last executing test programs: 10.409168189s ago: executing program 4 (id=484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10.047468419s ago: executing program 4 (id=487): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2e, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c00028005001e213199000014000180080001000000000008000200000000000c0019800800020099"], 0x44}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.027029153s ago: executing program 0 (id=495): r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x1000000, 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x9, 0xd, {{0x13, 0x4, 0x0, 0x2c, 0x4c, 0x68, 0x0, 0x1, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x7, [{@multicast2, 0x312}, {@local}, {@broadcast, 0x9}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010101, 0xd}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6b3b}]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r2, r3, 0x1, 0x4, 0x2}, 0x50) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_clone3(&(0x7f00000007c0)={0x200000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0, {0x40}, &(0x7f0000000680)=""/70, 0x46, &(0x7f0000000700)=""/92, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000bc0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000e40)={0xfffffffb, 0x6, {0x0}, {0xffffffffffffffff}, 0x7, 0x8000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e80)={{{@in, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000f80)=0xe8) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000010c0)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc, &(0x7f0000000e00)=[{&(0x7f0000000300)={0x29c, 0x26, 0x100, 0x70bd2b, 0x25dfdbff, "", [@nested={0x289, 0x59, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x4, 0xb3}, @generic="1b9a11982da502a55ac809cc74be8621975a0f392f6f6fc719b939fd47d8605155e582d47544eaf29ce0cb4d55ea46eb175ecbc8fdf78a121a1e0be8af178b51aceee3aeda17bef96aadd53abd1b848d38300beeffb139a46db6f3d94eeaa38b90c1798071dec3dc7a07e7da268e0b0d97dbe938243ebc8b6b2f88216d1aa744201d2d13715e9f0f343754eb7a8d2933511779f49e59429bd2c03c5f6d8c1e92a293580f84114a0ab555811c5b314fe15167de6e55aaba4e48103eace4912dfbba44c4fe3bfdf6ba44414db802544fd1cccbe4101eefa9c25a4929baa31f4b9fc6d36991ed0fd050bf19bbc8c0", @generic="edb6d469fce82f68bcd837b6f34e23bc435c7584fc8c2dde6648aae08d8fc4f1c992cf88b723040a6e7e230f459eb3cfd1483cafe39dece5c7eadca3d8122aaabf91788bebd57b3dae10e727b5f78d80b4f5e70a835f1bdf4766180d7eae498e424ae181f4b7368593ce01df5623dc5e8f01d16d34bf4253038288a30f08593d436b24411f2d27ef1c728c17f2e6114c2763f12dfe9347fa9f156bc3a047c93e7205ed00824788d8f6811c9ea117ce377c1a2a5673ccc32a4b692ee00a333bf239e2cbf42e378bd04fa4", @nested={0x4, 0xf6}, @nested={0x4, 0x59}, @generic="0d89c1c75b56ed4a6f6e09d2724152ab43faad42eba51851edf4f461763e10a8f74d1aaa2375f0197b44988ae7c75acceb14dbcbfce7262bfb20d00978cfadb55d961fd288c841965662253187369e50ac41b0c464443e1fb87d18ef3686bae58de28952de41cf6337c97819bfce1d4ce7fdfe75836173492a21faa7c36f04fff6cf0903ef0a02df449407fd1a9b652954e30e26f75d914d9c9a759ddc4573b89e3a00dca3875c0c3d80cf7c705aaf22c6409985091fc3cfe8c0", @nested={0x4, 0xd1}]}]}, 0x29c}, {&(0x7f0000000840)={0x278, 0x18, 0x10, 0x70bd26, 0x25dfdbfe, "", [@generic="e03f427dcaaebfcbb3b3623cd2f21306d8377ee9a5baef029e972d4fb938cf7f9562406c4c8183151ee821fa1f666b8b", @nested={0x20, 0x55, 0x0, 0x1, [@nested={0x4, 0x58}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x78, 0x0, 0x0, @str='syztnl2\x00'}]}, @typed={0x86, 0x16, 0x0, 0x0, @binary="e40e65798159036a34bc609f6e279e87487220373ad64c8d4f1fcf99222f00e91f0089c02a89bcd42050fae6a4ec1d4c81e01548cb7fb261747bcc9530cd704b89242197c20c65f8f8dc9a322b01cb1071abdf1450ac17bbf54e1e9ec9894e47e9e059e2a61a19419b512b6f0147ced4b71076d98fb9851e92fdaf4e4067edc831b7"}, @nested={0xcc, 0xba, 0x0, 0x1, [@generic="87aa11fd9684340839f53de94a0074b368e3528624eb0237d8f58169fae22f79644e70cfb70617658fc52be300326f940126e0b416c0f61a0ce8a341a83f620c413dfc01663422ad947bab65caafd2e0086e5795bc7142c26ff53608b6c47dcf08b34781349c770eed26d6ae98ed244e379d824456382e977a3b232d74b68e7cf1eee1d7bbd3044764e2ff4b4587788c7c3dd396754b7f44db69c9f30e13497b2db78b71878556a8e8fb1cf6cecb18196c52ea8d1879350ff7934d545d7264c7", @nested={0x4, 0x28}, @nested={0x4, 0x117}]}, @typed={0x8, 0xa5, 0x0, 0x0, @pid=r6}, @generic="a9a0e0b20a917eeab489624b19921c010c4e8ced4cced400e3819ac52dc71bf723a66c9baab6be8358d6fb901223863906558825f624abc8281bbd9db54ef1580171363a0e3c3ce00f7e1883878fa3e9", @generic="5716b8755b8999ffdb2dd7db85de7e4f3e297ffde984d2bc6106d8debf539f56ef804bac94bd213a59e513cd81653aa04601025281a341fe0283c171b32101a26aaf6bc9b117986af548d61229d702d1cb91cf99490f2615f169f6aec1d5ebe799e1c46d17c32cdf820b869a"]}, 0x278}, {&(0x7f0000000c00)={0x200, 0x18, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0x10a, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x78}]}, @generic="aa1ba3e17cd258926928af1fdf6226fe440840cd2b", @nested={0xc, 0xfc, 0x0, 0x1, [@nested={0x4, 0x26}, @nested={0x4, 0x33}]}, @nested={0x14, 0x4f, 0x0, 0x1, [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0x7b69}, @typed={0x4, 0x7, 0x0, 0x0, @binary}]}, @nested={0xc, 0xb9, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid}]}, @nested={0x197, 0xf3, 0x0, 0x1, [@typed={0x69, 0x14, 0x0, 0x0, @binary="4d3a2044b60a5a3039e5eb8ef625cd26e6e637b8eae5ab07182f74cee58e969fa26da7c94437216a2c744a8e6126d7755bb0c3110ba9aaf81581826d2f4f36b3082e64c39812fcee0aedc0440e8ea5d0913c80ad279ed8ffddbb86ad3ec693c22c7d0eb64f"}, @generic="c35eb8345745ff588ca5cbca44fa5344e252b2f16350881ae0e867731ba2ebdf09df266e62a887b686a44bafab5af1192217312fbcc5b54921c75b97e5afb80f71d5197567fde2315539ec310021376f66319e80bd647048536861f0ba932d48bd1ca9438e063fa1af7ca68cb10c5538ff3f389d8e29d33861f78258ae4bb491298439afc4b7c1efad36c804ead83e0a3faad10820545853f15cc0eb3cc0eb7008e97f3213ecdcdd09487f76b147f25a46", @generic="a954bdc1bc976834e931972d5e52b74bf7a57a4c661de38d11eb7720de4c8361305a6f7d44", @generic="f1f917d30311704d3936c9a018e59ab4679e75b6715ca6f99a19684ea984296fa391ac54d0bd64dc852c222ccf8c3b943d0dc4d2c9868a97b763cb997ab1473863cc4c8cc44deda1b2", @typed={0x8, 0xa1, 0x0, 0x0, @uid=r8}]}, @typed={0x5, 0xf4, 0x0, 0x0, @str='\x00'}]}, 0x200}], 0x3, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {r9, r11, r13}}}], 0x20, 0x10}, 0x44800) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000001300)=0xe8) mount$fuseblk(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x1040000, &(0x7f0000001340)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r15}, 0x2c, {'group_id', 0x3d, r13}, 0x2c, {[{@allow_other}, {}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x2200}}], [{@smackfshat}, {@euid_lt={'euid<', r10}}, {@fowner_lt={'fowner<', r12}}, {@smackfsdef={'smackfsdef', 0x3d, '*['}}]}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1, {r14}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r16, 0x40044145, &(0x7f0000001500)=0xe) syz_usbip_server_init(0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r18, 0x1, 0x32, &(0x7f0000001580)=r17, 0x4) inotify_init1(0x800) sendmsg$nl_route(r16, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)=@ipv6_getaddr={0x90, 0x16, 0x100, 0x70bd25, 0x25dfdbfc, {0xa, 0x1f, 0x2, 0x0, r7}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffff}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x4, 0x3ff, 0x2}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0xc1}, 0x20) rmdir(&(0x7f0000001740)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b40)={r16, 0xe0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000002940)=[{}], 0x8, 0x10, &(0x7f0000002980), &(0x7f00000029c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) r20 = fsmount(r16, 0x1, 0xf9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c40)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001780)=@raw=[@alu={0x7, 0x0, 0x8, 0x4, 0x11, 0xfffffffffffffff0, 0x4}, @ldst={0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x6, 0x6, 0x100, 0xfffffffffffffff0}], &(0x7f00000017c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x25, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002840)={0x5, 0x10, 0x1f, 0xfffffff7}, 0x10, r19, 0x0, 0x3, &(0x7f0000002bc0)=[r17, r20, 0xffffffffffffffff, r4, r1], &(0x7f0000002c00)=[{0x0, 0x1, 0x0, 0x3}, {0x1, 0x3, 0x4, 0x3}, {0x2, 0x5, 0x6}], 0x10, 0x23}, 0x94) 7.319928091s ago: executing program 4 (id=497): request_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='*}^\x00', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8010000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000340)=""/103, 0x67}], 0x7}, 0x80000002}], 0x4, 0x10122, 0x0) r1 = socket(0x400000000010, 0x3, 0x9) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)=0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f00000001c0)=ANY=[]) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff"], 0x0) syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x5, 0x40, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x9}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x46, 0xfa, 0xa3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x5, 0xa, 0x4, "85", "0b0982"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0xfb, 0x10, {0x7, 0x25, 0x1, 0x83, 0x81, 0xff}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x5, 0xff, 0x4d, 0x20, 0x2}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "136fd36a5234821564e11709b9b5329c"}, @generic={0x7, 0x10, 0x2, "722509e3"}]}, 0x2, [{0x16, &(0x7f0000000180)=@string={0x16, 0x3, "9b2b1d4769f90f6e43d61838d40887552e2eb62b"}}, {0x95, &(0x7f00000001c0)=@string={0x95, 0x3, "da98bc961a4e1bc41aa98a9f29ba8eb89e018eeefa5efaaddcfb8b88e1f313164ede879eaeaef59249892c3fb02101eccb94f3c4ef8123d64b189132f02ef4394f331a941ee2ec1120dde95ae18a469367fac9a95f9ab214bdcbda6166c7d8416e3a74579d2db58c8feea7bce0481e8bdf6ccb388f3525b20b90831acdb8f788a47e85028d052239f78df61fed5acfd0a014f8"}}]}) 7.192712361s ago: executing program 0 (id=498): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) creat(0x0, 0x6a) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8041) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, 0x0) ptrace$cont(0x21, r1, 0x80000001, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.136320756s ago: executing program 0 (id=502): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00ff020000000000000000000000000001ac1414bb000000000000000000000000000000e313854562aa06f644bdb2ba5299bd9f8556832db0568c62290c0129b812abbf34a1adf50b717003369b5a841a816c81868b7d3e728450125cf0ba9a46e2ad9168044d39b7cf7e630cb61fbf51d885dfc77a766e31b4f1693ff8d63836bee78c09568474"], 0x38}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000040)=ANY=[], 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x351a, 0x0, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r7, 0x66a8, 0x4000, 0xf, 0x0, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 4.286815437s ago: executing program 4 (id=505): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (fail_nth: 5) 3.831395866s ago: executing program 4 (id=506): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, 0x0) setuid(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000380)=[{0x7, 0x19, 0x0, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000400)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x1, 0xdc, {0xdc, 0x21, "5ce43b8b432f14b94b1d1757aae2d7bc7740da283e2652a0df2627f315a5aa55aa2484c127af2a208ed6dc67ab5ad4db55575c085835b939d290a3b19f87274fca079bc0d14ebbdd1b388b401d87052950fdd86c2fafdf7ce72b78e22e79a30cc4a640db4f6e4b34ed8bd226a060e240f8515c580da82db342bccfeab14a7861d2a818229d752b0febc8da35dc5489dcbd232ef54bb1e28cc7b7ad79edc392d60066f9017bc3f8c0a2d24d689eddfad775539ce96d836d463eb2fa4568378b157cad88030637253a9b407c72b90aa4c22cbe41f75c4721494e22"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0xd5, "795a8f7c5c78b157d4c95c8094775f97fbdd96c42aa42489129105d05a27d09424bd9c8267651dfd56fb43e9348586216b268f1bc89f6e34da9cbff26a8ccb49305e41ebd1e00df24fcc33ab7743ad73ff0a01f29016c8e0503bc9d2422a4902c392a143a87a4edccfe2ac4ebfd9c8b278169f85b34a7e8603e2183cc34a57964fc2fccbb8d44aa8145462629a040250175ddf88efbb5b620c1c11f1db3b6360e85d88d496325bd3415d12f2b95d67eef0d3fd7f8f4334d3e15f37a19aeb9a1c6ef11e45a721c1b9815a7530d7a5598a1d845b38c9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}}) 3.773832587s ago: executing program 1 (id=507): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040824}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r9, 0xffffffffffffffff}) r11 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xfffffffb, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x40005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000001c0)) dup3(r9, r8, 0x0) 2.717601591s ago: executing program 0 (id=508): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x8000, 0x0, 0x800000}) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x14}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x20402) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) migrate_pages(0x0, 0x9, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) accept(r2, &(0x7f00000001c0)=@caif=@dbg, &(0x7f00000000c0)=0x80) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000140), &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8905, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2.717068283s ago: executing program 3 (id=473): openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private0, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)="f649088d632461927f12712e48241aca685129f342e4b0ace6b98ab3fc79d05fb32a82b2676943a9434fee8fe362de764e9372f5138054a70c5490cb2d935eb19cfd19781c7eea1ec396f2b10e42a96d5e10b958fcebb81dbb3823b9043227b2c0ca3ad3da5057626d321264351d65d912f924f424c820486b46dedb22ede016dcd825ac2c5ebec858cc498df85e039a362cbdd99ce717a29e6336f68c28a6fa4ccf3f35cf36052b686fe129a151bea0d4d1abe9c6b473a2e8e5442709738ad55daa9cccf3e6235fe2e4172fb9c360c461e8bcb5c4fbc2baced1390d811302969c3093", 0xe3}, {&(0x7f0000000600)="ecfd056371be304f370baeab3194bc8c354a2cf23100bb4cf2931b8ba85f9cd09f3db8ff9804654b84e2ff0c0d4a6a711b072f2f9667260bb1c8cd75604b5598c7f1474327ce7db33e7cd56fd7a6f5d2fed7ea7c02ea61882cdb0af50d60503af0e23e096659ae03005e4415f9fe3bff76e27faffaf0c216e898a9a0cbf5d3d661984b7614565b5a0d96e236b0419800d09ce9175f579ad4f07774fa19dfda0a7ae1911b665c4d6bf0c79d2bffe24dcffb9d743c90356fb34139b569ec7568662200e7cee4dff4fc776b63bd446989a09102ea1dbb87dd4b98477017dfadc02c894c05", 0xe3}, {&(0x7f0000000380)="c740d00f10900f269518653f149901738338e9644da0f64d0755f795df196e00de39b1960f523211f0fe", 0x2a}, {&(0x7f0000000700)="27e5428d9fdb3c4d82d5431f3b57e8c30e6edd183ec74c1e273a38c805c19cbc8e3efcec4f1504731054a7cef914b736c44dc95f343046308b07ab57e24b", 0x3e}], 0x4, &(0x7f0000000780)=[@rthdr={{0x78, 0x29, 0x39, {0x67, 0xc, 0x2, 0x1, 0x0, [@private2, @loopback, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x7a, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x20, {0x3, 0x6, 0x8, 0xc0, [0xcb, 0x2, 0x36]}}]}}}], 0xc0}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000880)="c61418a757ade7353c3b8453e1bd0c5d27fad186d320910b7a93351ff895f8160ffa298534fd654f870147f629cb771f5087934b3faf0df96c9cf792de3fce07357850a21425f6baf32d1eec65a381d3bef8c04c1476ed30c519a390b3e28970d1cedc62cbcc77c387238f43e051cddf16b28252b0fcdb0aa19e7a0ed72864973e8d7616a63925f2088a6c15e130e6baa46c4110b4e704b5970ecf3fa4c1258a58044ec6a5aec64a1fe9a6a175ca8b79a5a7c40ea88f31990bddeaa8b39390edc108cce6545534184740675011f0909c7b9497f00961a2bdb5e01ad61a6d6d2e57b0b560", 0xe4}], 0x1, &(0x7f0000000a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x4, 0xa, 0x0, 0xb9, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x2f}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0xb8}}, {{&(0x7f0000000b80)={0xa, 0x4e23, 0xc5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0xa}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000bc0)="6216e37ecc6f9b2593fcf770af088ef8da1fa9d47822f14b1f78b221a3515d8efe7fb14dc0dad2f69a37d27456cc3d63c461602ad1902eb29ebf25b691bc561528f7585d6508e3f7db857353b8397f0dd539cdf676ccf10be4220dacbf4c123f819b1487e46be71a19d16218e51be9809ffe22b4bde4df373290989207677ee8b1ae451ad97daccc0f5d4b716c8c97b19c9dd5233e19410b0ba67d5d310ffce174f756fe8905c89e69", 0xa9}, {&(0x7f0000000c80)="d414c077f828f68b30bf9d9433ab7d0277c2f83e25bce83b0bafcdb20af84d66e2037e3458e9ebc50821a6d827354cc873f3a5d72d116a234b70f6d6d345d1f11c0c3d7671c8f1d54aa510ce9a59f24165dc274137d7647d18c904ca426d9077b3eb67311ea90cf19a343c8b5d29a7ab1c6e4bbcc23ec839b5ef910d9cf8eb4d4552b912c4a26d", 0x87}, {&(0x7f0000000d40)="e063597e558e49bdf5d134717e1d76ddd1cc0258bc7201f6bcc6804b5641301a044c8499c1f185baad42d8c338bf2e11fd0f1b8c3cb302f242107eb110ef8efcc123a69207ac20d3c6101eed3405d4181c65ec674553e918226ef199b650c033324577e6bcbecae08f0c97854b242240b88b130e0234e931b95c2f5785c5a3f5eb6608ddc6d4ee2426b00895a48b2221c9fe36f0615d1d4edd65ac531498f06b6198f3205ce325a5bd4e87a54bcf0828d438470d1475e7fe7191edc16687e8e02a8f7b2dbab7ff0dcf438669090556531304a681707d4ce4ce7d3bd46bfb2b2b898d55bfef73710a0b4695fb9f11e83b25d44707e2b94ef467", 0xf9}, {0x0}, {&(0x7f0000000f40)="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", 0xfe0}, {&(0x7f0000001f40)="f5ed1d56755a831d7fd587f64a868db8816d6cce5eab4cc0d4caad0f6b06f550fe68b657cad02213bc28e46fad4f464b2291f1c77553f7b43ffa16a69bd74f4db55e057e733c355f1d8310e8d7c5d496a6e8047742d6b6c56b65dc249565ca9fa5d2afba28f6c5100714c88dc877b856bf1aec40ce4c429756762ab2022cb762c80b8929424cad", 0x87}, {&(0x7f0000002000)="a792753c6bcdf87e68d9eac77856e562bcc46c10921aabd52741825a3965ef683c6cb56c683606dec4310b7447688a6a1b83db4e95504f3972af3f266e422659c793ba98bed68e1b808863adcd0d30", 0x4f}], 0x7}}], 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x200, 0x7}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) r4 = fsopen(&(0x7f00000009c0)='cgroup\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) 2.71671445s ago: executing program 2 (id=509): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r1, &(0x7f0000000180)={0xffffffffffff8000, 0x20, 0x1, 0x20, 0x3}, 0x48) write$binfmt_misc(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000400)={0x9, @capture={0x0, 0x1, {0xafc, 0x80}, 0x5, 0xfffffdff}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x400c00) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/216, 0xd8}], 0x2, &(0x7f0000000900)=""/182, 0xb6}, 0x10000}], 0x1, 0x40012000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000003c0)={0xd3, 0x4, 0x1, 0xfffffff1, 0x80000000}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x1, 0xe4, 0x70, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f6f1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x4}, [@mdlm_detail={0x17, 0x24, 0x13, 0x7, "5c6f2551621637d86c1aa20331628e626dfff1"}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x6, [0x8001, 0x5, 0x136a, 0x5]}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0xc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x60, 0x3, 0xba, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x50, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x8, 0x7}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xd4, 0xe, 0x6, 0xcf, 0x81}, 0x52, &(0x7f0000000140)={0x5, 0xf, 0x52, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x0, 0xe}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0x8700, 0x2, [0xff00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2c71c38ef6cd9c8a7877c3ae2871c1a2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5a6df80d51189ffd49f5a9199965c93e"}]}, 0x4, [{0x58, &(0x7f0000000500)=ANY=[@ANYBLOB="58037c86d71cda928f951043f50bb85eaf3c00b28e2d00cdcec28895adaae3758e4da8aac108a86d3513716e098f0e6375b8999115b3423dbf8634a52c93af9f31d03a9f020e2ef58372cc9537cadc927ce73e8ea9da52109571b2bac15f22f4c2449f1caee721b4ea219fa47732aaab4303d0efe8cb68b4961a8ccccf151b853f8149d09ca1f574ebdc00ebe060d17bbc6de941e9c6e57a983266781f28d8220f7c3b04617ccfc8fd472011b4f695a619e52a93f78a"]}, {0xb5, &(0x7f0000000680)=@string={0xb5, 0x3, "a20501be240321b73efd80b666420d7f94a28a122957cbcf058f3fd998923324669765c08ce536f6e9181ca8d98a843e62bbe276197e48f5dc4e291c937e90f230330f0971af6f569e1847e5610598ee573b3adf7366f6e5782098d9068e7c23f3149ff384aa6ff987bc423841abc800eac7807d2bee71715fe1b083c681e76353d871ee1c951fd91f79228ef4f09154f3981c4ebeea4d6f85c48e9d0fa596ca28d4cc061cc76b7a9247c42136d744978f1e9a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}, {0x88, &(0x7f00000005c0)=@string={0x88, 0x3, "48660ae2c8d5832f559a48280fdd22ef15cd1b7b42bb2f543c2be7fa544d93af84d41c1b6d57e0c7b9ec6446f653e92f9aafac4fbc056c968d66c4c7a3ecfb4185df9cb1dd08a48db07498c438610d57173ee998128d080e3aac5ff09a64ad9f443ff0ed57a97068d10e5a945ddc2813461dc41e2dddc2783e8b772068f2f0beebb5eac91361"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 2.460548734s ago: executing program 0 (id=510): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) recvfrom(r2, &(0x7f0000000480)=""/222, 0xde, 0x120a0, &(0x7f0000000180)=@can={0x1d, r4}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r5 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x50000, 0x8) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000280)='syz', &(0x7f00000002c0)='./file0\x00', r6) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, 0x0) keyctl$get_security(0x11, r7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001"], 0x78}}, 0x20000800) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004520001c00010000001190780000000000000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.129562611s ago: executing program 3 (id=511): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000002540)}], 0x1, 0x13, 0x0) 1.95487923s ago: executing program 3 (id=512): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x4008af25, &(0x7f0000002a80)) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x4008af25, &(0x7f0000002a80)) (async) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) (async) 1.687553059s ago: executing program 1 (id=513): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffff00bc"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x8, @capture={0x1000, 0x1, {0x1000, 0x2}, 0x28000000}}) 1.678874534s ago: executing program 1 (id=514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001280), 0x0, 0x0) 1.641429515s ago: executing program 2 (id=515): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.543584889s ago: executing program 2 (id=516): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1014, 0x4, 0x5, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) dup(r1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 1.507535871s ago: executing program 1 (id=517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) r4 = eventfd2(0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000440)={0x0, r4}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x10}, {0x10, 0x110, 0xb}], 0x20}, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x4) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x80}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116ac0)={0x90, [], 0x5b, "85cd302d210104"}) 1.101387102s ago: executing program 0 (id=518): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2c1, 0x1c8) fanotify_init(0x200, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x48001821, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'team_slave_1\x00', 0x2}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x7, 0x5, 0x7, 0xdedb, 0x15, "fd1500fdffffffff"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket(0x1e, 0x80004, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r8, r7, 0x0) recvmmsg(r8, &(0x7f0000004580), 0x0, 0x40000002, 0x0) 1.007208267s ago: executing program 1 (id=519): r0 = socket(0x1e, 0x2, 0x0) tee(0xffffffffffffffff, r0, 0xfff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/243, 0xf3, 0x1, 0x1e}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x1, 0x18}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000440)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) unshare(0x20000400) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) unshare(0x0) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(0xffffffffffffffff, 0x20, 0x400000000000000, 0x3) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x3, 0x200, 0xe042c7fc, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x395180, 0x149) 754.379197ms ago: executing program 3 (id=520): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setpriority(0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x1, 0x3b0}, &(0x7f0000000080), &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000280), 0x1) shutdown(r0, 0x1) listen(r0, 0xfffff851) 719.891531ms ago: executing program 2 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000600)=@x86={0xfe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8, 0x8b, 0x4, 0xf, 0x5, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x8, 0x2, 0x45, '\x00', 0x4, 0xf}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef529800"], 0x0) 519.426712ms ago: executing program 4 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r5) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r9, 0x1000, &(0x7f0000001540)=""/4096}) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0x3, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x3c, 0x2, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x18}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x2}]}], "bd33a7ae"}}}}}}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x87, 0x81, &(0x7f0000000280)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f00000000c0)="001086d990c97237a45b6616e513b6f7b106000800000000", 0x18, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c) 508.135099ms ago: executing program 3 (id=523): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r2, 0x11, 0x0, 0x7c000) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x490, &(0x7f0000000000)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0xc000) r6 = eventfd2(0x4000007, 0x80001) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000200)={0xb294b5c50d591714}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r6, 0x0, 0x0, 0x9, 0x0, 0x1, r6}]) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0xc, @raw_data="6c68efcbfcd4004be03fabeff30065cc91048bcc2c4d6900ea9eb930496b87f863c2fa500519b56ca63406be582ec7221ee68033c1e582d71e1a1f54e63051f075d2374b70ca94699fb74a697713921d8b503fbc970ba014a43755585553f8e5e08905fc5b223874dea2788221664939dc9f0ea45dd3001153d69b99f0504cefca446ea8f3663cf5b008a1c3f12ba373e1989c2cbe0c92d308c0107056f817baa449a40cfe0693b1f222872584405983204a9b6a8f744f3300"}) 462.405803ms ago: executing program 2 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x2000000) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fc71966b8010000000f01c1d190fbff360f01cb0fe5190f22450f783a0f3236f082b60070460fc7a80000", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9}) 166.738986ms ago: executing program 3 (id=525): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x108) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x204, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x280002, 0xc1) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f00000003c0), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfa}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4fd, 0x401, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64f}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x3, 0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x669}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x8, 0x20f11d3e]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfa}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4fd, 0x401, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64f}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x3, 0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x669}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x8, 0x20f11d3e]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905e80aff03f7070909058702"], 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) eventfd(0x9) (async) eventfd(0x9) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x3, 0x2, 0x6, 0x5}, 'syz0\x00', 0x5}) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x3, 0x2, 0x6, 0x5}, 'syz0\x00', 0x5}) 79.490105ms ago: executing program 1 (id=526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x9, 0x0, 0x0, 0xa0000) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r9, 0x3516, 0x3e44, 0x8, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000180)='./file0/../file0/../file0\x00') io_uring_enter(r2, 0x47fb, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001280), 0x0, 0x0) kernel console output (not intermixed with test programs): T6481] ? __fget_files+0x3a0/0x420 [ 93.965174][ T6481] ? __fget_files+0x2a/0x420 [ 93.965192][ T6481] ksys_read+0x145/0x250 [ 93.965214][ T6481] ? __pfx_ksys_read+0x10/0x10 [ 93.965237][ T6481] ? rcu_is_watching+0x15/0xb0 [ 93.965255][ T6481] do_syscall_64+0xfa/0x3b0 [ 93.965279][ T6481] ? rcu_is_watching+0x15/0xb0 [ 93.965294][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.965312][ T6481] ? clear_bhb_loop+0x60/0xb0 [ 93.965333][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.965351][ T6481] RIP: 0033:0x7f289058d5fc [ 93.965372][ T6481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.965387][ T6481] RSP: 002b:00007f28914c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.965407][ T6481] RAX: ffffffffffffffda RBX: 00007f28907b5fa0 RCX: 00007f289058d5fc [ 93.965421][ T6481] RDX: 000000000000000f RSI: 00007f28914c20a0 RDI: 0000000000000004 [ 93.965432][ T6481] RBP: 00007f28914c2090 R08: 0000000000000000 R09: 0000000000000000 [ 93.965444][ T6481] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 93.965454][ T6481] R13: 00007f28907b6038 R14: 00007f28907b5fa0 R15: 00007f28908dfa28 [ 93.965474][ T6481] [ 94.210945][ T92] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 94.221196][ T92] asix 1-1:0.0: probe with driver asix failed with error -71 [ 94.267672][ T92] usb 1-1: USB disconnect, device number 10 [ 94.413352][ T6497] tipc: Enabling of bearer rejected, failed to enable media [ 94.472596][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 94.510166][ T24] usb 5-1: device descriptor read/8, error -71 [ 94.609871][ T5932] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.747074][ T6505] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 94.755677][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 94.763583][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 94.770378][ T5932] usb 2-1: no configurations [ 94.774999][ T5932] usb 2-1: can't read configurations, error -22 [ 94.795671][ T6505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'. [ 94.812663][ T24] usb 5-1: device descriptor read/8, error -71 [ 94.920091][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.946292][ T24] usb usb5-port1: unable to enumerate USB device [ 95.079697][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.113230][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 95.118992][ T5932] usb 2-1: no configurations [ 95.123625][ T5932] usb 2-1: can't read configurations, error -22 [ 95.130444][ T5932] usb usb2-port1: attempt power cycle [ 95.231690][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.243257][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.254337][ T5918] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 95.264218][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.277468][ T5918] usb 1-1: config 0 descriptor?? [ 95.479931][ T5932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 95.510300][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 95.516393][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 95.526033][ T5932] usb 2-1: no configurations [ 95.530685][ T5932] usb 2-1: can't read configurations, error -22 [ 95.538314][ T6516] netlink: 196 bytes leftover after parsing attributes in process `syz.2.156'. [ 95.673126][ T6521] tipc: Enabling of bearer rejected, failed to enable media [ 95.674939][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 95.689133][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.706177][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 95.720595][ T5918] usb 1-1: USB disconnect, device number 11 [ 95.730334][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 95.736028][ T5932] usb 2-1: no configurations [ 95.741396][ T5932] usb 2-1: can't read configurations, error -22 [ 95.748071][ T5932] usb usb2-port1: unable to enumerate USB device [ 95.829780][ T92] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.019746][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 96.026637][ T92] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 96.038628][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 96.048807][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.057037][ T92] usb 3-1: Product: syz [ 96.085843][ T92] usb 3-1: Manufacturer: syz [ 96.090565][ T92] usb 3-1: SerialNumber: syz [ 96.117849][ T92] usb 3-1: config 0 descriptor?? [ 96.130801][ T92] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 96.219719][ T5932] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 96.382307][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 96.467943][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.479411][ T5932] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 96.519774][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.822319][ T5932] usb 5-1: config 0 descriptor?? [ 97.211736][ T6535] could not allocate digest TFM handle poly1305-simd [ 97.449749][ T5946] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.629996][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 97.641338][ T6546] : renamed from bridge_slave_0 (while UP) [ 97.703359][ T5946] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 97.713687][ T5946] usb 4-1: config 0 has no interface number 0 [ 97.722760][ T5946] usb 4-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 97.734500][ T5946] usb 4-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.747584][ T5946] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 97.759504][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.768279][ T5946] usb 4-1: Product: syz [ 97.772566][ T5946] usb 4-1: Manufacturer: syz [ 97.777205][ T5946] usb 4-1: SerialNumber: syz [ 97.783404][ T5946] usb 4-1: config 0 descriptor?? [ 98.007478][ T6543] fuse: Unknown parameter 'rooumOd' [ 98.102231][ T5932] usb 4-1: USB disconnect, device number 6 [ 98.204184][ T92] gspca_zc3xx: reg_r err -32 [ 98.511231][ T6555] loop6: detected capacity change from 0 to 63 [ 98.518881][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.528788][ T5875] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.537993][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.546617][ T5875] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.555160][ T5875] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.564762][ T5875] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.573439][ T5875] Buffer I/O error on dev loop6, logical block 0, async page read [ 98.799855][ T92] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 98.840514][ T92] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 98.862725][ T9] usb 5-1: USB disconnect, device number 19 [ 98.879893][ T5946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.089692][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 99.101029][ T5946] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.110564][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.119047][ T5946] usb 4-1: Product: syz [ 99.123418][ T5946] usb 4-1: Manufacturer: syz [ 99.128352][ T5946] usb 4-1: SerialNumber: syz [ 99.401378][ T5946] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.513873][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 99.758128][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.770035][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.109684][ T5946] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 100.165017][ T9] usb 4-1: USB disconnect, device number 7 [ 100.172528][ T9] usblp0: removed [ 100.189786][ T92] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 100.273406][ T5946] usb 5-1: config 0 has an invalid interface number: 44 but max is 3 [ 100.281615][ T5946] usb 5-1: config 0 has an invalid interface number: 232 but max is 3 [ 100.290011][ T5946] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 100.300738][ T5946] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 100.310103][ T5946] usb 5-1: config 0 has no interface number 0 [ 100.322674][ T5946] usb 5-1: config 0 has no interface number 1 [ 100.323509][ T6590] netlink: 'syz.1.174': attribute type 16 has an invalid length. [ 100.328954][ T5946] usb 5-1: config 0 interface 44 altsetting 200 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 100.348257][ T5946] usb 5-1: config 0 interface 232 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 100.361759][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 100.367358][ T5946] usb 5-1: config 0 interface 44 has no altsetting 0 [ 100.374407][ T92] usb 1-1: no configurations [ 100.379038][ T92] usb 1-1: can't read configurations, error -22 [ 100.386091][ T5946] usb 5-1: config 0 interface 232 has no altsetting 0 [ 100.395745][ T5946] usb 5-1: New USB device found, idVendor=12d1, idProduct=d5c7, bcdDevice=10.e6 [ 100.405462][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.413727][ T5946] usb 5-1: Product: ဉ [ 100.417913][ T5946] usb 5-1: Manufacturer: 篈兲嚃銧蔠攕❝树堋쟈峁죱㹨襙ࣰ飋璁벢壊퇲墱洑艽퓢אַፔ談ᶉ˱㖽荙ᄵ弐췺겒ހ椺昭痓肝⒚금ࠍ䬅چ㞋䊸㰐䊔휾濟켨䩡ꭌ裯樳壠䢢壪廞㊸ﱛા䞽섅钜苉厀䧤ඊ们㠨녛ᡮ [ 100.443453][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.450291][ T5946] usb 5-1: SerialNumber: ⿖裖ⴊጵち㺞伣뱆蛰欍젫朵ᄖ놫᯸ﰢࣘ軒萙걀谡 [ 100.465658][ T5946] usb 5-1: config 0 descriptor?? [ 100.520691][ T92] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.596977][ T5918] usb 3-1: USB disconnect, device number 8 [ 100.669702][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 100.675653][ T92] usb 1-1: no configurations [ 100.682452][ T92] usb 1-1: can't read configurations, error -22 [ 100.692369][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.694663][ T92] usb usb1-port1: attempt power cycle [ 100.708791][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.716974][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.781072][ T5946] option 5-1:0.44: GSM modem (1-port) converter detected [ 100.824806][ T5946] usb 5-1: USB disconnect, device number 20 [ 100.844059][ T5946] option 5-1:0.44: device disconnected [ 100.851795][ T6600] loop6: detected capacity change from 0 to 63 [ 100.864071][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.877211][ T6600] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.885506][ T9] usb 2-1: config 0 has no interfaces? [ 100.892682][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.914536][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.938097][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.968403][ T9] usb 2-1: Product: syz [ 100.989679][ T9] usb 2-1: Manufacturer: syz [ 101.003259][ T9] usb 2-1: SerialNumber: syz [ 101.020415][ T9] usb 2-1: config 0 descriptor?? [ 101.044231][ T92] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.080136][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 101.085816][ T92] usb 1-1: no configurations [ 101.090502][ T92] usb 1-1: can't read configurations, error -22 [ 101.219776][ T92] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 101.250189][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 101.262099][ T92] usb 1-1: no configurations [ 101.266941][ T92] usb 1-1: can't read configurations, error -22 [ 101.273536][ T5948] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.283267][ T92] usb usb1-port1: unable to enumerate USB device [ 101.439740][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 101.453309][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.467466][ T5948] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 101.488229][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.503611][ T5948] usb 4-1: config 0 descriptor?? [ 101.531623][ T6612] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 101.779694][ T5932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.930086][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 101.937137][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.948383][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.959789][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.974528][ T5932] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.983839][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.996216][ T5932] usb 3-1: config 0 descriptor?? [ 102.405583][ T5932] usbhid 3-1:0.0: can't add hid device: -71 [ 102.414892][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.428695][ T5932] usb 3-1: USB disconnect, device number 9 [ 103.279805][ T5932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.340287][ T5918] usb 2-1: USB disconnect, device number 11 [ 103.389804][ T3093] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 103.429767][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 103.436776][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.470284][ T6632] netlink: 596 bytes leftover after parsing attributes in process `syz.1.186'. [ 103.499871][ T5932] usb 3-1: can't read configurations, error -61 [ 103.532551][ T6634] loop2: detected capacity change from 0 to 7 [ 103.542042][ T6634] Dev loop2: unable to read RDB block 7 [ 103.547767][ T6634] loop2: unable to read partition table [ 103.555077][ T6634] loop2: partition table beyond EOD, truncated [ 103.563267][ T6634] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 103.614469][ T3093] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.725314][ T3093] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.765588][ T5932] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.826694][ T3093] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.890328][ T3093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.926171][ T6629] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 103.937350][ T3093] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.989169][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 104.038808][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.047921][ T5948] usb 4-1: USB disconnect, device number 8 [ 104.067971][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 104.112952][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 104.114982][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 104.138302][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 104.138352][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 104.174144][ T6629] fuse: Unknown parameter 'fd0x0000000000000007' [ 104.184860][ T5932] usb 3-1: can't read configurations, error -61 [ 104.187114][ T6646] team0: entered promiscuous mode [ 104.196467][ T6646] team_slave_0: entered promiscuous mode [ 104.208393][ T6646] team_slave_1: entered promiscuous mode [ 104.419794][ T9] usb 1-1: USB disconnect, device number 16 [ 104.429249][ T5932] usb usb3-port1: attempt power cycle [ 104.441165][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 104.452821][ T6646] gretap0: entered promiscuous mode [ 104.463154][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.826192][ T5948] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.849693][ T3093] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 104.870457][ T5932] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 104.890078][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 104.896861][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 104.905157][ T5932] usb 3-1: can't read configurations, error -61 [ 105.040290][ T3093] usb 2-1: Using ep0 maxpacket: 16 [ 105.046165][ T3093] usb 2-1: no configurations [ 105.051327][ T3093] usb 2-1: can't read configurations, error -22 [ 105.061468][ T5948] usb 4-1: config 0 has no interfaces? [ 105.068813][ T5948] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.078429][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.088147][ T5948] usb 4-1: Product: syz [ 105.094799][ T5948] usb 4-1: Manufacturer: syz [ 105.099700][ T5932] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 105.100789][ T5948] usb 4-1: SerialNumber: syz [ 105.120354][ T5948] usb 4-1: config 0 descriptor?? [ 105.134714][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 105.145813][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 105.159951][ T5932] usb 3-1: can't read configurations, error -61 [ 105.166472][ T5932] usb usb3-port1: unable to enumerate USB device [ 105.229689][ T3093] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 105.379699][ T3093] usb 2-1: Using ep0 maxpacket: 16 [ 105.388221][ T6648] loop6: detected capacity change from 0 to 524288000 [ 105.395362][ T3093] usb 2-1: no configurations [ 105.400682][ T3093] usb 2-1: can't read configurations, error -22 [ 105.410886][ T3093] usb usb2-port1: attempt power cycle [ 105.470515][ T6648] support for the xor transformation has been removed. [ 105.700259][ T5932] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 105.749723][ T3093] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.771314][ T3093] usb 2-1: Using ep0 maxpacket: 16 [ 105.776957][ T3093] usb 2-1: no configurations [ 105.782411][ T3093] usb 2-1: can't read configurations, error -22 [ 105.839823][ T5932] usb 5-1: device descriptor read/64, error -71 [ 105.909789][ T3093] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 105.950292][ T3093] usb 2-1: Using ep0 maxpacket: 16 [ 105.971488][ T3093] usb 2-1: no configurations [ 105.976112][ T3093] usb 2-1: can't read configurations, error -22 [ 105.985129][ T3093] usb usb2-port1: unable to enumerate USB device [ 105.992410][ T6667] bridge1: entered promiscuous mode [ 106.066016][ T6669] loop2: detected capacity change from 0 to 7 [ 106.077724][ T6669] Dev loop2: unable to read RDB block 7 [ 106.084982][ T5932] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 106.090918][ T6669] loop2: unable to read partition table [ 106.115601][ T6669] loop2: partition table beyond EOD, truncated [ 106.124815][ T6669] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 106.550045][ T5932] usb 5-1: device descriptor read/64, error -71 [ 106.623499][ T6673] netpci0: tun_chr_ioctl cmd 1074025681 [ 106.659841][ T5932] usb usb5-port1: attempt power cycle [ 106.659847][ T6673] tipc: Enabling of bearer rejected, failed to enable media [ 106.891749][ T6667] syz.0.198 (6667) used greatest stack depth: 18768 bytes left [ 106.998970][ T6675] netlink: 'syz.2.201': attribute type 2 has an invalid length. [ 107.006829][ T5932] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 107.030810][ T5932] usb 5-1: device descriptor read/8, error -71 [ 107.100939][ T6677] input: syz1 as /devices/virtual/input/input9 [ 107.199032][ T9] usb 4-1: USB disconnect, device number 9 [ 107.279727][ T5932] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 107.301056][ T5932] usb 5-1: device descriptor read/8, error -71 [ 107.413675][ T5932] usb usb5-port1: unable to enumerate USB device [ 107.729305][ T6691] program syz.0.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.090175][ T5932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.242742][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.261689][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.272138][ T5932] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 108.281549][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.296473][ T5932] usb 4-1: config 0 descriptor?? [ 108.519938][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.534095][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.554664][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 108.574820][ T6701] loop2: detected capacity change from 0 to 7 [ 108.593418][ T6701] Dev loop2: unable to read RDB block 7 [ 108.604900][ T6701] loop2: unable to read partition table [ 108.620977][ T6701] loop2: partition table beyond EOD, truncated [ 108.627330][ T6701] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 108.721790][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 108.730497][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.749567][ T5948] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 108.749814][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.771033][ T5918] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 108.782744][ T5948] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.799362][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.812926][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 108.819960][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 108.831678][ T5918] usb 3-1: config 0 descriptor?? [ 108.851166][ T5932] usb 4-1: USB disconnect, device number 10 [ 109.189695][ T3093] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 109.233722][ T6726] vivid-001: disconnect [ 109.251579][ T5918] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 109.259506][ T5918] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 109.269707][ T5918] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 109.276679][ T5918] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 109.289149][ T5918] holtek 0003:1241:5015.0006: unknown main item tag 0x0 [ 109.320011][ T5918] holtek 0003:1241:5015.0006: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 109.449327][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 109.460178][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 109.496732][ T5918] holtek 0003:1241:5015.0006: no inputs found [ 109.507640][ T5918] usb 3-1: USB disconnect, device number 14 [ 109.513739][ T3093] usb 5-1: Using ep0 maxpacket: 16 [ 109.528117][ T3093] usb 5-1: config 0 has an invalid interface descriptor of length 7, skipping [ 109.541475][ T3093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.595747][ T3093] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.610597][ T3093] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.619882][ T3093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.634277][ T3093] usb 5-1: Product: syz [ 109.642877][ T3093] usb 5-1: Manufacturer: syz [ 109.655791][ T3093] usb 5-1: SerialNumber: syz [ 109.677959][ T3093] r8152-cfgselector 5-1: Unknown version 0x0000 [ 109.702189][ T3093] r8152-cfgselector 5-1: config 0 descriptor?? [ 109.745054][ T6736] fido_id[6736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.787139][ T6740] netlink: 'syz.3.220': attribute type 15 has an invalid length. [ 109.805277][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 109.937094][ T6718] netlink: 'syz.4.214': attribute type 10 has an invalid length. [ 109.950886][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.960440][ T6718] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.972453][ T3093] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 109.986027][ T6744] netlink: 596 bytes leftover after parsing attributes in process `syz.3.221'. [ 111.244345][ T6761] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 111.709758][ T5948] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 111.728732][ T6781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 111.735280][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.747089][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 111.749519][ T6778] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.231'. [ 111.871749][ T5948] usb 2-1: device descriptor read/64, error -71 [ 111.933140][ T92] vhci_hcd: vhci_device speed not set [ 111.989726][ T92] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 112.149272][ T5948] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 112.249752][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 112.339291][ T5948] usb 2-1: device descriptor read/64, error -71 [ 112.390180][ T6725] vivid-001: reconnect [ 112.420253][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 112.427809][ T5918] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 112.438489][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.448598][ T5918] usb 3-1: config 0 descriptor?? [ 112.458170][ T5918] gspca_main: sq930x-2.14.0 probing 041e:403c [ 112.459937][ T5948] usb usb2-port1: attempt power cycle [ 112.815077][ T5918] gspca_sq930x: reg_r 001f failed -32 [ 112.826708][ T5918] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 112.884301][ T5918] usb 3-1: USB disconnect, device number 15 [ 113.079749][ T5948] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 113.104371][ T5948] usb 2-1: device descriptor read/8, error -71 [ 113.208902][ T6809] loop2: detected capacity change from 0 to 7 [ 113.215961][ T6809] Dev loop2: unable to read RDB block 7 [ 113.223761][ T6809] loop2: unable to read partition table [ 113.230686][ T6809] loop2: partition table beyond EOD, truncated [ 113.253924][ T6809] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 113.337174][ T6782] vhci_hcd: connection reset by peer [ 113.343064][ T59] vhci_hcd: stop threads [ 113.347546][ T59] vhci_hcd: release socket [ 113.375876][ T59] vhci_hcd: disconnect device [ 113.379825][ T5948] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 113.430313][ T5948] usb 2-1: device descriptor read/8, error -71 [ 113.547753][ T5948] usb usb2-port1: unable to enumerate USB device [ 113.829809][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 113.920026][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.002150][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.014717][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.027734][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.038891][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.054433][ T5948] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.064027][ T9] usb 4-1: device descriptor read/64, error -71 [ 114.071402][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.214675][ T5948] usb 1-1: config 0 descriptor?? [ 114.329936][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.420621][ T6773] delete_channel: no stack [ 114.427668][ T6828] openvswitch: netlink: Actions may not be safe on all matching packets [ 114.470403][ T9] usb 4-1: device descriptor read/64, error -71 [ 114.504863][ T6830] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 114.580027][ T9] usb usb4-port1: attempt power cycle [ 114.638185][ T5948] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 114.881206][ T6839] loop2: detected capacity change from 0 to 7 [ 114.933194][ T6839] Dev loop2: unable to read RDB block 7 [ 114.939739][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.978738][ T6839] loop2: unable to read partition table [ 114.993568][ T9] usb 4-1: device descriptor read/8, error -71 [ 115.026694][ T6839] loop2: partition table beyond EOD, truncated [ 115.034351][ T6843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 115.040891][ T6843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.044524][ T6839] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 115.059123][ T6843] vhci_hcd vhci_hcd.0: Device attached [ 115.131792][ T6843] tipc: Started in network mode [ 115.136752][ T6843] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 115.145002][ T6843] tipc: Enabled bearer , priority 10 [ 115.155853][ T6843] netlink: 14 bytes leftover after parsing attributes in process `syz.4.250'. [ 115.166020][ T6843] tipc: Resetting bearer [ 115.208297][ T6843] tipc: Disabling bearer [ 115.229947][ T5932] vhci_hcd: vhci_device speed not set [ 115.279710][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 115.289704][ T5932] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 115.300732][ T9] usb 4-1: device descriptor read/8, error -71 [ 115.390522][ T6844] vhci_hcd: connection reset by peer [ 115.396327][ T999] vhci_hcd: stop threads [ 115.400989][ T999] vhci_hcd: release socket [ 115.405458][ T999] vhci_hcd: disconnect device [ 115.420061][ T9] usb usb4-port1: unable to enumerate USB device [ 115.451138][ T5918] usb 1-1: USB disconnect, device number 17 [ 115.461770][ T3093] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 115.661188][ T3093] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 115.669395][ T3093] usb 2-1: config 0 has no interface number 0 [ 115.677691][ T3093] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 115.687628][ T3093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.702719][ T3093] usb 2-1: Product: syz [ 115.710953][ T3093] usb 2-1: Manufacturer: syz [ 115.725915][ T3093] usb 2-1: SerialNumber: syz [ 115.735808][ T3093] usb 2-1: config 0 descriptor?? [ 115.913105][ T5918] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 115.958083][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 116.001045][ T6847] bridge1: port 1(ip6gretap1) entered blocking state [ 116.008305][ T6847] bridge1: port 1(ip6gretap1) entered disabled state [ 116.041760][ T6847] ip6gretap1: entered allmulticast mode [ 116.068629][ T6847] ip6gretap1: entered promiscuous mode [ 116.090771][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 116.099949][ T6864] fuse: Unknown parameter 'fd%0x0000000000000003' [ 116.113100][ T5918] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 116.139086][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.161306][ T5918] usb 1-1: Product: syz [ 116.165491][ T5918] usb 1-1: Manufacturer: syz [ 116.181677][ T3093] kaweth 2-1:0.58: Firmware present in device. [ 116.199680][ T5918] usb 1-1: SerialNumber: syz [ 116.214402][ T3093] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 116.224871][ T5918] usb 1-1: config 0 descriptor?? [ 116.247245][ T5918] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 116.260209][ T3093] kaweth 2-1:0.58: probe with driver kaweth failed with error -5 [ 116.289035][ T3093] usb 2-1: USB disconnect, device number 20 [ 116.459707][ T9] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 116.479821][ T5918] gspca_sonixj: reg_r err -71 [ 116.484588][ T5918] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 116.525526][ T5918] usb 1-1: USB disconnect, device number 18 [ 116.623040][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 116.648727][ T9] usb 5-1: config 0 has no interface number 0 [ 116.660113][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 116.679367][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.708776][ T9] usb 5-1: Product: syz [ 116.723408][ T9] usb 5-1: Manufacturer: syz [ 116.735065][ T6883] loop2: detected capacity change from 0 to 7 [ 116.744427][ T9] usb 5-1: SerialNumber: syz [ 116.761033][ T9] usb 5-1: config 0 descriptor?? [ 116.776476][ T6883] Dev loop2: unable to read RDB block 7 [ 116.786930][ T6883] loop2: unable to read partition table [ 116.806424][ T6883] loop2: partition table beyond EOD, truncated [ 116.829884][ T5918] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 116.847738][ T6883] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 117.019707][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 117.031694][ T5918] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=e4.99 [ 117.040854][ T5918] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 117.048853][ T5918] usb 1-1: Product: syz [ 117.059677][ T5918] usb 1-1: Manufacturer: syz [ 117.064307][ T5918] usb 1-1: SerialNumber: syz [ 117.078248][ T5918] usb 1-1: config 0 descriptor?? [ 117.095370][ T5918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 117.110697][ T92] vhci_hcd: vhci_device speed not set [ 117.344306][ T9] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 117.359731][ T5946] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 117.370187][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 117.381144][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 117.390388][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 117.403834][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 117.530989][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.543949][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 117.565280][ T5946] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.586271][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.599189][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.635292][ T5946] usb 2-1: SerialNumber: syz [ 117.648088][ T6898] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 117.659636][ T5946] hub 2-1:1.0: bad descriptor, ignoring hub [ 117.665612][ T5946] hub 2-1:1.0: probe with driver hub failed with error -5 [ 117.675852][ T9] usb 5-1: USB disconnect, device number 26 [ 117.688934][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 117.698962][ T9] keyspan 5-1:0.133: device disconnected [ 117.711861][ T5918] gspca_zc3xx: reg_w_i err -71 [ 117.716860][ T5918] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 117.733620][ T5918] usb 1-1: USB disconnect, device number 19 [ 117.858396][ T6898] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 118.249244][ T6916] loop6: detected capacity change from 0 to 63 [ 118.262215][ T5877] buffer_io_error: 4 callbacks suppressed [ 118.262238][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.277898][ T6916] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.287279][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.296186][ T6916] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.305405][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.314740][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.323639][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.324014][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.393134][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.402035][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.529056][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.552850][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.572636][ T5946] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 118.800327][ T6931] loop2: detected capacity change from 0 to 7 [ 118.813072][ T6931] Dev loop2: unable to read RDB block 7 [ 118.819049][ T6931] loop2: unable to read partition table [ 118.825541][ T6931] loop2: partition table beyond EOD, truncated [ 118.848597][ T6931] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 118.890927][ T24] usb 2-1: USB disconnect, device number 21 [ 118.903344][ T24] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 118.969014][ T6938] netlink: 75 bytes leftover after parsing attributes in process `syz.2.279'. [ 119.372923][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 119.399684][ T3093] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 119.550096][ T3093] usb 3-1: Using ep0 maxpacket: 32 [ 119.563564][ T3093] usb 3-1: no configurations [ 119.568214][ T3093] usb 3-1: can't read configurations, error -22 [ 119.709722][ T3093] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 119.871208][ T3093] usb 3-1: Using ep0 maxpacket: 32 [ 119.877016][ T3093] usb 3-1: no configurations [ 119.883882][ T3093] usb 3-1: can't read configurations, error -22 [ 119.890817][ T3093] usb usb3-port1: attempt power cycle [ 120.150478][ T5946] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 120.244124][ T3093] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 120.270316][ T3093] usb 3-1: Using ep0 maxpacket: 32 [ 120.277189][ T3093] usb 3-1: no configurations [ 120.283807][ T3093] usb 3-1: can't read configurations, error -22 [ 120.379783][ T5918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 120.387529][ T5932] vhci_hcd: vhci_device speed not set [ 120.410602][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.419889][ T3093] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 120.434751][ T5946] usb 1-1: config 1 has an invalid interface number: 43 but max is 1 [ 120.440664][ T3093] usb 3-1: Using ep0 maxpacket: 32 [ 120.443314][ T5946] usb 1-1: config 1 has no interface number 1 [ 120.448963][ T3093] usb 3-1: no configurations [ 120.454124][ T5946] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.454155][ T5946] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.455800][ T5946] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 120.488623][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.498132][ T3093] usb 3-1: can't read configurations, error -22 [ 120.507584][ T3093] usb usb3-port1: unable to enumerate USB device [ 120.507710][ T5946] usb 1-1: Product: syz [ 120.520723][ T5946] usb 1-1: Manufacturer: syz [ 120.525373][ T5946] usb 1-1: SerialNumber: syz [ 120.550459][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 120.559968][ T5918] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 120.573038][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.586906][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.599041][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.636629][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.689897][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.717156][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.735996][ T5946] smsusb:smsusb_probe: board id=8, interface number 0 [ 120.754062][ T5946] smsusb:smsusb_probe: board id=8, interface number 43 [ 120.760285][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 120.763776][ T5946] usb 1-1: USB disconnect, device number 20 [ 120.826587][ T6991] loop2: detected capacity change from 0 to 7 [ 120.833744][ T6991] Dev loop2: unable to read RDB block 7 [ 120.839342][ T6991] loop2: unable to read partition table [ 120.845439][ T6991] loop2: partition table beyond EOD, truncated [ 120.852035][ T6991] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 120.921766][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.959670][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.992288][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.002775][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.016944][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.026150][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.034431][ T5918] usb 5-1: GET_CAPABILITIES returned 0 [ 121.040283][ T5918] usbtmc 5-1:16.0: can't read capabilities [ 121.047156][ T24] usb 2-1: config 0 descriptor?? [ 121.169731][ T92] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 121.320669][ T92] usb 4-1: too many configurations: 184, using maximum allowed: 8 [ 121.331001][ T92] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 121.338710][ T92] usb 4-1: can't read configurations, error -61 [ 121.346279][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 121.469758][ T92] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 121.620345][ T92] usb 4-1: too many configurations: 184, using maximum allowed: 8 [ 121.631298][ T92] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 121.639061][ T92] usb 4-1: can't read configurations, error -61 [ 121.645885][ T92] usb usb4-port1: attempt power cycle [ 122.000510][ T92] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 122.042186][ T92] usb 4-1: too many configurations: 184, using maximum allowed: 8 [ 122.057886][ T92] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 122.085480][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 122.105768][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.111258][ T92] usb 4-1: can't read configurations, error -61 [ 122.145238][ T24] usb 2-1: USB disconnect, device number 22 [ 122.260097][ T92] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 122.294983][ T7010] tipc: Started in network mode [ 122.303026][ T92] usb 4-1: too many configurations: 184, using maximum allowed: 8 [ 122.309785][ T7010] tipc: Node identity 1e68c0f07957, cluster identity 4711 [ 122.320448][ T7010] tipc: Enabled bearer , priority 0 [ 122.331127][ T92] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 122.342285][ T7010] syzkaller0: entered promiscuous mode [ 122.347983][ T92] usb 4-1: can't read configurations, error -61 [ 122.355175][ T7010] syzkaller0: entered allmulticast mode [ 122.363323][ T92] usb usb4-port1: unable to enumerate USB device [ 122.385481][ T7010] tipc: Resetting bearer [ 122.398712][ T7010] tipc: Resetting bearer [ 122.421239][ T7010] tipc: Disabling bearer [ 122.469778][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 122.676906][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.689247][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.703540][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.713620][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.729458][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.739486][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.795130][ T24] usb 2-1: config 0 descriptor?? [ 122.911890][ T5932] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 122.990902][ T7019] netlink: 'syz.2.299': attribute type 63 has an invalid length. [ 123.006438][ T7019] netlink: 'syz.2.299': attribute type 63 has an invalid length. [ 123.079663][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 123.135616][ T5932] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 123.144736][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.166057][ T5932] usb 1-1: Product: syz [ 123.170328][ T5932] usb 1-1: Manufacturer: syz [ 123.174960][ T5932] usb 1-1: SerialNumber: syz [ 123.182859][ T5932] usb 1-1: config 0 descriptor?? [ 123.936380][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 123.942490][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 123.956564][ T24] usb 2-1: USB disconnect, device number 23 [ 124.170920][ T7036] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.303'. [ 125.219718][ T982] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 125.229936][ T5918] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 125.371429][ T982] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.382638][ T982] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.392591][ T982] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.401779][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.403063][ T5918] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 125.413495][ T7051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 125.428252][ T5918] usb 4-1: config 0 has no interface number 0 [ 125.434908][ T5918] usb 4-1: config 0 interface 29 has no altsetting 0 [ 125.444219][ T5918] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 125.454060][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.463836][ T5918] usb 4-1: Product: syz [ 125.469346][ T5918] usb 4-1: Manufacturer: syz [ 125.476926][ T5918] usb 4-1: SerialNumber: syz [ 125.487738][ T5918] usb 4-1: config 0 descriptor?? [ 125.567073][ T982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.597260][ T5932] usb 1-1: USB disconnect, device number 21 [ 125.644485][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.655073][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.673032][ T982] usb 2-1: USB disconnect, device number 24 [ 125.709816][ T5918] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 125.903676][ T5918] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 125.911949][ T5918] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 125.924157][ T5918] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 126.010112][ T5918] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 126.039935][ T5932] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 126.104404][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.113106][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.125905][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.134915][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.154622][ T5918] usb 4-1: USB disconnect, device number 19 [ 126.191749][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.204924][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.216010][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.226653][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.239921][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.248983][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.260598][ T5932] usb 1-1: config 0 descriptor?? [ 126.310215][ T6979] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 126.339010][ T24] usb 5-1: USB disconnect, device number 27 [ 126.390733][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.448817][ T7094] binder: 7093:7094 ioctl 4018620d 0 returned -22 [ 127.452672][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 127.478164][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.539355][ T7097] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 127.700076][ T5932] usb 1-1: USB disconnect, device number 22 [ 128.292763][ T982] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 128.440061][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 128.466503][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 128.475578][ T982] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.484830][ T982] usb 3-1: config 0 has no interface number 0 [ 128.505433][ T982] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.519673][ T982] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 128.531453][ T982] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.547470][ T982] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.573074][ T982] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.585192][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.628816][ T982] usb 3-1: config 0 descriptor?? [ 128.629773][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 128.639144][ T982] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.959270][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 128.976307][ T982] usb 3-1: USB disconnect, device number 20 [ 129.268277][ T24] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 129.278310][ T24] usb 1-1: config 1 has no interface number 0 [ 129.321955][ T24] usb 1-1: config 1 interface 242 has no altsetting 0 [ 129.330330][ T982] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 129.336105][ T24] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 129.351540][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.378225][ T24] usb 1-1: Product: syz [ 129.387757][ T24] usb 1-1: Manufacturer: syz [ 129.401167][ T24] usb 1-1: SerialNumber: syz [ 129.722992][ T24] aqc111 1-1:1.242: probe with driver aqc111 failed with error -71 [ 129.752289][ T24] usb 1-1: USB disconnect, device number 23 [ 129.823269][ T5932] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 129.846375][ T982] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 130.060393][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 130.067517][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.079204][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.090169][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.101262][ T5932] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 130.109515][ T982] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 130.119682][ T3093] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 130.130007][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.141443][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.141985][ T982] usb 4-1: config 0 descriptor?? [ 130.161169][ T5932] usb 2-1: config 0 descriptor?? [ 130.289682][ T3093] usb 3-1: Using ep0 maxpacket: 16 [ 130.356322][ T3093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 130.371005][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.390558][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.436767][ T3093] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 130.579289][ T3093] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 130.595657][ T7145] gretap0: entered promiscuous mode [ 130.634733][ T7145] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 130.658700][ T982] lua 0003:1E7D:2C2E.0008: item fetching failed at offset 1/5 [ 130.700460][ T5932] kye 0003:0458:5014.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 130.711632][ T982] lua 0003:1E7D:2C2E.0008: parse failed [ 130.756791][ T982] lua 0003:1E7D:2C2E.0008: probe with driver lua failed with error -22 [ 130.767402][ T5932] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 130.776061][ T3093] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 130.786268][ T3093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 130.794115][ T7128] fuse: Bad value for 'fd' [ 130.795520][ T3093] usb 3-1: Product: syz [ 130.799058][ T7146] fuse: Bad value for 'fd' [ 130.850031][ T5932] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 130.863362][ T982] usb 4-1: USB disconnect, device number 20 [ 130.938356][ T3093] usb 3-1: Manufacturer: syz [ 130.949513][ T3093] usb 3-1: SerialNumber: syz [ 130.956051][ T5932] kye 0003:0458:5014.0009: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 130.967652][ T5932] kye 0003:0458:5014.0009: tablet-enabling feature report not found [ 130.976306][ T3093] usb 3-1: config 0 descriptor?? [ 130.982259][ T7139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.989765][ T5932] kye 0003:0458:5014.0009: tablet enabling failed [ 130.999873][ T3093] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 131.005802][ T3093] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 131.012842][ T3093] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 131.023095][ T5932] usb 2-1: USB disconnect, device number 25 [ 131.029829][ T3093] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 131.048966][ T3093] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 131.083214][ T7147] fido_id[7147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 131.639164][ T7141] gretap0: left promiscuous mode [ 132.882359][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894521][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.039925][ T5947] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 133.206189][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 133.316308][ T7188] netlink: 'syz.4.343': attribute type 13 has an invalid length. [ 133.365605][ T5947] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.476247][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 133.629970][ T7188] netlink: 'syz.4.343': attribute type 17 has an invalid length. [ 133.725407][ T5947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.741246][ T3093] usb 3-1: USB disconnect, device number 21 [ 133.748899][ T9] usb 4-1: device descriptor read/64, error -71 [ 133.756278][ T3093] mcba_usb 3-1:0.0 can0: device disconnected [ 133.762718][ T5947] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.778249][ T5947] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.787818][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.791608][ T7193] binder_alloc: binder_alloc_mmap_handler: 7191 200000ffc000-200001000000 already mapped failed -16 [ 133.817887][ T5947] usb 2-1: Product: syz [ 133.822373][ T5947] usb 2-1: Manufacturer: syz [ 133.848405][ T5947] usb 2-1: SerialNumber: syz [ 133.985954][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.006189][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 134.088898][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.237330][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.252707][ T9] usb 4-1: device descriptor read/64, error -71 [ 134.310336][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.346178][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.399360][ T9] usb usb4-port1: attempt power cycle [ 134.400090][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.448523][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.482933][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.538735][ T5947] usb 2-1: 0:2 : does not exist [ 134.558162][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.571652][ T7199] netlink: 83 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.718297][ T7173] syz.1.340 (7173): drop_caches: 2 [ 134.750533][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 135.220249][ T9] usb 4-1: device descriptor read/8, error -71 [ 135.460015][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 135.520687][ T9] usb 4-1: device descriptor read/8, error -71 [ 135.667438][ T9] usb usb4-port1: unable to enumerate USB device [ 136.687866][ T5947] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 136.722045][ T3093] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 136.733327][ T5947] usb 2-1: USB disconnect, device number 26 [ 136.901201][ T3093] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 136.935988][ T3093] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 136.953206][ T3093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.975468][ T3093] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 136.989504][ T3093] usb 5-1: string descriptor 0 read error: -22 [ 136.996165][ T3093] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 137.016101][ T3093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.032487][ T3093] usb 5-1: config 0 descriptor?? [ 137.047719][ T3093] hub 5-1:0.0: bad descriptor, ignoring hub [ 137.047745][ T3093] hub 5-1:0.0: probe with driver hub failed with error -5 [ 137.130439][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 137.130458][ T30] audit: type=1326 audit(1755483815.665:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.195872][ T7253] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 137.205930][ T30] audit: type=1326 audit(1755483815.665:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.228356][ T30] audit: type=1326 audit(1755483815.705:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.256627][ T7254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 137.278819][ T30] audit: type=1326 audit(1755483815.715:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.337669][ T30] audit: type=1326 audit(1755483815.715:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.360426][ T30] audit: type=1326 audit(1755483815.715:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3158d550 code=0x7ffc0000 [ 137.413862][ T30] audit: type=1326 audit(1755483815.715:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3158d550 code=0x7ffc0000 [ 137.435937][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.442288][ T9] usb 5-1: USB disconnect, device number 28 [ 137.482719][ T30] audit: type=1326 audit(1755483815.715:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.504816][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.512042][ T30] audit: type=1326 audit(1755483815.715:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 137.535943][ T30] audit: type=1326 audit(1755483815.715:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffb3158ebe9 code=0x7ffc0000 [ 138.364540][ T3093] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 138.548410][ T3093] usb 1-1: Using ep0 maxpacket: 32 [ 138.667515][ T3093] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 138.680615][ T3093] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.714915][ T3093] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=69.40 [ 138.739442][ T3093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.773977][ T3093] usb 1-1: config 0 descriptor?? [ 138.789755][ T5947] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 138.880717][ T7286] netlink: 'syz.3.365': attribute type 27 has an invalid length. [ 138.916722][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.925541][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.941989][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 138.955346][ T7286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.970882][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 138.980485][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.061669][ T3093] usb 1-1: string descriptor 0 read error: -71 [ 139.068195][ T5947] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.085916][ T3093] usb 1-1: USB disconnect, device number 24 [ 139.105922][ T5947] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 139.121435][ T5947] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.136610][ T5947] usb 2-1: config 1 interface 0 has no altsetting 0 [ 139.145136][ T5947] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 139.154852][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.164499][ T5947] usb 2-1: Product: syz [ 139.168674][ T5947] usb 2-1: Manufacturer: syz [ 139.178408][ T5947] usb 2-1: SerialNumber: syz [ 139.190628][ T7285] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 139.225275][ T7297] pimreg: entered allmulticast mode [ 139.340882][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 139.382644][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 139.392972][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.402119][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 139.423885][ T7299] pimreg: left allmulticast mode [ 139.467654][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.507715][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.548928][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.649690][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.661960][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.974350][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 139.983397][ T9] usbtmc 5-1:16.0: can't read capabilities [ 140.038637][ C1] bcm5974 2-1:1.0: trackpad urb failed: -19 [ 140.044635][ T5918] usb 2-1: USB disconnect, device number 27 [ 140.052333][ T7284] bcm5974 2-1:1.0: could not read from device [ 140.262733][ T7311] binder: 7310:7311 ioctl 4018620d 0 returned -22 [ 140.392509][ T7266] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 140.399413][ T92] usb 5-1: USB disconnect, device number 29 [ 140.550881][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 140.710258][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 140.727004][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.735981][ T9] usb 1-1: config 251 has an invalid interface number: 155 but max is 0 [ 140.745127][ T9] usb 1-1: config 251 has no interface number 0 [ 140.751972][ T9] usb 1-1: config 251 interface 155 has no altsetting 0 [ 140.760880][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=de.c8 [ 140.770810][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.847292][ T9] usb 1-1: Product: syz [ 140.858947][ T9] usb 1-1: Manufacturer: syz [ 140.868134][ T9] usb 1-1: SerialNumber: syz [ 140.899698][ T5946] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 141.060371][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 141.068760][ T5946] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 141.087327][ T5946] usb 2-1: config 0 has no interface number 0 [ 141.143345][ T9] usb 1-1: NDI device with a latency value of 1 [ 141.162226][ T5946] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 141.174052][ T9] ftdi_sio 1-1:251.155: FTDI USB Serial Device converter detected [ 141.183135][ T5946] usb 2-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.193774][ T9] ftdi_sio ttyUSB0: unknown device type: 0xdec8 [ 141.204902][ T9] usb 1-1: USB disconnect, device number 25 [ 141.212260][ T5946] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 141.222505][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.231475][ T9] ftdi_sio 1-1:251.155: device disconnected [ 141.238891][ T5946] usb 2-1: Product: syz [ 141.246102][ T5946] usb 2-1: Manufacturer: syz [ 141.252684][ T5946] usb 2-1: SerialNumber: syz [ 141.261872][ T5946] usb 2-1: config 0 descriptor?? [ 141.271087][ T5946] appletouch 2-1:0.154: Could not find int-in endpoint [ 141.280809][ T5946] appletouch 2-1:0.154: probe with driver appletouch failed with error -5 [ 141.291214][ T5946] usbhid 2-1:0.154: couldn't find an input interrupt endpoint [ 141.468841][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.480298][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.490679][ T5918] usb 2-1: USB disconnect, device number 28 [ 141.651647][ T7330] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 141.658208][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.668188][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 141.703079][ T7326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.709200][ T7326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.765069][ T7326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.773816][ T7326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.780005][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.787817][ T7326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.811459][ T7326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.817781][ T7326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.845626][ T7326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.000093][ T7326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.009827][ T7326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.080943][ T9] vhci_hcd: vhci_device speed not set [ 142.166062][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 142.236020][ T7326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.347358][ T7326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.364144][ T7326] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.404307][ T7343] binder: 7342:7343 ioctl 4018620d 0 returned -22 [ 142.697979][ T7326] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 142.770438][ T7343] binder: 7342:7343 ioctl c0306201 0 returned -14 [ 143.231160][ T7331] vhci_hcd: connection reset by peer [ 143.237126][ T3972] vhci_hcd: stop threads [ 143.243590][ T3972] vhci_hcd: release socket [ 143.290113][ T3972] vhci_hcd: disconnect device [ 143.382389][ T7359] netlink: 'syz.1.383': attribute type 13 has an invalid length. [ 143.596190][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.671308][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.678626][ T7359] bridge0: port 1() entered disabled state [ 143.830582][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.841153][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.967009][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.063984][ T5987] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 144.075168][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.162936][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.280338][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 144.290530][ T5987] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.356468][ T5987] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.389993][ T5946] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 144.397799][ T5867] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.407877][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.493101][ T5987] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 144.560656][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 144.567176][ T5946] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 144.579984][ T5946] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.600463][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.602791][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.663706][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.664564][ T5987] usb 3-1: config 0 descriptor?? [ 144.684134][ T5946] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.707315][ T5946] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.727975][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.736764][ T7375] __nla_validate_parse: 60 callbacks suppressed [ 144.736783][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.388'. [ 144.923016][ T999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.943528][ T999] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 145.113917][ T5987] hkems 0003:2006:0118.000A: bogus close delimiter [ 145.130105][ T5987] hkems 0003:2006:0118.000A: item 0 4 2 10 parsing failed [ 145.138806][ T999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.150043][ T5987] hkems 0003:2006:0118.000A: parse failed [ 145.181343][ T5987] hkems 0003:2006:0118.000A: probe with driver hkems failed with error -22 [ 145.190516][ T999] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 145.199426][ T5946] usb 1-1: GET_CAPABILITIES returned 0 [ 145.209626][ T999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.229664][ T999] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 145.238684][ T5946] usbtmc 1-1:16.0: can't read capabilities [ 145.322656][ T5946] usb 3-1: USB disconnect, device number 22 [ 145.337876][ T999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.348663][ T999] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 145.357897][ T7382] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 145.389727][ T7382] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 145.411622][ T7385] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 145.684376][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.910594][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.916714][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.151784][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.389826][ T5946] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 146.469992][ T5867] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.488182][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 146.530666][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 146.549826][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 146.636576][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.658578][ T5946] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 146.669319][ T5946] usb 2-1: config 8 has no interface number 0 [ 146.678767][ T5946] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 146.692433][ T5946] usb 2-1: config 8 interface 24 has no altsetting 0 [ 146.710918][ T5946] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 146.724352][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.735043][ T5946] usb 2-1: Product: syz [ 146.739862][ T5946] usb 2-1: Manufacturer: syz [ 146.744603][ T5946] usb 2-1: SerialNumber: syz [ 147.340911][ T9] vhci_hcd: vhci_device speed not set [ 147.629228][ T7427] loop2: detected capacity change from 0 to 7 [ 147.650588][ T7427] loop2: [ 147.656637][ T7427] loop2: partition table partially beyond EOD, truncated [ 147.749859][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.991305][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.991313][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.039706][ T982] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 148.189721][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 148.198051][ T982] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 148.209484][ T982] usb 4-1: config 0 has no interface number 0 [ 148.218487][ T982] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 148.229714][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.235833][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.244839][ T982] usb 4-1: Product: syz [ 148.249121][ T982] usb 4-1: Manufacturer: syz [ 148.254020][ T982] usb 4-1: SerialNumber: syz [ 148.261252][ T982] usb 4-1: config 0 descriptor?? [ 148.549883][ T5860] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.091422][ T5946] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 149.129154][ T5946] usb 2-1: USB disconnect, device number 29 [ 150.427477][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 150.469958][ T7367] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 150.557913][ T5946] usb 1-1: USB disconnect, device number 26 [ 150.677651][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 150.830080][ T982] peak_usb 4-1:0.120 can0: unable to request usb[type=0 value=1] err=-71 [ 150.846893][ T982] peak_usb 4-1:0.120: unable to read PCAN-USB Pro firmware info (err -71) [ 150.940846][ T982] peak_usb 4-1:0.120: probe with driver peak_usb failed with error -71 [ 150.957946][ T982] usb 4-1: USB disconnect, device number 25 [ 151.020229][ T5948] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 151.040919][ T5946] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 151.189648][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 151.196159][ T5948] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 151.204661][ T5948] usb 3-1: config 0 has no interface number 0 [ 151.210812][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 151.218105][ T5946] usb 1-1: config 9 has an invalid interface number: 136 but max is 0 [ 151.226630][ T5946] usb 1-1: config 9 has no interface number 0 [ 151.235627][ T5948] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 151.285033][ T5946] usb 1-1: config 9 interface 136 has no altsetting 0 [ 151.292137][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.302039][ T5946] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cf.52 [ 151.311471][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.321686][ T5948] usb 3-1: config 0 descriptor?? [ 151.328911][ T5946] usb 1-1: Product: syz [ 151.341362][ T5946] usb 1-1: Manufacturer: syz [ 151.347623][ T5946] usb 1-1: SerialNumber: syz [ 151.457777][ T5948] viperboard 3-1:0.143: version 0.00 found at bus 003 address 023 [ 151.481441][ T5948] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 151.517282][ T5948] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 151.602481][ T7496] netlink: 100 bytes leftover after parsing attributes in process `syz.2.421'. [ 151.627074][ T7484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.420'. [ 151.676631][ T5946] gspca_main: ov534-2.14.0 probing 1415:2000 [ 151.683129][ T5946] gspca_ov534: write failed -71 [ 151.947829][ T7506] sctp: [Deprecated]: syz.3.425 (pid 7506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.947829][ T7506] Use struct sctp_sack_info instead [ 152.116868][ T7511] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 152.170507][ T7511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.379774][ T5932] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 152.613315][ T5932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.622492][ T5932] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.658189][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.815294][ T5947] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 152.825481][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 152.864732][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.898017][ T5932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.913242][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.935805][ T5932] usb 2-1: Product: syz [ 152.955437][ T5932] usb 2-1: Manufacturer: syz [ 152.986030][ T5932] cdc_wdm 2-1:1.0: skipping garbage [ 152.998737][ T5932] cdc_wdm 2-1:1.0: skipping garbage [ 153.050397][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.072033][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.085348][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.095410][ T5932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 153.101378][ T5932] cdc_wdm 2-1:1.0: Unknown control protocol [ 153.115501][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.148608][ T5947] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.165058][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.182891][ T5947] usb 4-1: config 0 descriptor?? [ 153.191587][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 153.198804][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.205381][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.211599][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.218178][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.224444][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.231021][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.237240][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.243815][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.250053][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.256623][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.263086][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.269710][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.275986][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.282564][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.288790][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.295365][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.301564][ T5932] usb 2-1: USB disconnect, device number 30 [ 153.307479][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 153.307492][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 153.307501][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 153.860988][ T982] usb 3-1: USB disconnect, device number 23 [ 154.126163][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 154.126181][ T30] audit: type=1800 audit(1755483832.665:103): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.433" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 154.189960][ T5946] ov534 1-1:9.136: probe with driver ov534 failed with error -71 [ 154.201959][ T5946] usb 1-1: USB disconnect, device number 27 [ 154.740327][ T5932] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 154.829654][ T5946] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 154.932430][ T7555] fuse: Unknown parameter 'fd͠\~s7' [ 154.973616][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.984650][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.993813][ T5932] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 155.004558][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.017467][ T5932] usb 3-1: config 0 descriptor?? [ 155.025226][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 155.035192][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 155.113459][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 155.179121][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.196998][ T5932] usb 3-1: media controller created [ 155.298932][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.313416][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 155.320333][ T5946] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 155.329001][ T5946] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.341908][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 155.346176][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.347794][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.371299][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 155.418647][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 155.431380][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 155.458051][ T5946] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.481134][ T5946] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.528653][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.543921][ T5947] usbhid 4-1:0.0: can't add hid device: -71 [ 155.569984][ T5947] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.584417][ T5946] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.589680][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 155.615747][ T5947] usb 4-1: USB disconnect, device number 26 [ 155.624398][ T5932] dvb-usb: error while querying for an remote control event. [ 155.624483][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.668942][ T7564] block device autoloading is deprecated and will be removed. [ 155.689633][ T7564] syz.4.440: attempt to access beyond end of device [ 155.689633][ T7564] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 155.717842][ T5946] usb 1-1: can't set config #16, error -71 [ 155.749969][ T5946] usb 1-1: USB disconnect, device number 28 [ 155.789679][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 155.796002][ T5932] dvb-usb: error while querying for an remote control event. [ 155.989696][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 156.001112][ T5932] dvb-usb: error while querying for an remote control event. [ 156.169698][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 156.175599][ T5932] dvb-usb: error while querying for an remote control event. [ 156.379679][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 156.385916][ T5947] dvb-usb: error while querying for an remote control event. [ 156.551960][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 156.558706][ T5947] dvb-usb: error while querying for an remote control event. [ 156.599668][ T5946] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 156.723127][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 156.749963][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 156.756761][ T5946] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.758754][ T5947] dvb-usb: error while querying for an remote control event. [ 156.776811][ T5946] usb 5-1: config 0 has no interface number 0 [ 156.785309][ T5946] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.833790][ T5946] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.851284][ T5946] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 156.860808][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.872327][ T5946] usb 5-1: config 0 descriptor?? [ 156.949307][ T5948] usb 3-1: USB disconnect, device number 24 [ 156.984595][ T5948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.092062][ T7585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 157.098607][ T7585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 157.125624][ T7585] vhci_hcd vhci_hcd.0: Device attached [ 157.241064][ T5947] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 157.299705][ T5932] vhci_hcd: vhci_device speed not set [ 157.360046][ T5932] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 157.439694][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 157.447848][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.462840][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.473220][ T5947] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 157.482652][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.486663][ T5946] uclogic 0003:28BD:0094.000B: pen parameters not found [ 157.503986][ T5946] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 157.508096][ T5947] usb 1-1: config 0 descriptor?? [ 157.671177][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.680648][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.787526][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.803171][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.052233][ T5947] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 158.260522][ T5947] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 158.463706][ T5947] ft260 0003:0403:6030.000C: failed to retrieve system status [ 158.473055][ T5947] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 158.490082][ T5947] usb 1-1: USB disconnect, device number 29 [ 158.529671][ T5948] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 158.603149][ T7586] vhci_hcd: connection reset by peer [ 158.615541][ T13] vhci_hcd: stop threads [ 158.620894][ T13] vhci_hcd: release socket [ 158.669814][ T13] vhci_hcd: disconnect device [ 158.704584][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 158.749362][ T5948] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 158.759130][ T5948] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.772051][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.782418][ T5948] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.807183][ T5948] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.838973][ T5948] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.848357][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.980513][ T5947] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 159.073591][ T5948] usb 2-1: GET_CAPABILITIES returned 0 [ 159.084865][ T5948] usbtmc 2-1:16.0: can't read capabilities [ 159.130923][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.147593][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.161411][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.181413][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.196934][ T5947] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.208386][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.219501][ T5947] usb 3-1: config 0 descriptor?? [ 159.392385][ T982] usb 5-1: USB disconnect, device number 30 [ 159.400724][ T5918] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 159.489701][ T5948] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 159.569728][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 159.580240][ T5918] usb 1-1: no configurations [ 159.588645][ T5918] usb 1-1: can't read configurations, error -22 [ 159.640386][ T5948] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 159.650684][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 159.658554][ T5948] usb 4-1: can't read configurations, error -61 [ 159.739947][ T5918] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 159.809710][ T5948] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 159.889662][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 159.895397][ T5918] usb 1-1: no configurations [ 159.900347][ T5918] usb 1-1: can't read configurations, error -22 [ 159.909200][ T5918] usb usb1-port1: attempt power cycle [ 159.971369][ T5948] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 159.982295][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 159.991957][ T5948] usb 4-1: can't read configurations, error -61 [ 160.000208][ T5948] usb usb4-port1: attempt power cycle [ 160.259687][ T5918] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 160.281176][ T5947] usbhid 3-1:0.0: can't add hid device: -71 [ 160.293437][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.379978][ T5948] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 160.398684][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 160.414193][ T5948] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 160.424009][ T5947] usb 3-1: USB disconnect, device number 25 [ 160.430689][ T5918] usb 1-1: no configurations [ 160.440127][ T5918] usb 1-1: can't read configurations, error -22 [ 160.448615][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.483200][ T5948] usb 4-1: can't read configurations, error -61 [ 160.602060][ T5918] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 160.619710][ T5948] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 160.634135][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 160.643266][ T5918] usb 1-1: no configurations [ 160.648302][ T5918] usb 1-1: can't read configurations, error -22 [ 160.656233][ T5948] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 160.656906][ T5918] usb usb1-port1: unable to enumerate USB device [ 160.672115][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.679967][ T5948] usb 4-1: can't read configurations, error -61 [ 160.700222][ T5948] usb usb4-port1: unable to enumerate USB device [ 161.380458][ T7640] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 161.387023][ T7640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.397939][ T7640] vhci_hcd vhci_hcd.0: Device attached [ 161.629644][ T5918] vhci_hcd: vhci_device speed not set [ 161.710946][ T5918] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 162.470964][ T5932] vhci_hcd: vhci_device speed not set [ 162.519120][ T7656] tipc: Can't bind to reserved service type 1 [ 162.679166][ T7662] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 162.739742][ T3093] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 162.752194][ T7661] trusted_key: encrypted_key: insufficient parameters specified [ 162.869134][ T7641] vhci_hcd: connection reset by peer [ 162.975085][ T3093] usb 1-1: Using ep0 maxpacket: 32 [ 162.985942][ T13] vhci_hcd: stop threads [ 163.004670][ T13] vhci_hcd: release socket [ 163.015566][ T13] vhci_hcd: disconnect device [ 163.023906][ T3093] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 163.042345][ T3093] usb 1-1: config 0 has no interface number 0 [ 163.157651][ T3093] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 163.195750][ T3093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.210800][ T3093] usb 1-1: Product: syz [ 163.215011][ T3093] usb 1-1: Manufacturer: syz [ 163.237392][ T3093] usb 1-1: SerialNumber: syz [ 163.277740][ T3093] usb 1-1: config 0 descriptor?? [ 163.321273][ T3093] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.335076][ T7669] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 163.534411][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.565639][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.625013][ T3093] usb 1-1: qt2_attach - failed to power on unit: -71 [ 163.674702][ T3093] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 163.681976][ T30] audit: type=1326 audit(1755483842.215:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b62d8ebe9 code=0x7fc00000 [ 163.803577][ T3093] usb 1-1: USB disconnect, device number 34 [ 164.330054][ T7596] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 164.377504][ T5948] usb 2-1: USB disconnect, device number 31 [ 164.520532][ T30] audit: type=1326 audit(1755483843.055:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b62d2add9 code=0x7fc00000 [ 164.627599][ T30] audit: type=1326 audit(1755483843.055:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4b62d2ae9f code=0x7fc00000 [ 164.678494][ T30] audit: type=1326 audit(1755483843.055:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7675 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b62d8ebe9 code=0x7fc00000 [ 164.879965][ T5948] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 165.029729][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 165.037861][ T5948] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 165.047348][ T5948] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 165.061042][ T5948] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 165.069949][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.070178][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.084650][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.092598][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.095810][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.110591][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.124229][ T5948] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 165.137075][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.146000][ T5948] usb 2-1: Product: syz [ 165.150378][ T5948] usb 2-1: Manufacturer: syz [ 165.160459][ T5948] usb 2-1: SerialNumber: syz [ 165.173433][ T5948] usb 2-1: config 0 descriptor?? [ 165.185968][ T5948] hub 2-1:0.0: bad descriptor, ignoring hub [ 165.200080][ T5948] hub 2-1:0.0: probe with driver hub failed with error -5 [ 165.354687][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 165.360171][ T7703] netlink: 'syz.4.477': attribute type 2 has an invalid length. [ 165.434249][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.443632][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.451677][ T7701] bridge_slave_0: entered allmulticast mode [ 165.459756][ T7701] bridge_slave_0: entered promiscuous mode [ 165.469538][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.477618][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.485090][ T7701] bridge_slave_1: entered allmulticast mode [ 165.490668][ T5947] usb 2-1: USB disconnect, device number 32 [ 165.492113][ T7701] bridge_slave_1: entered promiscuous mode [ 165.516857][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.555917][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.608639][ T7701] team0: Port device team_slave_0 added [ 165.618127][ T7701] team0: Port device team_slave_1 added [ 165.656965][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.664342][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.698297][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.711853][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.721739][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.748474][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.903084][ T7701] hsr_slave_0: entered promiscuous mode [ 165.909438][ T7701] hsr_slave_1: entered promiscuous mode [ 165.933089][ T7701] debugfs: 'hsr0' already exists in 'hsr' [ 165.939069][ T7701] Cannot create hsr debugfs directory [ 165.979900][ T7722] binder: 7721:7722 ioctl 4018620d 0 returned -22 [ 166.009228][ T7723] loop6: detected capacity change from 0 to 63 [ 166.023360][ T7726] loop2: detected capacity change from 0 to 7 [ 166.052829][ T7723] buffer_io_error: 2 callbacks suppressed [ 166.052846][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.069226][ T7726] Dev loop2: unable to read RDB block 7 [ 166.085134][ T7726] loop2: unable to read partition table [ 166.095318][ T7726] loop2: partition table beyond EOD, truncated [ 166.107534][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.127083][ T7723] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.131172][ T7726] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 166.137373][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.196796][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.228245][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.262140][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 166.282446][ T5877] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.317831][ T12] bridge_slave_1: left allmulticast mode [ 166.343046][ T12] bridge_slave_1: left promiscuous mode [ 166.348740][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.403098][ T12] bridge_slave_0: left allmulticast mode [ 166.419019][ T12] bridge_slave_0: left promiscuous mode [ 166.437497][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.669654][ T5948] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 166.812435][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.839134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.861466][ T5918] vhci_hcd: vhci_device speed not set [ 167.179688][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 167.211417][ T5860] Bluetooth: hci2: command tx timeout [ 167.217158][ T5948] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 167.239762][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.240288][ T12] bond0 (unregistering): Released all slaves [ 167.249099][ T5948] usb 5-1: config 0 descriptor?? [ 167.261192][ T5948] gspca_main: sunplus-2.14.0 probing 041e:400b [ 167.317355][ T12] bond1 (unregistering): Released all slaves [ 167.475686][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.490'. [ 167.523249][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.490'. [ 167.863233][ T7764] FAULT_INJECTION: forcing a failure. [ 167.863233][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.920896][ T12] hsr_slave_0: left promiscuous mode [ 167.945693][ T12] hsr_slave_1: left promiscuous mode [ 167.961640][ T7764] CPU: 1 UID: 0 PID: 7764 Comm: syz.0.494 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 167.961668][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.961680][ T7764] Call Trace: [ 167.961687][ T7764] [ 167.961695][ T7764] dump_stack_lvl+0x189/0x250 [ 167.961723][ T7764] ? __pfx____ratelimit+0x10/0x10 [ 167.961749][ T7764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.961770][ T7764] ? __pfx__printk+0x10/0x10 [ 167.961794][ T7764] ? __might_fault+0xb0/0x130 [ 167.961820][ T7764] ? rcu_is_watching+0x15/0xb0 [ 167.961841][ T7764] should_fail_ex+0x414/0x560 [ 167.961867][ T7764] _copy_from_iter+0x1db/0x16f0 [ 167.961887][ T7764] ? rcu_is_watching+0x15/0xb0 [ 167.961905][ T7764] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 167.961931][ T7764] ? __pfx__copy_from_iter+0x10/0x10 [ 167.961949][ T7764] ? __build_skb_around+0x257/0x3e0 [ 167.961978][ T7764] ? netlink_sendmsg+0x642/0xb30 [ 167.962007][ T7764] ? skb_put+0x11b/0x210 [ 167.962025][ T7764] netlink_sendmsg+0x6b2/0xb30 [ 167.962113][ T7764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.962143][ T7764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.962162][ T7764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.962184][ T7764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.962209][ T7764] __sock_sendmsg+0x219/0x270 [ 167.962234][ T7764] ____sys_sendmsg+0x505/0x830 [ 167.962254][ T7764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.962277][ T7764] ? import_iovec+0x74/0xa0 [ 167.962299][ T7764] ___sys_sendmsg+0x21f/0x2a0 [ 167.962319][ T7764] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.962350][ T7764] ? __fget_files+0x2a/0x420 [ 167.962366][ T7764] ? __fget_files+0x3a0/0x420 [ 167.962385][ T7764] __x64_sys_sendmsg+0x19b/0x260 [ 167.962405][ T7764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.962428][ T7764] ? __pfx_ksys_write+0x10/0x10 [ 167.962451][ T7764] ? rcu_is_watching+0x15/0xb0 [ 167.962471][ T7764] ? rcu_is_watching+0x15/0xb0 [ 167.962491][ T7764] do_syscall_64+0xfa/0x3b0 [ 167.962519][ T7764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.962538][ T7764] ? clear_bhb_loop+0x60/0xb0 [ 167.962558][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.962576][ T7764] RIP: 0033:0x7ffb3158ebe9 [ 167.962594][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.962612][ T7764] RSP: 002b:00007ffb32313038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.962633][ T7764] RAX: ffffffffffffffda RBX: 00007ffb317b5fa0 RCX: 00007ffb3158ebe9 [ 167.962647][ T7764] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000004 [ 167.962661][ T7764] RBP: 00007ffb32313090 R08: 0000000000000000 R09: 0000000000000000 [ 167.962673][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.962685][ T7764] R13: 00007ffb317b6038 R14: 00007ffb317b5fa0 R15: 00007ffb318dfa28 [ 167.962705][ T7764] [ 168.251109][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.263836][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.411860][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.525093][ T5948] gspca_sunplus: reg_w_riv err -71 [ 168.535130][ T5948] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 168.552601][ T5948] usb 5-1: USB disconnect, device number 31 [ 168.589978][ T7779] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 168.596560][ T7779] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 168.615393][ T7779] vhci_hcd vhci_hcd.0: Device attached [ 168.655847][ T7780] vhci_hcd: connection closed [ 168.656124][ T59] vhci_hcd: stop threads [ 168.674266][ T59] vhci_hcd: release socket [ 168.683657][ T59] vhci_hcd: disconnect device [ 168.794171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.807301][ T12] team0 (unregistering): Port device team_slave_0 removed [ 169.006152][ T7701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.092372][ T7701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.115459][ T7701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.156399][ T7701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.280243][ T5860] Bluetooth: hci2: command tx timeout [ 169.301861][ T7796] binder: 7795:7796 ioctl 4018620d 0 returned -22 [ 169.441119][ T7788] block device autoloading is deprecated and will be removed. [ 169.464989][ T7788] syz.4.497: attempt to access beyond end of device [ 169.464989][ T7788] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 169.467663][ T7814] fuse: Unknown parameter '0x0000000000000003' [ 169.584674][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.633474][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.692706][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.699869][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.743139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.750305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.808864][ T5947] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 169.820259][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.501'. [ 169.875611][ T7826] loop3: detected capacity change from 0 to 1 [ 169.894342][ T7826] Dev loop3: unable to read RDB block 1 [ 170.091736][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 170.101416][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.111672][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.124899][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.147287][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.171972][ T7826] loop3: AHDI p1 [ 170.177860][ T5947] usb 5-1: Product: syz [ 170.189769][ T5947] usb 5-1: Manufacturer: 飚隼业쐛ꤚ龊먩뢎ƞ建귺ﯜ袋ᘓ麇꺮鋵襉㼬↰铋쓳臯혣ᡋ㊑⻰㧴㍏鐚ᇬ嫩諡鍆逸꧉驟ᒲ쮽懚읦䇘㩮坴⶝貵벧䣠謞泟㣋㖏눥逋᪃룍裷纤ʅ֍㤢跷ῶ嫭탏ᒠ [ 170.212379][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.219794][ T7826] loop3: partition table partially beyond EOD, truncated [ 170.297952][ T5947] usb 5-1: SerialNumber: syz [ 170.366823][ T7701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.403174][ T7701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.450484][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.728814][ T7701] veth0_vlan: entered promiscuous mode [ 170.906386][ T7701] veth1_vlan: entered promiscuous mode [ 171.102428][ T7701] veth0_macvtap: entered promiscuous mode [ 171.119650][ T5932] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 171.130698][ T7701] veth1_macvtap: entered promiscuous mode [ 171.154923][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.206398][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.223206][ T999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.349910][ T5860] Bluetooth: hci2: command tx timeout [ 171.489072][ T5932] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 171.510033][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.522909][ T999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.612563][ T5932] usb 2-1: config 0 descriptor?? [ 171.622767][ T999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.728905][ T999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.850580][ T5932] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 171.882925][ T5932] [drm:udl_init] *ERROR* Selecting channel failed [ 171.924473][ T7828] ALSA: mixer_oss: invalid OSS volume '' [ 172.074604][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.105632][ T5932] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 172.112429][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.131921][ T5947] usb 5-1: 0:2 : does not exist [ 172.144395][ T7839] FAULT_INJECTION: forcing a failure. [ 172.144395][ T7839] name failslab, interval 1, probability 0, space 0, times 1 [ 172.166835][ T5932] [drm] Initialized udl on minor 2 [ 172.172543][ T5947] usb 5-1: USB disconnect, device number 32 [ 172.178540][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.4.505 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 172.178566][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.178578][ T7839] Call Trace: [ 172.178585][ T7839] [ 172.178593][ T7839] dump_stack_lvl+0x189/0x250 [ 172.178619][ T7839] ? __pfx____ratelimit+0x10/0x10 [ 172.178644][ T7839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.178666][ T7839] ? __pfx__printk+0x10/0x10 [ 172.178693][ T7839] should_fail_ex+0x414/0x560 [ 172.178727][ T7839] should_failslab+0xa8/0x100 [ 172.178754][ T7839] kmem_cache_alloc_noprof+0x73/0x3c0 [ 172.178779][ T7839] ? skb_clone+0x212/0x3a0 [ 172.178799][ T7839] skb_clone+0x212/0x3a0 [ 172.178820][ T7839] __netlink_deliver_tap+0x404/0x850 [ 172.178850][ T7839] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.178872][ T7839] netlink_deliver_tap+0x19c/0x1b0 [ 172.178896][ T7839] netlink_unicast+0x7fa/0x9e0 [ 172.178920][ T7839] ? __pfx_netlink_unicast+0x10/0x10 [ 172.178943][ T7839] ? netlink_sendmsg+0x642/0xb30 [ 172.178968][ T7839] ? skb_put+0x11b/0x210 [ 172.178985][ T7839] netlink_sendmsg+0x805/0xb30 [ 172.179014][ T7839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.179040][ T7839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.179058][ T7839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.179079][ T7839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.179104][ T7839] __sock_sendmsg+0x219/0x270 [ 172.179129][ T7839] ____sys_sendmsg+0x505/0x830 [ 172.179148][ T7839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.179169][ T7839] ? import_iovec+0x74/0xa0 [ 172.179190][ T7839] ___sys_sendmsg+0x21f/0x2a0 [ 172.179209][ T7839] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.179240][ T7839] ? __fget_files+0x2a/0x420 [ 172.179255][ T7839] ? __fget_files+0x3a0/0x420 [ 172.179273][ T7839] __x64_sys_sendmsg+0x19b/0x260 [ 172.179293][ T7839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.179314][ T7839] ? __pfx_ksys_write+0x10/0x10 [ 172.179335][ T7839] ? rcu_is_watching+0x15/0xb0 [ 172.179355][ T7839] ? rcu_is_watching+0x15/0xb0 [ 172.179373][ T7839] do_syscall_64+0xfa/0x3b0 [ 172.179399][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.179418][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 172.179438][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.179456][ T7839] RIP: 0033:0x7f4b62d8ebe9 [ 172.179472][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.179489][ T7839] RSP: 002b:00007f4b63c5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.179510][ T7839] RAX: ffffffffffffffda RBX: 00007f4b62fb5fa0 RCX: 00007f4b62d8ebe9 [ 172.179525][ T7839] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000004 [ 172.179538][ T7839] RBP: 00007f4b63c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 172.179550][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.179561][ T7839] R13: 00007f4b62fb6038 R14: 00007f4b62fb5fa0 R15: 00007f4b630dfa28 [ 172.179584][ T7839] [ 172.469270][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.495267][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.514865][ T5932] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 172.522884][ T5932] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 172.534980][ T5987] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 172.546084][ T5987] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 172.554145][ T5987] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 172.561378][ T5932] usb 2-1: USB disconnect, device number 33 [ 172.599343][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.851174][ T5235] Dev loop3: unable to read RDB block 1 [ 172.865742][ T5235] loop3: AHDI p1 [ 172.880354][ T5235] loop3: partition table partially beyond EOD, truncated [ 173.031146][ T5948] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 173.049790][ T982] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 173.214301][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 173.259650][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 173.266162][ T5948] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 173.275518][ T5948] usb 5-1: config 0 has no interface number 0 [ 173.282271][ T5948] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.282386][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.314920][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.339070][ T5948] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 173.349208][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.358801][ T5948] usb 5-1: Product: syz [ 173.364401][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.378578][ T5948] usb 5-1: Manufacturer: syz [ 173.387510][ T5948] usb 5-1: SerialNumber: syz [ 173.392387][ T982] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 173.404957][ T5948] usb 5-1: config 0 descriptor?? [ 173.412545][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.422465][ T5948] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 173.433179][ T5860] Bluetooth: hci2: command tx timeout [ 173.444202][ T5948] em28xx 5-1:0.132: Video interface 132 found: [ 173.451622][ T982] usb 2-1: config 0 descriptor?? [ 173.459721][ T5947] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 173.663808][ T5947] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 173.720940][ T5947] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 173.751641][ T5947] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.764297][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.798588][ T5947] usb 3-1: Product: ␊ [ 173.803239][ T5947] usb 3-1: Manufacturer: ֢븁̤뜡﴾뚀䉦缍ꊔኊ圩쿋輅銘␳靦쁥ᣩꠜ諙㺄뭢盢縙仜ᰩ纓㌰ए꽱噯ᢞա㭗晳⁸踆⍼ᓳꪄ說벇㡂ꭁÈ쟪綀煱莰臆揧锜礟踢咑飳东潍쒅鶎ꔏ쪖퐨ی윜穫䞒⇄휶靄ẏ [ 173.829076][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.843913][ T5947] usb 3-1: SerialNumber: 晈허⾃驕⡈촕笛뭂启⬼﫧䵔꾓풄ᬜ坭쟠䙤叶⿩꾚侬ּ陬暍쟄䇻놜ࣝ趤環쒘愸圍㸗飩贒จ갺撚龭㽄꥗桰໑鑚ጨᵆỄ磂謾⁷뻰뗫짪愓 [ 173.864611][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.878758][ T5948] em28xx 5-1:0.132: chip ID is em2840 [ 174.114566][ T982] usbhid 2-1:0.0: can't add hid device: -71 [ 174.160473][ T982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.176237][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.186698][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.204470][ T5947] cdc_ncm 3-1:1.0: bind() failure [ 174.212746][ T5947] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 174.225121][ T5947] cdc_ncm 3-1:1.1: bind() failure [ 174.242165][ T982] usb 2-1: USB disconnect, device number 34 [ 174.263449][ T5947] usb 3-1: USB disconnect, device number 26 [ 174.334807][ T7867] loop6: detected capacity change from 0 to 63 [ 174.344833][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.359854][ T7867] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.367940][ T7867] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.377774][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.386354][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.395706][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.404507][ T6019] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.528123][ T7871] netlink: 64 bytes leftover after parsing attributes in process `syz.0.510'. [ 174.689714][ T5946] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 174.883150][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 174.896488][ T5946] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.924985][ T5946] usb 4-1: config 179 has no interface number 0 [ 174.956308][ T5946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 175.016482][ T5946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 175.063635][ T5946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.121226][ T5946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.187996][ T5946] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.225730][ T5946] usb 4-1: config 179 interface 65 has no altsetting 0 [ 175.244299][ T5946] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 175.271454][ T5948] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 175.284940][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.293812][ T5948] em28xx 5-1:0.132: board has no eeprom [ 175.308523][ T5946] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 175.380150][ T5948] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 175.394824][ T5948] em28xx 5-1:0.132: analog set to bulk mode. [ 175.428804][ T5948] em28xx 5-1:0.132: Registering V4L2 extension [ 175.479178][ T7896] binder: 7891:7896 ioctl c01064c2 200000000440 returned -22 [ 175.506424][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.540217][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.618099][ T5946] usb 4-1: USB disconnect, device number 31 [ 175.647709][ T5948] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 175.706134][ T5948] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 175.757934][ T5948] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 175.797150][ T5947] usb 5-1: USB disconnect, device number 33 [ 175.802874][ T5948] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 175.803725][ T5947] em28xx 5-1:0.132: Disconnecting em28xx [ 176.180904][ T7924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.234304][ T5948] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 176.279856][ T5948] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 176.296555][ T5948] em28xx 5-1:0.132: No AC97 audio processor [ 176.330415][ T5948] usb 5-1: Decoder not found [ 176.339631][ T5948] em28xx 5-1:0.132: failed to create media graph [ 176.355638][ T5948] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 176.515030][ T5918] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 176.691033][ T5948] em28xx 5-1:0.132: Remote control support is not available for this card. [ 176.739966][ T7929] ================================================================== [ 176.748068][ T7929] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 176.752504][ T5947] em28xx 5-1:0.132: Closing input extension [ 176.755495][ T7929] Read of size 8 at addr ffff888031a64740 by task v4l_id/7929 [ 176.768814][ T7929] [ 176.771171][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 176.771197][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.771210][ T7929] Call Trace: [ 176.771218][ T7929] [ 176.771225][ T7929] dump_stack_lvl+0x189/0x250 [ 176.771252][ T7929] ? rcu_is_watching+0x15/0xb0 [ 176.771271][ T7929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.771292][ T7929] ? rcu_is_watching+0x15/0xb0 [ 176.771310][ T7929] ? lock_release+0x4b/0x3e0 [ 176.771339][ T7929] ? __virt_addr_valid+0x1c8/0x5c0 [ 176.771363][ T7929] ? __virt_addr_valid+0x4a5/0x5c0 [ 176.771387][ T7929] print_report+0xca/0x240 [ 176.771405][ T7929] ? v4l2_fh_open+0xc7/0x430 [ 176.771431][ T7929] kasan_report+0x118/0x150 [ 176.771459][ T7929] ? v4l2_fh_open+0xc7/0x430 [ 176.771487][ T7929] v4l2_fh_open+0xc7/0x430 [ 176.771517][ T7929] em28xx_v4l2_open+0x157/0x9a0 [ 176.771546][ T7929] v4l2_open+0x20c/0x360 [ 176.771576][ T7929] chrdev_open+0x4c9/0x5e0 [ 176.771606][ T7929] ? __pfx_chrdev_open+0x10/0x10 [ 176.771633][ T7929] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 176.771661][ T7929] ? __pfx_chrdev_open+0x10/0x10 [ 176.771688][ T7929] do_dentry_open+0x950/0x13f0 [ 176.771713][ T7929] vfs_open+0x3b/0x340 [ 176.771731][ T7929] ? path_openat+0x2ecd/0x3830 [ 176.771754][ T7929] path_openat+0x2ee5/0x3830 [ 176.771776][ T7929] ? arch_stack_walk+0xfc/0x150 [ 176.771806][ T7929] ? stack_depot_save_flags+0x40/0x860 [ 176.771838][ T7929] ? __pfx_path_openat+0x10/0x10 [ 176.771859][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.771887][ T7929] do_filp_open+0x1fa/0x410 [ 176.771911][ T7929] ? __pfx_do_filp_open+0x10/0x10 [ 176.771943][ T7929] ? _raw_spin_unlock+0x28/0x50 [ 176.771965][ T7929] ? alloc_fd+0x64c/0x6c0 [ 176.771997][ T7929] do_sys_openat2+0x121/0x1c0 [ 176.772018][ T7929] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.772038][ T7929] ? lock_release+0x4b/0x3e0 [ 176.772067][ T7929] ? do_user_addr_fault+0xc8a/0x1390 [ 176.772097][ T7929] __x64_sys_openat+0x138/0x170 [ 176.772129][ T7929] do_syscall_64+0xfa/0x3b0 [ 176.772156][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.772176][ T7929] ? clear_bhb_loop+0x60/0xb0 [ 176.772197][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.772217][ T7929] RIP: 0033:0x7ff7fd6a7407 [ 176.772235][ T7929] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 176.772255][ T7929] RSP: 002b:00007fff77867940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 176.772276][ T7929] RAX: ffffffffffffffda RBX: 00007ff7fdd7e880 RCX: 00007ff7fd6a7407 [ 176.772292][ T7929] RDX: 0000000000000000 RSI: 00007fff77868f1b RDI: ffffffffffffff9c [ 176.772306][ T7929] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 176.772315][ T7929] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 176.772325][ T7929] R13: 00007fff77867b90 R14: 00007ff7fdee5000 R15: 000055adf2f514d8 [ 176.772342][ T7929] [ 176.772349][ T7929] [ 177.066928][ T7929] Allocated by task 5948: [ 177.071243][ T7929] kasan_save_track+0x3e/0x80 [ 177.075915][ T7929] __kasan_kmalloc+0x93/0xb0 [ 177.080496][ T7929] __kmalloc_cache_noprof+0x230/0x3d0 [ 177.085902][ T7929] em28xx_v4l2_init+0x10b/0x2e70 [ 177.090831][ T7929] em28xx_init_extension+0x11d/0x1c0 [ 177.096104][ T7929] process_scheduled_works+0xade/0x17b0 [ 177.101635][ T7929] worker_thread+0x8a0/0xda0 [ 177.106209][ T7929] kthread+0x70e/0x8a0 [ 177.110265][ T7929] ret_from_fork+0x3f9/0x770 [ 177.114839][ T7929] ret_from_fork_asm+0x1a/0x30 [ 177.119597][ T7929] [ 177.121910][ T7929] Freed by task 5948: [ 177.125871][ T7929] kasan_save_track+0x3e/0x80 [ 177.130549][ T7929] kasan_save_free_info+0x46/0x50 [ 177.135559][ T7929] __kasan_slab_free+0x5b/0x80 [ 177.140313][ T7929] kfree+0x18e/0x440 [ 177.144201][ T7929] em28xx_v4l2_init+0x1683/0x2e70 [ 177.149222][ T7929] em28xx_init_extension+0x11d/0x1c0 [ 177.154497][ T7929] process_scheduled_works+0xade/0x17b0 [ 177.160028][ T7929] worker_thread+0x8a0/0xda0 [ 177.164605][ T7929] kthread+0x70e/0x8a0 [ 177.168659][ T7929] ret_from_fork+0x3f9/0x770 [ 177.173232][ T7929] ret_from_fork_asm+0x1a/0x30 [ 177.177984][ T7929] [ 177.180290][ T7929] The buggy address belongs to the object at ffff888031a64000 [ 177.180290][ T7929] which belongs to the cache kmalloc-8k of size 8192 [ 177.194326][ T7929] The buggy address is located 1856 bytes inside of [ 177.194326][ T7929] freed 8192-byte region [ffff888031a64000, ffff888031a66000) [ 177.208284][ T7929] [ 177.210591][ T7929] The buggy address belongs to the physical page: [ 177.216998][ T7929] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31a60 [ 177.225750][ T7929] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.234236][ T7929] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 177.241778][ T7929] page_type: f5(slab) [ 177.245745][ T7929] raw: 00fff00000000040 ffff88801a442280 ffffea0000cff600 dead000000000004 [ 177.254311][ T7929] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 177.262885][ T7929] head: 00fff00000000040 ffff88801a442280 ffffea0000cff600 dead000000000004 [ 177.271543][ T7929] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 177.280197][ T7929] head: 00fff00000000003 ffffea0000c69801 00000000ffffffff 00000000ffffffff [ 177.288872][ T7929] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 177.297520][ T7929] page dumped because: kasan: bad access detected [ 177.303924][ T7929] page_owner tracks the page as allocated [ 177.309620][ T7929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5533, tgid 5533 (dhcpcd), ts 33907870012, free_ts 33866862056 [ 177.329682][ T7929] post_alloc_hook+0x240/0x2a0 [ 177.334446][ T7929] get_page_from_freelist+0x21e4/0x22c0 [ 177.339981][ T7929] __alloc_frozen_pages_noprof+0x181/0x370 [ 177.345773][ T7929] alloc_pages_mpol+0x232/0x4a0 [ 177.350624][ T7929] allocate_slab+0x8a/0x370 [ 177.355114][ T7929] ___slab_alloc+0xbeb/0x1410 [ 177.359784][ T7929] __kmalloc_cache_noprof+0x296/0x3d0 [ 177.365148][ T7929] tomoyo_init_log+0x111f/0x1f70 [ 177.370092][ T7929] tomoyo_supervisor+0x340/0x1480 [ 177.375100][ T7929] tomoyo_env_perm+0x149/0x1e0 [ 177.379850][ T7929] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 177.385473][ T7929] tomoyo_bprm_check_security+0x11c/0x180 [ 177.391178][ T7929] security_bprm_check+0x89/0x270 [ 177.396197][ T7929] bprm_execve+0x8ee/0x1450 [ 177.400689][ T7929] do_execveat_common+0x510/0x6a0 [ 177.405701][ T7929] __x64_sys_execve+0x94/0xb0 [ 177.410369][ T7929] page last free pid 5529 tgid 5529 stack trace: [ 177.416675][ T7929] __free_frozen_pages+0xbc4/0xd30 [ 177.421777][ T7929] __slab_free+0x303/0x3c0 [ 177.426179][ T7929] qlist_free_all+0x97/0x140 [ 177.430767][ T7929] kasan_quarantine_reduce+0x148/0x160 [ 177.436220][ T7929] __kasan_slab_alloc+0x22/0x80 [ 177.441059][ T7929] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 177.446944][ T7929] __alloc_skb+0x112/0x2d0 [ 177.451352][ T7929] netlink_sendmsg+0x5c6/0xb30 [ 177.456108][ T7929] __sock_sendmsg+0x219/0x270 [ 177.460776][ T7929] ____sys_sendmsg+0x505/0x830 [ 177.465522][ T7929] ___sys_sendmsg+0x21f/0x2a0 [ 177.470182][ T7929] __x64_sys_sendmsg+0x19b/0x260 [ 177.475107][ T7929] do_syscall_64+0xfa/0x3b0 [ 177.479603][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.485481][ T7929] [ 177.487789][ T7929] Memory state around the buggy address: [ 177.493399][ T7929] ffff888031a64600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.501446][ T7929] ffff888031a64680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.509489][ T7929] >ffff888031a64700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.517531][ T7929] ^ [ 177.523664][ T7929] ffff888031a64780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.531711][ T7929] ffff888031a64800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.539757][ T7929] ================================================================== [ 177.630217][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 177.721668][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.732790][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.759461][ T5918] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 177.848272][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.920608][ T5918] usb 4-1: config 0 descriptor?? [ 178.106418][ T7929] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.113639][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 178.125276][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.135334][ T7929] Call Trace: [ 178.138600][ T7929] [ 178.141515][ T7929] dump_stack_lvl+0x99/0x250 [ 178.146093][ T7929] ? __asan_memcpy+0x40/0x70 [ 178.150667][ T7929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.155848][ T7929] ? __pfx__printk+0x10/0x10 [ 178.160425][ T7929] vpanic+0x281/0x750 [ 178.164392][ T7929] ? preempt_schedule+0xae/0xc0 [ 178.169223][ T7929] ? __pfx_vpanic+0x10/0x10 [ 178.173707][ T7929] ? preempt_schedule_common+0x83/0xd0 [ 178.179166][ T7929] ? preempt_schedule+0xae/0xc0 [ 178.184001][ T7929] ? __pfx_preempt_schedule+0x10/0x10 [ 178.189357][ T7929] panic+0xb9/0xc0 [ 178.193060][ T7929] ? __pfx_panic+0x10/0x10 [ 178.197455][ T7929] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 178.203341][ T7929] ? v4l2_fh_open+0xc7/0x430 [ 178.207945][ T7929] check_panic_on_warn+0x89/0xb0 [ 178.212891][ T7929] ? v4l2_fh_open+0xc7/0x430 [ 178.217481][ T7929] end_report+0x78/0x160 [ 178.221717][ T7929] kasan_report+0x129/0x150 [ 178.226216][ T7929] ? v4l2_fh_open+0xc7/0x430 [ 178.230805][ T7929] v4l2_fh_open+0xc7/0x430 [ 178.235220][ T7929] em28xx_v4l2_open+0x157/0x9a0 [ 178.240074][ T7929] v4l2_open+0x20c/0x360 [ 178.244312][ T7929] chrdev_open+0x4c9/0x5e0 [ 178.248727][ T7929] ? __pfx_chrdev_open+0x10/0x10 [ 178.253666][ T7929] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 178.259996][ T7929] ? __pfx_chrdev_open+0x10/0x10 [ 178.264927][ T7929] do_dentry_open+0x950/0x13f0 [ 178.269683][ T7929] vfs_open+0x3b/0x340 [ 178.273740][ T7929] ? path_openat+0x2ecd/0x3830 [ 178.278492][ T7929] path_openat+0x2ee5/0x3830 [ 178.283069][ T7929] ? arch_stack_walk+0xfc/0x150 [ 178.287913][ T7929] ? stack_depot_save_flags+0x40/0x860 [ 178.293367][ T7929] ? __pfx_path_openat+0x10/0x10 [ 178.298292][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.304351][ T7929] do_filp_open+0x1fa/0x410 [ 178.308844][ T7929] ? __pfx_do_filp_open+0x10/0x10 [ 178.313865][ T7929] ? _raw_spin_unlock+0x28/0x50 [ 178.318709][ T7929] ? alloc_fd+0x64c/0x6c0 [ 178.323036][ T7929] do_sys_openat2+0x121/0x1c0 [ 178.327701][ T7929] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.332883][ T7929] ? lock_release+0x4b/0x3e0 [ 178.337471][ T7929] ? do_user_addr_fault+0xc8a/0x1390 [ 178.342751][ T7929] __x64_sys_openat+0x138/0x170 [ 178.347592][ T7929] do_syscall_64+0xfa/0x3b0 [ 178.352098][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.358156][ T7929] ? clear_bhb_loop+0x60/0xb0 [ 178.362821][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.368701][ T7929] RIP: 0033:0x7ff7fd6a7407 [ 178.373104][ T7929] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 178.392700][ T7929] RSP: 002b:00007fff77867940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 178.401110][ T7929] RAX: ffffffffffffffda RBX: 00007ff7fdd7e880 RCX: 00007ff7fd6a7407 [ 178.409070][ T7929] RDX: 0000000000000000 RSI: 00007fff77868f1b RDI: ffffffffffffff9c [ 178.417028][ T7929] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 178.424998][ T7929] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 178.432958][ T7929] R13: 00007fff77867b90 R14: 00007ff7fdee5000 R15: 000055adf2f514d8 [ 178.440925][ T7929] [ 178.444203][ T7929] Kernel Offset: disabled [ 178.448509][ T7929] Rebooting in 86400 seconds..