriptor, ignoring hub [ 1010.389129][T11630] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1010.539393][T16444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.549512][T16444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.963540][T11630] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1011.190426][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2657'. [ 1013.002875][ T7209] usb 1-1: USB disconnect, device number 69 [ 1013.329671][T11630] usb 6-1: USB disconnect, device number 75 [ 1013.505616][T16478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1013.716451][T16491] netlink: 'syz.5.2661': attribute type 9 has an invalid length. [ 1013.725243][T16491] netlink: 'syz.5.2661': attribute type 6 has an invalid length. [ 1013.748222][ T30] audit: type=1326 audit(1746497249.389:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.5.2661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a81b8e969 code=0x0 [ 1013.770066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.790269][T16492] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2663'. [ 1014.235537][T11630] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1014.620745][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.664354][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.707892][T11630] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1014.847596][T11630] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1014.937973][T11630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.962735][T11630] usb 5-1: config 0 descriptor?? [ 1015.382833][T11630] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1015.782632][T11630] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1016.058598][ T30] audit: type=1326 audit(1746497251.709:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.068085][ T7209] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1016.150421][ T30] audit: type=1326 audit(1746497251.739:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.172858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.182441][ T30] audit: type=1326 audit(1746497251.739:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.204908][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.247321][ T30] audit: type=1326 audit(1746497251.739:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.269804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.296923][ T30] audit: type=1326 audit(1746497251.749:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.319534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.348207][T11630] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1016.374036][ T30] audit: type=1326 audit(1746497251.749:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc518e969 code=0x7ffc0000 [ 1016.497591][ T7209] usb 6-1: config 0 has no interfaces? [ 1016.508041][T11630] usb 1-1: Using ep0 maxpacket: 32 [ 1016.508076][ T7209] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1016.508103][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.533392][T11630] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 1016.543261][ T7209] usb 6-1: Product: syz [ 1016.549202][ T7209] usb 6-1: Manufacturer: syz [ 1016.552353][T11630] usb 1-1: config 0 has no interface number 0 [ 1016.554133][ T7209] usb 6-1: SerialNumber: syz [ 1016.563316][ T30] audit: type=1326 audit(1746497251.749:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3dc518d2d0 code=0x7ffc0000 [ 1016.587179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.660406][ T7209] usb 6-1: config 0 descriptor?? [ 1016.676935][T11630] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1016.745371][T11630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.801454][ T30] audit: type=1326 audit(1746497251.749:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3dc518e56b code=0x7ffc0000 [ 1016.823842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.830487][T11630] usb 1-1: Product: syz [ 1016.843862][T11630] usb 1-1: Manufacturer: syz [ 1016.863513][T11630] usb 1-1: SerialNumber: syz [ 1016.987964][ T7209] IPVS: starting estimator thread 0... [ 1017.050426][T11630] usb 1-1: config 0 descriptor?? [ 1017.055755][ T30] audit: type=1326 audit(1746497251.749:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16508 comm="syz.0.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3dc518e56b code=0x7ffc0000 [ 1017.122836][T16516] IPVS: using max 27 ests per chain, 64800 per kthread [ 1017.721004][T11630] kaweth 1-1:0.235: Firmware present in device. [ 1017.890795][T11630] kaweth 1-1:0.235: Statistics collection: 0 [ 1017.918040][T11630] kaweth 1-1:0.235: Multicast filter limit: 0 [ 1017.937172][T11630] kaweth 1-1:0.235: MTU: 0 [ 1017.942112][T11630] kaweth 1-1:0.235: Read MAC address 00:00:00:00:00:00 [ 1018.068685][ T7238] usb 5-1: USB disconnect, device number 63 [ 1018.618484][ T7209] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1018.649877][T11630] kaweth 1-1:0.235: Error setting receive filter [ 1018.656450][T11630] kaweth 1-1:0.235: probe with driver kaweth failed with error -5 [ 1018.681013][T11630] usb 1-1: USB disconnect, device number 70 [ 1018.808054][ T7209] usb 5-1: Using ep0 maxpacket: 16 [ 1018.839879][ T7209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.851909][ T7209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.884842][ T7209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1018.918902][ T7209] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1018.943654][ T7209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.965730][ T7209] usb 5-1: config 0 descriptor?? [ 1019.007741][T16533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1019.757694][ T5926] usb 6-1: USB disconnect, device number 76 [ 1019.996046][ T7209] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 1020.061049][ T7209] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 1020.071637][ T7209] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 1020.087166][ T7209] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 1020.095007][ T7209] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 1020.118286][ T7209] input: HID 0955:7214 Haptics as /devices/virtual/input/input61 [ 1020.184612][ T7209] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 1020.236595][T16539] netlink: 'syz.1.2672': attribute type 13 has an invalid length. [ 1020.268608][T16527] random: crng reseeded on system resumption [ 1020.354392][ T7209] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1021.046408][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.888025][T16220] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1021.914129][T16220] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1021.932941][T16220] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1021.978228][T16220] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1022.038439][ T24] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 1022.178024][ T24] usb 5-1: device descriptor read/64, error -32 [ 1022.382712][ T7238] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1022.401828][T16539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1022.561551][ T7238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1022.699190][ T7238] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1022.720976][ T24] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 1022.824298][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 1022.840411][ T7238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.848410][ T5926] usb 5-1: USB disconnect, device number 64 [ 1022.956039][ T7238] usb 3-1: config 0 descriptor?? [ 1022.973143][T16556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1023.047919][ T5926] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1023.254216][ T5926] usb 5-1: config 0 has no interfaces? [ 1023.301010][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1023.341811][ T5926] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1023.356325][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.366754][T16572] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2679'. [ 1023.399899][ T5926] usb 5-1: Product: syz [ 1023.406989][ T5926] usb 5-1: Manufacturer: syz [ 1023.414686][ T5926] usb 5-1: SerialNumber: syz [ 1023.435297][ T5926] usb 5-1: config 0 descriptor?? [ 1023.477953][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1023.493751][ T7238] hid-multitouch 0003:0EEF:72C4.001C: hidraw0: USB HID v1.01 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1023.505362][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1023.560384][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.634086][T11630] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1023.671558][ T7238] usb 3-1: USB disconnect, device number 77 [ 1023.793243][ T24] usb 1-1: Product: syz [ 1023.806675][ T24] usb 1-1: Manufacturer: syz [ 1023.823111][ T24] usb 1-1: SerialNumber: syz [ 1023.871218][T11630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.893684][T11630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.906838][ T24] usb 1-1: config 0 descriptor?? [ 1023.935657][T11630] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1023.970651][T11630] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1023.986816][T11630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.046527][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 1024.076307][T11630] usb 6-1: config 0 descriptor?? [ 1024.122026][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1024.615040][T11630] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 1024.793300][T16578] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2680'. [ 1024.881604][T11630] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1025.168075][ T7238] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1025.423448][ T7238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.447714][ T7238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.485111][ T7238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1025.550901][ T7238] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1025.594532][ T7238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.796219][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1025.819876][ T7238] usb 3-1: config 0 descriptor?? [ 1025.832778][ T24] usb 1-1: USB disconnect, device number 71 [ 1025.937876][ T5926] usb 6-1: reset high-speed USB device number 77 using dummy_hcd [ 1026.270960][ T7238] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 1026.282330][ T24] usb 5-1: USB disconnect, device number 65 [ 1026.331459][T16579] syz.1.2681: attempt to access beyond end of device [ 1026.331459][T16579] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1026.349304][ T7238] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1026.518681][T16579] random: crng reseeded on system resumption [ 1026.763071][ T7209] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1026.995589][ T7209] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.93 [ 1027.570428][ T7209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.582510][ T7209] usb 1-1: Product: syz [ 1027.586708][ T7209] usb 1-1: Manufacturer: syz [ 1027.597904][ T7209] usb 1-1: SerialNumber: syz [ 1027.615290][ T7209] usb 1-1: config 0 descriptor?? [ 1027.631948][ T7209] usb 1-1: interface 1 not found [ 1027.921379][ T7238] usb 1-1: USB disconnect, device number 72 [ 1028.352867][ T7238] usb 3-1: USB disconnect, device number 78 [ 1028.710502][T16220] usb 6-1: USB disconnect, device number 77 [ 1029.149115][T16593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.697219][T16610] netlink: 'syz.0.2686': attribute type 10 has an invalid length. [ 1029.705377][T16610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1029.780415][T16610] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1030.119679][T16614] netlink: 'syz.1.2688': attribute type 16 has an invalid length. [ 1030.128130][T16614] netlink: 'syz.1.2688': attribute type 17 has an invalid length. [ 1030.248067][T16220] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1030.362937][T16626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1030.507896][T16220] usb 5-1: Using ep0 maxpacket: 8 [ 1030.523652][T16220] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.569382][T16220] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.587588][T16220] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.600973][T16220] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.611414][T16220] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.625165][T16220] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.634851][T16220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.648010][T11630] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1030.862923][T11630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.876616][T16220] usb 5-1: usb_control_msg returned -32 [ 1030.885969][T16220] usbtmc 5-1:16.0: can't read capabilities [ 1030.961641][T11630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.984014][T11630] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1030.993791][T11630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.010107][T11630] usb 2-1: Product: syz [ 1031.021417][T11630] usb 2-1: Manufacturer: syz [ 1031.034164][T11630] usb 2-1: SerialNumber: syz [ 1031.277214][T11630] usb 2-1: 0:2 : does not exist [ 1031.297986][T15829] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1031.307207][T11630] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1031.341324][T11630] usb 2-1: USB disconnect, device number 74 [ 1031.410158][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.453873][T15829] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1031.463589][T15829] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1031.503859][T15829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1031.526402][T15829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1031.552332][T15829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1031.583339][T15829] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1031.606615][T15829] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1031.634770][T15829] usb 1-1: Product: syz [ 1031.639122][T15829] usb 1-1: Manufacturer: syz [ 1031.664735][T15829] cdc_wdm 1-1:1.0: skipping garbage [ 1031.674117][T15829] cdc_wdm 1-1:1.0: skipping garbage [ 1031.688294][T15829] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1031.694269][T15829] cdc_wdm 1-1:1.0: Unknown control protocol [ 1031.969668][T15829] usb 1-1: USB disconnect, device number 73 [ 1032.844239][T16220] usb 5-1: USB disconnect, device number 66 [ 1034.228293][T16220] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1034.477911][T16220] usb 1-1: Using ep0 maxpacket: 16 [ 1034.519083][T16220] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1034.537094][T16220] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1034.637695][T16220] usb 1-1: string descriptor 0 read error: -22 [ 1034.656027][T16220] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1034.862238][T16220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.056865][T15829] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1035.467043][T15829] usb 3-1: config 0 has no interfaces? [ 1035.481595][T15829] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1035.490846][T15829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.499712][T15829] usb 3-1: Product: syz [ 1035.503903][T15829] usb 3-1: Manufacturer: syz [ 1035.548063][T15829] usb 3-1: SerialNumber: syz [ 1035.584048][T15829] usb 3-1: config 0 descriptor?? [ 1037.065443][ T5852] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1037.170821][T16697] misc userio: Invalid payload size [ 1037.196141][T16688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1037.587910][T16623] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1037.671917][T16220] usb 1-1: USB disconnect, device number 74 [ 1037.818010][T16623] usb 6-1: Using ep0 maxpacket: 16 [ 1037.835655][T16623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1037.998049][T16623] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1038.053827][T16623] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1038.126724][T16623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.235245][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2704'. [ 1038.255864][T16623] usb 6-1: Product: syz [ 1038.266017][T16623] usb 6-1: Manufacturer: syz [ 1038.370611][T16623] usb 6-1: SerialNumber: syz [ 1038.392213][T16623] usb 6-1: config 0 descriptor?? [ 1038.399251][T16696] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1038.419109][T16623] hub 6-1:0.0: bad descriptor, ignoring hub [ 1038.497855][T16623] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1038.526357][T16623] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input62 [ 1038.832742][T16711] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1038.892017][T15829] usb 3-1: USB disconnect, device number 79 [ 1039.057986][T16711] caif0: entered allmulticast mode [ 1039.179464][T16722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1039.196405][T16722] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1039.868066][T11630] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1040.033395][T11630] usb 3-1: config 0 has no interfaces? [ 1040.045268][T11630] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1040.062290][T11630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.110900][T11630] usb 3-1: Product: syz [ 1040.136428][T11630] usb 3-1: Manufacturer: syz [ 1040.162843][T11630] usb 3-1: SerialNumber: syz [ 1040.352596][T11630] usb 3-1: config 0 descriptor?? [ 1040.414192][T16691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.466126][T16730] loop2: detected capacity change from 0 to 7 [ 1040.517453][T11630] usb 6-1: USB disconnect, device number 78 [ 1040.580292][T16730] Dev loop2: unable to read RDB block 7 [ 1040.585951][T16730] loop2: unable to read partition table [ 1040.638948][T16730] loop2: partition table beyond EOD, truncated [ 1040.663398][T16730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1042.992774][T11630] usb 3-1: USB disconnect, device number 80 [ 1043.068973][T16756] block device autoloading is deprecated and will be removed. [ 1043.078455][T16756] syz.5.2713: attempt to access beyond end of device [ 1043.078455][T16756] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1043.279650][T16759] netlink: 'syz.2.2714': attribute type 16 has an invalid length. [ 1043.294620][T16759] netlink: 'syz.2.2714': attribute type 17 has an invalid length. [ 1043.466374][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1043.466392][ T30] audit: type=1326 audit(1746497279.109:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.562253][ T30] audit: type=1326 audit(1746497279.149:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.588026][T11630] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1043.598559][ T30] audit: type=1326 audit(1746497279.149:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.627627][ T30] audit: type=1326 audit(1746497279.149:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.721792][ T30] audit: type=1326 audit(1746497279.149:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.759622][ T30] audit: type=1326 audit(1746497279.159:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.783201][T15829] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1043.791420][T11630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.806710][T11630] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1043.817000][ T30] audit: type=1326 audit(1746497279.159:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.842455][T11630] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1043.856161][T11630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.864680][T11630] usb 3-1: Product: syz [ 1043.873515][T11630] usb 3-1: Manufacturer: syz [ 1043.882796][ T30] audit: type=1326 audit(1746497279.159:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.909806][T11630] usb 3-1: SerialNumber: syz [ 1043.936559][ T30] audit: type=1326 audit(1746497279.159:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1043.959545][T15829] usb 5-1: Using ep0 maxpacket: 16 [ 1044.025696][ T30] audit: type=1326 audit(1746497279.159:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78838e969 code=0x7ffc0000 [ 1044.136967][T11630] usb 3-1: 0:2 : does not exist [ 1044.254789][T11630] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1044.400574][T11630] usb 3-1: USB disconnect, device number 81 [ 1044.411632][T16766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1045.015983][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1046.282772][T16783] ------------[ cut here ]------------ [ 1046.282896][T16783] WARNING: CPU: 0 PID: 16783 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 1046.283004][T16783] Modules linked in: [ 1046.283093][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.1.2721 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1046.283156][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1046.283177][T16783] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1046.283209][T16783] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 40 3d fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 da 4a db fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1046.283231][T16783] RSP: 0018:ffffc90004ca6fe8 EFLAGS: 00010287 [ 1046.283255][T16783] RAX: ffffffff85e48576 RBX: ffffc90004ca7160 RCX: 0000000000080000 [ 1046.283298][T16783] RDX: ffffc9000eab3000 RSI: 00000000000018dd RDI: 00000000000018de [ 1046.283316][T16783] RBP: 1ffff92000994e2c R08: ffffffff8f7ed977 R09: 1ffffffff1efdb2e [ 1046.283335][T16783] R10: dffffc0000000000 R11: ffffffff85e48440 R12: 000000f395c9ce0d [ 1046.283353][T16783] R13: dffffc0000000000 R14: ffff888141b54028 R15: 000000f395c9ce0d [ 1046.283375][T16783] FS: 00007f0de53446c0(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 1046.283396][T16783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.283440][T16783] CR2: 0000000000000000 CR3: 0000000069102000 CR4: 00000000003526f0 [ 1046.283461][T16783] Call Trace: [ 1046.283476][T16783] [ 1046.283489][T16783] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1046.283523][T16783] drm_crtc_next_vblank_start+0x223/0x470 [ 1046.283551][T16783] ? ktime_get+0x3e/0x1f0 [ 1046.283603][T16783] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1046.283631][T16783] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1046.283657][T16783] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.283689][T16783] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1046.283755][T16783] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1046.283784][T16783] ? read_tsc+0xc/0x20 [ 1046.283807][T16783] ? read_tsc+0x9/0x20 [ 1046.283826][T16783] ? ktime_get+0x1cb/0x1f0 [ 1046.283853][T16783] commit_tail+0x79/0x3a0 [ 1046.283912][T16783] drm_atomic_helper_commit+0xa6b/0xb10 [ 1046.283948][T16783] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1046.283974][T16783] drm_atomic_commit+0x25f/0x2c0 [ 1046.284004][T16783] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1046.284050][T16783] ? __pfx___drm_printfn_info+0x10/0x10 [ 1046.284107][T16783] drm_client_modeset_commit_atomic+0x620/0x760 [ 1046.284190][T16783] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1046.284223][T16783] ? trace_contention_end+0x39/0x120 [ 1046.284290][T16783] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1046.284353][T16783] drm_client_modeset_commit+0x4a/0x70 [ 1046.284388][T16783] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 1046.284420][T16783] drm_fb_helper_set_par+0xaf/0x100 [ 1046.284452][T16783] fb_set_var+0x818/0xf60 [ 1046.284516][T16783] ? __pfx_fb_set_var+0x10/0x10 [ 1046.284556][T16783] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 1046.284589][T16783] ? soft_cursor+0xb1b/0xd80 [ 1046.284671][T16783] ? fbcon_switch+0x6bf/0x1fc0 [ 1046.284703][T16783] fbcon_switch+0x759/0x1fc0 [ 1046.284743][T16783] ? __pfx_fbcon_switch+0x10/0x10 [ 1046.284810][T16783] ? __pfx_hide_cursor+0x10/0x10 [ 1046.284851][T16783] ? is_console_locked+0x9/0x20 [ 1046.284873][T16783] ? set_origin+0x346/0x480 [ 1046.284932][T16783] redraw_screen+0x56a/0xe90 [ 1046.284976][T16783] ? __pfx_redraw_screen+0x10/0x10 [ 1046.285021][T16783] do_fb_ioctl+0x6fd/0x750 [ 1046.285079][T16783] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1046.285141][T16783] ? __lock_acquire+0xaac/0xd20 [ 1046.285226][T16783] ? __fget_files+0x2a/0x420 [ 1046.285265][T16783] ? __fget_files+0x3a0/0x420 [ 1046.285294][T16783] ? __fget_files+0x2a/0x420 [ 1046.285351][T16783] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1046.285382][T16783] ? __pfx_fb_ioctl+0x10/0x10 [ 1046.285412][T16783] __se_sys_ioctl+0xf9/0x170 [ 1046.285440][T16783] do_syscall_64+0xf6/0x210 [ 1046.285492][T16783] ? clear_bhb_loop+0x45/0xa0 [ 1046.285522][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.285547][T16783] RIP: 0033:0x7f0de458e969 [ 1046.285581][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.285602][T16783] RSP: 002b:00007f0de5344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.285656][T16783] RAX: ffffffffffffffda RBX: 00007f0de47b6160 RCX: 00007f0de458e969 [ 1046.285675][T16783] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000006 [ 1046.285692][T16783] RBP: 00007f0de4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1046.285709][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.285724][T16783] R13: 0000000000000000 R14: 00007f0de47b6160 R15: 00007f0de48dfa28 [ 1046.285785][T16783] [ 1046.285803][T16783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1046.285820][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.1.2721 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1046.285847][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1046.285861][T16783] Call Trace: [ 1046.285870][T16783] [ 1046.285881][T16783] dump_stack_lvl+0x99/0x250 [ 1046.285913][T16783] ? __asan_memcpy+0x40/0x70 [ 1046.285932][T16783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.285957][T16783] ? __pfx__printk+0x10/0x10 [ 1046.285987][T16783] panic+0x2db/0x790 [ 1046.286017][T16783] ? __pfx_panic+0x10/0x10 [ 1046.286038][T16783] ? show_trace_log_lvl+0x4fb/0x550 [ 1046.286080][T16783] __warn+0x31b/0x4b0 [ 1046.286102][T16783] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1046.286134][T16783] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1046.286156][T16783] report_bug+0x2be/0x4f0 [ 1046.286175][T16783] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1046.286197][T16783] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1046.286218][T16783] ? vkms_get_vblank_timestamp+0x139/0x160 [ 1046.286240][T16783] handle_bug+0x84/0x160 [ 1046.286264][T16783] exc_invalid_op+0x1a/0x50 [ 1046.286286][T16783] asm_exc_invalid_op+0x1a/0x20 [ 1046.286303][T16783] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1046.286325][T16783] Code: 42 80 3c 28 00 74 08 48 89 df e8 74 40 3d fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 da 4a db fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1046.286340][T16783] RSP: 0018:ffffc90004ca6fe8 EFLAGS: 00010287 [ 1046.286356][T16783] RAX: ffffffff85e48576 RBX: ffffc90004ca7160 RCX: 0000000000080000 [ 1046.286372][T16783] RDX: ffffc9000eab3000 RSI: 00000000000018dd RDI: 00000000000018de [ 1046.286384][T16783] RBP: 1ffff92000994e2c R08: ffffffff8f7ed977 R09: 1ffffffff1efdb2e [ 1046.286397][T16783] R10: dffffc0000000000 R11: ffffffff85e48440 R12: 000000f395c9ce0d [ 1046.286410][T16783] R13: dffffc0000000000 R14: ffff888141b54028 R15: 000000f395c9ce0d [ 1046.286428][T16783] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1046.286451][T16783] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1046.286478][T16783] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1046.286497][T16783] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1046.286520][T16783] drm_crtc_next_vblank_start+0x223/0x470 [ 1046.286540][T16783] ? ktime_get+0x3e/0x1f0 [ 1046.286561][T16783] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1046.286581][T16783] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1046.286601][T16783] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.286625][T16783] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1046.286652][T16783] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1046.286672][T16783] ? read_tsc+0xc/0x20 [ 1046.286690][T16783] ? read_tsc+0x9/0x20 [ 1046.286704][T16783] ? ktime_get+0x1cb/0x1f0 [ 1046.286724][T16783] commit_tail+0x79/0x3a0 [ 1046.286751][T16783] drm_atomic_helper_commit+0xa6b/0xb10 [ 1046.286777][T16783] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1046.286797][T16783] drm_atomic_commit+0x25f/0x2c0 [ 1046.286819][T16783] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1046.286837][T16783] ? __pfx___drm_printfn_info+0x10/0x10 [ 1046.286877][T16783] drm_client_modeset_commit_atomic+0x620/0x760 [ 1046.286917][T16783] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1046.286942][T16783] ? trace_contention_end+0x39/0x120 [ 1046.286989][T16783] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1046.287020][T16783] drm_client_modeset_commit+0x4a/0x70 [ 1046.287045][T16783] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 1046.287069][T16783] drm_fb_helper_set_par+0xaf/0x100 [ 1046.287091][T16783] fb_set_var+0x818/0xf60 [ 1046.287127][T16783] ? __pfx_fb_set_var+0x10/0x10 [ 1046.287157][T16783] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 1046.287181][T16783] ? soft_cursor+0xb1b/0xd80 [ 1046.287225][T16783] ? fbcon_switch+0x6bf/0x1fc0 [ 1046.287248][T16783] fbcon_switch+0x759/0x1fc0 [ 1046.287278][T16783] ? __pfx_fbcon_switch+0x10/0x10 [ 1046.287312][T16783] ? __pfx_hide_cursor+0x10/0x10 [ 1046.287341][T16783] ? is_console_locked+0x9/0x20 [ 1046.287357][T16783] ? set_origin+0x346/0x480 [ 1046.287385][T16783] redraw_screen+0x56a/0xe90 [ 1046.287417][T16783] ? __pfx_redraw_screen+0x10/0x10 [ 1046.287451][T16783] do_fb_ioctl+0x6fd/0x750 [ 1046.287477][T16783] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1046.287518][T16783] ? __lock_acquire+0xaac/0xd20 [ 1046.287560][T16783] ? __fget_files+0x2a/0x420 [ 1046.287587][T16783] ? __fget_files+0x3a0/0x420 [ 1046.287608][T16783] ? __fget_files+0x2a/0x420 [ 1046.287633][T16783] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1046.287655][T16783] ? __pfx_fb_ioctl+0x10/0x10 [ 1046.287678][T16783] __se_sys_ioctl+0xf9/0x170 [ 1046.287699][T16783] do_syscall_64+0xf6/0x210 [ 1046.287722][T16783] ? clear_bhb_loop+0x45/0xa0 [ 1046.287743][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.287762][T16783] RIP: 0033:0x7f0de458e969 [ 1046.287778][T16783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.287795][T16783] RSP: 002b:00007f0de5344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.287816][T16783] RAX: ffffffffffffffda RBX: 00007f0de47b6160 RCX: 00007f0de458e969 [ 1046.287829][T16783] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000006 [ 1046.287843][T16783] RBP: 00007f0de4610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1046.287855][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.287867][T16783] R13: 0000000000000000 R14: 00007f0de47b6160 R15: 00007f0de48dfa28 [ 1046.287894][T16783] [ 1046.288214][T16783] Kernel Offset: disabled