last executing test programs: 55m12.088451994s ago: executing program 1 (id=636): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20a, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x1}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x40004) r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read(r2, &(0x7f0000000080)=""/167, 0xa7) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x1, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000003208"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 55m10.583333435s ago: executing program 1 (id=639): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x167}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292034a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8e35c0245b618452612d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46789df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c61fae925f3147ee3e72c8aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce2925a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacacc78cb5c8b4f26222883707b61fa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4b97b219628be8cdba7e54d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353dc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0db9afb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35cdfd70fd677bcd396b37c60e439693dcb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac8b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d85b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e06f835663a496857fb6320e5ee9086f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb9098e6db801cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c60040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932489b61634ab53a1e2f3bf56add0", 0xde1}], 0x2}, 0x800) 55m10.3492217s ago: executing program 1 (id=640): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000200)=[0xa9c7, 0xff]) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xc0882) pipe(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)="e1", 0x1, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0xde, 0x9, 0x7}, 0x10) 55m6.556680161s ago: executing program 1 (id=649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) recvmmsg(r2, 0x0, 0x0, 0x40012362, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) getpid() r3 = gettid() write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000180)={0x14}, 0x14) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x8, 0xc74, 0x2, 0xc9}, 0x10) recvmmsg(r2, &(0x7f0000000200), 0x0, 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 55m4.472354593s ago: executing program 1 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) fchdir(r4) r5 = syz_io_uring_setup(0x1244, &(0x7f00000004c0)={0x0, 0xd5a9, 0x800, 0x1, 0x147, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r9, &(0x7f0000002b40)={0x2020}, 0xfffffffffffffe98) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101c82, 0x0) r10 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec23, 0x488, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/216, 0xd8}, {0x0}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) 55m3.640425174s ago: executing program 1 (id=659): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 55m2.840797229s ago: executing program 32 (id=659): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 53m17.652577375s ago: executing program 2 (id=1005): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x6, 0xb49, 0xfffffffc, 0x8, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000080)) 53m14.523178076s ago: executing program 2 (id=1012): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x216301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/59, 0x3b}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/43, 0x2b}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/24, 0x18}], 0x9, 0xdac, 0x45) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="660f3a21ff002e0f32ead0d200007d0066bad104ed0f79a4ba3e0000003e2e640fc73f0f20e035002000000f22e0b9f20b00000f320f002dd4000000b94a0b0000b890b20000ba000000000f30", 0x4d}], 0x1, 0x30, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x7fffffff) listen(r3, 0x4) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x1, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet(0xa, 0x2, 0x9) socket$inet(0xa, 0x9, 0x9) listen(r6, 0x9) r8 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x8008) preadv(r7, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000440)=""/239, 0xef}], 0x4, 0x6, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x901041, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000100)={0x1}) io_destroy(0x0) 53m13.327874605s ago: executing program 2 (id=1017): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) setuid(0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r2, r2, 0x0, 0x200000) 53m11.305954235s ago: executing program 2 (id=1025): r0 = fanotify_init(0x200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de9"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000900)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) fanotify_mark(r0, 0x1, 0x48000047, 0xffffffffffffffff, 0x0) r7 = dup(r6) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000cb030000000000004000000000000000ea02000000000000000001000500380064000600b1"], 0x378) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) syz_open_procfs(r8, &(0x7f0000000100)='net/ip6_tables_names\x00') timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x5, 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 53m8.911327988s ago: executing program 2 (id=1032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20a, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x1}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x40004) r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x1, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000003208"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 53m7.437046115s ago: executing program 2 (id=1035): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r9 = io_uring_setup(0x31e4, &(0x7f0000000100)={0x0, 0x5b70, 0x10, 0x1, 0x2ee, 0x0, r2}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000a00), 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x20000045, 0x0, 0x0) 52m52.359947391s ago: executing program 33 (id=1035): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r9 = io_uring_setup(0x31e4, &(0x7f0000000100)={0x0, 0x5b70, 0x10, 0x1, 0x2ee, 0x0, r2}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000a00), 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x20000045, 0x0, 0x0) 13.096361266s ago: executing program 0 (id=20312): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 11.225200796s ago: executing program 3 (id=20318): syz_io_uring_setup(0x234, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 10.375573202s ago: executing program 4 (id=20319): socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000007ad75c684887934a526e1ab0551a2ce962785046c1338bbe5dd4a5e15f5e2375280d3707c867a9ebf29a99da77dfe344f72c894197121fd729c2e5eaf5ca0364fa6ea9d86ca8d46dff47088c233458b84d68a95a379e8c4c1a026bc5732e5eb89270283510035d8a29cf423954df7594b53b7ea426f68591b45cd96c080b2691a1ec2a1bb3c28fad6793", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r5}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) 10.275454575s ago: executing program 6 (id=20320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000080)=0x3) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="3c000000100000032bbd70000005000000000000", @ANYBLOB="f2240000000000001c0012800b00010065616373656300000c000280050003005a00"], 0x3c}}, 0x0) io_uring_enter(r2, 0x7277, 0x41, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x7, 0x202000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) 10.25752573s ago: executing program 3 (id=20321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df4ba4200b07aeeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f302e0f017500", 0x68}], 0x1, 0x11, 0x0, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.932553401s ago: executing program 3 (id=20322): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e22000/0x10000)=nil, 0x10000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x4) write$binfmt_script(r3, &(0x7f0000000400), 0xb) r4 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) 9.889107552s ago: executing program 0 (id=20323): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FIONCLEX(r0, 0x5450) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.670818449s ago: executing program 0 (id=20324): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) recvfrom(r1, 0x0, 0x0, 0x40000102, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) read(r1, &(0x7f0000002340)=""/232, 0xe8) 8.388451242s ago: executing program 5 (id=20326): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) write$FUSE_LK(r3, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x7, 0x7eb, 0x2}}}, 0x5) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) accept(r6, 0x0, &(0x7f00000001c0)) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r7, 0x80089203, 0x2000000069b6a) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000140)={0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x7, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7.760668311s ago: executing program 0 (id=20327): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}, {r4, 0x201}], 0x2, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 7.59149993s ago: executing program 6 (id=20328): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000500)='./file0\x00'}) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) 7.420409018s ago: executing program 5 (id=20329): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) 7.198965055s ago: executing program 6 (id=20330): socket$netlink(0x10, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000007ad75c684887934a526e1ab0551a2ce962785046c1338bbe5dd4a5e15f5e2375280d3707c867a9ebf29a99da77dfe344f72c894197121fd729c2e5eaf5ca0364fa6ea9d86ca8d46dff47088c233458b84d68a95a379e8c4c1a026bc5732e5eb89270283510035d8a29cf423954df7594b53b7ea426f68591b45cd96c080b2691a1ec2a1bb3c28fad6793", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r5}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) 6.844724077s ago: executing program 5 (id=20331): syz_io_uring_setup(0x234, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.21056537s ago: executing program 4 (id=20332): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x15f) 5.941391274s ago: executing program 4 (id=20333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 5.69255905s ago: executing program 5 (id=20334): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000fff625bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="71da0300231a05002400128009000100626f6e6400000000140002800500016994159a42d6b6cc00"/54], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = socket(0x10, 0x803, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x4c0, 0x0, 0x0, 0xffffffff, 0x0, 0xe8, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x3, 0x6, 0x4, 0x4, 0x0, 0x7], 0x2, 0x4}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}, @port=0x4e24, @port=0x4e23}}}}, {{@ip={@empty, @multicast2, 0xffffff00, 0xff000000, 'ip_vti0\x00', 'bridge0\x00', {0xdf601d6438f09a2c}, {0xff}, 0x0, 0x3, 0xc}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2}}, @common=@icmp={{0x28}, {0xd, "ded7", 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @gre_key=0x5, @icmp_id=0x65}}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, 0xff000000, 0xff000000, 'veth1_to_bridge\x00', 'ip6tnl0\x00', {}, {}, 0x89, 0x7163037968af9fba, 0x10}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @private=0xa010102, @local, @port=0x4e20, @port=0x4e24}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffff00, 0xffffff00, 'wg1\x00', 'dummy0\x00', {0xff}, {}, 0x67, 0x0, 0x95}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1, 0x2}}, @common=@ah={{0x30}, {[0x4, 0x9], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x1, 0x0, [0x21, 0x0, 0x3b, 0x18, 0x23, 0x19, 0xc, 0x12, 0x3b, 0xa, 0xe, 0x31, 0x2c, 0x18, 0xe, 0x1e], 0x1, 0x3, 0x7d8e}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 5.442360455s ago: executing program 0 (id=20335): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}, {r4, 0x201}], 0x2, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 4.755238332s ago: executing program 3 (id=20336): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x6, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x0, 0x2, 0x5}]}}, 0x0}, 0x0) 3.578203063s ago: executing program 5 (id=20337): syz_usb_connect(0x0, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x11e, 0x480, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x3, r7, 0x1}) madvise(&(0x7f0000459000/0x4000)=nil, 0x4000, 0x16) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x28, 0x20, 0x400, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}]}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) 3.441000491s ago: executing program 6 (id=20338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x98, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000003280)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffb) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) unshare(0x28040600) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) read(r9, &(0x7f0000000140)=""/166, 0xa6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r11, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d00090027bd70000000000021e6000014000a0009000000000000000000000000000001"], 0x28}}, 0x84) 3.036438254s ago: executing program 0 (id=20339): pselect6(0x40, &(0x7f0000000040)={0x0, 0x3000000000000}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) mq_timedsend(r1, &(0x7f0000000600)="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", 0xfc2, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004884}, 0x4054) epoll_create(0x3) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES8, @ANYRESDEC], 0x0) signalfd(r0, &(0x7f0000001280)={[0x8]}, 0x8) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) 2.695478894s ago: executing program 3 (id=20340): readlink(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)=""/14, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)={0x0, 0x0, 0x1, 'M'}, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/89, 0x59}], 0x3, &(0x7f0000000400)=""/254, 0xfe}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000240)='7', 0x1, 0xfffffffffffff801}) 2.450319496s ago: executing program 3 (id=20341): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x3, 0x1, 0x0, &(0x7f0000000040)=""/94, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)={0x9, 0x0, [{0xd000, 0xd, &(0x7f00000005c0)=""/13}, {0xeeef0000, 0x1000, &(0x7f00000007c0)=""/4096}, {0x6000, 0x50, &(0x7f0000001a80)=""/80}, {0xd000, 0xaa, &(0x7f00000004c0)=""/170}, {0x8000000, 0x48, &(0x7f0000001a00)=""/72}, {0x2, 0x3b, &(0x7f0000000640)=""/59}, {0xeeee8000, 0xf8, &(0x7f0000000680)=""/248}, {0x100000, 0x58, &(0x7f00000017c0)=""/88}, {0x0, 0x2, &(0x7f0000001840)=""/2}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x4e6) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000040)={0x11}) write$char_usb(r3, &(0x7f0000000100)='V', 0x1) syz_usb_control_io$printer(r2, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={0x0, 0x11, 0x80000, 0x0, 0xffffffffffffffff}) fcntl$getownex(r7, 0x10, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000400)={0x7, 0x9, 0x1004}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f00007ee000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0x100000000) add_key$fscrypt_provisioning(&(0x7f0000002240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$TCFLSH(r7, 0x400455c8, 0x1) 1.720601627s ago: executing program 4 (id=20342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_256={{0x304}, "45c594c057c79552", "1ea90b05633ee088498b8d50702128937e52933d857ebf2d5f788466b5915e97", "d81e1605", "37bbb74f571aefc8"}, 0x38) read(0xffffffffffffffff, 0x0, 0x0) 1.720151575s ago: executing program 6 (id=20343): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}, {r4, 0x201}], 0x2, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 1.58789256s ago: executing program 4 (id=20344): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x609, 0x0, 0xffffffed, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) inotify_rm_watch(r1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x3}) 214.925939ms ago: executing program 5 (id=20345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x8, 0x0, 0x7fffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a880, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 56.526064ms ago: executing program 4 (id=20346): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x4000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) 0s ago: executing program 6 (id=20347): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, 0x0, 0x18}) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 227/0x430 [ 3457.051138][T32010] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 3457.051148][T32010] ? do_syscall_64+0xfa/0x3b0 [ 3457.051162][T32010] ? __pfx_rtnl_newlink+0x10/0x10 [ 3457.051183][T32010] ? kasan_quarantine_put+0xdd/0x220 [ 3457.051194][T32010] ? lockdep_hardirqs_on+0x9c/0x150 [ 3457.051206][T32010] ? nlmon_xmit+0xb0/0x100 [ 3457.051216][T32010] ? kmem_cache_free+0x18f/0x400 [ 3457.051231][T32010] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3457.051243][T32010] ? lockdep_hardirqs_on+0x9c/0x150 [ 3457.051252][T32010] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3457.051262][T32010] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3457.051274][T32010] ? __dev_queue_xmit+0x27b/0x3b50 [ 3457.051287][T32010] ? __dev_queue_xmit+0x27b/0x3b50 [ 3457.051297][T32010] ? __dev_queue_xmit+0x27b/0x3b50 [ 3457.051316][T32010] ? __dev_queue_xmit+0x1d79/0x3b50 [ 3457.051330][T32010] ? __lock_acquire+0xab9/0xd20 [ 3457.051352][T32010] ? __pfx_rtnl_newlink+0x10/0x10 [ 3457.051362][T32010] rtnetlink_rcv_msg+0x7cc/0xb70 [ 3457.051373][T32010] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3457.051382][T32010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3457.051390][T32010] ? ref_tracker_free+0x63a/0x7d0 [ 3457.051404][T32010] ? __asan_memcpy+0x40/0x70 [ 3457.051414][T32010] ? __pfx_ref_tracker_free+0x10/0x10 [ 3457.051433][T32010] netlink_rcv_skb+0x205/0x470 [ 3457.051448][T32010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3457.051458][T32010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3457.051473][T32010] ? netlink_deliver_tap+0x2e/0x1b0 [ 3457.051487][T32010] netlink_unicast+0x82f/0x9e0 [ 3457.051505][T32010] ? __pfx_netlink_unicast+0x10/0x10 [ 3457.051519][T32010] ? netlink_sendmsg+0x642/0xb30 [ 3457.051528][T32010] ? skb_put+0x11b/0x210 [ 3457.051541][T32010] netlink_sendmsg+0x805/0xb30 [ 3457.051555][T32010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3457.051567][T32010] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3457.051582][T32010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3457.051591][T32010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3457.051601][T32010] __sock_sendmsg+0x219/0x270 [ 3457.051617][T32010] ____sys_sendmsg+0x52d/0x830 [ 3457.051631][T32010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3457.051647][T32010] ? import_iovec+0x74/0xa0 [ 3457.051660][T32010] ___sys_sendmsg+0x21f/0x2a0 [ 3457.051673][T32010] ? __pfx____sys_sendmsg+0x10/0x10 [ 3457.051702][T32010] ? __fget_files+0x2a/0x420 [ 3457.051714][T32010] ? __fget_files+0x3a0/0x420 [ 3457.051731][T32010] __sys_sendmmsg+0x227/0x430 [ 3457.051745][T32010] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3457.051755][T32010] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 3457.051779][T32010] ? ksys_write+0x22a/0x250 [ 3457.051792][T32010] ? __pfx_ksys_write+0x10/0x10 [ 3457.051802][T32010] ? rcu_is_watching+0x15/0xb0 [ 3457.051816][T32010] __x64_sys_sendmmsg+0xa0/0xc0 [ 3457.051828][T32010] do_syscall_64+0xfa/0x3b0 [ 3457.051838][T32010] ? lockdep_hardirqs_on+0x9c/0x150 [ 3457.051847][T32010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3457.051856][T32010] ? clear_bhb_loop+0x60/0xb0 [ 3457.051867][T32010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3457.051876][T32010] RIP: 0033:0x7fdf3158eec9 [ 3457.051886][T32010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3457.051894][T32010] RSP: 002b:00007fdf3249f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3457.051905][T32010] RAX: ffffffffffffffda RBX: 00007fdf317e5fa0 RCX: 00007fdf3158eec9 [ 3457.051912][T32010] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 3457.051919][T32010] RBP: 00007fdf3249f090 R08: 0000000000000000 R09: 0000000000000000 [ 3457.051925][T32010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3457.051931][T32010] R13: 00007fdf317e6038 R14: 00007fdf317e5fa0 R15: 00007fdf3190fa28 [ 3457.051946][T32010] [ 3457.534147][ C1] vkms_vblank_simulate: vblank timer overrun [ 3457.645437][T14064] usb 6-1: Using ep0 maxpacket: 32 [ 3457.656931][T14064] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 3457.669084][T14064] usb 6-1: config 0 has no interface number 0 [ 3457.676019][T14064] usb 6-1: config 0 interface 184 has no altsetting 0 [ 3457.694751][T14064] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3457.817140][T32008] fido_id[32008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 3457.971052][T14064] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.101833][T14064] usb 6-1: Product: syz [ 3458.136590][T14064] usb 6-1: Manufacturer: syz [ 3458.164872][T14064] usb 6-1: SerialNumber: syz [ 3458.198894][T14064] usb 6-1: config 0 descriptor?? [ 3458.242805][T14064] smsc75xx v1.0.0 [ 3458.271569][T14064] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3458.302475][T14064] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 3459.430646][T32024] net_ratelimit: 458 callbacks suppressed [ 3459.430665][T32024] netlink: zone id is out of range [ 3459.453435][T32024] netlink: zone id is out of range [ 3459.459395][T32024] netlink: zone id is out of range [ 3459.464737][T32024] netlink: zone id is out of range [ 3459.538139][T32024] netlink: zone id is out of range [ 3459.543447][T32024] netlink: zone id is out of range [ 3459.553920][T32024] netlink: zone id is out of range [ 3459.561670][T32024] netlink: zone id is out of range [ 3459.570277][T32024] netlink: zone id is out of range [ 3459.576476][T32024] netlink: zone id is out of range [ 3460.035308][T16974] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 3460.197455][T16974] usb 7-1: Using ep0 maxpacket: 8 [ 3460.235755][T16974] usb 7-1: config 162 has an invalid interface number: 84 but max is 2 [ 3460.256801][T16974] usb 7-1: config 162 has an invalid interface number: 3 but max is 2 [ 3460.276615][T16974] usb 7-1: config 162 has no interface number 0 [ 3460.283048][T16974] usb 7-1: config 162 has no interface number 1 [ 3460.289759][T16974] usb 7-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3460.309237][T16974] usb 7-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 3460.332452][T16974] usb 7-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3460.346176][T16974] usb 7-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 3460.390338][T16974] usb 7-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 3460.447062][T16974] usb 7-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 3460.485627][T16974] usb 7-1: config 162 interface 84 has no altsetting 0 [ 3460.502890][T16974] usb 7-1: config 162 interface 2 has no altsetting 0 [ 3460.514504][T16974] usb 7-1: config 162 interface 3 has no altsetting 0 [ 3460.529636][T16974] usb 7-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 3460.539036][ T5842] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3460.557371][T16974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.584414][T16974] usb 7-1: Product: syz [ 3460.603463][T16974] usb 7-1: Manufacturer: syz [ 3460.633999][T16974] usb 7-1: SerialNumber: syz [ 3460.695369][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 3460.715487][ T5842] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3460.734425][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.751352][ T5842] usb 4-1: Product: syz [ 3460.777055][ T5842] usb 4-1: Manufacturer: syz [ 3460.795194][T14068] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3460.831611][ T5842] usb 4-1: SerialNumber: syz [ 3460.855588][ T5842] usb 4-1: config 0 descriptor?? [ 3460.896984][ T5842] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 3460.965906][T14068] usb 5-1: device descriptor read/64, error -71 [ 3461.215875][T14068] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3461.306340][ T5842] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 3461.331920][T24072] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 3461.359554][ T5842] visor 4-1:0.0: probe with driver visor failed with error -5 [ 3461.375313][T14068] usb 5-1: device descriptor read/64, error -71 [ 3461.375809][T16974] usb 7-1: USB disconnect, device number 82 [ 3461.474378][T22102] usb 6-1: USB disconnect, device number 123 [ 3461.493241][T14068] usb usb5-port1: attempt power cycle [ 3461.611476][T32067] tipc: Enabled bearer , priority 0 [ 3461.620331][T32067] syzkaller0: entered promiscuous mode [ 3461.626210][T32067] syzkaller0: entered allmulticast mode [ 3461.635691][T32067] tipc: Resetting bearer [ 3461.699505][T32066] tipc: Resetting bearer [ 3461.720939][T32066] tipc: Disabling bearer [ 3461.835412][T14068] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3461.855922][T14068] usb 5-1: device descriptor read/8, error -71 [ 3461.932112][T32076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19940'. [ 3462.105160][T14068] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3462.128864][T14068] usb 5-1: device descriptor read/8, error -71 [ 3462.195271][T22102] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3462.255346][T14068] usb usb5-port1: unable to enumerate USB device [ 3462.395544][T22102] usb 6-1: Using ep0 maxpacket: 32 [ 3462.439113][T22102] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 3462.447548][T22102] usb 6-1: config 0 has no interface number 0 [ 3462.454127][T22102] usb 6-1: config 0 interface 184 has no altsetting 0 [ 3462.901221][T22102] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3462.910527][T22102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.919280][T22102] usb 6-1: Product: syz [ 3462.923674][T22102] usb 6-1: Manufacturer: syz [ 3462.928683][T22102] usb 6-1: SerialNumber: syz [ 3462.936079][T22102] usb 6-1: config 0 descriptor?? [ 3463.057443][T22102] smsc75xx v1.0.0 [ 3463.061283][T22102] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3463.072537][T22102] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 3463.099028][T32084] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.19944'. [ 3463.282260][ T5842] usb 4-1: USB disconnect, device number 44 [ 3463.359191][T32089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19946'. [ 3463.976826][T32103] loop2: detected capacity change from 0 to 7 [ 3463.996749][ T6598] Dev loop2: unable to read RDB block 7 [ 3464.071215][ T6598] loop2: unable to read partition table [ 3464.077208][ T6598] loop2: partition table beyond EOD, truncated [ 3464.092454][T32107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19949'. [ 3464.144407][T32103] Dev loop2: unable to read RDB block 7 [ 3464.158277][T32103] loop2: unable to read partition table [ 3464.195548][T32103] loop2: partition table beyond EOD, truncated [ 3464.204156][T32103] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3464.424371][T14068] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3464.595205][T14068] usb 4-1: Using ep0 maxpacket: 32 [ 3464.603840][T14068] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3464.612271][T14068] usb 4-1: config 0 has no interface number 0 [ 3464.618724][T14068] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3464.633772][T14068] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3464.644822][T14068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3464.653795][T14068] usb 4-1: Product: syz [ 3464.659953][T14068] usb 4-1: Manufacturer: syz [ 3464.664722][T14068] usb 4-1: SerialNumber: syz [ 3464.681876][T14068] usb 4-1: config 0 descriptor?? [ 3464.693974][T14068] smsc75xx v1.0.0 [ 3464.698273][T14068] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3464.708848][T14068] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 3464.920311][T32112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19951'. [ 3464.971763][T14068] usb 6-1: USB disconnect, device number 124 [ 3466.945384][T32128] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.19955'. [ 3466.947035][ T5908] usb 4-1: USB disconnect, device number 45 [ 3467.057603][T32130] FAULT_INJECTION: forcing a failure. [ 3467.057603][T32130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3467.084546][T32130] CPU: 1 UID: 0 PID: 32130 Comm: syz.0.19956 Not tainted syzkaller #0 PREEMPT(full) [ 3467.084570][T32130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3467.084582][T32130] Call Trace: [ 3467.084589][T32130] [ 3467.084597][T32130] dump_stack_lvl+0x189/0x250 [ 3467.084623][T32130] ? __pfx____ratelimit+0x10/0x10 [ 3467.084640][T32130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3467.084660][T32130] ? __pfx__printk+0x10/0x10 [ 3467.084676][T32130] ? __might_fault+0xb0/0x130 [ 3467.084706][T32130] should_fail_ex+0x414/0x560 [ 3467.084733][T32130] _copy_from_user+0x2d/0xb0 [ 3467.084753][T32130] udmabuf_ioctl+0x121/0x2c0 [ 3467.084781][T32130] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 3467.084809][T32130] ? ksys_write+0x1e1/0x250 [ 3467.084835][T32130] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3467.084853][T32130] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 3467.084875][T32130] __se_sys_ioctl+0xf9/0x170 [ 3467.084896][T32130] do_syscall_64+0xfa/0x3b0 [ 3467.084923][T32130] ? lockdep_hardirqs_on+0x9c/0x150 [ 3467.084939][T32130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3467.084956][T32130] ? clear_bhb_loop+0x60/0xb0 [ 3467.084976][T32130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3467.084992][T32130] RIP: 0033:0x7f573d58eec9 [ 3467.085007][T32130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3467.085023][T32130] RSP: 002b:00007f573e491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3467.085041][T32130] RAX: ffffffffffffffda RBX: 00007f573d7e5fa0 RCX: 00007f573d58eec9 [ 3467.085053][T32130] RDX: 0000000000000000 RSI: 0000000040087543 RDI: 0000000000000003 [ 3467.085062][T32130] RBP: 00007f573e491090 R08: 0000000000000000 R09: 0000000000000000 [ 3467.085072][T32130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3467.085085][T32130] R13: 00007f573d7e6038 R14: 00007f573d7e5fa0 R15: 00007f573d90fa28 [ 3467.085112][T32130] [ 3467.371960][T32132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3467.755559][ T5908] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 3467.895220][ T5908] usb 7-1: device descriptor read/64, error -71 [ 3468.045192][T14068] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3468.145267][ T5908] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 3468.205188][T14068] usb 6-1: Using ep0 maxpacket: 32 [ 3468.212505][T14068] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 3468.236553][T14068] usb 6-1: config 0 has no interface number 0 [ 3468.252087][T14068] usb 6-1: config 0 interface 184 has no altsetting 0 [ 3468.262521][T14068] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3468.280815][T14068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.289352][ T5908] usb 7-1: device descriptor read/64, error -71 [ 3468.322469][T14068] usb 6-1: Product: syz [ 3468.334974][T14068] usb 6-1: Manufacturer: syz [ 3468.353363][T14068] usb 6-1: SerialNumber: syz [ 3468.374902][T14068] usb 6-1: config 0 descriptor?? [ 3468.395342][T22102] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3468.406043][ T5908] usb usb7-port1: attempt power cycle [ 3468.414718][T14068] smsc75xx v1.0.0 [ 3468.423569][T14068] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3468.462784][T14068] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 3468.559526][T22102] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3468.662345][T22102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.688008][T22102] usb 5-1: Product: syz [ 3468.707528][T22102] usb 5-1: Manufacturer: syz [ 3468.717530][T22102] usb 5-1: SerialNumber: syz [ 3468.755476][ T5908] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 3468.775931][ T5908] usb 7-1: device descriptor read/8, error -71 [ 3469.026276][ T5908] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 3469.046178][ T5908] usb 7-1: device descriptor read/8, error -71 [ 3469.137514][T22102] net_ratelimit: 255 callbacks suppressed [ 3469.137529][T22102] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 3469.159161][ T5908] usb usb7-port1: unable to enumerate USB device [ 3469.166685][T22102] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3469.180121][T22102] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3469.194738][T22102] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 3469.576220][T32165] netlink: 'syz.3.19965': attribute type 6 has an invalid length. [ 3469.584283][T32165] netlink: 'syz.3.19965': attribute type 1 has an invalid length. [ 3469.596567][T32165] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19965'. [ 3469.877412][T28897] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3470.045386][T28897] usb 4-1: Using ep0 maxpacket: 16 [ 3470.056088][T28897] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3470.066160][T28897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3470.074174][T28897] usb 4-1: Product: syz [ 3470.078569][T28897] usb 4-1: Manufacturer: syz [ 3470.083221][T28897] usb 4-1: SerialNumber: syz [ 3470.092756][T28897] r8152-cfgselector 4-1: Unknown version 0x0000 [ 3470.099256][T28897] r8152-cfgselector 4-1: config 0 descriptor?? [ 3470.399790][T28897] r8152-cfgselector 4-1: Unknown version 0x08a0 [ 3470.413858][T28897] r8152-cfgselector 4-1: bad CDC descriptors [ 3470.770370][T22102] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 3471.127855][T22102] usb 6-1: USB disconnect, device number 125 [ 3471.161318][T32177] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.19968'. [ 3471.202227][T28897] usb 5-1: USB disconnect, device number 21 [ 3471.845639][T32185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3472.142118][T32198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3472.365842][ T5842] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 3472.545450][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 3472.614782][ T5842] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 3472.654402][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3472.684862][ T5842] usb 7-1: Product: syz [ 3472.695072][ T5842] usb 7-1: Manufacturer: syz [ 3472.699687][ T5842] usb 7-1: SerialNumber: syz [ 3472.746559][ T5842] usb 7-1: config 0 descriptor?? [ 3472.857865][T32201] bond0: (slave netdevsim0): Releasing backup interface [ 3473.170718][ T5842] airspy 7-1:0.0: Board ID: 00 [ 3473.178881][T32211] netlink: 'syz.5.19976': attribute type 6 has an invalid length. [ 3473.189992][T32211] netlink: 'syz.5.19976': attribute type 1 has an invalid length. [ 3473.201575][T32213] loop5: detected capacity change from 0 to 7 [ 3473.207710][T32211] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.19976'. [ 3473.225469][ T5842] airspy 7-1:0.0: Firmware version: [ 3473.235625][T32213] Dev loop5: unable to read RDB block 7 [ 3473.252127][T32213] loop5: AHDI p1 p2 p3 [ 3473.261846][T32213] loop5: partition table partially beyond EOD, truncated [ 3473.281194][T32213] loop5: p1 start 1601398130 is beyond EOD, truncated [ 3473.292290][T32213] loop5: p2 start 1702059890 is beyond EOD, truncated [ 3473.548360][T32220] netlink: 'syz.3.19979': attribute type 10 has an invalid length. [ 3473.598208][T32220] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3473.679857][ T5842] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e [ 3473.797783][ T5842] airspy 7-1:0.0: Registered as swradio24 [ 3473.861220][ T5842] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 3473.975487][ T5842] usb 7-1: USB disconnect, device number 87 [ 3474.098072][T32229] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.19981'. [ 3474.838368][ T5842] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 3475.009356][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 3475.074807][T32255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3475.210294][ T5842] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3475.238704][ T5842] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3475.261841][ T5842] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3475.284247][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3476.076081][T32260] netlink: 'syz.3.19989': attribute type 6 has an invalid length. [ 3476.085429][T32260] netlink: 'syz.3.19989': attribute type 1 has an invalid length. [ 3476.095204][T32260] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19989'. [ 3476.309538][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19991'. [ 3476.379459][T32266] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.19992'. [ 3476.415442][T22102] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3476.575192][T22102] usb 4-1: Using ep0 maxpacket: 16 [ 3476.581540][T32268] binder: 32267:32268 ioctl 4018620d 0 returned -22 [ 3476.593943][T22102] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3476.624011][T22102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3476.645014][T22102] usb 4-1: Product: syz [ 3476.646130][T32271] binder: 32267:32271 ioctl c018620c 0 returned -14 [ 3476.650901][T32270] openvswitch: netlink: Flow actions attr not present in new flow. [ 3476.663904][T22102] usb 4-1: Manufacturer: syz [ 3476.664405][T32271] binder: 32267:32271 ioctl c0306201 0 returned -14 [ 3476.668608][T22102] usb 4-1: SerialNumber: syz [ 3476.722164][T22102] r8152-cfgselector 4-1: Unknown version 0x0000 [ 3476.752235][T22102] r8152-cfgselector 4-1: config 0 descriptor?? [ 3477.155503][T22102] r8152-cfgselector 4-1: Unknown version 0x08a0 [ 3477.194970][T22102] r8152-cfgselector 4-1: bad CDC descriptors [ 3477.440163][T32282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19996'. [ 3477.507046][T32282] tipc: Started in network mode [ 3477.521296][T32282] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 3477.545245][T32282] tipc: Enabled bearer , priority 3 [ 3478.655433][T28897] tipc: Node number set to 10005162 [ 3478.802746][ T5842] usb 7-1: string descriptor 0 read error: -71 [ 3478.838022][ T5842] hub 7-1:32.0: bad descriptor, ignoring hub [ 3478.892829][ T5842] hub 7-1:32.0: probe with driver hub failed with error -5 [ 3479.026410][ T5842] usb 7-1: USB disconnect, device number 88 [ 3480.099851][T22102] r8152-cfgselector 4-1: USB disconnect, device number 47 [ 3480.195198][ T5842] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3480.679850][ T5842] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3480.696582][ T5842] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3480.744310][ T5842] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3480.783020][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.684950][T32312] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3482.202977][T32325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3482.269323][ T5842] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3482.545550][T16974] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3482.610974][T32330] binder: 32329:32330 ioctl 4018620d 0 returned -22 [ 3482.675411][T32331] binder: 32329:32331 ioctl c018620c 0 returned -14 [ 3482.693953][T32331] binder: 32329:32331 ioctl c0306201 0 returned -14 [ 3482.695193][T16974] usb 4-1: device descriptor read/64, error -71 [ 3482.955334][T16974] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3483.085205][T16974] usb 4-1: device descriptor read/64, error -71 [ 3483.152488][T32333] FAULT_INJECTION: forcing a failure. [ 3483.152488][T32333] name failslab, interval 1, probability 0, space 0, times 0 [ 3483.167660][T32333] CPU: 0 UID: 0 PID: 32333 Comm: syz.5.20008 Not tainted syzkaller #0 PREEMPT(full) [ 3483.167683][T32333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3483.167694][T32333] Call Trace: [ 3483.167702][T32333] [ 3483.167711][T32333] dump_stack_lvl+0x189/0x250 [ 3483.167737][T32333] ? __pfx____ratelimit+0x10/0x10 [ 3483.167755][T32333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3483.167777][T32333] ? __pfx__printk+0x10/0x10 [ 3483.167792][T32333] ? genl_rcv+0x28/0x40 [ 3483.167813][T32333] ? ____sys_sendmsg+0x505/0x830 [ 3483.167833][T32333] ? __x64_sys_sendmsg+0x19b/0x260 [ 3483.167864][T32333] should_fail_ex+0x414/0x560 [ 3483.167893][T32333] should_failslab+0xa8/0x100 [ 3483.167918][T32333] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3483.167939][T32333] ? skb_clone+0x212/0x3a0 [ 3483.167964][T32333] skb_clone+0x212/0x3a0 [ 3483.167989][T32333] __netlink_deliver_tap+0x404/0x850 [ 3483.168021][T32333] ? netlink_deliver_tap+0x2e/0x1b0 [ 3483.168041][T32333] netlink_deliver_tap+0x19c/0x1b0 [ 3483.168060][T32333] netlink_sendskb+0x68/0x140 [ 3483.168088][T32333] netlink_unicast+0x397/0x9e0 [ 3483.168109][T32333] ? __asan_memcpy+0x40/0x70 [ 3483.168136][T32333] ? __pfx_netlink_unicast+0x10/0x10 [ 3483.168172][T32333] netlink_rcv_skb+0x28c/0x470 [ 3483.168188][T32333] ? __lock_acquire+0xab9/0xd20 [ 3483.168206][T32333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3483.168229][T32333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3483.168274][T32333] ? down_read+0x1ad/0x2e0 [ 3483.168297][T32333] genl_rcv+0x28/0x40 [ 3483.168317][T32333] netlink_unicast+0x82f/0x9e0 [ 3483.168350][T32333] ? __pfx_netlink_unicast+0x10/0x10 [ 3483.168378][T32333] ? netlink_sendmsg+0x642/0xb30 [ 3483.168394][T32333] ? skb_put+0x11b/0x210 [ 3483.168417][T32333] netlink_sendmsg+0x805/0xb30 [ 3483.168446][T32333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3483.168468][T32333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3483.168494][T32333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3483.168511][T32333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3483.168531][T32333] __sock_sendmsg+0x219/0x270 [ 3483.168559][T32333] ____sys_sendmsg+0x505/0x830 [ 3483.168590][T32333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3483.168621][T32333] ? import_iovec+0x74/0xa0 [ 3483.168645][T32333] ___sys_sendmsg+0x21f/0x2a0 [ 3483.168668][T32333] ? __pfx____sys_sendmsg+0x10/0x10 [ 3483.168728][T32333] ? __fget_files+0x2a/0x420 [ 3483.168749][T32333] ? __fget_files+0x3a0/0x420 [ 3483.168783][T32333] __x64_sys_sendmsg+0x19b/0x260 [ 3483.168807][T32333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3483.168838][T32333] ? __pfx_ksys_write+0x10/0x10 [ 3483.168865][T32333] ? do_syscall_64+0xbe/0x3b0 [ 3483.168888][T32333] do_syscall_64+0xfa/0x3b0 [ 3483.168905][T32333] ? lockdep_hardirqs_on+0x9c/0x150 [ 3483.168922][T32333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3483.168939][T32333] ? clear_bhb_loop+0x60/0xb0 [ 3483.168961][T32333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3483.168978][T32333] RIP: 0033:0x7faef8b8eec9 [ 3483.168993][T32333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3483.169009][T32333] RSP: 002b:00007faef9ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3483.169027][T32333] RAX: ffffffffffffffda RBX: 00007faef8de5fa0 RCX: 00007faef8b8eec9 [ 3483.169041][T32333] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 3483.169053][T32333] RBP: 00007faef9ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 3483.169064][T32333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3483.169075][T32333] R13: 00007faef8de6038 R14: 00007faef8de5fa0 R15: 00007faef8f0fa28 [ 3483.169106][T32333] [ 3483.530442][T16974] usb usb4-port1: attempt power cycle [ 3483.875279][T16974] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3483.896192][T16974] usb 4-1: device descriptor read/8, error -71 [ 3483.955303][T21631] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3484.082860][T22102] usb 5-1: USB disconnect, device number 22 [ 3484.307922][T21631] usb 6-1: Using ep0 maxpacket: 8 [ 3484.316230][T16974] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3484.330995][T21631] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3484.343404][T21631] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3484.354395][T21631] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3484.354625][T16974] usb 4-1: device descriptor read/8, error -71 [ 3484.373542][T21631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3484.489435][T32344] netlink: zone id is out of range [ 3484.494705][T32344] netlink: zone id is out of range [ 3484.500731][T16974] usb usb4-port1: unable to enumerate USB device [ 3484.508015][T32344] netlink: zone id is out of range [ 3484.513139][T32344] netlink: zone id is out of range [ 3484.518898][T32344] netlink: zone id is out of range [ 3484.524006][T32344] netlink: zone id is out of range [ 3484.532258][T32344] netlink: zone id is out of range [ 3484.538661][T32344] netlink: zone id is out of range [ 3484.543903][T32344] netlink: zone id is out of range [ 3484.553443][T32349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3484.564715][T32344] netlink: zone id is out of range [ 3486.975221][ T5908] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 3487.167138][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 3487.222603][ T5908] usb 7-1: config index 0 descriptor too short (expected 1810, got 18) [ 3487.249462][ T5908] usb 7-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 3487.261566][T32388] binder: 32387:32388 ioctl 4018620d 0 returned -22 [ 3487.300981][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3487.324896][T32389] binder: 32387:32389 ioctl c018620c 0 returned -14 [ 3487.335285][T28897] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3487.347413][T32389] binder: 32387:32389 ioctl c0306201 0 returned -14 [ 3487.420610][ T5908] usb 7-1: config 0 descriptor?? [ 3487.448529][ T5908] gspca_main: etoms-2.14.0 probing 102c:6151 [ 3487.550593][T28897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3487.579914][T28897] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3487.612555][T28897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3487.642633][T28897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3487.734831][ T5908] usb 7-1: USB disconnect, device number 89 [ 3487.750288][T32385] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3487.799224][T28897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3488.294742][T21631] usb 6-1: string descriptor 0 read error: -71 [ 3488.303195][T32392] FAULT_INJECTION: forcing a failure. [ 3488.303195][T32392] name failslab, interval 1, probability 0, space 0, times 0 [ 3488.337339][T32392] CPU: 0 UID: 0 PID: 32392 Comm: syz.3.20023 Not tainted syzkaller #0 PREEMPT(full) [ 3488.337360][T32392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3488.337374][T32392] Call Trace: [ 3488.337380][T32392] [ 3488.337389][T32392] dump_stack_lvl+0x189/0x250 [ 3488.337416][T32392] ? __pfx____ratelimit+0x10/0x10 [ 3488.337434][T32392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3488.337455][T32392] ? __pfx__printk+0x10/0x10 [ 3488.337468][T32392] ? nfnetlink_rcv+0x26a/0x2520 [ 3488.337493][T32392] ? ____sys_sendmsg+0x505/0x830 [ 3488.337512][T32392] ? __x64_sys_sendmsg+0x19b/0x260 [ 3488.337543][T32392] should_fail_ex+0x414/0x560 [ 3488.337572][T32392] should_failslab+0xa8/0x100 [ 3488.337597][T32392] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3488.337617][T32392] ? skb_clone+0x212/0x3a0 [ 3488.337643][T32392] skb_clone+0x212/0x3a0 [ 3488.337666][T32392] __netlink_deliver_tap+0x404/0x850 [ 3488.337697][T32392] ? netlink_deliver_tap+0x2e/0x1b0 [ 3488.337723][T32392] netlink_deliver_tap+0x19c/0x1b0 [ 3488.337742][T32392] netlink_sendskb+0x68/0x140 [ 3488.337767][T32392] netlink_unicast+0x397/0x9e0 [ 3488.337788][T32392] ? __asan_memcpy+0x40/0x70 [ 3488.337812][T32392] ? __pfx_netlink_unicast+0x10/0x10 [ 3488.337845][T32392] netlink_rcv_skb+0x28c/0x470 [ 3488.337864][T32392] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3488.337888][T32392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3488.337917][T32392] ? bpf_lsm_capable+0x9/0x20 [ 3488.337936][T32392] ? security_capable+0x7e/0x2e0 [ 3488.337966][T32392] nfnetlink_rcv+0x26a/0x2520 [ 3488.337992][T32392] ? __dev_queue_xmit+0x1d79/0x3b50 [ 3488.338024][T32392] ? __dev_queue_xmit+0x27b/0x3b50 [ 3488.338058][T32392] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3488.338081][T32392] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3488.338116][T32392] ? ref_tracker_free+0x63a/0x7d0 [ 3488.338140][T32392] ? __asan_memcpy+0x40/0x70 [ 3488.338156][T32392] ? __pfx_ref_tracker_free+0x10/0x10 [ 3488.338196][T32392] ? skb_clone+0x246/0x3a0 [ 3488.338220][T32392] ? __netlink_deliver_tap+0x807/0x850 [ 3488.338238][T32392] ? netlink_deliver_tap+0x2e/0x1b0 [ 3488.338262][T32392] ? netlink_deliver_tap+0x2e/0x1b0 [ 3488.338287][T32392] netlink_unicast+0x82f/0x9e0 [ 3488.338320][T32392] ? __pfx_netlink_unicast+0x10/0x10 [ 3488.338344][T32392] ? netlink_sendmsg+0x642/0xb30 [ 3488.338359][T32392] ? skb_put+0x11b/0x210 [ 3488.338382][T32392] netlink_sendmsg+0x805/0xb30 [ 3488.338408][T32392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3488.338431][T32392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3488.338457][T32392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3488.338473][T32392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3488.338492][T32392] __sock_sendmsg+0x219/0x270 [ 3488.338520][T32392] ____sys_sendmsg+0x505/0x830 [ 3488.338545][T32392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3488.338575][T32392] ? import_iovec+0x74/0xa0 [ 3488.338599][T32392] ___sys_sendmsg+0x21f/0x2a0 [ 3488.338622][T32392] ? __pfx____sys_sendmsg+0x10/0x10 [ 3488.338679][T32392] ? __fget_files+0x2a/0x420 [ 3488.338701][T32392] ? __fget_files+0x3a0/0x420 [ 3488.338740][T32392] __x64_sys_sendmsg+0x19b/0x260 [ 3488.338763][T32392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3488.338794][T32392] ? __pfx_ksys_write+0x10/0x10 [ 3488.338812][T32392] ? rcu_is_watching+0x15/0xb0 [ 3488.338836][T32392] ? do_syscall_64+0xbe/0x3b0 [ 3488.338859][T32392] do_syscall_64+0xfa/0x3b0 [ 3488.338878][T32392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3488.338894][T32392] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3488.338912][T32392] ? clear_bhb_loop+0x60/0xb0 [ 3488.338933][T32392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3488.338949][T32392] RIP: 0033:0x7fdf3158eec9 [ 3488.338964][T32392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3488.338980][T32392] RSP: 002b:00007fdf3249f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3488.338999][T32392] RAX: ffffffffffffffda RBX: 00007fdf317e5fa0 RCX: 00007fdf3158eec9 [ 3488.339012][T32392] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004 [ 3488.339023][T32392] RBP: 00007fdf3249f090 R08: 0000000000000000 R09: 0000000000000000 [ 3488.339034][T32392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3488.339044][T32392] R13: 00007fdf317e6038 R14: 00007fdf317e5fa0 R15: 00007fdf3190fa28 [ 3488.339075][T32392] [ 3488.350855][T21631] hub 6-1:32.0: bad descriptor, ignoring hub [ 3488.755470][ T5908] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3489.056441][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 3489.063296][ T5908] usb 4-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 3489.081703][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3489.143066][ T5908] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 3489.161859][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3489.208259][ T5908] usb 4-1: Product: syz [ 3489.221681][ T5908] usb 4-1: Manufacturer: syz [ 3489.234746][ T5908] usb 4-1: SerialNumber: syz [ 3489.268554][ T5908] usb 4-1: config 0 descriptor?? [ 3489.504653][T21631] hub 6-1:32.0: probe with driver hub failed with error -5 [ 3489.718514][ T5908] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3489.732913][T25718] usb 4-1: Failed to submit usb control message: -71 [ 3489.741744][T25718] usb 4-1: unable to send the bmi data to the device: -71 [ 3489.753198][T32404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3489.763256][ T5908] usb 4-1: USB disconnect, device number 52 [ 3489.798945][T25718] usb 4-1: unable to get target info from device [ 3489.815303][T25718] usb 4-1: could not get target info (-71) [ 3489.817386][T21631] usb 6-1: USB disconnect, device number 126 [ 3489.821171][T25718] usb 4-1: could not probe fw (-71) [ 3489.925924][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3490.495349][ T5908] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3490.735348][T32418] bond0: (slave netdevsim0): Releasing backup interface [ 3490.747728][ T5842] usb 5-1: USB disconnect, device number 23 [ 3490.799378][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3490.814697][T32418] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 3490.875336][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3490.892416][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3491.235973][ T5908] usb 4-1: config 0 descriptor?? [ 3491.667581][ T5908] logitech-djreceiver 0003:046D:C71F.00B3: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 3491.853215][ T5908] usb 4-1: USB disconnect, device number 53 [ 3492.705427][ T5908] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3492.866252][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 3492.905593][ T5908] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3492.927386][ T5908] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3492.960674][ T5908] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3492.983590][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3493.739503][T32449] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20036'. [ 3493.945594][T27073] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3494.055227][T22102] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 3494.145738][T27073] usb 5-1: Using ep0 maxpacket: 32 [ 3494.157996][T27073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 3494.202895][T27073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 3494.214568][T22102] usb 7-1: Using ep0 maxpacket: 32 [ 3494.226846][T22102] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 3494.247393][T22102] usb 7-1: config 0 has no interface number 0 [ 3494.264986][T27073] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 3494.276890][T22102] usb 7-1: config 0 interface 184 has no altsetting 0 [ 3494.287331][T27073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3494.301310][T22102] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3494.314706][T22102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3494.324654][T27073] usb 5-1: Product: syz [ 3494.334097][T27073] usb 5-1: Manufacturer: syz [ 3494.343950][T22102] usb 7-1: Product: syz [ 3494.350372][T27073] usb 5-1: SerialNumber: syz [ 3494.367937][T22102] usb 7-1: Manufacturer: syz [ 3494.372568][T22102] usb 7-1: SerialNumber: syz [ 3494.391741][T27073] usb 5-1: config 0 descriptor?? [ 3494.424429][T22102] usb 7-1: config 0 descriptor?? [ 3494.441184][T22102] smsc75xx v1.0.0 [ 3494.446428][T22102] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3494.468745][T22102] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 3494.619805][T27073] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3495.745931][T25718] usb 5-1: Failed to submit usb control message: -110 [ 3495.757287][T25718] usb 5-1: unable to send the bmi data to the device: -110 [ 3495.799511][T25718] usb 5-1: unable to get target info from device [ 3495.806251][T25718] usb 5-1: could not get target info (-110) [ 3495.813410][T25718] usb 5-1: could not probe fw (-110) [ 3496.242295][ T5908] usb 4-1: string descriptor 0 read error: -71 [ 3496.251323][ T5908] hub 4-1:32.0: bad descriptor, ignoring hub [ 3496.264608][ T5908] hub 4-1:32.0: probe with driver hub failed with error -5 [ 3496.348060][ T5908] usb 4-1: USB disconnect, device number 54 [ 3496.508463][ T5842] usb 7-1: USB disconnect, device number 90 [ 3496.655000][ T5908] usb 5-1: USB disconnect, device number 24 [ 3496.819770][T32476] FAULT_INJECTION: forcing a failure. [ 3496.819770][T32476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3496.851719][T32476] CPU: 0 UID: 0 PID: 32476 Comm: syz.4.20043 Not tainted syzkaller #0 PREEMPT(full) [ 3496.851734][T32476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3496.851741][T32476] Call Trace: [ 3496.851746][T32476] [ 3496.851751][T32476] dump_stack_lvl+0x189/0x250 [ 3496.851775][T32476] ? __pfx____ratelimit+0x10/0x10 [ 3496.851791][T32476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3496.851812][T32476] ? __pfx__printk+0x10/0x10 [ 3496.851828][T32476] ? __might_fault+0xb0/0x130 [ 3496.851860][T32476] should_fail_ex+0x414/0x560 [ 3496.851887][T32476] _copy_from_user+0x2d/0xb0 [ 3496.851908][T32476] kstrtouint_from_user+0xc4/0x170 [ 3496.851928][T32476] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 3496.851961][T32476] proc_fail_nth_write+0x88/0x200 [ 3496.851989][T32476] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3496.852014][T32476] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3496.852034][T32476] vfs_write+0x27e/0xb30 [ 3496.852063][T32476] ? __pfx_vfs_write+0x10/0x10 [ 3496.852083][T32476] ? __fget_files+0x2a/0x420 [ 3496.852109][T32476] ? __fget_files+0x3a0/0x420 [ 3496.852127][T32476] ? __fget_files+0x2a/0x420 [ 3496.852143][T32476] ksys_write+0x145/0x250 [ 3496.852156][T32476] ? __pfx_ksys_write+0x10/0x10 [ 3496.852170][T32476] ? do_syscall_64+0xbe/0x3b0 [ 3496.852183][T32476] do_syscall_64+0xfa/0x3b0 [ 3496.852192][T32476] ? lockdep_hardirqs_on+0x9c/0x150 [ 3496.852203][T32476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3496.852219][T32476] ? clear_bhb_loop+0x60/0xb0 [ 3496.852240][T32476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3496.852256][T32476] RIP: 0033:0x7fed8c58d97f [ 3496.852272][T32476] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3496.852286][T32476] RSP: 002b:00007fed8a7d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3496.852305][T32476] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed8c58d97f [ 3496.852317][T32476] RDX: 0000000000000001 RSI: 00007fed8a7d50a0 RDI: 0000000000000003 [ 3496.852328][T32476] RBP: 00007fed8a7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 3496.852339][T32476] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3496.852350][T32476] R13: 00007fed8c7e6218 R14: 00007fed8c7e6180 R15: 00007fed8c90fa28 [ 3496.852380][T32476] [ 3497.134681][T32474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3497.242129][T32483] netlink: 'syz.4.20046': attribute type 6 has an invalid length. [ 3497.263794][T32483] netlink: 'syz.4.20046': attribute type 1 has an invalid length. [ 3497.303325][T32483] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20046'. [ 3497.935358][T32496] netlink: 'syz.6.20049': attribute type 16 has an invalid length. [ 3497.943257][T32496] netlink: 'syz.6.20049': attribute type 17 has an invalid length. [ 3498.085471][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3498.255332][T27073] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3498.405740][ T5842] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3498.405917][T27073] usb 6-1: Using ep0 maxpacket: 8 [ 3498.441166][T27073] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3498.479903][T27073] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3498.515377][ T5842] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3498.528010][T32503] bond0: (slave netdevsim0): Releasing backup interface [ 3498.548974][T27073] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3498.583136][T27073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3498.614166][ T5842] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3498.730297][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3498.797281][T32490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3498.831838][ T5842] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3500.636639][ T5842] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 3500.765470][T14064] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3500.935524][T14064] usb 4-1: Using ep0 maxpacket: 32 [ 3500.952818][T14064] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3500.986157][T14064] usb 4-1: config 0 has no interface number 0 [ 3501.013182][T14064] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3501.025365][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 3501.062636][T14064] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3501.102024][T14064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3501.129754][T14064] usb 4-1: Product: syz [ 3501.141844][T14064] usb 4-1: Manufacturer: syz [ 3501.158601][T14064] usb 4-1: SerialNumber: syz [ 3501.190017][T14064] usb 4-1: config 0 descriptor?? [ 3501.200723][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 3501.235766][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 3501.286692][T14064] smsc75xx v1.0.0 [ 3501.291002][ T5842] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 3501.308548][T14064] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3501.318908][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3501.342119][T14064] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 3501.354858][ T5842] usb 7-1: Product: syz [ 3501.383079][ T5842] usb 7-1: Manufacturer: syz [ 3501.415187][ T5842] usb 7-1: SerialNumber: syz [ 3501.440480][ T5842] usb 7-1: config 0 descriptor?? [ 3501.563271][ T5842] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3502.122194][T14064] usb 5-1: USB disconnect, device number 25 [ 3502.472681][T27073] usb 6-1: string descriptor 0 read error: -71 [ 3502.483028][T27073] hub 6-1:32.0: bad descriptor, ignoring hub [ 3502.499213][T27073] hub 6-1:32.0: probe with driver hub failed with error -5 [ 3502.553551][T27073] usb 6-1: USB disconnect, device number 127 [ 3502.622553][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3502.646449][ T2941] usb 7-1: Failed to submit usb control message: -110 [ 3502.653945][ T2941] usb 7-1: unable to send the bmi data to the device: -110 [ 3502.668442][ T2941] usb 7-1: unable to get target info from device [ 3502.682602][ T2941] usb 7-1: could not get target info (-110) [ 3502.690351][ T2941] usb 7-1: could not probe fw (-110) [ 3502.985336][T27073] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 3503.137099][T27073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3503.147739][T27073] usb 6-1: config 0 has no interfaces? [ 3503.153225][T27073] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3503.162883][T27073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3503.179598][T27073] usb 6-1: config 0 descriptor?? [ 3503.202529][T21631] usb 7-1: USB disconnect, device number 91 [ 3503.389409][T32527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3503.398449][T32527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3503.407541][T32527] FAULT_INJECTION: forcing a failure. [ 3503.407541][T32527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3503.420743][T32527] CPU: 0 UID: 0 PID: 32527 Comm: syz.5.20057 Not tainted syzkaller #0 PREEMPT(full) [ 3503.420765][T32527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3503.420774][T32527] Call Trace: [ 3503.420779][T32527] [ 3503.420783][T32527] dump_stack_lvl+0x189/0x250 [ 3503.420801][T32527] ? __pfx____ratelimit+0x10/0x10 [ 3503.420811][T32527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3503.420823][T32527] ? __pfx__printk+0x10/0x10 [ 3503.420832][T32527] ? __might_fault+0xb0/0x130 [ 3503.420850][T32527] should_fail_ex+0x414/0x560 [ 3503.420866][T32527] _copy_from_user+0x2d/0xb0 [ 3503.420879][T32527] ___sys_sendmsg+0x158/0x2a0 [ 3503.420892][T32527] ? __pfx____sys_sendmsg+0x10/0x10 [ 3503.420922][T32527] ? __fget_files+0x2a/0x420 [ 3503.420935][T32527] ? __fget_files+0x3a0/0x420 [ 3503.420952][T32527] __x64_sys_sendmsg+0x19b/0x260 [ 3503.420965][T32527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3503.420981][T32527] ? __pfx_ksys_write+0x10/0x10 [ 3503.420992][T32527] ? rcu_is_watching+0x15/0xb0 [ 3503.421006][T32527] ? do_syscall_64+0xbe/0x3b0 [ 3503.421018][T32527] do_syscall_64+0xfa/0x3b0 [ 3503.421028][T32527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3503.421037][T32527] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3503.421046][T32527] ? clear_bhb_loop+0x60/0xb0 [ 3503.421057][T32527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3503.421066][T32527] RIP: 0033:0x7faef8b8eec9 [ 3503.421078][T32527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3503.421086][T32527] RSP: 002b:00007faef9ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3503.421097][T32527] RAX: ffffffffffffffda RBX: 00007faef8de5fa0 RCX: 00007faef8b8eec9 [ 3503.421105][T32527] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 3503.421111][T32527] RBP: 00007faef9ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 3503.421117][T32527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3503.421123][T32527] R13: 00007faef8de6038 R14: 00007faef8de5fa0 R15: 00007faef8f0fa28 [ 3503.421138][T32527] [ 3503.421957][T16974] usb 6-1: USB disconnect, device number 2 [ 3503.775222][ T5842] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 3503.815438][T21631] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 3503.938038][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3503.948729][ T5842] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3503.971968][ T5842] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3504.001568][T21631] usb 7-1: Using ep0 maxpacket: 16 [ 3504.062358][T27073] usb 4-1: USB disconnect, device number 55 [ 3504.064999][T21631] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3504.094558][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3504.214375][T21631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.223448][ T5842] usb 5-1: config 0 descriptor?? [ 3504.228862][T21631] usb 7-1: Product: syz [ 3504.233451][T21631] usb 7-1: Manufacturer: syz [ 3504.241100][ T5842] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3504.252082][T21631] usb 7-1: SerialNumber: syz [ 3504.257057][ T5842] dvb-usb: bulk message failed: -22 (3/0) [ 3504.274750][T21631] r8152-cfgselector 7-1: Unknown version 0x0000 [ 3504.282716][ T5842] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3504.292760][T21631] r8152-cfgselector 7-1: config 0 descriptor?? [ 3504.337162][ T5842] dvb-usb: Artec T1 USB2.0 error while loading driver (-23) [ 3504.365350][ T5842] dvb_usb_dibusb_mb 5-1:0.0: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 3504.397812][ T5842] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in warm state. [ 3504.407477][ T5842] dvb-usb: bulk message failed: -22 (3/0) [ 3504.428056][ T5842] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 3504.528009][ T5842] dvb-usb: Artec T1 USB2.0 TVBOX (please check the warm ID) error while loading driver (-23) [ 3504.579332][ T5842] dvb_usb_dibusb_mc 5-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -23 [ 3504.645288][T21631] r8152-cfgselector 7-1: Unknown version 0x08a0 [ 3504.670924][T21631] r8152-cfgselector 7-1: bad CDC descriptors [ 3504.758578][T27073] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3504.932854][T14064] r8152-cfgselector 7-1: USB disconnect, device number 92 [ 3504.967179][T27073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3505.013062][T27073] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3505.022371][T27073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3505.051432][T27073] usb 4-1: config 0 descriptor?? [ 3505.091583][T21631] usb 5-1: USB disconnect, device number 26 [ 3505.248052][T22102] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3505.299283][T27073] usbhid 4-1:0.0: can't add hid device: -71 [ 3505.344418][T27073] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3505.464868][T27073] usb 4-1: USB disconnect, device number 56 [ 3505.545156][T22102] usb 6-1: Using ep0 maxpacket: 8 [ 3505.570144][T21631] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3505.579106][T22102] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3505.598280][T22102] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3505.616160][T22102] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3505.629599][T22102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3505.815414][T27073] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3506.085269][T27073] usb 4-1: Using ep0 maxpacket: 32 [ 3506.092926][T27073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3506.142605][T27073] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3506.171519][T27073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.257643][T21631] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3506.294328][T21631] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3506.329480][T21631] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3506.368923][T27073] usb 4-1: config 0 descriptor?? [ 3506.412234][T27073] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3506.424014][T21631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.435637][T27073] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3506.659491][T32559] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3506.681376][T21631] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3507.997161][T21631] usb 4-1: USB disconnect, device number 57 [ 3508.004998][T21631] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3508.215322][ T6784] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 3508.368051][ T6784] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 3508.381248][ T6784] usb 7-1: config 5 has no interface number 0 [ 3508.394303][ T6784] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3508.408611][ T6784] usb 7-1: config 5 interface 123 has no altsetting 0 [ 3508.469498][ T6784] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 3508.483898][ T6784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.498665][ T6784] usb 7-1: Product: syz [ 3508.502946][ T6784] usb 7-1: Manufacturer: syz [ 3508.516427][ T6784] usb 7-1: SerialNumber: syz [ 3508.675543][T27073] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3508.783689][ T6784] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 3508.829480][ T6784] usb 7-1: USB disconnect, device number 93 [ 3508.925349][T27073] usb 4-1: Using ep0 maxpacket: 32 [ 3508.939311][T27073] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3508.947851][T27073] usb 4-1: config 0 has no interface number 0 [ 3508.954247][T27073] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3508.969522][T27073] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3508.978910][T27073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.987226][T27073] usb 4-1: Product: syz [ 3508.991499][T27073] usb 4-1: Manufacturer: syz [ 3508.996823][T27073] usb 4-1: SerialNumber: syz [ 3509.005658][T27073] usb 4-1: config 0 descriptor?? [ 3509.022407][T27073] smsc75xx v1.0.0 [ 3509.026275][T27073] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3509.037770][T27073] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 3509.951865][T22102] usb 6-1: string descriptor 0 read error: -71 [ 3510.003909][T22102] hub 6-1:32.0: bad descriptor, ignoring hub [ 3510.024836][T22102] hub 6-1:32.0: probe with driver hub failed with error -5 [ 3510.226883][T22102] usb 6-1: USB disconnect, device number 3 [ 3511.253920][T22102] usb 5-1: USB disconnect, device number 27 [ 3511.543962][T32594] netlink: 'syz.6.20076': attribute type 10 has an invalid length. [ 3511.558788][T32594] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 3511.567559][T32594] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3511.584168][T32599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20079'. [ 3511.694913][T27073] usb 4-1: USB disconnect, device number 58 [ 3511.758166][T32601] netlink: 'syz.0.20078': attribute type 12 has an invalid length. [ 3511.999936][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.006713][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.045694][T32619] net_ratelimit: 253 callbacks suppressed [ 3513.045708][T32619] openvswitch: netlink: Flow actions attr not present in new flow. [ 3513.782873][T32634] IPv6: addrconf: prefix option has invalid lifetime [ 3514.825517][T32646] fuse: Unknown parameter 'gÉÇ1–!Ù&–UxÅÖ q*&@ºâ|š95+ÓÃX†¤“®úOîŽ z"»NÇñÔH3<Ÿ»{b¤ áØ/eðàÿ' [ 3515.005235][ T5908] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3515.096177][T32652] netlink: 'syz.3.20093': attribute type 10 has an invalid length. [ 3515.111566][T32652] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3515.154350][T32654] openvswitch: netlink: Flow actions attr not present in new flow. [ 3515.245415][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 3515.410894][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 3515.488778][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 3515.602423][ T5908] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 3515.630159][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.683553][ T5908] usb 5-1: Product: syz [ 3515.700437][ T5908] usb 5-1: Manufacturer: syz [ 3515.705078][ T5908] usb 5-1: SerialNumber: syz [ 3515.712849][ T5908] usb 5-1: config 0 descriptor?? [ 3515.888612][ T5908] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3516.243189][T32661] openvswitch: netlink: Flow actions attr not present in new flow. [ 3516.354101][T32661] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.20095'. [ 3516.514527][T32668] openvswitch: netlink: Flow actions attr not present in new flow. [ 3516.685995][ T5842] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3516.695076][T32670] netlink: 'syz.6.20096': attribute type 10 has an invalid length. [ 3516.805644][T32677] fuse: Unknown parameter 'ˆKù0x0000000000000003' [ 3516.900380][ T5842] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3516.961829][ T2941] usb 5-1: Failed to submit usb control message: -110 [ 3516.972170][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3517.003843][ T2941] usb 5-1: unable to send the bmi data to the device: -110 [ 3517.036050][ T5842] usb 4-1: Product: syz [ 3517.043842][ T2941] usb 5-1: unable to get target info from device [ 3517.050417][ T5842] usb 4-1: Manufacturer: syz [ 3517.059825][ T5842] usb 4-1: SerialNumber: syz [ 3517.064444][ T2941] usb 5-1: could not get target info (-110) [ 3517.073166][ T2941] usb 5-1: could not probe fw (-110) [ 3517.151938][T32685] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.20104'. [ 3517.331037][ T5842] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 3517.380965][ T5842] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 3517.420335][ T5842] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3517.474796][ T5842] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 3517.703885][ T5908] usb 5-1: USB disconnect, device number 28 [ 3517.901625][T32692] netlink: 'syz.4.20106': attribute type 1 has an invalid length. [ 3517.949270][T32693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3518.041898][T32695] gretap1: entered allmulticast mode [ 3518.059843][T32695] bond2: (slave gretap1): making interface the new active one [ 3518.149393][T32695] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 3518.253270][T32692] vivid-003: ================= START STATUS ================= [ 3518.347434][T32692] vivid-003: Radio HW Seek Mode: Bounded [ 3518.353216][T32692] vivid-003: Radio Programmable HW Seek: false [ 3518.392967][T32692] vivid-003: RDS Rx I/O Mode: Block I/O [ 3518.401987][T32692] vivid-003: Generate RBDS Instead of RDS: false [ 3518.412045][T32692] vivid-003: RDS Reception: true [ 3518.421589][T32692] vivid-003: RDS Program Type: 0 inactive [ 3518.430983][T32692] vivid-003: RDS PS Name: inactive [ 3518.436480][T32692] vivid-003: RDS Radio Text: inactive [ 3518.442026][T32692] vivid-003: RDS Traffic Announcement: false inactive [ 3518.460274][T32692] vivid-003: RDS Traffic Program: false inactive [ 3518.472103][T32692] vivid-003: RDS Music: false inactive [ 3518.526618][T32692] vivid-003: ================== END STATUS ================== [ 3518.625281][ T5842] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3518.810795][ T5842] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 3518.828324][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.860224][ T5842] usb 5-1: Product: syz [ 3518.871036][ T5842] usb 5-1: Manufacturer: syz [ 3518.880656][ T5842] usb 5-1: SerialNumber: syz [ 3518.897287][ T5842] usb 5-1: config 0 descriptor?? [ 3518.937933][ T5842] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 3519.005219][T21631] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 3519.143737][T32692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3519.155360][T21631] usb 7-1: Using ep0 maxpacket: 8 [ 3519.167260][T21631] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3519.173564][T32712] fuse: Unknown parameter 'group_i00000000000000000000' [ 3519.203618][T21631] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3519.214330][T21631] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3519.224797][T32692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3519.237632][ T5842] sonixb 5-1:0.0: Error reading register 00: -71 [ 3519.253903][T21631] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3519.278767][ T5842] usb 5-1: USB disconnect, device number 29 [ 3519.305898][T21631] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3519.329604][T21631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3519.897709][ T6784] usb 4-1: USB disconnect, device number 59 [ 3520.605314][T21631] usb 7-1: GET_CAPABILITIES returned 0 [ 3520.655198][T21631] usbtmc 7-1:16.0: can't read capabilities [ 3520.854232][T21631] usb 7-1: USB disconnect, device number 94 [ 3520.892612][T32735] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 3521.765473][T32753] fuse: Bad value for 'fd' [ 3522.086251][T32760] bond0: (slave netdevsim0): Releasing backup interface [ 3523.070475][ T302] fuse: Unknown parameter 'group_id00000000000000000000' [ 3523.315352][ T5908] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 3523.695175][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 3523.904725][ T5908] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3523.963614][ T5908] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3523.994578][ T5908] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3524.014119][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3524.035908][ T310] openvswitch: netlink: Flow actions attr not present in new flow. [ 3524.555409][T21631] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3524.717588][T21631] usb 4-1: Using ep0 maxpacket: 8 [ 3524.728325][T21631] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3524.754507][T21631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3524.780716][T21631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3524.847835][T21631] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3524.919326][T21631] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3524.977930][T21631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3525.337788][ T324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3525.344286][ T324] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3525.963565][ T331] fuse: Bad value for 'fd' [ 3526.145454][T27073] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3526.290214][T21631] usb 4-1: GET_CAPABILITIES returned 0 [ 3526.297449][T27073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3526.312388][T27073] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3526.312400][T21631] usbtmc 4-1:16.0: can't read capabilities [ 3526.366623][T27073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3526.409215][T27073] usb 6-1: config 0 descriptor?? [ 3526.511727][T14064] usb 4-1: USB disconnect, device number 60 [ 3526.604486][ T5908] usb 7-1: string descriptor 0 read error: -71 [ 3526.612272][ T5908] hub 7-1:32.0: bad descriptor, ignoring hub [ 3526.646859][ T5908] hub 7-1:32.0: probe with driver hub failed with error -5 [ 3526.776191][ T5908] usb 7-1: USB disconnect, device number 95 [ 3526.842938][T27073] logitech-djreceiver 0003:046D:C71F.00B4: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 3526.886826][ T338] fuse: Unknown parameter 'bF50x0000000000000008' [ 3526.965781][ T339] input: syz0 as /devices/virtual/input/input243 [ 3527.037504][T21631] usb 6-1: USB disconnect, device number 4 [ 3527.091455][ T340] fido_id[340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 3527.387824][ T346] openvswitch: netlink: Flow actions attr not present in new flow. [ 3527.921943][ T358] fuse: Unknown parameter 'group_id00000000000000000000' [ 3529.755585][T21631] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3529.905332][T21631] usb 4-1: device descriptor read/64, error -71 [ 3530.145498][T21631] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3530.181635][ T387] fuse: Bad value for 'fd' [ 3530.285382][T21631] usb 4-1: device descriptor read/64, error -71 [ 3530.395606][T21631] usb usb4-port1: attempt power cycle [ 3530.735199][T21631] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3530.766564][T21631] usb 4-1: device descriptor read/8, error -71 [ 3531.015660][T21631] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3531.058148][T21631] usb 4-1: device descriptor read/8, error -71 [ 3531.166929][T21631] usb usb4-port1: unable to enumerate USB device [ 3531.989349][ T399] netlink: zone id is out of range [ 3532.038713][ T399] netlink: zone id is out of range [ 3532.043856][ T399] netlink: zone id is out of range [ 3532.065470][ T399] netlink: zone id is out of range [ 3532.071733][ T397] netlink: zone id is out of range [ 3532.077324][ T397] netlink: zone id is out of range [ 3532.082437][ T397] netlink: zone id is out of range [ 3532.087995][ T397] netlink: zone id is out of range [ 3532.093105][ T397] netlink: zone id is out of range [ 3532.098628][ T397] netlink: zone id is out of range [ 3532.189462][ T398] bond0: (slave netdevsim0): Releasing backup interface [ 3532.339822][ T398] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 3532.705498][ T5842] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3532.809329][ T6784] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3532.865730][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 3532.886698][ T5842] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 3532.916709][ T5842] usb 6-1: config 0 has no interface number 0 [ 3532.922859][ T5842] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3532.936051][ T5842] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3532.948891][ T5842] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3532.960260][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3532.972586][ T5842] usb 6-1: Product: syz [ 3532.976951][ T6784] usb 4-1: Using ep0 maxpacket: 16 [ 3532.982634][ T5842] usb 6-1: SerialNumber: syz [ 3532.990813][ T6784] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3533.000402][ T6784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3533.008568][ T6784] usb 4-1: Product: syz [ 3533.013692][ T6784] usb 4-1: Manufacturer: syz [ 3533.018424][T21631] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3533.039169][ T5842] usb 6-1: config 0 descriptor?? [ 3533.044974][ T6784] usb 4-1: SerialNumber: syz [ 3533.053832][ T5842] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 3533.070316][ T6784] r8152-cfgselector 4-1: Unknown version 0x0000 [ 3533.079388][ T5842] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input244 [ 3533.089946][ T6784] r8152-cfgselector 4-1: config 0 descriptor?? [ 3533.097144][ T422] fuse: Bad value for 'user_id' [ 3533.102143][ T422] fuse: Bad value for 'user_id' [ 3533.343179][ T6784] r8152-cfgselector 4-1: Unknown version 0x08a0 [ 3533.355889][ T6784] r8152-cfgselector 4-1: bad CDC descriptors [ 3533.471157][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.478471][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.486087][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.493472][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.500749][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.508121][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.515422][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.522543][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.529708][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.536908][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3533.569798][ T5842] r8152-cfgselector 4-1: USB disconnect, device number 65 [ 3533.577260][ T6784] usb 6-1: USB disconnect, device number 5 [ 3533.585403][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 3533.723672][ T6784] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 3533.806850][T21631] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3533.827810][T21631] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3533.843335][T21631] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3533.863071][T21631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3533.995851][ T415] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3534.016651][T21631] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3535.043759][ T438] fuse: Bad value for 'fd' [ 3535.625190][T27073] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3535.795209][T27073] usb 6-1: device descriptor read/64, error -71 [ 3535.816400][T21631] usb 5-1: USB disconnect, device number 30 [ 3536.045480][T27073] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3536.195238][T27073] usb 6-1: device descriptor read/64, error -71 [ 3536.305545][T27073] usb usb6-port1: attempt power cycle [ 3536.621939][ T452] tipc: Enabled bearer , priority 0 [ 3536.652570][ T452] syzkaller0: entered promiscuous mode [ 3536.669944][ T452] syzkaller0: entered allmulticast mode [ 3536.675339][T27073] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3536.729445][T27073] usb 6-1: device descriptor read/8, error -71 [ 3536.747580][ T452] tipc: Resetting bearer [ 3536.934459][ T458] futex_wake_op: syz.4.20168 tries to shift op by 32; fix this program [ 3536.975348][T27073] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3537.005418][T21631] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3537.011855][T27073] usb 6-1: device descriptor read/8, error -71 [ 3537.145893][T27073] usb usb6-port1: unable to enumerate USB device [ 3537.165730][ T462] fuse: Bad value for 'user_id' [ 3537.170624][ T462] fuse: Bad value for 'user_id' [ 3537.205631][T21631] usb 4-1: Using ep0 maxpacket: 16 [ 3537.225725][ T6784] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 3537.239266][T21631] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 3537.271943][T21631] usb 4-1: config 0 has no interface number 0 [ 3537.337025][T21631] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3537.370480][T21631] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3537.405639][T21631] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3537.414694][T21631] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3537.422825][T21631] usb 4-1: Product: syz [ 3537.430901][T21631] usb 4-1: SerialNumber: syz [ 3537.450472][T21631] usb 4-1: config 0 descriptor?? [ 3537.469092][ T6784] usb 5-1: not running at top speed; connect to a high speed hub [ 3537.478600][ T6784] usb 5-1: config 95 has an invalid interface number: 74 but max is 0 [ 3537.496017][T21631] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 3537.511376][ T6784] usb 5-1: config 95 has an invalid interface number: 60 but max is 0 [ 3537.530542][T21631] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input245 [ 3537.545380][ T6784] usb 5-1: config 95 has 2 interfaces, different from the descriptor's value: 1 [ 3537.581556][ T6784] usb 5-1: config 95 has no interface number 0 [ 3537.625485][ T6784] usb 5-1: config 95 has no interface number 1 [ 3537.656660][ T6784] usb 5-1: config 95 interface 74 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3537.686422][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 3537.725238][T21631] tipc: Node number set to 4238648415 [ 3537.763448][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 3537.805832][T21631] usb 4-1: USB disconnect, device number 66 [ 3537.811761][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 3537.824143][ T451] tipc: Resetting bearer [ 3537.833868][ T6784] usb 5-1: config 95 interface 74 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 3537.885781][T21631] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 3537.894226][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 3537.912284][ T451] tipc: Disabling bearer [ 3537.935151][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 3537.967662][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 3537.979616][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 3538.022843][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 3538.060545][ T6784] usb 5-1: config 95 interface 74 altsetting 8 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 3538.105019][ T6784] usb 5-1: too many endpoints for config 95 interface 60 altsetting 215: 144, using maximum allowed: 30 [ 3538.121373][ T6784] usb 5-1: config 95 interface 60 altsetting 215 has a duplicate endpoint with address 0x6, skipping [ 3538.133074][ T6784] usb 5-1: config 95 interface 60 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3538.147567][ T6784] usb 5-1: config 95 interface 74 has no altsetting 0 [ 3538.154404][ T6784] usb 5-1: config 95 interface 60 has no altsetting 0 [ 3538.205362][ T6784] usb 5-1: New USB device found, idVendor=2357, idProduct=0107, bcdDevice=32.69 [ 3538.214879][ T6784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3538.245269][ T6784] usb 5-1: Product: syz [ 3538.250139][ T6784] usb 5-1: Manufacturer: syz [ 3538.285261][ T6784] usb 5-1: SerialNumber: syz [ 3538.985372][T21631] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 3539.152035][T21631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3539.176833][T21631] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3539.201490][T21631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3539.222118][T21631] usb 7-1: config 0 descriptor?? [ 3539.441754][T21631] usbhid 7-1:0.0: can't add hid device: -71 [ 3539.492170][T21631] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3539.805565][T21631] usb 7-1: USB disconnect, device number 96 [ 3540.139794][ T6784] usb 5-1: USB disconnect, device number 31 [ 3540.431624][T21631] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 3540.615196][T21631] usb 7-1: Using ep0 maxpacket: 32 [ 3540.622172][T21631] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3540.664261][T21631] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3540.704876][T21631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3540.752020][T21631] usb 7-1: config 0 descriptor?? [ 3540.878691][T21631] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3540.926185][T21631] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3540.946037][ T507] netlink: 'syz.3.20185': attribute type 12 has an invalid length. [ 3541.055216][ T6784] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3541.106757][ T507] vivid-001: ================= START STATUS ================= [ 3541.128914][ T507] vivid-001: Radio HW Seek Mode: Bounded [ 3541.134566][ T507] vivid-001: Radio Programmable HW Seek: false [ 3541.240478][ T507] vivid-001: RDS Rx I/O Mode: Block I/O [ 3541.343520][ T6784] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3541.368141][ T507] vivid-001: Generate RBDS Instead of RDS: false [ 3541.400314][ T507] vivid-001: RDS Reception: true [ 3541.427576][ T6784] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3541.455328][ T507] vivid-001: RDS Program Type: 0 inactive [ 3541.562512][ T507] vivid-001: RDS PS Name: inactive [ 3541.572507][ T507] vivid-001: RDS Radio Text: inactive [ 3541.589514][ T507] vivid-001: RDS Traffic Announcement: false inactive [ 3541.631993][ T507] vivid-001: RDS Traffic Program: false inactive [ 3541.665905][ T507] vivid-001: RDS Music: false inactive [ 3541.693286][ T507] vivid-001: ================== END STATUS ================== [ 3541.755914][ T6784] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3541.831065][ T6784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3542.092046][ T506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3542.412868][ T6784] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3542.761712][ T6784] usb 7-1: USB disconnect, device number 97 [ 3542.785734][ T6784] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 3542.837420][ T5842] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3543.023461][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 3543.032665][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3543.044320][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3543.054559][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3543.076602][ T5842] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3543.140278][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3543.186002][ T531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20192'. [ 3543.202109][ T5842] usb 4-1: config 0 descriptor?? [ 3543.255264][T21631] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3543.423955][T21631] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3543.435054][T21631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3543.452652][T21631] usb 6-1: Product: syz [ 3543.461221][T21631] usb 6-1: Manufacturer: syz [ 3543.481069][T21631] usb 6-1: SerialNumber: syz [ 3543.508070][ T6784] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 3543.614918][ T5842] microsoft 0003:045E:07DA.00B5: item fetching failed at offset 30/34 [ 3543.715329][ T6784] usb 7-1: Using ep0 maxpacket: 32 [ 3543.720863][ T5842] microsoft 0003:045E:07DA.00B5: parse failed [ 3543.788196][ T5908] usb 5-1: USB disconnect, device number 32 [ 3543.797995][ T5842] microsoft 0003:045E:07DA.00B5: probe with driver microsoft failed with error -22 [ 3543.824057][ T5842] usb 4-1: USB disconnect, device number 67 [ 3543.841080][ T6784] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 3543.850890][ T6784] usb 7-1: config 0 has no interface number 0 [ 3543.857288][ T6784] usb 7-1: config 0 interface 184 has no altsetting 0 [ 3544.049626][ T6784] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3544.075348][ T6784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3544.102761][ T6784] usb 7-1: Product: syz [ 3544.120146][ T6784] usb 7-1: Manufacturer: syz [ 3544.132127][ T6784] usb 7-1: SerialNumber: syz [ 3544.177266][ T6784] usb 7-1: config 0 descriptor?? [ 3544.198664][ T6784] smsc75xx v1.0.0 [ 3544.202697][ T6784] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3544.281822][ T6784] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 3544.405160][ T5908] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3544.633807][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3544.665474][ T5908] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3544.698226][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3544.760395][ T5908] usb 5-1: config 0 descriptor?? [ 3545.232703][T21631] net_ratelimit: 516 callbacks suppressed [ 3545.232720][T21631] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 3545.264126][T21631] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 3545.430919][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 3545.454050][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3545.507510][ T5908] usb 5-1: USB disconnect, device number 33 [ 3545.697148][T21631] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 3545.709565][T21631] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3545.731199][T21631] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3545.749014][T21631] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 3545.782500][T21631] usb 6-1: USB disconnect, device number 10 [ 3546.341622][ T554] openvswitch: netlink: Flow actions attr not present in new flow. [ 3546.404306][ T552] netlink: 300 bytes leftover after parsing attributes in process `syz.3.20199'. [ 3546.685535][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3546.845373][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 3546.854647][ T5908] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 3546.866906][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3546.910409][ T5908] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3546.932403][ T5908] usb 6-1: config 0 has no interface number 0 [ 3547.006415][ T5908] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3547.017436][T14064] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3547.038436][ T5908] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 3547.074198][ T5908] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 3547.114133][ T5908] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3547.189054][T14064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3547.218530][ T5908] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 3547.230377][T14064] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3547.269294][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3547.330338][T14064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3547.343530][ T5908] usb 6-1: Product: syz [ 3547.351365][ T5908] usb 6-1: Manufacturer: syz [ 3547.392759][T14064] usb 4-1: config 0 descriptor?? [ 3547.428726][ T5908] usb 6-1: SerialNumber: syz [ 3547.492286][ T5908] usb 6-1: config 0 descriptor?? [ 3547.533097][ T558] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3547.561976][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3547.683259][T14064] usbhid 4-1:0.0: can't add hid device: -71 [ 3547.700837][T14064] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3547.735196][T14064] usb 4-1: USB disconnect, device number 68 [ 3547.782898][ T5908] usb 6-1: USB disconnect, device number 11 [ 3548.165344][T27073] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3548.185490][T14064] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3548.347289][T27073] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3548.366764][T27073] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 3548.376271][T14064] usb 4-1: Using ep0 maxpacket: 32 [ 3548.392095][T27073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3548.403401][T14064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3548.414733][T14064] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3548.429972][T27073] usb 5-1: Product: syz [ 3548.434144][T27073] usb 5-1: Manufacturer: syz [ 3548.446317][T14064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3548.454314][T27073] usb 5-1: SerialNumber: syz [ 3548.474523][T27073] usb 5-1: config 0 descriptor?? [ 3548.506696][T14064] usb 4-1: config 0 descriptor?? [ 3548.518657][T14064] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3548.540446][T27073] ims_pcu 5-1:0.0: Zero length descriptor [ 3548.555184][T27073] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 3548.564114][T14064] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3548.665928][ T5842] usb 7-1: USB disconnect, device number 98 [ 3548.798911][ T566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20203'. [ 3548.918908][ T566] bond4: entered allmulticast mode [ 3548.936840][ T566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3548.986198][ T5842] usb 5-1: USB disconnect, device number 34 [ 3549.132206][ T584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3549.386416][ T593] netlink: 'syz.6.20209': attribute type 10 has an invalid length. [ 3549.412541][ T593] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 3549.422093][ T593] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3549.686937][ T595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3550.589593][T14064] usb 4-1: USB disconnect, device number 69 [ 3550.639124][T14064] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3550.896107][ T607] fuse: Invalid rootmode [ 3551.195220][ T6784] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3551.359639][ T6784] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 3551.401084][ T6784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3551.430010][ T6784] usb 4-1: Product: syz [ 3551.443542][ T6784] usb 4-1: Manufacturer: syz [ 3551.457866][ T6784] usb 4-1: SerialNumber: syz [ 3551.474870][ T6784] usb 4-1: config 0 descriptor?? [ 3551.493150][ T6784] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 3552.570979][ T621] binder: 618:621 ioctl c0306201 200000000640 returned -22 [ 3552.889759][ T625] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 3553.945443][ T6784] gspca_sunplus: reg_r err -110 [ 3553.950354][ T6784] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 3554.202845][ T629] netlink: zone id is out of range [ 3554.211123][ T629] netlink: zone id is out of range [ 3554.216452][ T629] netlink: zone id is out of range [ 3554.224131][ T629] netlink: zone id is out of range [ 3554.248488][ T629] netlink: zone id is out of range [ 3554.365241][ T5908] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 3554.445620][ T629] netlink: zone id is out of range [ 3554.450945][ T629] netlink: zone id is out of range [ 3554.456153][ T629] netlink: zone id is out of range [ 3554.462023][ T629] netlink: zone id is out of range [ 3554.537270][ T5908] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3554.548515][ T5908] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3554.582075][ T5908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3554.608995][ T5908] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3554.683711][ T5908] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3554.707234][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3554.738054][ T5908] usb 7-1: Product: syz [ 3554.757870][ T5908] usb 7-1: Manufacturer: syz [ 3554.779351][T27073] usb 4-1: USB disconnect, device number 70 [ 3554.820996][ T5908] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3555.023836][ T5908] usb 7-1: USB disconnect, device number 99 [ 3555.152972][ T646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20225'. [ 3555.425289][ T6784] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3555.463374][ T653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3555.609045][ T6784] usb 4-1: Using ep0 maxpacket: 16 [ 3555.653628][ T6784] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3555.995526][ T6784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3556.003662][ T6784] usb 4-1: Product: syz [ 3556.009780][ T6784] usb 4-1: Manufacturer: syz [ 3556.017032][ T6784] usb 4-1: SerialNumber: syz [ 3556.027921][ T6784] r8152-cfgselector 4-1: Unknown version 0x0000 [ 3556.034296][ T6784] r8152-cfgselector 4-1: config 0 descriptor?? [ 3556.498877][ T6784] r8152-cfgselector 4-1: Unknown version 0x08a0 [ 3556.516879][ T6784] r8152-cfgselector 4-1: bad CDC descriptors [ 3556.694584][T21631] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 3556.703025][ T6784] r8152-cfgselector 4-1: USB disconnect, device number 71 [ 3556.705366][ T5908] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3556.902318][T21631] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3556.913733][T21631] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3556.929823][T21631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3556.941791][T21631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3556.971608][ T662] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 3556.981934][T21631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3557.075646][ T5908] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3557.113852][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3557.122284][ T5908] usb 6-1: Product: syz [ 3557.130028][ T5908] usb 6-1: Manufacturer: syz [ 3557.134654][ T5908] usb 6-1: SerialNumber: syz [ 3557.197429][ T670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20231'. [ 3557.208587][ T670] bridge0: port 1(macsec0) entered blocking state [ 3557.215559][ T670] bridge0: port 1(macsec0) entered disabled state [ 3557.222490][ T670] macsec0: entered allmulticast mode [ 3557.228270][ T670] veth1_macvtap: entered allmulticast mode [ 3557.237231][ T670] macsec0: entered promiscuous mode [ 3557.284636][ T670] bridge0: port 1(macsec0) entered blocking state [ 3557.291190][ T670] bridge0: port 1(macsec0) entered forwarding state [ 3557.602573][ T5908] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3557.618857][ T5908] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3557.654133][ T5908] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 3558.485263][ T5908] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3558.656660][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3558.741832][ T5908] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 3558.751530][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3558.760035][ T5908] usb 5-1: Product: syz [ 3558.764233][ T5908] usb 5-1: Manufacturer: syz [ 3558.773496][ T5908] usb 5-1: SerialNumber: syz [ 3558.789456][ T5908] usb 5-1: config 0 descriptor?? [ 3558.851859][ T5908] ims_pcu 5-1:0.0: Zero length descriptor [ 3558.894324][ T5908] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 3559.051476][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20233'. [ 3559.087047][ T677] bond5: entered allmulticast mode [ 3559.092575][ T677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3559.115322][T21631] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3559.141413][ T5842] usb 5-1: USB disconnect, device number 35 [ 3559.311309][T21631] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 3559.331316][T21631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3559.352629][T21631] usb 4-1: Product: syz [ 3559.357546][T21631] usb 4-1: Manufacturer: syz [ 3559.362585][T21631] usb 4-1: SerialNumber: syz [ 3559.374838][T21631] usb 4-1: config 0 descriptor?? [ 3559.394554][T21631] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 3559.632660][ T5842] usb 7-1: USB disconnect, device number 100 [ 3559.853949][ T690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3559.867415][ T5908] usb 6-1: USB disconnect, device number 12 [ 3560.105286][ T5842] usb 7-1: new low-speed USB device number 101 using dummy_hcd [ 3560.290959][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3560.313234][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3560.336461][ T5842] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 3560.356441][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3560.452733][ T5842] usb 7-1: config 0 descriptor?? [ 3561.013729][ T5842] kone 0003:1E7D:2CED.00B6: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 3561.099494][ T707] blktrace: Concurrent blktraces are not allowed on sg0 [ 3561.233629][ T5908] usb 7-1: USB disconnect, device number 101 [ 3561.293370][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 3561.293385][ T30] audit: type=1326 audit(1759306962.735:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=708 comm="syz.4.20241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed8c58eec9 code=0x0 [ 3561.585865][T21631] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3561.715322][T21631] usb 5-1: device descriptor read/64, error -71 [ 3561.731389][ T717] netlink: 'syz.0.20243': attribute type 6 has an invalid length. [ 3561.745908][ T717] netlink: 'syz.0.20243': attribute type 1 has an invalid length. [ 3561.753930][ T717] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20243'. [ 3561.955380][T21631] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3562.101367][T21631] usb 5-1: device descriptor read/64, error -71 [ 3562.220752][T21631] usb usb5-port1: attempt power cycle [ 3562.565430][T21631] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3562.640312][T21631] usb 5-1: device descriptor read/8, error -71 [ 3562.770579][ T715] syz.5.20242 (715): drop_caches: 2 [ 3562.885304][T21631] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3562.935902][T21631] usb 5-1: device descriptor read/8, error -71 [ 3563.056195][ T6784] usb 4-1: USB disconnect, device number 72 [ 3563.082498][T21631] usb usb5-port1: unable to enumerate USB device [ 3563.885358][T21631] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 3564.068713][T21631] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3564.091102][T21631] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 3564.110549][T21631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3564.175280][T21631] usb 7-1: Product: syz [ 3564.179465][T21631] usb 7-1: Manufacturer: syz [ 3564.195852][T21631] usb 7-1: SerialNumber: syz [ 3564.202120][T21631] usb 7-1: config 0 descriptor?? [ 3564.230662][T21631] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 3564.264952][T21631] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 3564.438288][ T751] net_ratelimit: 518 callbacks suppressed [ 3564.438305][ T751] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 3564.456892][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20249'. [ 3564.579673][ T742] bond1: entered allmulticast mode [ 3564.585063][ T742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3564.600251][ T6784] usb 7-1: USB disconnect, device number 102 [ 3565.115495][ T5908] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 3565.146731][ T6784] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3565.235271][T27073] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3565.305532][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3565.315319][ T6784] usb 6-1: Using ep0 maxpacket: 16 [ 3565.339900][ T6784] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3565.349327][ T6784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3565.357954][ T6784] usb 6-1: Product: syz [ 3565.365176][ T6784] usb 6-1: Manufacturer: syz [ 3565.369759][ T6784] usb 6-1: SerialNumber: syz [ 3565.385905][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3565.387738][ T6784] r8152-cfgselector 6-1: Unknown version 0x0000 [ 3565.410730][ T6784] r8152-cfgselector 6-1: config 0 descriptor?? [ 3565.498376][T27073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3565.538443][ T5908] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 3565.550213][T27073] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3565.561277][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3565.569606][T27073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3565.585370][ T5908] usb 5-1: config 0 descriptor?? [ 3565.592195][T27073] usb 4-1: config 0 descriptor?? [ 3565.639685][ T6784] r8152-cfgselector 6-1: Unknown version 0x08a0 [ 3565.660729][ T6784] r8152-cfgselector 6-1: bad CDC descriptors [ 3565.849871][ T6784] r8152-cfgselector 6-1: USB disconnect, device number 13 [ 3566.221432][T27073] usbhid 4-1:0.0: can't add hid device: -71 [ 3566.228114][T27073] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3566.239085][T27073] usb 4-1: USB disconnect, device number 73 [ 3566.328374][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 3566.365896][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3566.395014][ T5908] usb 5-1: USB disconnect, device number 40 [ 3566.974134][ T798] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 3567.357789][ T811] netlink: 'syz.0.20270': attribute type 5 has an invalid length. [ 3569.567616][ T5908] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3569.772876][ T5908] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3569.784616][ T5908] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3569.798922][ T5908] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3569.808310][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3569.824505][ T836] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3569.986644][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3570.415852][ T5908] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3570.585284][ T5908] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3570.605230][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3570.665397][ T5908] usb 4-1: Product: syz [ 3570.672215][ T5908] usb 4-1: Manufacturer: syz [ 3570.695375][ T5908] usb 4-1: SerialNumber: syz [ 3571.237133][ T6784] usb 7-1: new low-speed USB device number 103 using dummy_hcd [ 3571.373977][ T850] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 3571.401127][ T6784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3571.428676][ T6784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3571.450248][ T6784] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 3571.461765][ T6784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3571.489500][ T6784] usb 7-1: config 0 descriptor?? [ 3571.675656][T27073] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3571.848909][T27073] usb 5-1: Using ep0 maxpacket: 32 [ 3571.869470][T27073] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 3571.890984][T27073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3571.906202][T27073] usb 5-1: Product: syz [ 3571.910749][T27073] usb 5-1: Manufacturer: syz [ 3571.921013][T27073] usb 5-1: SerialNumber: syz [ 3571.936772][T27073] usb 5-1: config 0 descriptor?? [ 3572.163845][ T6784] usbhid 7-1:0.0: can't add hid device: -71 [ 3572.180980][ T6784] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3572.199781][ T6784] usb 7-1: USB disconnect, device number 103 [ 3572.283081][T22102] usb 6-1: USB disconnect, device number 14 [ 3572.381210][T27073] airspy 5-1:0.0: Board ID: 00 [ 3572.424968][T27073] airspy 5-1:0.0: Firmware version: [ 3572.562718][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 3572.581821][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 3572.846572][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 3572.981391][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3573.050681][T27073] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 3573.173012][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3573.185720][T27073] airspy 5-1:0.0: Registered as swradio24 [ 3573.191458][T27073] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 3573.245240][T21631] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 3573.357526][ T5908] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 3573.388042][T27073] usb 5-1: USB disconnect, device number 41 [ 3573.437099][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.443397][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.461132][T21631] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3573.484952][T21631] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3573.512324][T21631] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3573.541609][ T5908] usb 4-1: USB disconnect, device number 74 [ 3573.586012][T21631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3573.633074][T21631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3573.671965][T21631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3573.689821][T21631] usb 7-1: invalid MIDI out EP 0 [ 3574.014287][T21631] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3574.032341][ T884] macsec0: left allmulticast mode [ 3574.041569][ T884] veth1_macvtap: left allmulticast mode [ 3574.108609][ T6945] udevd[6945]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3574.126908][ T884] macsec0: left promiscuous mode [ 3574.183552][ T884] bridge0: port 1(macsec0) entered disabled state [ 3574.326074][ T886] netlink: zone id is out of range [ 3574.336197][ T886] netlink: zone id is out of range [ 3574.342061][ T886] netlink: zone id is out of range [ 3574.347557][ T886] netlink: zone id is out of range [ 3574.352423][ T887] netlink: zone id is out of range [ 3574.358509][ T886] netlink: zone id is out of range [ 3574.445669][ T884] bond2: (slave gretap1): Releasing active interface [ 3575.029201][ T5908] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3575.205480][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 3575.219117][ T5908] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3575.247079][ T5908] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3575.264699][ T5908] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3575.274516][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3575.765470][T27073] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 3576.359120][T27073] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3576.458681][T27073] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3576.483941][T27073] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3576.510852][T27073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3576.615378][ T900] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3576.733039][T27073] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3577.594867][T14064] usb 7-1: USB disconnect, device number 104 [ 3577.645496][ T5842] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3577.815376][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 3577.828168][ T5842] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3577.853488][ T5842] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3577.893152][ T5842] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3577.920756][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3578.165250][T21631] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 3578.320326][T21631] usb 7-1: Using ep0 maxpacket: 32 [ 3578.333684][T21631] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 3578.364306][T21631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3578.386741][T21631] usb 7-1: Product: syz [ 3578.402121][T21631] usb 7-1: Manufacturer: syz [ 3578.417610][T21631] usb 7-1: SerialNumber: syz [ 3578.491904][T21631] usb 7-1: config 0 descriptor?? [ 3578.577333][ T6784] usb 4-1: USB disconnect, device number 75 [ 3578.931268][T21631] airspy 7-1:0.0: Board ID: 00 [ 3578.938943][ T5908] usb 5-1: string descriptor 0 read error: -71 [ 3578.948129][ T5908] hub 5-1:32.0: bad descriptor, ignoring hub [ 3578.962049][ T5908] hub 5-1:32.0: probe with driver hub failed with error -5 [ 3578.969435][T21631] airspy 7-1:0.0: Firmware version: [ 3579.113206][ T5908] usb 5-1: USB disconnect, device number 42 [ 3579.399567][T21631] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e [ 3579.414601][T21631] airspy 7-1:0.0: Registered as swradio24 [ 3579.427030][T21631] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 3579.456362][T21631] usb 7-1: USB disconnect, device number 105 [ 3579.858486][ T955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20304'. [ 3580.335272][T22102] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3580.576119][T22102] usb 4-1: Using ep0 maxpacket: 32 [ 3580.636641][T22102] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3580.666867][T22102] usb 4-1: config 0 has no interface number 0 [ 3580.763158][T22102] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3581.051516][T22102] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3581.171403][T22102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3581.369186][T22102] usb 4-1: Product: syz [ 3581.375197][T22102] usb 4-1: Manufacturer: syz [ 3581.379857][T22102] usb 4-1: SerialNumber: syz [ 3581.400082][T22102] usb 4-1: config 0 descriptor?? [ 3581.870928][T22102] smsc75xx v1.0.0 [ 3581.874653][T22102] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3581.896984][T22102] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 3581.930797][ T973] netlink: 'syz.6.20307': attribute type 10 has an invalid length. [ 3582.957635][ T5842] usb 6-1: string descriptor 0 read error: -71 [ 3582.982447][ T5842] hub 6-1:32.0: bad descriptor, ignoring hub [ 3583.091622][ T5842] hub 6-1:32.0: probe with driver hub failed with error -5 [ 3583.226522][ T5842] usb 6-1: USB disconnect, device number 15 [ 3583.686228][ T5842] usb 4-1: USB disconnect, device number 76 [ 3584.166410][ T5842] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 3584.503309][ T5842] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3584.588860][ T5842] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3584.615510][ T5842] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3584.639347][ T993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3584.666228][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3584.721572][ T986] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 3584.837174][ T5842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3585.858883][ T1008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3586.285476][T22102] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 3586.483993][T22102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3586.553483][T22102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3586.604106][T22102] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 3586.644969][T22102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3586.673823][T22102] usb 6-1: config 0 descriptor?? [ 3586.908364][ T6784] usb 7-1: USB disconnect, device number 106 [ 3587.207983][T22102] kone 0003:1E7D:2CED.00B7: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 3587.343102][ T5908] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3587.448055][T14064] usb 6-1: USB disconnect, device number 16 [ 3587.632858][ T5908] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3587.665411][T22102] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 3587.772091][ T1039] fido_id[1039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 3587.822042][ T5908] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3587.878321][T22102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3587.905433][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3587.927274][T22102] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3587.965342][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3587.973660][T22102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3588.032431][T22102] usb 4-1: config 0 descriptor?? [ 3588.114454][ T1030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3588.191385][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.218613][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.271730][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.291596][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.409807][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3588.435845][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.454856][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.505029][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.536660][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.573042][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.597811][T22102] usbhid 4-1:0.0: can't add hid device: -71 [ 3588.603783][T22102] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3588.633559][ T1034] ptm ptm86: ldisc open failed (-12), clearing slot 86 [ 3588.661346][T22102] usb 4-1: USB disconnect, device number 77 [ 3589.115476][T22102] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 3589.285197][T22102] usb 4-1: Using ep0 maxpacket: 32 [ 3589.359169][T22102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3589.382469][T22102] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3589.585512][T22102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3589.711179][T22102] usb 4-1: config 0 descriptor?? [ 3589.847799][T22102] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3589.997881][T22102] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3590.425374][T14064] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 3590.977962][T14064] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3590.997857][ T5842] usb 5-1: USB disconnect, device number 43 [ 3591.052431][T14064] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3591.122495][T14064] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3591.203352][T14064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3591.327486][ T1081] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 3591.426354][T14064] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3591.721845][ T5842] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3591.945408][T21631] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3591.965577][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 3592.073236][ T5842] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 3592.205381][ T5842] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3592.218460][ T5842] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 3592.228417][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3592.289047][T28897] usb 4-1: USB disconnect, device number 78 [ 3592.299795][T28897] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3592.311889][T21631] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3592.351563][T21631] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 3592.400946][T21631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3592.494336][T21631] usb 6-1: Product: syz [ 3592.504895][T21631] usb 6-1: Manufacturer: syz [ 3592.514696][T21631] usb 6-1: SerialNumber: syz [ 3592.567090][T21631] usb 6-1: config 0 descriptor?? [ 3592.652908][T21631] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 3592.664857][T21631] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 3592.816199][ T1093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20334'. [ 3592.855337][T28897] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 3593.005620][ T1093] bond1: entered allmulticast mode [ 3593.035712][ T1093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3593.064712][T28897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3593.100557][ T5908] usb 6-1: USB disconnect, device number 17 [ 3593.136774][T28897] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 3593.162874][T28897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3593.283065][T28897] usb 4-1: config 0 descriptor?? [ 3593.754724][ T5908] usb 7-1: USB disconnect, device number 107 [ 3593.902489][T28897] usbhid 4-1:0.0: can't add hid device: -71 [ 3593.995281][T28897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3594.085440][T28897] usb 4-1: USB disconnect, device number 79 [ 3594.346269][ T1121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20338'. [ 3594.362453][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20338'. [ 3595.115278][T28897] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 3595.277097][T28897] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 3595.304608][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.326968][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.345004][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.364970][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.378319][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.390871][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.400730][ T5842] usb 5-1: string descriptor 0 read error: -71 [ 3595.407663][ T5842] hub 5-1:32.0: bad descriptor, ignoring hub [ 3595.417718][ T5842] hub 5-1:32.0: probe with driver hub failed with error -5 [ 3595.426178][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.439994][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.467809][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.479486][ T5842] usb 5-1: USB disconnect, device number 44 [ 3595.491802][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.509262][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.530356][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.542050][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.574947][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.623404][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.654972][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.685635][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.717663][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.738864][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.748718][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.760171][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.769697][T28897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3595.780885][T28897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3595.837171][T28897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3595.871995][T28897] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3595.917782][T28897] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3595.930286][T28897] usb 4-1: Product: syz [ 3595.951584][T28897] usb 4-1: Manufacturer: syz [ 3595.960485][T28897] usb 4-1: SerialNumber: syz [ 3595.980528][T28897] usb 4-1: config 0 descriptor?? [ 3596.005762][T28897] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 3596.035488][ T5842] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3596.185323][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 3596.200778][ T5842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3596.220877][ T5842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3596.233408][ T5842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3596.244265][ T5842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3596.259311][ T5842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3596.269386][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3596.491978][ T5842] usb 5-1: usb_control_msg returned -71 [ 3596.517321][ T5842] usbtmc 5-1:16.0: can't read capabilities [ 3596.551867][ T5842] usb 5-1: USB disconnect, device number 45 [ 3597.263478][ T1148] ------------[ cut here ]------------ [ 3597.269288][ T1148] WARNING: CPU: 0 PID: 1148 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.278214][ T1148] Modules linked in: [ 3597.282130][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: syz.4.20346 Not tainted syzkaller #0 PREEMPT(full) [ 3597.291576][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3597.301819][ T1148] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.307638][ T1148] Code: 64 24 40 e9 41 f8 ff ff e8 e7 04 7a ff 90 0f 0b 90 e9 64 f6 ff ff e8 d9 04 7a ff 90 0f 0b 90 e9 ab f6 ff ff e8 cb 04 7a ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 bd 04 7a ff 45 31 e4 4c 8b 7c 24 08 e9 [ 3597.327377][ T1148] RSP: 0018:ffffc9000cc2fa40 EFLAGS: 00010283 [ 3597.333595][ T1148] RAX: ffffffff82447115 RBX: 00000000effffffe RCX: 0000000000080000 [ 3597.341705][ T1148] RDX: ffffc9000f574000 RSI: 000000000000003c RDI: 000000000000003d [ 3597.349883][ T1148] RBP: ffffc9000cc2fb10 R08: ffffffff8f5cd537 R09: 1ffffffff1eb9aa6 [ 3597.357892][ T1148] R10: dffffc0000000000 R11: fffffbfff1eb9aa7 R12: ffffffff824465fc [ 3597.365890][ T1148] R13: dffffc0000000000 R14: ffff88804e826d14 R15: 0000000000000000 [ 3597.373870][ T1148] FS: 00007fed8d34f6c0(0000) GS:ffff888126373000(0000) knlGS:0000000000000000 [ 3597.382844][ T1148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3597.389480][ T1148] CR2: 0000200000000000 CR3: 0000000042a7a000 CR4: 00000000003526f0 [ 3597.397499][ T1148] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 3597.405517][ T1148] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3597.413497][ T1148] Call Trace: [ 3597.416852][ T1148] [ 3597.419794][ T1148] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 3597.425616][ T1148] exportfs_decode_fh_raw+0x175/0x6e0 [ 3597.431006][ T1148] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 3597.437006][ T1148] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 3597.442931][ T1148] do_handle_to_path+0xa4/0x1a0 [ 3597.447820][ T1148] do_handle_open+0x6b4/0x8f0 [ 3597.452508][ T1148] ? __pfx_do_handle_open+0x10/0x10 [ 3597.457796][ T1148] ? rcu_is_watching+0x15/0xb0 [ 3597.462578][ T1148] ? do_syscall_64+0xbe/0x3b0 [ 3597.467287][ T1148] do_syscall_64+0xfa/0x3b0 [ 3597.471792][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 3597.477069][ T1148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3597.483142][ T1148] ? clear_bhb_loop+0x60/0xb0 [ 3597.487881][ T1148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3597.493781][ T1148] RIP: 0033:0x7fed8c58eec9 [ 3597.498344][ T1148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3597.518052][ T1148] RSP: 002b:00007fed8d34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 3597.526514][ T1148] RAX: ffffffffffffffda RBX: 00007fed8c7e5fa0 RCX: 00007fed8c58eec9 [ 3597.534495][ T1148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3597.542683][ T1148] RBP: 00007fed8c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3597.550704][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3597.558706][ T1148] R13: 00007fed8c7e6038 R14: 00007fed8c7e5fa0 R15: 00007fed8c90fa28 [ 3597.566720][ T1148] [ 3597.569735][ T1148] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3597.577015][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: syz.4.20346 Not tainted syzkaller #0 PREEMPT(full) [ 3597.586388][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3597.596439][ T1148] Call Trace: [ 3597.599720][ T1148] [ 3597.602647][ T1148] dump_stack_lvl+0x99/0x250 [ 3597.607240][ T1148] ? __asan_memcpy+0x40/0x70 [ 3597.611839][ T1148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3597.617037][ T1148] ? __pfx__printk+0x10/0x10 [ 3597.621628][ T1148] vpanic+0x281/0x750 [ 3597.625597][ T1148] ? __pfx__printk+0x10/0x10 [ 3597.630188][ T1148] ? __pfx_vpanic+0x10/0x10 [ 3597.634698][ T1148] ? is_bpf_text_address+0x26/0x2b0 [ 3597.639908][ T1148] panic+0xb9/0xc0 [ 3597.643638][ T1148] ? __pfx_panic+0x10/0x10 [ 3597.648064][ T1148] __warn+0x31b/0x4b0 [ 3597.652042][ T1148] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.657165][ T1148] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.662281][ T1148] report_bug+0x2be/0x4f0 [ 3597.666620][ T1148] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.671745][ T1148] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.676864][ T1148] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 3597.681980][ T1148] handle_bug+0x84/0x160 [ 3597.686232][ T1148] exc_invalid_op+0x1a/0x50 [ 3597.690738][ T1148] asm_exc_invalid_op+0x1a/0x20 [ 3597.695585][ T1148] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 3597.701305][ T1148] Code: 64 24 40 e9 41 f8 ff ff e8 e7 04 7a ff 90 0f 0b 90 e9 64 f6 ff ff e8 d9 04 7a ff 90 0f 0b 90 e9 ab f6 ff ff e8 cb 04 7a ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 bd 04 7a ff 45 31 e4 4c 8b 7c 24 08 e9 [ 3597.720918][ T1148] RSP: 0018:ffffc9000cc2fa40 EFLAGS: 00010283 [ 3597.726992][ T1148] RAX: ffffffff82447115 RBX: 00000000effffffe RCX: 0000000000080000 [ 3597.734961][ T1148] RDX: ffffc9000f574000 RSI: 000000000000003c RDI: 000000000000003d [ 3597.742928][ T1148] RBP: ffffc9000cc2fb10 R08: ffffffff8f5cd537 R09: 1ffffffff1eb9aa6 [ 3597.750911][ T1148] R10: dffffc0000000000 R11: fffffbfff1eb9aa7 R12: ffffffff824465fc [ 3597.758882][ T1148] R13: dffffc0000000000 R14: ffff88804e826d14 R15: 0000000000000000 [ 3597.766845][ T1148] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 3597.771958][ T1148] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 3597.777080][ T1148] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 3597.782558][ T1148] exportfs_decode_fh_raw+0x175/0x6e0 [ 3597.787923][ T1148] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 3597.793727][ T1148] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 3597.799621][ T1148] do_handle_to_path+0xa4/0x1a0 [ 3597.804471][ T1148] do_handle_open+0x6b4/0x8f0 [ 3597.809159][ T1148] ? __pfx_do_handle_open+0x10/0x10 [ 3597.814364][ T1148] ? rcu_is_watching+0x15/0xb0 [ 3597.819131][ T1148] ? do_syscall_64+0xbe/0x3b0 [ 3597.823806][ T1148] do_syscall_64+0xfa/0x3b0 [ 3597.828341][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 3597.833533][ T1148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3597.839599][ T1148] ? clear_bhb_loop+0x60/0xb0 [ 3597.844282][ T1148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3597.850168][ T1148] RIP: 0033:0x7fed8c58eec9 [ 3597.854571][ T1148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3597.874178][ T1148] RSP: 002b:00007fed8d34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 3597.882579][ T1148] RAX: ffffffffffffffda RBX: 00007fed8c7e5fa0 RCX: 00007fed8c58eec9 [ 3597.890551][ T1148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3597.898513][ T1148] RBP: 00007fed8c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3597.906469][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3597.914431][ T1148] R13: 00007fed8c7e6038 R14: 00007fed8c7e5fa0 R15: 00007fed8c90fa28 [ 3597.922409][ T1148] [ 3597.925703][ T1148] Kernel Offset: disabled [ 3597.930012][ T1148] Rebooting in 86400 seconds..