last executing test programs: 11.687764293s ago: executing program 2 (id=2926): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000081401"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080)) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0], 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x8890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x2b, 0x3, 0xffffffff80000140, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, 0x20, 0x7ff}}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x0, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x30) 9.01527505s ago: executing program 2 (id=2935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x400000000000000, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8.565079888s ago: executing program 2 (id=2937): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000010407d1ef62c0000000000010902240001000000000904000001030002000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xb, {0xb, 0xd, "5d768d97c37e80aa81"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x14, 0x3b, "8106407aa5f883b0d11c7269790aab8292aca9175e53319d5a95d4af73be7b0406d9683dacc96cd5683eabc78e46855ea444bd04a6ff6a9f26e657"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}}) r3 = syz_usb_connect$cdc_ncm(0x6, 0x82, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x58, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x4, 0x20, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc19, 0x9, 0xf3}, {0x6, 0x24, 0x1a, 0x1, 0x21}, [@country_functional={0x8, 0x24, 0x7, 0x93, 0x101, [0xc5af]}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x3, 0x7}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x4, 0x7}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x9, 0x16, 0xff}, 0xca, &(0x7f0000000700)={0x5, 0xf, 0xca, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3d, "747a0ae23b75bbcefd16bd5c050f0089"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x0, 0x7f}, @generic={0x8c, 0x10, 0x3, "52aa01dd1f1352cbfc095e34d5c74089f35c09a19eb26d539ca7ff2628ce80e3bb9345c3217701901e7a59a57f9f8941c85b68ad09e334d74033c28dbc64c9b8e00c9020e2f2e3af560560635f007e6ec5e21d7768f5147d93c2abeb5b9fda86368c1a2ad5a44df8e6255db1e961c3240e902e15b98179131fec2526b94af2c50fc93827cd446d5702"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "667b668f3937b6b931cda94197a5b99a"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2009}}, {0x1f, &(0x7f00000003c0)=@string={0x1f, 0x3, "cb7c80affe1e65a3bae2431cd2699026f444f5c523d86f49c1c12c4b0c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io(r3, &(0x7f0000000b80)={0x2c, &(0x7f0000000880)={0x40, 0x31, 0x95, {0x95, 0xb, "8879875c68b903b69103188b0c9651a8858e0ed28932ba555fa855c02f142d75cbda32b492c4e8ec9f0dadd618ac69647e22307ab7125ffee75e2e605637fa85c89124248dd979809099787ca9d63a7b0185601c4fa6edba73a143bce316369955eca1fd844b747105a480070c7ed76c478a2604c56e92cc36a3cccb977a26ead96e52d36ad7a1672996f221ed3eecff1439e2"}}, &(0x7f0000000980)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "fc87f3233879b9fa345c0533f153d91460eaf3ed794aee93e6c3b8d5508917e3d0e75599fe9a16c8d1d31ec081c7b3517646881328af1574fd890a03a3103d56e043115266801609e00feef5b1ab11fa90edd94fa386223102c17caed1a87ceeaa5a176f5948d699000dd8f0c1edb76edd5bdd25438f7dc5b41eafb702bc3621936a779296efd2c764538c248fe538ca55e88ab450693132ecc201da49c7adc16c5526634aee3751f8e5ffcb48808107668a20513ab1aceeaf9b18c98272"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x80, 0x1e, "17797c9b", "a72296de"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x80, 0x0, 0x6, 0xf, 0x8}}}, &(0x7f0000001000)={0x84, &(0x7f0000000bc0)={0x40, 0x5}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x8}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "20d9"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "6db9"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x500}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x3}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r8, @ANYBLOB="3000c7"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f00000010c0)={0x40, 0xd, 0xa3, {0xa3, 0xb, "ab45c40a4c645db48e20ec61c69d9080840e90244a54c90728739a7501107407ccee16024d2301270b06334c9bb5b02252357c4f32c06b54fcf99daac2158fc14ac3251f7edfd4bfa9f319cd92f80d35b2051b773116860adc6b1863bd14fd3cb60c8b1267e1795c489025a369329912bdb762fef15317eef93cb9a8bc39045cdf6953d0f79884010df4a8c00d41edc08e99bef20de49c9aaf4fb5448fadfb1fce"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f00000011c0)={0x0, 0x22, 0x15, {[@global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x0, "d717e080"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x2, 0x2, 0x9, "a150"}, @main=@item_012={0x2, 0x0, 0xa, "80d8"}, @main=@item_012={0x2, 0x0, 0xc, "46cf"}, @main=@item_4={0x3, 0x0, 0xb, "0b138512"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x415}}}}, &(0x7f00000014c0)={0x2c, &(0x7f0000001280)={0x20, 0xd, 0x75, "0be33ceccb63ddda5075884409e8336fc99d3205eebc32acb21d4baa3ff7557a8a2c4b51d9b02535a00f47fabeff205fefc5d758d4fa839c26e477310427885bcc59db2e78ff7ca1d2f659cb6b2503d1d8446aad8764ef708d6e9d42832ce3513cef88dbf5ce6bb8dc43b694cb785b1f7998ec995e"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x96}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001380)={0x20, 0x1, 0xc9, "90cb08e0f6b3f3f3506cbad4c813fc6af060362562702a5c0ac0d548115e8da4e98191d19354498e5ccb5082428b9ba45f92226200e66d4aa3fa8b98805b787834c0ee6f33f9af334d512e1097e6141f6592ad3257d8ae249f5c22f5bed9ba069c56d7231b18e3c4cd04b150d0520bd3c5e6046989b4a633a0ba3b7a79ff899314f713c2ae1f458339ce11c5b589012d78dba260cef6403113d7cbea239e05de33d5fdefde585dd6b831fb347583fb03e69141bb7ab15721837a4ca9388d6c3c840a09c85af14d50af"}, &(0x7f0000001480)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x7, {0x3f, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.382567296s ago: executing program 2 (id=2946): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x2a, 0x64, 0xda, 0x40, 0x2c42, 0x16f8, 0x7dd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x0, 0xb4, 0x17, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x2a, 0x64, 0xda, 0x40, 0x2c42, 0x16f8, 0x7dd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x0, 0xb4, 0x17, 0x95}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) 5.009629461s ago: executing program 3 (id=2948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81ad51000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x3000000}, 0x94) 4.803726672s ago: executing program 3 (id=2952): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) creat(&(0x7f0000000000)='./file0\x00', 0x108) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b97926600000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffffffffffe1c, 0x0, 0x0, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r7, &(0x7f0000000340)='illinois\x00', 0x9) (async) dup2(r7, r3) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) timer_delete(r9) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.482916029s ago: executing program 4 (id=2954): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20044800) read$usbmon(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x0, 0x20000001, 0x96, 0x2}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x4008000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fanotify_init(0x202, 0x1000) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ftruncate(r2, 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x2) 3.853094991s ago: executing program 2 (id=2957): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x10000, 0x2, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD) sendto$inet(r3, &(0x7f0000000800)="01", 0x1, 0x4004014, 0x0, 0x0) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e08072401"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x13, 0x100, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x401, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0xe9e7490c5270708f, 0x12, 0xb}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x21}, 0x4040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 3.417685437s ago: executing program 3 (id=2959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x10000000}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x60}}]}, 0x148}}, 0x0) 3.301093432s ago: executing program 3 (id=2960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000300000180000000000000000340001000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 3.142291177s ago: executing program 3 (id=2962): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x28, 0xf5, 0x53, 0xfffff014}, {0x6, 0x4, 0xa, 0x4}]}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ec61e40c9071200f4c20102030109c06aafc954114a0212c254ebf400000904"], 0x0) 2.951280542s ago: executing program 0 (id=2963): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000081401"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000080)) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0], 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x8890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x2b, 0x3, 0xffffffff80000140, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, 0x20, 0x7ff}}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x0, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x30) 2.520352625s ago: executing program 1 (id=2964): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711097000301000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.459790257s ago: executing program 1 (id=2965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x102}, 0x94) 2.347360322s ago: executing program 1 (id=2966): syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[@ANYBLOB="ffffffffffffbbbbb3bbbbbb0806000685f006040004bbbbbbbbbbbb6d3de1bc0000000000004e1e8d72"], 0x0) r0 = socket$inet(0x2, 0x80000, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x100}}, 0x14}}, 0x10) r9 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x8, 0x9eb, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x80, 0xffffffff, 0x8}}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4ea3, @multicast2}, 0xfffffffffffffed3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r11 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0xffffffffffffffff) add_key(&(0x7f0000000580)='trusted\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="23cedb90f3a3faf06e5dbb63ddf52b5f866c73c94a27b819d86700580bae078a56789bef0025d0c3e057fa94d46d4ba36380aecc3c87d8b4cdbd03c7655e2947f7be3f567e88a3d06f486ac4d746baf3b0ce5cf4b893f729d564d8927f7348a2cb826e99be39800576e25236bd13feb3e23ad9b54a0ff5ff3ad0f5f6a1a56e57c08a074f90260ff30326838b13", 0x8d, r11) 1.968201086s ago: executing program 1 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x83}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010004b04007a00000000000100000000", @ANYRES32=0x0, @ANYBLOB="00c00000042c04001400128009000100626f6e64"], 0x40}}, 0x0) 1.609845717s ago: executing program 1 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) 1.403549652s ago: executing program 4 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14, 0x11, 0x1, 0x2000000}}, 0xb0}}, 0x0) 1.287876595s ago: executing program 1 (id=2970): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x0, 0xfffffffc) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x13, 0x0, &(0x7f0000000440)="cc9f4d42ef21760fc9ae7ef1558f46be00d0b5", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000003c0)={&(0x7f0000000380)=[{0x0, 0x4201, 0x0, 0x0}, {0xacab, 0x8200, 0x0, 0x0}, {0x8, 0x1201, 0x0, 0x0}], 0x3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000016c0)={[0x4]}, 0x8, 0xc0800) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000001680)=ANY=[@ANYRES8=r0, @ANYRES8=r0]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)="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", 0x1000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$hid(r1, &(0x7f0000001a40)={0x24, &(0x7f0000001700)={0x40, 0x23, 0x25, {0x25, 0x21, "125044b407384674c33850d9bc4793c0e0b3a995d4d3f75a0383cc6cfe55490115fb77"}}, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000001780)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0xa, "17"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x9, "b9507c0e"}, @global=@item_012={0x1, 0x1, 0xa, "e3"}, @global=@item_4={0x3, 0x1, 0xa, "3ab7aee9"}]}}, &(0x7f0000001a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xa1e}}}}, &(0x7f0000001c00)={0x2c, &(0x7f0000001a80)={0x40, 0x18, 0x6, "b1268eaf4db9"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001b40)={0x20, 0x1, 0x79, "2f84ec1977dc8694640a72e28574ff721aaf83c271346469b3e752eb8e117823407ec9b4c91f41c17f1ea6bfe1dedb3d2d5dee3fc242015e73ef27f520a7e4d0e0e63bc1f697379eb87f235439dea861a2fdd89a0a4ba8e19b6300dc1e9bdf821304b34ce9a4814b2b46dcad8e4acf22708caba897885af235"}, &(0x7f0000001bc0)={0x20, 0x3, 0x1, 0x2}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0x1ff, 0x0, 0x10000, 0xba8, 0x82, 0x1000, 0x0, 0x0, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1007], 0x80a0000, 0x2113c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000005c0)=0x200000, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xa, 0x0, 0xffffffffffffffc0, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3293}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xf, 0x0, 0x5, 0x50, 0x8}, @jmp={0x5, 0x1, 0x5, 0x9, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x7e, &(0x7f0000000300)=""/126, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x5, 0x9, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x2, 0xd, 0x9}, {0x2, 0x1, 0x4, 0x9659a4cf75e667d0}, {0x3, 0x5, 0x9, 0x1}, {0x1, 0x3, 0xe, 0x7}, {0x4, 0x1, 0xc, 0x5}, {0x3, 0x2, 0xa, 0x9}, {0x4, 0x2, 0x8, 0x2}, {0x4, 0x5, 0x9, 0x9}, {0x1, 0x1, 0xf, 0x9}, {0x3, 0x5, 0x6, 0x6}], 0x10, 0x5}, 0x94) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r9) 1.287673408s ago: executing program 4 (id=2971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000400000000000000000000000000000000001a01414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000005086dd600a843500140600fe8000000000000000000000000000bbfe8000000005"], 0x0) 1.150212395s ago: executing program 4 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x1300, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) 1.043703125s ago: executing program 4 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900080000007b00000008009f000d000000080026001c16"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 984.355937ms ago: executing program 0 (id=2974): syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206010800007c1400000000000000000c000780080008400000002a05000100060000000500"], 0x50}}, 0x8000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000001000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) 862.025273ms ago: executing program 0 (id=2975): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = epoll_create1(0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0xc, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000003100)=ANY=[], 0x10448) 774.911944ms ago: executing program 4 (id=2976): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000095af324044060f8077c501020301090212000100000000090401", @ANYRES64=r2], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) (async) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000095af324044060f8077c501020301090212000100000000090401", @ANYRES64=r2], 0x0) (async) 663.373938ms ago: executing program 2 (id=2977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000009"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x4, 0xb, 0x4, 0x20, 0x4, {}, {0x3, 0x0, 0x10, 0x4, 0x0, 0x6, "799e9e2b"}, 0x6, 0x4, {}, 0x9}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff0000000000000000000000000000ffffe0000002ac1414aa00000000000000000000000000010007fffc00000a00004d32000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f080001000000000000000000000000000000006c000000ac14143f00000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c2500000000000003000000000000000600000000000000fcffffffffffffffffffffffffffffff000000000000000021000000000000000000000000000000ffffffff000000000000000080000000ff340000020001000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000fe00"/240], 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x50842, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x6, 0x3000, 0x2000, &(0x7f0000932000/0x2000)=nil}) syz_clone3(&(0x7f00000003c0)={0x1011000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000280)}, 0x10) 556.086244ms ago: executing program 0 (id=2978): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r1, &(0x7f0000003100)=ANY=[], 0x10448) 418.75266ms ago: executing program 0 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200140008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000d000000080026"], 0x40}}, 0x200040b4) 298.731943ms ago: executing program 0 (id=2980): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010041000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008"], 0x92fc}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 0s ago: executing program 3 (id=2981): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sysinfo(&(0x7f0000000000)=""/115) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000040)=""/86, &(0x7f00000000c0)=0x56) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.668075][T14337] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2510'. [ 730.708679][T13017] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 730.968758][T13017] usb 3-1: Using ep0 maxpacket: 32 [ 730.976365][T13017] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 731.049011][T14345] netlink: 'syz.0.2512': attribute type 27 has an invalid length. [ 731.081941][T14345] gre0: left allmulticast mode [ 731.091032][T13017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.191213][T13649] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.209488][T13649] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.717538][T13649] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.908438][T13017] usb 3-1: config 0 descriptor?? [ 731.918716][ T982] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 731.929239][T13649] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.033767][ T5957] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 732.041347][ T5957] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 732.051129][ T5957] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 732.065326][ T5957] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 732.084177][ T5957] usb 5-1: USB disconnect, device number 104 [ 732.107630][ T5957] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 732.117803][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 732.130789][ T982] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.148726][ T982] usb 1-1: config 0 has no interface number 0 [ 732.155424][T13017] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 732.182088][ T5957] ftdi_sio 5-1:0.0: device disconnected [ 732.193078][T13017] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 732.196600][ T982] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 732.250758][T13017] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 732.281328][T13017] usb 3-1: media controller created [ 732.349294][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.352233][T13017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.389356][ T982] usb 1-1: Product: syz [ 732.393749][ T982] usb 1-1: Manufacturer: syz [ 732.403897][ T982] usb 1-1: SerialNumber: syz [ 732.447693][ T982] usb 1-1: config 0 descriptor?? [ 732.482419][ T982] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 732.577491][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2514'. [ 732.720042][T14354] dib0700: tx buffer length is larger than 4. Not supported. [ 733.025244][T14357] ip6tnl4: entered allmulticast mode [ 733.268798][ T5953] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 733.304763][T13017] DVB: Unable to find symbol dib7000p_attach() [ 733.335665][T13017] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 733.621861][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 733.668803][ T5953] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 733.779517][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.810787][ T5953] usb 5-1: Product: syz [ 733.853215][T14367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.866209][ T982] gspca_spca1528: reg_w err -110 [ 733.867316][ T5953] usb 5-1: Manufacturer: syz [ 733.888983][ T982] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 733.895433][ T5953] usb 5-1: SerialNumber: syz [ 734.003986][ T5953] usb 5-1: config 0 descriptor?? [ 734.032380][T14371] random: crng reseeded on system resumption [ 734.038899][T13017] rc_core: IR keymap rc-dib0700-rc5 not found [ 734.071023][T13017] Registered IR keymap rc-empty [ 734.094272][T13017] dvb-usb: could not initialize remote control. [ 734.142389][T13017] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 734.282714][ T5953] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 734.324245][T13017] usb 3-1: USB disconnect, device number 92 [ 734.685344][T13017] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 735.164479][T14380] netlink: 'syz.1.2520': attribute type 9 has an invalid length. [ 735.172429][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 735.191299][T13017] usb 1-1: USB disconnect, device number 110 [ 735.239321][T13649] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.248415][T14380] netlink: 'syz.1.2520': attribute type 9 has an invalid length. [ 735.272168][T13649] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.339586][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 735.350653][T13649] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.381983][T13649] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.775071][ T5953] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 735.798435][ T5953] usb 5-1: USB disconnect, device number 105 [ 736.516769][ T30] audit: type=1326 audit(1757180360.446:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 736.570136][ T30] audit: type=1326 audit(1757180360.446:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 736.593261][ T30] audit: type=1326 audit(1757180360.446:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 736.633607][ T30] audit: type=1326 audit(1757180360.446:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 736.658879][ T30] audit: type=1326 audit(1757180360.446:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 736.684116][ T30] audit: type=1326 audit(1757180360.446:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 737.057898][ T30] audit: type=1326 audit(1757180360.986:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 737.118502][ T30] audit: type=1326 audit(1757180360.986:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 737.539468][T14412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.559085][ T5953] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 737.714513][ T5953] usb 4-1: device descriptor read/64, error -71 [ 737.920524][T14419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.958694][ T5953] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 738.098669][ T5957] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 738.109107][ T5953] usb 4-1: device descriptor read/64, error -71 [ 738.229186][ T5953] usb usb4-port1: attempt power cycle [ 738.268957][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 738.344852][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 738.357632][ T5957] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 738.366235][ T5957] usb 5-1: config 8 has no interface number 0 [ 738.373114][ T5957] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 738.384650][ T7525] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 738.394415][ T5957] usb 5-1: config 8 interface 24 has no altsetting 0 [ 738.432403][ T5957] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 738.442899][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.451607][ T5957] usb 5-1: Product: syz [ 738.456031][ T5957] usb 5-1: Manufacturer: syz [ 738.461152][ T5957] usb 5-1: SerialNumber: syz [ 738.558834][ T7525] usb 3-1: Using ep0 maxpacket: 8 [ 738.571837][ T7525] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 738.572012][ T5953] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 738.581417][ T7525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.581447][ T7525] usb 3-1: Product: syz [ 738.621244][ T7525] usb 3-1: Manufacturer: syz [ 738.626450][ T7525] usb 3-1: SerialNumber: syz [ 738.632180][ T5953] usb 4-1: device descriptor read/8, error -71 [ 738.647009][ T7525] usb 3-1: config 0 descriptor?? [ 739.240964][ T7525] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 739.288706][ T5953] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 739.325452][ T5953] usb 4-1: device descriptor read/8, error -71 [ 739.460919][ T5953] usb usb4-port1: unable to enumerate USB device [ 740.409294][ T5953] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 740.568924][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 740.580459][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.594558][ T5953] usb 2-1: config 0 has no interfaces? [ 740.607747][ T5953] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 740.633398][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.657975][ T5953] usb 2-1: Product: syz [ 740.670041][ T5953] usb 2-1: Manufacturer: syz [ 740.688294][ T7525] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 740.696432][ T5953] usb 2-1: SerialNumber: syz [ 740.713725][ T5953] usb 2-1: config 0 descriptor?? [ 740.763178][ T7525] usb 3-1: USB disconnect, device number 93 [ 740.951046][ T5953] usb 2-1: USB disconnect, device number 119 [ 741.242655][T14467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.506199][ T5957] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 741.559930][ T5957] usb 5-1: USB disconnect, device number 106 [ 741.600154][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 741.664726][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 741.718795][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 741.725829][T14450] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 741.737464][T14450] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 741.879459][ T5953] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 742.020488][T14483] bond0: entered promiscuous mode [ 742.032596][T14483] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 742.074441][T14483] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 742.109251][T14483] hsr1: entered allmulticast mode [ 742.305651][T14483] bond0: entered allmulticast mode [ 742.461264][T14483] batadv0: entered allmulticast mode [ 742.503094][T14483] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 742.525067][T14450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 742.531425][T14450] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 742.550550][T14450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 742.556813][T14450] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 742.578492][T14450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 742.590095][T14450] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 742.616126][T14483] bond0: left promiscuous mode [ 742.646151][T14450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 742.655385][T14450] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 743.391783][ T5957] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 743.434153][T14510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 743.645359][T14518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.674474][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 743.720502][T14516] macsec1: entered allmulticast mode [ 743.833007][ T5957] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 743.844108][ T5957] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 743.902229][ T5957] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.972954][ T5957] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.143501][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.153539][T14528] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 744.406286][ T5957] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 744.445154][ T5957] usb 5-1: invalid MIDI out EP 0 [ 744.609358][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 744.638974][ T7525] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 744.717188][ T5957] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 744.764371][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 744.848764][ T7525] usb 4-1: Using ep0 maxpacket: 16 [ 744.865738][ T7525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.879569][ T7525] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 744.893423][ T7525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.912032][ T7525] usb 4-1: Product: syz [ 744.925424][ T7525] usb 4-1: Manufacturer: syz [ 744.932704][ T5953] usb 5-1: USB disconnect, device number 107 [ 744.962257][ T7525] usb 4-1: SerialNumber: syz [ 744.995154][ T7525] usb 4-1: config 0 descriptor?? [ 745.033118][ T7525] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 745.339386][T14546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2567'. [ 745.427217][T14537] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 745.683948][T14552] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.695334][T14552] bond10: (slave bond11): making interface the new active one [ 745.709888][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 745.727785][T14552] bond10: (slave bond11): Enslaving as an active interface with an up link [ 745.812437][T14537] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 745.848943][T14537] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 745.959836][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 746.031718][T14558] veth3: entered promiscuous mode [ 746.051651][T14558] veth3: entered allmulticast mode [ 746.139261][ T42] usb 4-1: Failed to submit usb control message: -110 [ 746.159152][ T42] usb 4-1: unable to send the bmi data to the device: -110 [ 746.171105][ T42] usb 4-1: unable to get target info from device [ 746.273967][ T42] usb 4-1: could not get target info (-110) [ 746.290807][ T42] usb 4-1: could not probe fw (-110) [ 746.318835][ T7525] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 746.356044][T14569] netlink: 'syz.2.2577': attribute type 27 has an invalid length. [ 746.693672][T14569] ip6erspan0: left promiscuous mode [ 746.765255][T14569] ip6tnl3: left allmulticast mode [ 746.807380][T14578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.918978][ T5957] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 747.029113][ T5953] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 747.148901][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 747.200524][ T5953] usb 2-1: Invalid ep0 maxpacket: 64 [ 747.200614][ T5957] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.223010][ T5957] usb 3-1: config 0 has no interface number 0 [ 747.254955][ T5957] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 747.271239][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.290754][ T5957] usb 3-1: Product: syz [ 747.298212][ T5957] usb 3-1: Manufacturer: syz [ 747.310211][ T5957] usb 3-1: SerialNumber: syz [ 747.349723][ T5957] usb 3-1: config 0 descriptor?? [ 747.358999][ T5953] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 747.382393][ T5957] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 747.442579][ T982] usb 4-1: USB disconnect, device number 113 [ 747.563297][ T5953] usb 2-1: Invalid ep0 maxpacket: 64 [ 747.570049][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.576548][ T5953] usb usb2-port1: attempt power cycle [ 747.582329][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.938709][ T5953] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 747.982742][ T5953] usb 2-1: Invalid ep0 maxpacket: 64 [ 748.158918][ T5953] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 748.179981][ T5953] usb 2-1: Invalid ep0 maxpacket: 64 [ 748.189509][ T5953] usb usb2-port1: unable to enumerate USB device [ 748.455262][T14613] netlink: 'syz.0.2590': attribute type 1 has an invalid length. [ 748.759164][T13017] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 748.789085][ T5957] gspca_spca1528: reg_w err -110 [ 748.794255][ T5957] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 748.978733][T13017] usb 5-1: Using ep0 maxpacket: 8 [ 748.985521][T13017] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 748.999090][T13017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.073587][T13017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.235123][T13017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.245626][T13017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.259179][T13017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 749.608015][ T5953] usb 3-1: USB disconnect, device number 95 [ 749.657328][T13017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.888148][T13017] usb 5-1: usb_control_msg returned -32 [ 749.915109][T13017] usbtmc 5-1:16.0: can't read capabilities [ 750.243777][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2592'. [ 750.259534][ T5957] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 750.277573][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2592'. [ 750.300259][T14632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.401142][ T982] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 750.409353][ T5957] usb 2-1: device descriptor read/64, error -71 [ 750.541688][ T982] usb 3-1: device descriptor read/64, error -71 [ 750.678680][ T5957] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 750.778959][ T982] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 750.818795][ T5957] usb 2-1: device descriptor read/64, error -71 [ 750.911080][T14640] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 750.928778][ T982] usb 3-1: device descriptor read/64, error -71 [ 750.935489][ T5957] usb usb2-port1: attempt power cycle [ 751.059222][ T982] usb usb3-port1: attempt power cycle [ 751.308714][ T5957] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 751.329439][ T5957] usb 2-1: device descriptor read/8, error -71 [ 751.336596][T14645] trusted_key: encrypted_key: master key parameter 'defÿÿÿÿ' is invalid [ 751.347785][ T7525] usb 5-1: USB disconnect, device number 108 [ 751.433534][ T982] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 751.462168][ T982] usb 3-1: device descriptor read/8, error -71 [ 751.598806][ T5957] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 751.631168][ T5957] usb 2-1: device descriptor read/8, error -71 [ 751.708930][ T982] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 751.729998][ T982] usb 3-1: device descriptor read/8, error -71 [ 751.749385][ T5957] usb usb2-port1: unable to enumerate USB device [ 751.768874][ T7525] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 751.842455][ T982] usb usb3-port1: unable to enumerate USB device [ 751.938704][ T7525] usb 5-1: Using ep0 maxpacket: 16 [ 751.945920][ T7525] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 751.957673][ T7525] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 751.966083][ T7525] usb 5-1: config 166 has no interface number 0 [ 751.975456][ T7525] usb 5-1: config 166 has no interface number 1 [ 751.982214][ T7525] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 751.993780][ T7525] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 752.005276][ T7525] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 752.016792][ T7525] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 752.028619][ T7525] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 752.040355][ T7525] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 752.050772][ T7525] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 752.062409][ T7525] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 752.072616][ T7525] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 752.087682][ T7525] usb 5-1: config 166 interface 177 has no altsetting 0 [ 752.094930][ T7525] usb 5-1: config 166 interface 34 has no altsetting 0 [ 752.114484][ T7525] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 752.125355][ T7525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.151534][ T7525] usb 5-1: Product: syz [ 752.155755][ T7525] usb 5-1: Manufacturer: syz [ 752.160528][ T7525] usb 5-1: SerialNumber: syz [ 752.183995][T14649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.377440][ T7525] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 752.587306][ T7525] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 752.617886][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 752.805295][ T7525] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 752.994129][ T7525] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 753.012710][ T7525] usb 5-1: No valid video chain found. [ 753.036749][ T7525] usb 5-1: USB disconnect, device number 109 [ 753.149620][T14675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.218745][T13017] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 753.368777][T13017] usb 3-1: Using ep0 maxpacket: 32 [ 753.376042][T13017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.386590][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 753.394410][T13017] usb 3-1: config 0 has no interfaces? [ 753.402602][T13017] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 753.411810][T13017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.420072][T13017] usb 3-1: Product: syz [ 753.424242][T13017] usb 3-1: Manufacturer: syz [ 753.428970][T13017] usb 3-1: SerialNumber: syz [ 753.436057][T13017] usb 3-1: config 0 descriptor?? [ 753.548726][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 753.566278][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.585540][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.595746][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.597441][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'. [ 753.610810][ T5953] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.623106][T14679] vlan2: entered promiscuous mode [ 753.632481][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 753.644087][ T5953] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 753.662335][ T5953] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 753.681080][T14669] vlan2: entered promiscuous mode [ 753.695505][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.707244][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.718101][ T5953] usb 2-1: SerialNumber: syz [ 753.745168][ T5953] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 753.768764][T13017] usb 3-1: USB disconnect, device number 100 [ 753.790499][ T5953] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 753.973965][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.028556][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.040560][ T7525] usb 2-1: USB disconnect, device number 2 [ 754.253556][T14692] fuse: Bad value for 'group_id' [ 754.258790][T14692] fuse: Bad value for 'group_id' [ 754.390359][T14697] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 754.399690][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 754.508759][ T7525] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 754.678983][ T7525] usb 5-1: Using ep0 maxpacket: 8 [ 754.687081][ T7525] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 754.699603][ T7525] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 754.754886][ T7525] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 754.755134][ T7525] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.757990][ T7525] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 754.758018][ T7525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.989249][ T7525] usb 5-1: GET_CAPABILITIES returned 0 [ 754.995631][ T7525] usbtmc 5-1:16.0: can't read capabilities [ 755.162342][T14709] nfs: Unknown parameter ' ' [ 755.244817][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.256101][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.265226][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.275712][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.285218][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.294304][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.303364][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.317929][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.328452][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.337920][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.347005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.356493][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.365576][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.374635][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.385017][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.394503][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 755.506641][T13017] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 755.627701][T14718] netlink: 'syz.3.2621': attribute type 10 has an invalid length. [ 755.646984][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 755.669123][T13017] usb 3-1: device descriptor read/64, error -71 [ 755.731726][T14720] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2622'. [ 755.808737][ T7525] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 755.817191][T14722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.939050][T13017] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 755.959551][ T7525] usb 1-1: Using ep0 maxpacket: 8 [ 755.967000][ T7525] usb 1-1: unable to get BOS descriptor or descriptor too short [ 755.977736][ T7525] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 755.987898][ T7525] usb 1-1: config 8 interface 0 has no altsetting 0 [ 755.998156][ T7525] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 756.007374][ T7525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.016189][ T7525] usb 1-1: Product: syz [ 756.073814][ T7525] usb 1-1: Manufacturer: syz [ 756.081549][ T7525] usb 1-1: SerialNumber: syz [ 756.097892][T14715] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 756.128949][T13017] usb 3-1: device descriptor read/64, error -71 [ 756.239624][T13017] usb usb3-port1: attempt power cycle [ 756.442724][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.559425][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.576345][T14725] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 756.660520][T13017] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 756.777367][T13017] usb 3-1: device descriptor read/8, error -71 [ 756.999102][ T982] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 757.068880][T13017] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 757.091528][T13017] usb 3-1: device descriptor read/8, error -71 [ 757.158202][ T5957] usb 5-1: USB disconnect, device number 110 [ 757.173516][T14731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.217569][T14731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.235299][ T982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 757.245396][T13017] usb usb3-port1: unable to enumerate USB device [ 757.275160][ T982] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 757.293571][ T982] usb 2-1: can't read configurations, error -71 [ 757.328708][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 757.422254][T14739] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 757.462106][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 757.653747][T14745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2630'. [ 757.663440][T14745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2630'. [ 757.800011][T13017] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 757.921308][T14751] openvswitch: netlink: Duplicate or invalid key (type 0). [ 757.931533][T14751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.958896][T13017] usb 5-1: Using ep0 maxpacket: 16 [ 757.965988][T13017] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 757.974803][T13017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.985094][T13017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 757.997486][T13017] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 758.007406][T13017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.015865][T13017] usb 5-1: Product: syz [ 758.020421][T13017] usb 5-1: Manufacturer: syz [ 758.025076][T13017] usb 5-1: SerialNumber: syz [ 758.034648][T13017] usb 5-1: config 0 descriptor?? [ 758.245096][ T5957] usb 5-1: USB disconnect, device number 111 [ 758.388775][ T982] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 758.540132][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 758.548125][ T982] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 758.558421][ T982] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 758.572445][ T982] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 758.582444][ T982] usb 2-1: config 127 has no interface number 0 [ 758.589217][ T982] usb 2-1: config 127 interface 171 has no altsetting 0 [ 758.601134][ T982] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 758.610674][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.619175][ T982] usb 2-1: Product: syz [ 758.623397][ T982] usb 2-1: Manufacturer: syz [ 758.628086][ T982] usb 2-1: SerialNumber: syz [ 758.686793][ T7525] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.699682][ T7525] usb 1-1: selecting invalid altsetting 0 [ 758.753705][T14757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.754121][ T7525] usb 1-1: USB disconnect, device number 112 [ 758.850764][T14186] udevd[14186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.899484][ T982] usb 2-1: USB disconnect, device number 4 [ 758.942749][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2637'. [ 759.058208][T14766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2638'. [ 759.073795][T14766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2638'. [ 759.516820][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 759.549708][T14781] netlink: 'syz.1.2644': attribute type 1 has an invalid length. [ 759.724840][T14789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.786177][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.814785][T14791] team0: Port device bond0 added [ 760.109630][T14807] netlink: 'syz.0.2651': attribute type 6 has an invalid length. [ 760.388911][ T982] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 760.402391][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.488833][T13017] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 760.530452][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.572939][ T982] usb 1-1: config index 0 descriptor too short (expected 65426, got 146) [ 760.591775][ T982] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 760.619419][ T982] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 760.637875][ T982] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 760.649131][ T7510] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 760.653886][ T982] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 760.668726][T13017] usb 3-1: Using ep0 maxpacket: 32 [ 760.674093][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 760.684738][ T982] usb 1-1: SerialNumber: syz [ 760.720911][T13017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 760.780301][T14817] FAULT_INJECTION: forcing a failure. [ 760.780301][T14817] name failslab, interval 1, probability 0, space 0, times 0 [ 760.788296][T13017] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 760.806874][T13017] usb 3-1: config 0 has no interface number 0 [ 760.813418][T13017] usb 3-1: config 0 interface 63 has no altsetting 0 [ 760.820826][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.4.2657 Not tainted syzkaller #0 PREEMPT(full) [ 760.820854][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.820865][T14817] Call Trace: [ 760.820879][T14817] [ 760.820888][T14817] dump_stack_lvl+0x189/0x250 [ 760.820916][T14817] ? __pfx____ratelimit+0x10/0x10 [ 760.820936][T14817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.820957][T14817] ? __pfx__printk+0x10/0x10 [ 760.820987][T14817] ? __pfx___might_resched+0x10/0x10 [ 760.821004][T14817] ? fs_reclaim_acquire+0x7d/0x100 [ 760.821035][T14817] should_fail_ex+0x414/0x560 [ 760.821069][T14817] should_failslab+0xa8/0x100 [ 760.821098][T14817] __kmalloc_cache_noprof+0x70/0x3d0 [ 760.821120][T14817] ? rtnl_newlink+0xed/0x1c70 [ 760.821144][T14817] rtnl_newlink+0xed/0x1c70 [ 760.821164][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821199][T14817] ? __pfx_rtnl_newlink+0x10/0x10 [ 760.821227][T14817] ? is_bpf_text_address+0x26/0x2b0 [ 760.821261][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821299][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821345][T14817] ? is_bpf_text_address+0x26/0x2b0 [ 760.821384][T14817] ? is_bpf_text_address+0x292/0x2b0 [ 760.821407][T14817] ? is_bpf_text_address+0x26/0x2b0 [ 760.821441][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821495][T14817] ? __pfx_rtnl_newlink+0x10/0x10 [ 760.821513][T14817] rtnetlink_rcv_msg+0x7cf/0xb70 [ 760.821532][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821558][T14817] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 760.821575][T14817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.821613][T14817] netlink_rcv_skb+0x205/0x470 [ 760.821632][T14817] ? __lock_acquire+0xab9/0xd20 [ 760.821658][T14817] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 760.821678][T14817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.821708][T14817] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.821734][T14817] netlink_unicast+0x82c/0x9e0 [ 760.821772][T14817] ? __pfx_netlink_unicast+0x10/0x10 [ 760.821801][T14817] ? netlink_sendmsg+0x642/0xb30 [ 760.821818][T14817] ? skb_put+0x11b/0x210 [ 760.821841][T14817] netlink_sendmsg+0x805/0xb30 [ 760.821872][T14817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.821896][T14817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 760.821917][T14817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.821939][T14817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.821960][T14817] __sock_sendmsg+0x21c/0x270 [ 760.821990][T14817] ____sys_sendmsg+0x505/0x830 [ 760.822019][T14817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.822053][T14817] ? import_iovec+0x74/0xa0 [ 760.822082][T14817] ___sys_sendmsg+0x21f/0x2a0 [ 760.822107][T14817] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.822167][T14817] ? __fget_files+0x2a/0x420 [ 760.822184][T14817] ? __fget_files+0x3a0/0x420 [ 760.822211][T14817] __x64_sys_sendmsg+0x19b/0x260 [ 760.822237][T14817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.822269][T14817] ? __pfx_ksys_write+0x10/0x10 [ 760.822291][T14817] ? rcu_is_watching+0x15/0xb0 [ 760.822316][T14817] ? do_syscall_64+0xbe/0x3b0 [ 760.822340][T14817] do_syscall_64+0xfa/0x3b0 [ 760.822366][T14817] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.822385][T14817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.822402][T14817] ? clear_bhb_loop+0x60/0xb0 [ 760.822424][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.822442][T14817] RIP: 0033:0x7f071838ebe9 [ 760.822460][T14817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.822476][T14817] RSP: 002b:00007f0719132038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.822497][T14817] RAX: ffffffffffffffda RBX: 00007f07185c5fa0 RCX: 00007f071838ebe9 [ 760.822511][T14817] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 760.822524][T14817] RBP: 00007f0719132090 R08: 0000000000000000 R09: 0000000000000000 [ 760.822536][T14817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.822546][T14817] R13: 00007f07185c6038 R14: 00007f07185c5fa0 R15: 00007f07186efa28 [ 760.822577][T14817] [ 760.825452][T13017] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 762.281072][ T7510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.295312][ T7510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.305358][ T7510] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 762.342408][ T7510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.379207][ T7510] usb 2-1: config 0 descriptor?? [ 762.600477][T13017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.621975][T13017] usb 3-1: Product: syz [ 762.637009][T13017] usb 3-1: Manufacturer: syz [ 762.650224][T13017] usb 3-1: SerialNumber: syz [ 762.662768][T13017] usb 3-1: config 0 descriptor?? [ 762.873907][T14809] __nla_validate_parse: 4 callbacks suppressed [ 762.873976][T14809] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2654'. [ 762.895455][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.934311][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.989732][ T7510] usbhid 2-1:0.0: can't add hid device: -32 [ 763.003657][ T7510] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 763.025659][T13017] kvaser_usb 3-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 763.134638][T13017] usb 3-1: USB disconnect, device number 105 [ 763.178724][ T7525] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 763.351043][ T7525] usb 5-1: Using ep0 maxpacket: 32 [ 763.406514][ T7525] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.438709][ T7525] usb 5-1: config 0 has no interfaces? [ 763.465002][ T7525] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 763.486979][T14846] bond2: option mode: unable to set because the bond device is up [ 763.496270][ T7525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.508653][ T7525] usb 5-1: Product: syz [ 763.519178][ T7525] usb 5-1: Manufacturer: syz [ 763.523862][ T7525] usb 5-1: SerialNumber: syz [ 763.580950][ T7525] usb 5-1: config 0 descriptor?? [ 763.631990][ T982] usb 1-1: USB disconnect, device number 113 [ 763.755518][ T7525] usb 2-1: USB disconnect, device number 5 [ 764.039169][T13017] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 764.119190][ T982] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 764.269117][T13017] usb 3-1: Using ep0 maxpacket: 8 [ 764.294771][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.303337][ T982] usb 1-1: device descriptor read/64, error -71 [ 764.310314][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.593936][ T982] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 764.769073][ T982] usb 1-1: device descriptor read/64, error -71 [ 764.958655][ T7525] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 764.976503][ T982] usb usb1-port1: attempt power cycle [ 765.169480][ T7525] usb 2-1: Using ep0 maxpacket: 32 [ 765.202150][ T7525] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.242202][ T7525] usb 2-1: config 0 has no interfaces? [ 765.263417][ T7525] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 765.288524][ T7525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.312841][ T7525] usb 2-1: Product: syz [ 765.330775][ T7525] usb 2-1: Manufacturer: syz [ 765.348690][ T982] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 765.357766][ T7525] usb 2-1: SerialNumber: syz [ 765.392770][ T982] usb 1-1: device descriptor read/8, error -71 [ 765.405243][ T7525] usb 2-1: config 0 descriptor?? [ 765.626465][T13017] usb 3-1: unable to get BOS descriptor or descriptor too short [ 765.659996][ T7525] usb 2-1: USB disconnect, device number 6 [ 765.668848][ T982] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 765.677607][T13017] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 765.693267][T13017] usb 3-1: can't read configurations, error -71 [ 765.730303][ T982] usb 1-1: device descriptor read/8, error -71 [ 765.873076][ T982] usb usb1-port1: unable to enumerate USB device [ 766.102238][ T5953] usb 5-1: USB disconnect, device number 112 [ 766.759908][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2681'. [ 767.278805][ T7525] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 767.493508][ T7525] usb 3-1: Using ep0 maxpacket: 32 [ 767.581505][ T7525] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.604869][ T7525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 767.632099][ T7525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 767.657454][ T7525] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 767.689571][ T7525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.751412][ T7525] usb 3-1: config 0 descriptor?? [ 767.776970][T14906] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.789822][ T7525] hub 3-1:0.0: USB hub found [ 768.025922][ T7525] hub 3-1:0.0: 2 ports detected [ 768.194719][T14920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.809140][ T982] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 768.839126][ T7525] usb 3-1: USB disconnect, device number 108 [ 768.908704][ T5957] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 769.008691][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 769.049241][ T982] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 769.064783][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.139617][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 769.191076][ T982] usb 5-1: Product: syz [ 769.234345][ T5957] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 769.244811][ T982] usb 5-1: Manufacturer: syz [ 769.254558][ T982] usb 5-1: SerialNumber: syz [ 769.268705][ T5957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3253, setting to 1024 [ 769.299372][ T982] usb 5-1: config 0 descriptor?? [ 769.315440][ T5957] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 769.346928][ T5957] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.382293][ T5957] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 769.391726][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.403710][ T5957] usb 4-1: Product: syz [ 769.410981][ T5957] usb 4-1: Manufacturer: syz [ 769.415859][ T5957] usb 4-1: SerialNumber: syz [ 769.483625][ T30] audit: type=1800 audit(1757180393.356:292): pid=14935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2688" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2767 res=0 errno=0 [ 769.592303][T14928] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 769.619248][T14928] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 769.884093][T14928] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2687' resets device [ 769.952066][ T5957] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 769.961623][ T5957] usbtest 4-1:1.0: Linux user mode ISO test driver [ 769.968762][ T5957] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 770.039783][ T5957] usb 4-1: USB disconnect, device number 114 [ 771.413730][ T982] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 771.430988][ T982] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 771.445166][ T982] usb 5-1: USB disconnect, device number 113 [ 771.460175][T14953] bond0: entered promiscuous mode [ 771.466380][T14953] bond_slave_0: entered promiscuous mode [ 771.549330][T14953] bond_slave_1: entered promiscuous mode [ 771.610830][T13017] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 771.628148][T14953] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 771.682114][T14953] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 771.722585][T14953] hsr1: entered allmulticast mode [ 771.737781][T14953] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 771.769593][T13017] usb 2-1: Using ep0 maxpacket: 8 [ 771.790315][T13017] usb 2-1: unable to get BOS descriptor or descriptor too short [ 771.807195][T14953] bond0: left promiscuous mode [ 771.812826][T14953] bond_slave_0: left promiscuous mode [ 771.848892][T13017] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 771.857585][T13017] usb 2-1: config 8 has no interface number 0 [ 771.867252][T13017] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 771.891115][T14953] bond_slave_1: left promiscuous mode [ 771.922914][T13017] usb 2-1: config 8 interface 24 has no altsetting 0 [ 771.995296][T13017] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 772.004701][T13017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.045035][T13017] usb 2-1: Product: syz [ 772.079147][T13017] usb 2-1: Manufacturer: syz [ 772.147841][T13017] usb 2-1: SerialNumber: syz [ 772.287636][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 772.337315][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 772.806961][T14973] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 773.415758][T14980] netlink: 'syz.3.2698': attribute type 3 has an invalid length. [ 773.598979][ T30] audit: type=1326 audit(1757180397.506:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 773.636183][ T30] audit: type=1326 audit(1757180397.506:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 773.684586][ T30] audit: type=1326 audit(1757180397.506:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 773.783447][ T30] audit: type=1326 audit(1757180397.506:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 773.876339][ T30] audit: type=1326 audit(1757180397.506:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb1658d550 code=0x7ffc0000 [ 774.023813][ T30] audit: type=1326 audit(1757180397.506:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.100039][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'. [ 774.117791][ T30] audit: type=1326 audit(1757180397.506:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.198067][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 774.468688][ T30] audit: type=1326 audit(1757180397.516:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.491384][ T30] audit: type=1326 audit(1757180397.516:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.565957][ T30] audit: type=1326 audit(1757180397.516:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.660213][ T30] audit: type=1326 audit(1757180397.516:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 774.905020][ T30] audit: type=1326 audit(1757180397.516:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.060102][ T30] audit: type=1326 audit(1757180397.516:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.099049][T13017] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 775.175814][ T30] audit: type=1326 audit(1757180397.516:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.176075][T13017] usb 2-1: USB disconnect, device number 7 [ 775.368910][ T30] audit: type=1326 audit(1757180397.516:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.453678][ T30] audit: type=1326 audit(1757180397.516:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.593268][ T30] audit: type=1326 audit(1757180397.516:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.707470][ T30] audit: type=1326 audit(1757180397.516:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14981 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1658ebe9 code=0x7ffc0000 [ 775.870073][T15002] FAULT_INJECTION: forcing a failure. [ 775.870073][T15002] name failslab, interval 1, probability 0, space 0, times 0 [ 775.924719][T15002] CPU: 1 UID: 0 PID: 15002 Comm: syz.2.2704 Not tainted syzkaller #0 PREEMPT(full) [ 775.924738][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 775.924746][T15002] Call Trace: [ 775.924751][T15002] [ 775.924757][T15002] dump_stack_lvl+0x189/0x250 [ 775.924777][T15002] ? __pfx____ratelimit+0x10/0x10 [ 775.924790][T15002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.924803][T15002] ? __pfx__printk+0x10/0x10 [ 775.924822][T15002] ? __pfx___might_resched+0x10/0x10 [ 775.924835][T15002] should_fail_ex+0x414/0x560 [ 775.924854][T15002] should_failslab+0xa8/0x100 [ 775.924871][T15002] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 775.924886][T15002] ? __alloc_skb+0x112/0x2d0 [ 775.924898][T15002] ? mntput_no_expire+0xb9/0x9d0 [ 775.924914][T15002] __alloc_skb+0x112/0x2d0 [ 775.924928][T15002] netlink_sendmsg+0x5c6/0xb30 [ 775.924947][T15002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.924960][T15002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 775.924973][T15002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.924985][T15002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.924997][T15002] __sock_sendmsg+0x21c/0x270 [ 775.925016][T15002] ____sys_sendmsg+0x505/0x830 [ 775.925033][T15002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.925052][T15002] ? import_iovec+0x74/0xa0 [ 775.925068][T15002] ___sys_sendmsg+0x21f/0x2a0 [ 775.925084][T15002] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.925117][T15002] ? __fget_files+0x2a/0x420 [ 775.925127][T15002] ? __fget_files+0x3a0/0x420 [ 775.925142][T15002] __x64_sys_sendmsg+0x19b/0x260 [ 775.925158][T15002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.925177][T15002] ? __pfx_ksys_write+0x10/0x10 [ 775.925190][T15002] ? rcu_is_watching+0x15/0xb0 [ 775.925204][T15002] ? do_syscall_64+0xbe/0x3b0 [ 775.925226][T15002] do_syscall_64+0xfa/0x3b0 [ 775.925236][T15002] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.925248][T15002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.925258][T15002] ? clear_bhb_loop+0x60/0xb0 [ 775.925272][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.925283][T15002] RIP: 0033:0x7fe6c978ebe9 [ 775.925294][T15002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.925305][T15002] RSP: 002b:00007fe6c79f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.925319][T15002] RAX: ffffffffffffffda RBX: 00007fe6c99c5fa0 RCX: 00007fe6c978ebe9 [ 775.925328][T15002] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 775.925336][T15002] RBP: 00007fe6c79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.925343][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.925350][T15002] R13: 00007fe6c99c6038 R14: 00007fe6c99c5fa0 R15: 00007fe6c9aefa28 [ 775.925368][T15002] [ 776.385802][T15013] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 776.392363][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 776.519142][T15013] vhci_hcd vhci_hcd.0: Device attached [ 776.728889][ T982] vhci_hcd: vhci_device speed not set [ 776.808904][ T982] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 777.580695][T15040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2713'. [ 777.609437][T15040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2713'. [ 777.653475][T15040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2713'. [ 777.681239][T15022] vhci_hcd: connection reset by peer [ 777.691664][T13649] vhci_hcd: stop threads [ 777.700720][T13649] vhci_hcd: release socket [ 777.712631][T13649] vhci_hcd: disconnect device [ 777.758953][ T5957] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 777.883683][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 777.892798][T15047] openvswitch: netlink: Flow actions attr not present in new flow. [ 777.907649][T15047] tc_dump_action: action bad kind [ 777.914507][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2714'. [ 778.012742][ T5957] usb 3-1: not running at top speed; connect to a high speed hub [ 778.031376][ T5957] usb 3-1: config 1 has an invalid interface number: 54 but max is 0 [ 778.041921][ T5957] usb 3-1: config 1 has no interface number 0 [ 778.056246][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 778.065818][ T5957] usb 3-1: config 1 interface 54 has no altsetting 0 [ 778.071096][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 778.081454][ T5957] usb 3-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 778.096052][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 778.098099][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.175399][ T5957] usb 3-1: Product: syz [ 778.185135][ T5957] usb 3-1: Manufacturer: syz [ 778.196998][ T5957] usb 3-1: SerialNumber: syz [ 778.209988][T13017] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 778.371388][T13017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.396495][T13017] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.413199][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 778.428103][T15049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2716'. [ 778.433888][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.438330][T13017] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 778.447311][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.497579][T13017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.524627][T13017] usb 4-1: config 0 descriptor?? [ 778.901955][T13017] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 778.974864][ T5957] usb 3-1: USB disconnect, device number 109 [ 779.256016][T15054] netlink: 'syz.1.2717': attribute type 3 has an invalid length. [ 779.265116][T15059] input: syz1 as /devices/virtual/input/input43 [ 779.486522][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.507224][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.509528][T13017] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 779.713446][T15080] bond0: entered promiscuous mode [ 779.727833][T15080] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 779.729305][T13017] usb 2-1: Using ep0 maxpacket: 32 [ 779.739890][T15080] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 779.750655][T13017] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.758725][T15080] hsr1: entered allmulticast mode [ 779.768432][T15080] bond0: entered allmulticast mode [ 779.776248][T13017] usb 2-1: config 0 has no interfaces? [ 779.782225][T15080] batadv0: entered allmulticast mode [ 779.790627][T13017] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 779.800154][T13017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.808302][T13017] usb 2-1: Product: syz [ 779.809038][T15080] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 779.812975][T13017] usb 2-1: Manufacturer: syz [ 779.824082][T15080] bond0: left promiscuous mode [ 779.828277][T13017] usb 2-1: SerialNumber: syz [ 779.843270][T13017] usb 2-1: config 0 descriptor?? [ 779.851544][ T5957] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 780.012779][ T5957] usb 5-1: device descriptor read/64, error -71 [ 780.271607][ T5957] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 780.428006][T15098] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 780.439160][ T5957] usb 5-1: device descriptor read/64, error -71 [ 780.549933][ T5957] usb usb5-port1: attempt power cycle [ 780.562142][T15104] netlink: 'syz.0.2733': attribute type 27 has an invalid length. [ 780.808074][T13017] usb 4-1: USB disconnect, device number 115 [ 780.889786][ T7525] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 780.958838][ T5957] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 780.992747][ T5957] usb 5-1: device descriptor read/8, error -71 [ 781.069068][ T7525] usb 1-1: Using ep0 maxpacket: 16 [ 781.092775][ T7525] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.135659][ T7525] usb 1-1: config 0 has no interface number 0 [ 781.164398][ T7525] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 781.208941][ T7525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.238994][ T7525] usb 1-1: Product: syz [ 781.243375][ T7525] usb 1-1: Manufacturer: syz [ 781.248386][ T7525] usb 1-1: SerialNumber: syz [ 781.257710][ T7525] usb 1-1: config 0 descriptor?? [ 781.279125][ T5957] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 781.288271][ T7525] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 781.319914][ T5957] usb 5-1: device descriptor read/8, error -71 [ 781.430232][ T5957] usb usb5-port1: unable to enumerate USB device [ 781.431474][T15116] tipc: Cannot configure node identity twice [ 781.651883][T15120] netlink: 'syz.3.2739': attribute type 21 has an invalid length. [ 782.186440][ T5957] usb 2-1: USB disconnect, device number 8 [ 782.518760][ T982] vhci_hcd: vhci_device speed not set [ 782.546898][T15129] netlink: 'syz.1.2742': attribute type 5 has an invalid length. [ 782.749076][ T7525] gspca_spca1528: reg_w err -110 [ 782.781329][ T7525] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 783.020282][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 783.118804][ T5957] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 783.189658][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 783.202802][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.223054][ T5953] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 783.235774][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.250467][ T5953] usb 2-1: config 0 descriptor?? [ 783.305170][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.322249][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.364839][ T5957] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 783.468335][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.513384][ T5957] usb 5-1: config 0 descriptor?? [ 783.539221][ T5957] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 783.597460][T13017] usb 1-1: USB disconnect, device number 118 [ 783.659379][T15146] loop6: detected capacity change from 0 to 7 [ 783.674978][ T5953] kye 0003:0458:4018.0013: unbalanced collection at end of report description [ 783.696816][T14171] Dev loop6: unable to read RDB block 7 [ 783.705417][T14171] loop6: unable to read partition table [ 783.706285][ T5953] kye 0003:0458:4018.0013: parse failed [ 783.714783][T14171] loop6: partition table beyond EOD, truncated [ 783.727093][T15146] Dev loop6: unable to read RDB block 7 [ 783.734489][ T5953] kye 0003:0458:4018.0013: probe with driver kye failed with error -22 [ 783.766602][T15146] loop6: unable to read partition table [ 783.776880][T15146] loop6: partition table beyond EOD, truncated [ 783.785654][T15146] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 783.897242][ T982] usb 2-1: USB disconnect, device number 9 [ 783.945047][T15155] __nla_validate_parse: 4 callbacks suppressed [ 783.945062][T15155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2751'. [ 783.961547][T15155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2751'. [ 783.975648][T15155] sit2: entered allmulticast mode [ 784.023448][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'. [ 784.097124][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.109772][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.128894][ T5957] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 784.288844][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 784.302548][ T5957] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 784.311633][ T5957] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 784.321967][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.376689][ T5957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.386074][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.394182][ T5957] usb 4-1: Product: syz [ 784.404065][ T5957] usb 4-1: Manufacturer: syz [ 784.409670][ T5957] usb 4-1: SerialNumber: syz [ 784.640464][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 784.640487][ T30] audit: type=1800 audit(1757180408.586:339): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2755" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2841 res=0 errno=0 [ 784.688190][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.787383][ T5957] usb 4-1: 0:2 : does not exist [ 784.836749][ T5957] usb 4-1: USB disconnect, device number 116 [ 784.901846][T14171] udevd[14171]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.048832][T13017] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 785.115511][T15184] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2761'. [ 785.221177][T13017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.233921][T13017] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 785.243884][T13017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.260523][T13017] usb 1-1: config 0 descriptor?? [ 785.286099][T15189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 785.387801][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 785.397450][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 785.399542][T15193] _ÐZ`Ô€@S: entered promiscuous mode [ 785.447801][T15193] block device autoloading is deprecated and will be removed. [ 785.484270][T13017] a4tech 0003:09DA:0006.0014: unknown main item tag 0x0 [ 785.502059][T13017] a4tech 0003:09DA:0006.0014: item fetching failed at offset 4/7 [ 785.517980][T15197] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2766'. [ 785.527122][T13017] a4tech 0003:09DA:0006.0014: parse failed [ 785.527243][T13017] a4tech 0003:09DA:0006.0014: probe with driver a4tech failed with error -22 [ 785.688954][T13017] usb 1-1: USB disconnect, device number 119 [ 785.733073][T15202] kvm: pic: non byte write [ 785.970612][T13017] usb 5-1: USB disconnect, device number 118 [ 786.068780][ T7510] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 786.405937][ T7510] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 786.425541][ T7510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.435160][ T7510] usb 2-1: Product: syz [ 786.443849][ T7510] usb 2-1: Manufacturer: syz [ 786.448871][ T7510] usb 2-1: SerialNumber: syz [ 786.750178][ T7510] usb 2-1: config 0 descriptor?? [ 787.159572][T15235] fuse: Bad value for 'fd' [ 787.172853][ T7510] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 787.217960][ T7510] airspy 2-1:0.0: Could not detect board [ 787.268723][ T5957] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 787.277066][ T7510] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 787.327066][ T7510] usb 2-1: USB disconnect, device number 10 [ 787.633543][T15243] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 787.699975][ T5957] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 787.709276][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.734016][ T5957] usb 1-1: Product: syz [ 787.738249][ T5957] usb 1-1: Manufacturer: syz [ 787.749994][ T5957] usb 1-1: SerialNumber: syz [ 787.794910][ T5957] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 787.851140][ T7525] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 788.766984][ T7510] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 788.919167][ T7510] usb 3-1: Using ep0 maxpacket: 32 [ 788.933596][ T7525] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 788.935396][ T7510] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 788.948927][ T7525] ath9k_htc: Failed to initialize the device [ 788.983265][ T7525] usb 1-1: ath9k_htc: USB layer deinitialized [ 788.997079][ T7510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.109658][ T7510] usb 3-1: config 0 descriptor?? [ 789.335419][ T7510] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 789.403369][ T7510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.439832][ T7510] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 789.499011][ T7510] usb 3-1: media controller created [ 789.743390][ T7510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 789.887842][T15267] dib0700: tx buffer length is larger than 4. Not supported. [ 790.044900][ T7510] DVB: Unable to find symbol dib7000p_attach() [ 790.081927][ T7510] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 790.288652][ T7510] rc_core: IR keymap rc-dib0700-rc5 not found [ 790.317758][ T7510] Registered IR keymap rc-empty [ 790.335724][T13017] usb 1-1: USB disconnect, device number 120 [ 790.355173][ T7510] dvb-usb: could not initialize remote control. [ 790.393962][ T7510] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 790.588358][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 790.661337][ T7525] usb 3-1: USB disconnect, device number 110 [ 791.058274][ T7525] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 791.239738][T13017] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 791.398634][T13017] usb 5-1: device descriptor read/64, error -71 [ 791.671774][T13017] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 791.858834][T13017] usb 5-1: device descriptor read/64, error -71 [ 791.999273][T13017] usb usb5-port1: attempt power cycle [ 792.149990][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 792.451326][T13017] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 792.538710][T13017] usb 5-1: device descriptor read/8, error -71 [ 792.907802][T13017] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 792.976569][T13017] usb 5-1: device descriptor read/8, error -71 [ 793.089530][T13017] usb usb5-port1: unable to enumerate USB device [ 793.637177][T15312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.362887][T13017] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 794.462208][T15330] tipc: Enabled bearer , priority 0 [ 794.495655][T15330] syzkaller0: entered promiscuous mode [ 794.518658][T15330] syzkaller0: entered allmulticast mode [ 794.518720][T13017] usb 5-1: Using ep0 maxpacket: 32 [ 794.543762][T13017] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 794.553304][T13017] usb 5-1: config 0 has no interface number 0 [ 794.572862][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 794.595660][T15330] macvlan0: entered promiscuous mode [ 794.601268][T15330] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 794.609235][T15330] netlink: 'syz.0.2805': attribute type 2 has an invalid length. [ 794.621355][T13017] usb 5-1: config 0 interface 89 has no altsetting 0 [ 794.632159][T15334] netlink: 'syz.3.2806': attribute type 21 has an invalid length. [ 794.666569][T15330] netlink: 'syz.0.2805': attribute type 3 has an invalid length. [ 794.675180][T13017] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 794.699750][T13017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.707810][T13017] usb 5-1: Product: syz [ 794.712591][T15329] tipc: Resetting bearer [ 794.758056][T13017] usb 5-1: Manufacturer: syz [ 794.763381][T13017] usb 5-1: SerialNumber: syz [ 794.780010][T15336] netlink: 'syz.1.2807': attribute type 10 has an invalid length. [ 794.807918][T13017] usb 5-1: config 0 descriptor?? [ 794.825647][T15329] tipc: Disabling bearer [ 794.830775][T15337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2807'. [ 794.849438][T13017] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 794.881449][T13017] em28xx 5-1:0.89: Video interface 89 found: bulk [ 795.127395][T15344] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2810'. [ 795.454281][T13017] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 796.001382][T15360] netlink: 'syz.2.2817': attribute type 27 has an invalid length. [ 796.036439][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2819'. [ 796.089406][T13017] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=65) [ 796.158656][T13017] em28xx 5-1:0.89: board has no eeprom [ 796.186511][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.197306][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.214088][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.226150][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.234502][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.255700][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.263717][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.284795][T15360] sit2: left allmulticast mode [ 796.318954][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.364610][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.382243][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.398837][ T7525] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 796.550392][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.559459][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.598667][ T7525] usb 3-1: Using ep0 maxpacket: 16 [ 796.612573][ T7525] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.627142][ T7525] usb 3-1: config 0 has no interface number 0 [ 796.643917][ T7525] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 796.653174][T13017] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 796.657793][ T7525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.665956][T13017] em28xx 5-1:0.89: analog set to bulk mode. [ 796.679509][ T7525] usb 3-1: Product: syz [ 796.683718][ T7525] usb 3-1: Manufacturer: syz [ 796.691743][ T7525] usb 3-1: SerialNumber: syz [ 796.692226][ T5953] em28xx 5-1:0.89: Registering V4L2 extension [ 796.715766][ T7525] usb 3-1: config 0 descriptor?? [ 796.735250][ T7525] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 796.775082][ T982] usb 5-1: USB disconnect, device number 123 [ 796.785557][ T982] em28xx 5-1:0.89: Disconnecting em28xx [ 796.838728][ T5957] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 796.848164][ T5953] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 796.883244][ T5953] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 796.890290][ T5953] em28xx 5-1:0.89: No AC97 audio processor [ 796.912715][ T5953] usb 5-1: Decoder not found [ 796.912740][ T5953] em28xx 5-1:0.89: failed to create media graph [ 796.912766][ T5953] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 796.929548][ T5953] em28xx 5-1:0.89: Registering snapshot button... [ 797.018677][ T5957] usb 1-1: Invalid ep0 maxpacket: 32 [ 797.104603][ T5953] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input45 [ 797.158897][ T5957] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 797.225735][ T5953] em28xx 5-1:0.89: Remote control support is not available for this card. [ 797.288365][T15365] chnl_net:caif_netlink_parms(): no params data found [ 797.337558][ T982] em28xx 5-1:0.89: Closing input extension [ 797.353531][ T5957] usb 1-1: Invalid ep0 maxpacket: 32 [ 797.386437][ T982] em28xx 5-1:0.89: Deregistering snapshot button [ 797.393613][ T5957] usb usb1-port1: attempt power cycle [ 797.406776][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 797.418878][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 797.477805][ T982] em28xx 5-1:0.89: Freeing device [ 797.677990][T15381] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 797.769019][ T5957] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 797.771334][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.799617][ T5957] usb 1-1: Invalid ep0 maxpacket: 32 [ 797.918863][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.936635][T15365] bridge_slave_0: entered allmulticast mode [ 797.948801][ T5957] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 797.967416][T15365] bridge_slave_0: entered promiscuous mode [ 797.979779][ T5957] usb 1-1: Invalid ep0 maxpacket: 32 [ 797.987551][ T5957] usb usb1-port1: unable to enumerate USB device [ 798.005618][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.022441][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.044079][T15365] bridge_slave_1: entered allmulticast mode [ 798.064449][T15365] bridge_slave_1: entered promiscuous mode [ 798.100335][ T7525] gspca_spca1528: reg_w err -110 [ 798.105433][ T7525] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 798.244223][T15365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.262110][T15365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.362839][T15365] team0: Port device team_slave_0 added [ 798.382969][T15365] team0: Port device team_slave_1 added [ 798.439237][ T5868] Bluetooth: hci1: command tx timeout [ 798.626728][T15365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.634135][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.660145][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.696677][T15365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.749634][T15365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.756730][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.783420][T15365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.887143][T15365] hsr_slave_0: entered promiscuous mode [ 798.900756][T15365] hsr_slave_1: entered promiscuous mode [ 798.912319][T15365] debugfs: 'hsr0' already exists in 'hsr' [ 798.920519][T15365] Cannot create hsr debugfs directory [ 799.278756][T15365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.291094][T15365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.407536][T15365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.418306][T15365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.538403][T15365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.559997][T15365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.728250][T15365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.766539][T15365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.788462][ T5953] usb 3-1: USB disconnect, device number 111 [ 799.918741][T15401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2829'. [ 800.139040][T13017] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 800.179751][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'. [ 800.191790][T15365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 800.228524][T15365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 800.243218][T15365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 800.268459][T15365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 800.279013][T13017] usb 4-1: device descriptor read/64, error -71 [ 800.334533][T15419] netlink: 'syz.2.2833': attribute type 10 has an invalid length. [ 800.356889][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'. [ 800.443709][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.509744][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.519156][T13017] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 800.519392][ T5868] Bluetooth: hci1: command tx timeout [ 800.551507][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.558802][T14489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.580665][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.587830][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.720215][T13017] usb 4-1: device descriptor read/64, error -71 [ 800.775426][T15365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.783198][T15427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 800.840274][T13017] usb usb4-port1: attempt power cycle [ 800.893203][T15365] veth0_vlan: entered promiscuous mode [ 800.924592][T15365] veth1_vlan: entered promiscuous mode [ 800.951986][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2837'. [ 801.014869][T15365] veth0_macvtap: entered promiscuous mode [ 801.027983][T15365] veth1_macvtap: entered promiscuous mode [ 801.062721][T15365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.118033][T15365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.155030][T13649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.204517][T13017] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 801.252511][T13017] usb 4-1: device descriptor read/8, error -71 [ 801.257227][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.297190][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.324229][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 801.333593][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.508703][ T5957] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 801.518875][T13017] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 801.560657][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.577664][T13017] usb 4-1: device descriptor read/8, error -71 [ 801.581218][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.691574][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.700184][T13017] usb usb4-port1: unable to enumerate USB device [ 801.705535][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.726367][ T5957] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 801.747681][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.755132][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.782936][T15444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2844'. [ 801.813538][ T5957] usb 3-1: config 0 descriptor?? [ 801.826973][T15444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2844'. [ 801.860990][T15444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2844'. [ 801.904879][T15446] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 802.494061][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.502920][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.516249][ T5957] usbhid 3-1:0.0: can't add hid device: -71 [ 802.523200][ T5957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 802.539534][ T5957] usb 3-1: USB disconnect, device number 112 [ 802.601004][ T5868] Bluetooth: hci1: command tx timeout [ 802.708913][ T7525] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 802.875085][ T7525] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.883829][ T7525] usb 1-1: no configurations [ 802.888461][ T7525] usb 1-1: can't read configurations, error -22 [ 802.942716][T15457] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 803.208753][ T5957] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 803.289346][ T982] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 803.369614][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 803.384488][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.416720][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.455325][ T5957] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 803.500810][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.513258][ T982] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 803.541448][ T982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 803.551356][ T5957] usb 5-1: config 0 descriptor?? [ 803.588370][ T5957] hub 5-1:0.0: USB hub found [ 803.612099][ T982] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 803.795525][ T5957] hub 5-1:0.0: 1 port detected [ 803.799331][T15472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 803.810834][ T982] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 803.836313][ T982] usb 3-1: Product: syz [ 803.843651][ T982] usb 3-1: Manufacturer: syz [ 803.858717][ T982] usb 3-1: SerialNumber: syz [ 803.911207][ T982] usb 3-1: config 0 descriptor?? [ 804.011891][ T982] usb 3-1: selecting invalid altsetting 0 [ 804.079923][ T7509] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 804.249454][ T7509] usb 4-1: Using ep0 maxpacket: 8 [ 804.270701][ T7509] usb 4-1: unable to get BOS descriptor or descriptor too short [ 804.298849][ T7525] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 804.313411][ T7509] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 804.329755][ T7509] usb 4-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.355503][ T7509] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.435168][ T7509] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 804.442237][ T982] usb 5-1: USB disconnect, device number 124 [ 804.451226][ T5957] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 804.555309][ T7524] usb 3-1: USB disconnect, device number 113 [ 804.585957][ T7525] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 804.596873][ T7525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.631014][ T7509] usb 4-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.656479][ T7525] usb 1-1: Product: syz [ 804.678738][ T5868] Bluetooth: hci1: command tx timeout [ 804.693051][ T7509] usb 4-1: config 8 interface 0 has no altsetting 0 [ 804.694507][ T7525] usb 1-1: Manufacturer: syz [ 804.710845][ T7525] usb 1-1: SerialNumber: syz [ 804.774410][ T7509] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 804.900405][ T7509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.908703][ T7509] usb 4-1: Product: syz [ 804.913005][ T7509] usb 4-1: Manufacturer: syz [ 804.928639][ T7509] usb 4-1: SerialNumber: syz [ 805.165355][ T7509] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 805.197849][ T7509] usb 4-1: selecting invalid altsetting 0 [ 805.325886][ T7509] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 805.360137][ T7524] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 805.383547][ T7509] usb 4-1: USB disconnect, device number 121 [ 805.398907][ T982] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 805.448012][T14359] udevd[14359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.548763][ T7524] usb 2-1: Using ep0 maxpacket: 8 [ 805.556499][ T7524] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 805.568895][ T982] usb 5-1: config 4 has an invalid interface number: 39 but max is 1 [ 805.577418][ T7524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.586133][ T982] usb 5-1: config 4 has an invalid interface number: 49 but max is 1 [ 805.594621][ T982] usb 5-1: config 4 has no interface number 0 [ 805.624299][ T7524] usb 2-1: config 0 descriptor?? [ 805.647704][ T982] usb 5-1: config 4 has no interface number 1 [ 805.677510][ T982] usb 5-1: config 4 interface 39 has no altsetting 0 [ 805.684625][ T982] usb 5-1: config 4 interface 49 has no altsetting 0 [ 805.695205][ T982] usb 5-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 805.705652][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.713914][ T982] usb 5-1: Product: syz [ 805.718266][ T982] usb 5-1: Manufacturer: syz [ 805.726859][ T982] usb 5-1: SerialNumber: syz [ 805.870135][ T7524] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 806.210344][ T982] usb 5-1: USB disconnect, device number 125 [ 806.227576][T15488] netlink: 'syz.3.2857': attribute type 1 has an invalid length. [ 806.428655][T15491] batman_adv: batadv0: Adding interface: dummy0 [ 806.435239][T15491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.514582][T15491] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 807.681508][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.711070][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.751530][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.882478][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.902737][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.926323][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 807.954267][T15511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.003555][T15476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.031624][T15476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.264916][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 808.280636][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 808.348901][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'. [ 808.504220][ T7524] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 808.536269][ T7524] asix 2-1:0.0: probe with driver asix failed with error -71 [ 808.587927][ T7524] usb 2-1: USB disconnect, device number 11 [ 808.671778][T15521] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 809.378975][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.388515][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.505210][ T7525] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 809.523438][ T7525] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 809.535180][ T7525] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 809.667618][ T7525] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 809.677930][T15528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.696368][ T7525] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 809.756359][ T7525] usb 1-1: USB disconnect, device number 127 [ 810.580286][T15535] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2868'. [ 813.069626][T15568] __nla_validate_parse: 1 callbacks suppressed [ 813.069646][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2878'. [ 813.093531][T15567] ip6tnl2: entered allmulticast mode [ 813.739055][ T7509] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 813.847036][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 813.872955][T15582] netlink: 'syz.2.2883': attribute type 1 has an invalid length. [ 813.937425][ T7509] usb 4-1: Using ep0 maxpacket: 32 [ 813.964939][ T7509] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.012644][ T7509] usb 4-1: config 0 has no interfaces? [ 814.025738][ T7509] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 814.055707][ T7509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.090621][ T7509] usb 4-1: Product: syz [ 814.102482][ T7509] usb 4-1: Manufacturer: syz [ 814.116438][ T7509] usb 4-1: SerialNumber: syz [ 814.146769][ T7509] usb 4-1: config 0 descriptor?? [ 814.198819][ T7524] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 814.369403][ T7524] usb 3-1: Using ep0 maxpacket: 8 [ 814.387295][T15591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.396875][T15591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.458987][ T7509] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 814.489712][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.498709][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.506679][ T7525] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 814.668787][ T7509] usb 1-1: device descriptor read/64, error -71 [ 814.675773][ T7525] usb 2-1: unable to get BOS descriptor or descriptor too short [ 814.690118][ T7525] usb 2-1: not running at top speed; connect to a high speed hub [ 814.700318][ T7525] usb 2-1: config 14 has an invalid interface number: 242 but max is 0 [ 814.709184][ T7525] usb 2-1: config 14 has no interface number 0 [ 814.715434][ T7525] usb 2-1: config 14 interface 242 has no altsetting 0 [ 814.726084][ T7525] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=43.0d [ 814.736273][ T7525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.744912][ T7525] usb 2-1: Product: syz [ 814.749596][ T7525] usb 2-1: Manufacturer: syz [ 814.754384][ T7525] usb 2-1: SerialNumber: syz [ 814.828174][ T7524] usb 3-1: unable to get BOS descriptor or descriptor too short [ 814.841637][ T7524] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 814.854747][ T7524] usb 3-1: can't read configurations, error -71 [ 814.908757][ T7509] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 815.022256][ T7525] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 815.030724][ T7525] pctv452e: pctv452e_power_ctrl: 1 [ 815.030724][ T7525] [ 815.038122][ T7525] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 815.038122][ T7525] [ 815.049067][ T7525] dvb-usb: bulk message failed: -22 (5/0) [ 815.053953][ T7509] usb 1-1: device descriptor read/64, error -71 [ 815.060907][ T7525] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 815.076545][ T7525] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 815.089742][ T7525] usb 2-1: USB disconnect, device number 12 [ 815.209367][ T7509] usb usb1-port1: attempt power cycle [ 815.561294][ T7509] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 815.612633][ T7509] usb 1-1: device descriptor read/8, error -71 [ 815.766628][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 815.776111][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 815.822941][T15620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2895'. [ 815.835436][T15620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2895'. [ 815.854985][T15620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2895'. [ 815.869853][ T7509] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 815.901322][ T7509] usb 1-1: device descriptor read/8, error -71 [ 815.944898][T15622] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2896'. [ 815.956662][T15624] FAULT_INJECTION: forcing a failure. [ 815.956662][T15624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.973621][T15624] CPU: 0 UID: 0 PID: 15624 Comm: syz.1.2897 Not tainted syzkaller #0 PREEMPT(full) [ 815.973648][T15624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 815.973661][T15624] Call Trace: [ 815.973670][T15624] [ 815.973679][T15624] dump_stack_lvl+0x189/0x250 [ 815.973709][T15624] ? __pfx____ratelimit+0x10/0x10 [ 815.973730][T15624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.973754][T15624] ? __pfx__printk+0x10/0x10 [ 815.973781][T15624] ? __might_fault+0xb0/0x130 [ 815.973820][T15624] should_fail_ex+0x414/0x560 [ 815.973854][T15624] _copy_from_iter+0x1de/0x1790 [ 815.973885][T15624] ? rcu_is_watching+0x15/0xb0 [ 815.973906][T15624] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 815.973934][T15624] ? __pfx__copy_from_iter+0x10/0x10 [ 815.973958][T15624] ? __build_skb_around+0x257/0x3e0 [ 815.973984][T15624] ? netlink_sendmsg+0x642/0xb30 [ 815.974003][T15624] ? skb_put+0x11b/0x210 [ 815.974028][T15624] netlink_sendmsg+0x6b2/0xb30 [ 815.974058][T15624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.974082][T15624] ? aa_sock_msg_perm+0xf1/0x1d0 [ 815.974104][T15624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.974130][T15624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.974151][T15624] __sock_sendmsg+0x21c/0x270 [ 815.974183][T15624] ____sys_sendmsg+0x505/0x830 [ 815.974213][T15624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.974247][T15624] ? import_iovec+0x74/0xa0 [ 815.974275][T15624] ___sys_sendmsg+0x21f/0x2a0 [ 815.974301][T15624] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.974363][T15624] ? __fget_files+0x2a/0x420 [ 815.974378][T15624] ? __fget_files+0x3a0/0x420 [ 815.974405][T15624] __x64_sys_sendmsg+0x19b/0x260 [ 815.974431][T15624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.974464][T15624] ? __pfx_ksys_write+0x10/0x10 [ 815.974486][T15624] ? rcu_is_watching+0x15/0xb0 [ 815.974510][T15624] ? do_syscall_64+0xbe/0x3b0 [ 815.974535][T15624] do_syscall_64+0xfa/0x3b0 [ 815.974551][T15624] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.974581][T15624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.974600][T15624] ? clear_bhb_loop+0x60/0xb0 [ 815.974623][T15624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.974642][T15624] RIP: 0033:0x7fdb0ef8ebe9 [ 815.974661][T15624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.974679][T15624] RSP: 002b:00007fdb0fe40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.974702][T15624] RAX: ffffffffffffffda RBX: 00007fdb0f1c5fa0 RCX: 00007fdb0ef8ebe9 [ 815.974716][T15624] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 815.974730][T15624] RBP: 00007fdb0fe40090 R08: 0000000000000000 R09: 0000000000000000 [ 815.974742][T15624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.974754][T15624] R13: 00007fdb0f1c6038 R14: 00007fdb0f1c5fa0 R15: 00007fdb0f2efa28 [ 815.974787][T15624] [ 816.268818][ T7509] usb usb1-port1: unable to enumerate USB device [ 816.401364][ T7525] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 816.539762][ T7509] usb 4-1: USB disconnect, device number 122 [ 816.578749][ T7525] usb 3-1: Using ep0 maxpacket: 16 [ 816.650575][ T7525] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.707442][ T7525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 816.739123][ T7525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 816.759447][ T7525] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.793884][ T7525] usb 3-1: config 1 interface 1 has no altsetting 0 [ 816.817080][ T7525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.838497][ T7525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.860892][ T7525] usb 3-1: Product: syz [ 816.868931][ T7525] usb 3-1: Manufacturer: syz [ 816.875796][ T7525] usb 3-1: SerialNumber: syz [ 817.135322][T15644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.299438][T15644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.503806][ T7525] usb 3-1: USB disconnect, device number 116 [ 817.571575][ T7524] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 817.708979][ T7509] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 817.748700][ T7524] usb 1-1: Using ep0 maxpacket: 32 [ 817.755991][ T7524] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 817.778721][ T7524] usb 1-1: config 0 has no interface number 0 [ 817.798100][ T7524] usb 1-1: config 0 interface 12 has no altsetting 0 [ 817.820596][ T7524] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 817.845534][ T7524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.876636][ T7524] usb 1-1: Product: syz [ 817.888699][ T7524] usb 1-1: Manufacturer: syz [ 817.888737][ T7509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.893331][ T7524] usb 1-1: SerialNumber: syz [ 817.927640][ T7509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.948104][ T7509] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 817.952449][ T7524] usb 1-1: config 0 descriptor?? [ 818.018784][ T7509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.075760][ T7509] usb 2-1: config 0 descriptor?? [ 818.495824][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.523352][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.677492][ T7509] usbhid 2-1:0.0: can't add hid device: -71 [ 818.708767][ T7509] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 818.725837][ T7509] usb 2-1: USB disconnect, device number 13 [ 819.969827][ T982] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 820.155103][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.170669][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.184577][ T982] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 820.227079][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.252699][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.264859][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.285001][ T7524] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 820.381248][ T5953] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 820.410618][ T7524] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 820.456118][ T7524] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 820.465827][ T982] usb 2-1: config 0 descriptor?? [ 820.471007][ T7524] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 820.484550][ T982] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 820.506824][ T7524] usb 1-1: USB disconnect, device number 6 [ 820.531715][T15689] raw_sendmsg: syz.2.2917 forgot to set AF_INET. Fix it! [ 820.543670][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 820.555934][ T5953] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 820.564307][ T7509] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 820.575809][ T5953] usb 4-1: config 0 has no interface number 0 [ 820.586508][ T5953] usb 4-1: too many endpoints for config 0 interface 66 altsetting 136: 223, using maximum allowed: 30 [ 820.614653][ T5953] usb 4-1: config 0 interface 66 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 820.634655][ T5953] usb 4-1: config 0 interface 66 has no altsetting 0 [ 820.662403][ T5953] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 820.678305][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.688258][ T5953] usb 4-1: Product: syz [ 820.721694][ T5953] usb 4-1: Manufacturer: syz [ 820.750749][ T7509] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 820.760039][ T7509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.768661][ T7509] usb 5-1: Product: syz [ 820.772994][ T7509] usb 5-1: Manufacturer: syz [ 820.779396][ T7509] usb 5-1: SerialNumber: syz [ 820.793743][ T5953] usb 4-1: SerialNumber: syz [ 820.868371][ T5953] usb 4-1: config 0 descriptor?? [ 821.057081][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.067753][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.579919][T15709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2923'. [ 821.589587][T15709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2923'. [ 821.599235][T15709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2923'. [ 822.489605][ T5953] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 822.513915][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 822.662336][ T7524] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 822.914588][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 822.976694][ T7524] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 823.012849][ T7524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.022004][ T982] usb 2-1: USB disconnect, device number 14 [ 823.035114][ T5953] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 823.048994][ T7524] usb 1-1: Product: syz [ 823.066189][ T7524] usb 1-1: Manufacturer: syz [ 823.086167][ T5953] usb 4-1: media controller created [ 823.086295][ T7524] usb 1-1: SerialNumber: syz [ 823.116012][ T7524] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 823.173052][ T7525] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 823.372465][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.385410][T15727] futex_wake_op: syz.3.2928 tries to shift op by 36; fix this program [ 823.388661][ T7507] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 823.670868][ T7507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.694058][ T7507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.777281][ T5953] cxusb: set interface failed [ 823.788279][ T7507] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 823.840462][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 823.856978][ T7507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.905714][ T7507] usb 3-1: config 0 descriptor?? [ 823.939405][ T982] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 824.108720][ T7509] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 824.135021][ T7509] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 824.154331][ T982] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 824.163873][ T982] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 824.208194][ T7509] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 824.254767][ T982] usb 2-1: Product: syz [ 824.268712][ T7509] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 824.288516][ T982] usb 2-1: Manufacturer: syz [ 824.295683][ T7525] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 824.323001][ T982] usb 2-1: SerialNumber: syz [ 824.346672][ T5953] DVB: Unable to find symbol lgdt330x_attach() [ 824.348833][ T7525] ath9k_htc: Failed to initialize the device [ 824.363092][ T7509] usb 5-1: USB disconnect, device number 126 [ 824.369547][ T5953] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 824.497742][ T982] usb 2-1: config 0 descriptor?? [ 824.615435][T15724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.637424][ T7525] usb 1-1: ath9k_htc: USB layer deinitialized [ 824.694148][T15724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.818917][ T5953] rc_core: IR keymap rc-dvico-portable not found [ 824.839933][ T5953] Registered IR keymap rc-empty [ 824.867891][ T5953] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 825.039997][ T5953] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input46 [ 825.051943][ T7507] usbhid 3-1:0.0: can't add hid device: -71 [ 825.058024][ T7507] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 825.074071][ T7507] usb 3-1: USB disconnect, device number 117 [ 825.092572][ T5953] dvb-usb: schedule remote query interval to 100 msecs. [ 825.160807][ T5953] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 825.213994][ T5953] usb 4-1: USB disconnect, device number 123 [ 825.353279][T15741] ip6tnl3: entered allmulticast mode [ 825.512225][ T5953] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 826.254983][T15758] netlink: 'syz.4.2936': attribute type 27 has an invalid length. [ 826.294553][T15758] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 826.316549][ T7524] usb 1-1: USB disconnect, device number 7 [ 826.327745][T15758] veth3: left promiscuous mode [ 826.332806][T15758] veth3: left allmulticast mode [ 826.402838][T15758] ip6tnl2: left allmulticast mode [ 826.409498][T15758] ip6tnl3: left allmulticast mode [ 826.438823][ T5953] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 826.621211][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.638642][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.677291][ T982] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 826.717297][ T7525] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 826.755667][ T5953] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 826.772964][ T982] asix 2-1:0.0: probe with driver asix failed with error -71 [ 826.792519][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.807186][ T982] usb 2-1: USB disconnect, device number 15 [ 826.843647][ T5953] usb 3-1: config 0 descriptor?? [ 826.887893][ T5953] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 826.939456][ T7525] usb 5-1: Using ep0 maxpacket: 16 [ 826.991365][ T7525] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 827.044452][ T7525] usb 5-1: config 0 has no interface number 0 [ 827.057870][ T7525] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 827.073942][ T7525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.088666][ T7525] usb 5-1: Product: syz [ 827.093293][ T7525] usb 5-1: Manufacturer: syz [ 827.097989][ T7525] usb 5-1: SerialNumber: syz [ 827.122214][ T7525] usb 5-1: config 0 descriptor?? [ 827.137409][ T7525] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 827.470362][T15776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.483729][T15776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.998823][ T982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 828.157260][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.172538][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.395924][ T982] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 828.471780][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.509018][ T7525] gspca_spca1528: reg_w err -110 [ 828.570876][ T7525] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 828.706875][ T982] usb 1-1: config 0 descriptor?? [ 828.994543][T15788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.150719][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.207887][ T7525] usb 3-1: USB disconnect, device number 118 [ 829.214861][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.433469][ T982] usbhid 1-1:0.0: can't add hid device: -71 [ 829.439946][ T982] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 829.469370][ T982] usb 1-1: USB disconnect, device number 8 [ 829.624392][ T7507] usb 5-1: USB disconnect, device number 127 [ 829.669152][ T7525] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 829.863569][ T7525] usb 3-1: config 0 has an invalid interface number: 194 but max is 0 [ 829.878580][ T7525] usb 3-1: config 0 has no interface number 0 [ 829.895320][ T7525] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 829.911708][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2950'. [ 829.923700][ T7525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.968827][ T7525] usb 3-1: Product: syz [ 829.995957][ T7525] usb 3-1: Manufacturer: syz [ 830.009875][ T7525] usb 3-1: SerialNumber: syz [ 830.017908][ T7525] usb 3-1: config 0 descriptor?? [ 830.469844][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.640316][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.738299][ T7507] usb 3-1: USB disconnect, device number 119 [ 830.783731][ T7507] f81534a_ctrl 3-1:0.194: failed to set register 0x116: -19 [ 830.806341][ T7507] f81534a_ctrl 3-1:0.194: failed to enable ports: -19 [ 831.319038][ T7507] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 831.496285][ T7507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.505215][ T7507] usb 3-1: not running at top speed; connect to a high speed hub [ 831.516181][ T7507] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 831.524716][ T7507] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.541781][ T7507] usb 3-1: config 1 has no interface number 0 [ 831.561423][ T7507] usb 3-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.615020][ T7507] usb 3-1: config 1 interface 138 has no altsetting 0 [ 831.644845][ T7507] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 831.656930][ T7507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.668895][ T7507] usb 3-1: Product: syz [ 831.673136][ T7507] usb 3-1: Manufacturer: syz [ 831.677827][ T7507] usb 3-1: SerialNumber: syz [ 831.828655][ T7525] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 831.980885][T15830] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 831.996301][T15830] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 832.068637][ T5957] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 832.112780][ T7525] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 832.120942][ T7525] usb 4-1: can't read configurations, error -61 [ 832.240836][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.280132][ T7525] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 832.294361][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.319070][ T5957] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 832.360675][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'. [ 832.377758][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.412759][ T5957] usb 1-1: config 0 descriptor?? [ 832.490474][ T7525] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 832.499833][ T7525] usb 4-1: can't read configurations, error -61 [ 832.522681][ T7525] usb usb4-port1: attempt power cycle [ 832.719682][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2967'. [ 832.729225][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 832.878327][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.890904][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.908718][ T7525] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 832.933947][ T7525] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 832.942969][ T7525] usb 4-1: can't read configurations, error -61 [ 832.993260][T15843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2963'. [ 833.064881][ T5957] usbhid 1-1:0.0: can't add hid device: -71 [ 833.071535][ T5957] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 833.089029][ T7525] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 833.098181][ T5957] usb 1-1: USB disconnect, device number 9 [ 833.124690][ T7525] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 833.136095][T15858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2968'. [ 833.137771][ T7525] usb 4-1: can't read configurations, error -61 [ 833.145966][T15858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2968'. [ 833.163113][T15858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2968'. [ 833.250290][ T7525] usb usb4-port1: unable to enumerate USB device [ 833.678984][ T5953] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 833.849763][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 833.966884][ T5953] usb 2-1: too many configurations: 103, using maximum allowed: 8 [ 833.976837][ T7507] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.025007][ T5953] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 834.048995][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=140 [ 834.079453][ T5953] usb 2-1: SerialNumber: syz [ 834.084597][ T7507] usb 3-1: USB disconnect, device number 120 [ 834.114205][ T5953] usb 2-1: config 0 descriptor?? [ 834.181935][T14348] udevd[14348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.318899][ T5957] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 834.334523][ T5953] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 834.358993][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 834.379007][ T5953] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 834.386230][ T5953] usb 2-1: media controller created [ 834.415672][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 834.461279][ T5957] usb 5-1: device descriptor read/64, error -71 [ 834.892715][T15893] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2980'. [ 835.047808][T15864] ------------[ cut here ]------------ [ 835.053469][T15864] usb 2-1: BOGUS control dir, pipe 80001080 doesn't match bRequestType c0 [ 835.087350][T15864] WARNING: CPU: 0 PID: 15864 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 835.097341][T15864] Modules linked in: [ 835.098948][ T5957] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 835.102032][T15864] CPU: 0 UID: 0 PID: 15864 Comm: syz.1.2970 Not tainted syzkaller #0 PREEMPT(full) [ 835.119194][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.129533][T15864] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 835.135207][T15864] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 56 36 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 835.156466][T15864] RSP: 0018:ffffc9000b55f850 EFLAGS: 00010246 [ 835.163074][T15864] RAX: e45af250df0b6800 RBX: ffff888052e7ea00 RCX: 0000000000080000 [ 835.171206][T15864] RDX: ffffc9001ed5c000 RSI: 000000000000391a RDI: 000000000000391b [ 835.179346][T15864] RBP: 1ffff1100a096cb0 R08: 0000000000000003 R09: 0000000000000004 [ 835.187343][T15864] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 835.195492][T15864] R13: ffff8880504b6580 R14: 0000000080001080 R15: ffff888056b106c0 [ 835.203546][T15864] FS: 00007fdb0fe406c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 835.212571][T15864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.219189][T15864] CR2: 00007f7b01517e9c CR3: 0000000055814000 CR4: 00000000003526f0 [ 835.227190][T15864] Call Trace: [ 835.230524][T15864] [ 835.233463][T15864] usb_start_wait_urb+0x114/0x4c0 [ 835.238493][T15864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 835.243754][ T5957] usb 5-1: device descriptor read/64, error -71 [ 835.244134][T15864] usb_control_msg+0x232/0x3e0 [ 835.255841][T15864] dib0700_i2c_xfer+0xba7/0xf70 [ 835.260822][T15864] __i2c_transfer+0x871/0x2170 [ 835.265644][T15864] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.271038][T15864] ? __pfx___i2c_transfer+0x10/0x10 [ 835.276276][T15864] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 835.281717][T15864] ? i2c_transfer+0x120/0x3a0 [ 835.286423][T15864] i2c_transfer+0x25b/0x3a0 [ 835.290999][T15864] ? __pfx_i2c_transfer+0x10/0x10 [ 835.296041][T15864] ? _copy_from_user+0x94/0xb0 [ 835.300950][T15864] i2cdev_ioctl_rdwr+0x460/0x740 [ 835.306121][T15864] i2cdev_ioctl+0x64b/0x7f0 [ 835.310755][T15864] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 835.315815][T15864] ? __fget_files+0x3a0/0x420 [ 835.320619][T15864] ? __fget_files+0x2a/0x420 [ 835.325247][T15864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 835.330313][T15864] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 835.335367][T15864] __se_sys_ioctl+0xfc/0x170 [ 835.340043][T15864] do_syscall_64+0xfa/0x3b0 [ 835.344672][T15864] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.349956][T15864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.356140][T15864] ? clear_bhb_loop+0x60/0xb0 [ 835.360966][T15864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.366916][T15864] RIP: 0033:0x7fdb0ef8ebe9 [ 835.371431][T15864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.379474][ T5957] usb usb5-port1: attempt power cycle [ 835.391171][T15864] RSP: 002b:00007fdb0fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.391212][T15864] RAX: ffffffffffffffda RBX: 00007fdb0f1c5fa0 RCX: 00007fdb0ef8ebe9 [ 835.391229][T15864] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 835.391244][T15864] RBP: 00007fdb0f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 835.391259][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.391273][T15864] R13: 00007fdb0f1c6038 R14: 00007fdb0f1c5fa0 R15: 00007fdb0f2efa28 [ 835.391312][T15864] [ 835.391326][T15864] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 835.391343][T15864] CPU: 0 UID: 0 PID: 15864 Comm: syz.1.2970 Not tainted syzkaller #0 PREEMPT(full) [ 835.391367][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.391379][T15864] Call Trace: [ 835.391388][T15864] [ 835.391397][T15864] dump_stack_lvl+0x99/0x250 [ 835.391427][T15864] ? __asan_memcpy+0x40/0x70 [ 835.391462][T15864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.391488][T15864] ? __pfx__printk+0x10/0x10 [ 835.391530][T15864] vpanic+0x281/0x750 [ 835.391550][T15864] ? __pfx__printk+0x10/0x10 [ 835.391573][T15864] ? __pfx_vpanic+0x10/0x10 [ 835.391594][T15864] ? is_bpf_text_address+0x292/0x2b0 [ 835.391632][T15864] panic+0xb9/0xc0 [ 835.391653][T15864] ? __pfx_panic+0x10/0x10 [ 835.391689][T15864] __warn+0x31b/0x4b0 [ 835.391708][T15864] ? usb_submit_urb+0x112b/0x1830 [ 835.391733][T15864] ? usb_submit_urb+0x112b/0x1830 [ 835.391753][T15864] report_bug+0x2be/0x4f0 [ 835.391771][T15864] ? usb_submit_urb+0x112b/0x1830 [ 835.391792][T15864] ? usb_submit_urb+0x112b/0x1830 [ 835.391813][T15864] ? usb_submit_urb+0x112d/0x1830 [ 835.391833][T15864] handle_bug+0x84/0x160 [ 835.391855][T15864] exc_invalid_op+0x1a/0x50 [ 835.391876][T15864] asm_exc_invalid_op+0x1a/0x20 [ 835.391893][T15864] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 835.391915][T15864] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 56 36 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 835.391931][T15864] RSP: 0018:ffffc9000b55f850 EFLAGS: 00010246 [ 835.391949][T15864] RAX: e45af250df0b6800 RBX: ffff888052e7ea00 RCX: 0000000000080000 [ 835.391963][T15864] RDX: ffffc9001ed5c000 RSI: 000000000000391a RDI: 000000000000391b [ 835.391976][T15864] RBP: 1ffff1100a096cb0 R08: 0000000000000003 R09: 0000000000000004 [ 835.391988][T15864] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 835.392001][T15864] R13: ffff8880504b6580 R14: 0000000080001080 R15: ffff888056b106c0 [ 835.392046][T15864] usb_start_wait_urb+0x114/0x4c0 [ 835.392076][T15864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 835.392118][T15864] usb_control_msg+0x232/0x3e0 [ 835.392147][T15864] dib0700_i2c_xfer+0xba7/0xf70 [ 835.392196][T15864] __i2c_transfer+0x871/0x2170 [ 835.392219][T15864] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.392247][T15864] ? __pfx___i2c_transfer+0x10/0x10 [ 835.392269][T15864] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 835.392291][T15864] ? i2c_transfer+0x120/0x3a0 [ 835.392313][T15864] i2c_transfer+0x25b/0x3a0 [ 835.392335][T15864] ? __pfx_i2c_transfer+0x10/0x10 [ 835.392359][T15864] ? _copy_from_user+0x94/0xb0 [ 835.392387][T15864] i2cdev_ioctl_rdwr+0x460/0x740 [ 835.392418][T15864] i2cdev_ioctl+0x64b/0x7f0 [ 835.392437][T15864] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 835.392468][T15864] ? __fget_files+0x3a0/0x420 [ 835.392484][T15864] ? __fget_files+0x2a/0x420 [ 835.392504][T15864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 835.392527][T15864] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 835.392546][T15864] __se_sys_ioctl+0xfc/0x170 [ 835.392572][T15864] do_syscall_64+0xfa/0x3b0 [ 835.392589][T15864] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.392606][T15864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.392624][T15864] ? clear_bhb_loop+0x60/0xb0 [ 835.392645][T15864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.392663][T15864] RIP: 0033:0x7fdb0ef8ebe9 [ 835.392680][T15864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.392695][T15864] RSP: 002b:00007fdb0fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.392714][T15864] RAX: ffffffffffffffda RBX: 00007fdb0f1c5fa0 RCX: 00007fdb0ef8ebe9 [ 835.392727][T15864] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 835.392739][T15864] RBP: 00007fdb0f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 835.392751][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.392762][T15864] R13: 00007fdb0f1c6038 R14: 00007fdb0f1c5fa0 R15: 00007fdb0f2efa28 [ 835.392793][T15864] [ 835.397162][T15864] Kernel Offset: disabled