last executing test programs: 9.091216017s ago: executing program 4 (id=544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000001480)={0x1, @win={{0x4, 0x3, 0x7, 0x3}, 0x6, 0xdc7, &(0x7f00000013c0)={{0xe312, 0x6, 0x0, 0x17}, &(0x7f0000001300)={{0x9, 0x8, 0x6, 0x7}, &(0x7f00000012c0)={{0xd3, 0x0, 0x1, 0x4}}}}, 0xc, &(0x7f0000001400)="419357aa90c8c6a14fa29fdd415dfe313ae4db1b888bd1ae58377c11e97733ee6dbc84eb3682426a3b5e154356bc3232beed5b35210f1283eca262cd8ea8a2fd31ad2392580d8d23002173eb8ba628884cde59ac01cecd361a2b4560a1b4c165"}}) r5 = socket(0x2, 0x80805, 0x0) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB="02140d02040000002abd7000fddbdf2501000700000000000100096139e0132f"], 0x20}}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r7, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000000700", @ANYRES32=r10], 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 9.076320654s ago: executing program 2 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x40, 0x1, 0x2, "d3fa5b6eb20a0000010024164c67467f0000000100", 0x35303553}) splice(r2, 0x0, r4, 0x0, 0x7ffff000, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff0500030003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) r11 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(r11) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20000000) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x0) fallocate(r12, 0x0, 0x1000000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x2, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x1, 0x84) 8.244040805s ago: executing program 1 (id=550): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet(0x2, 0x3, 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) (async) writev(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sync() (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000380)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000"], 0x0) (async) syz_open_dev$midi(0x0, 0x500, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000300), 0x0}, 0x20) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 6.966733944s ago: executing program 1 (id=552): syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x109000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x7, {0x400e802, 0x8001, 0x400, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES8=r2, @ANYRES64=r0], 0x114}, 0x1, 0x0, 0x0, 0x4004805}, 0xc0a0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="459374c96ee3", 0x0, 0x0, 0x10000, 0x0, 0x0}) getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r9, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r10, 0x8917, 0x0) syz_open_dev$usbmon(&(0x7f0000000240), 0x3, 0xc804355a3de262f6) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) syz_open_dev$mouse(&(0x7f00000001c0), 0xfffffffffffffff8, 0x101) 6.054477133s ago: executing program 1 (id=554): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xe0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x0, 0x0, &(0x7f0000000100)={0xe9, 0xffffffffffffffff, 0x3, 0x7fff}) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xf000000, 0xff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffffe}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xa0, 0xc}) 5.704571389s ago: executing program 2 (id=556): fsopen(&(0x7f0000000040)='udf\x00', 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e9", 0xa3, 0x840, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x480000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000640)=0x8, 0x4) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED) (async) io_uring_enter(r6, 0x2d3e, 0x0, 0x4, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 5.595959152s ago: executing program 4 (id=557): socket$key(0xf, 0x3, 0x2) timer_create(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x4a880, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f0000000400)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="c9f9a45eafd2b04ef7", 0x9}, {&(0x7f0000000200)="d4631e44ed4d140329801ea17b1a343056d0174d4fcbfa010c3b52f98250ed889a2f35e3", 0x24}, {&(0x7f0000001100)="0073e49aca662298aa30d478040d8568f91fd474dcc6cc38ae436ef0efde50901cc41b4c73c63320e5d1e72ce0f18dac16d0d75b20d0496c4faebd985ee6f9b83b6a5e1901f156bfe76a84c9ad4bfb22cde9ec0331c79f9dfd61bbad32351889e6f689c14ba4d25cb9adeb0364c39e2abead29d8fae7f0c3b2b0b1cb90c595642f57026f6893f29d97c54444486fdf820480e548d6803f9ecc6022a099daff91884006a1e2583d87bdd10c0b89c1c0fbf237bbdc5f3dd851b75750549c85ee0598798e061aa5192c173675fe01212b02379bc122d2218ae9e3cef0986b0f90fe53151cdf0b71730f6905ad83e91e63673379d789585d2281adb683b25bf1bb39edcb3c08b84206184b394666c4986ca4164a6741a0085b93cc857e3cd0d31643fae379a11cb1b57882c8e77c0777b71d33f75252f3c4e73bf4c04df6ef10a33b4254465b493d5c67494d49af829229cf90c32983d8623013d63197479ed9002273447341f7f80666f0f92af94d871125832e0e4acc6142df33361a13b6a180d3523e2bc0deb6ffac9e908d03fbeee14915c072d4fec8e152d0758c56408e12c4e82e90db955783b136102ffe42622822a37c01a2379ee77bcba1cb20bcacdb39c1eb1b0feeeba08bc8d5bbd767e055df65c5885658188dbe073b470eea35d7de8adf348e3a54cdfaaac38b38a600a3236105b2ae3659208fada7b4440fde397d65a6435a91c82990e69a82c49cb269baa11313e99c467ed1c5a8cce07cf8c5ec8d4dcc59bb1e0e630b00238706c97775f2cc93c7983443d94ce6e62c6a548bba47b316f4ce0df81791c4d89b45bb0aa5487da63fde992ae40279832d41eec92943745ef3eafafadb44abaa9c542442fa4248b84f08c330b4aa5fea19d89e182dea9f7a8210ff8128b11b62fb04444e96a32a994c9127234f5b5c29ebe9f4a71db473d974c55587c8bc543e39a13cb0e0aed431c2a335f58012f2be61345beb0f192d3e4c4609fba128b6a530e35ad69ae6ebc316f7deaf523b7aa14c9dfc4584376735f0ea4ab525844c7f8f7ecab8db5f70280b0e79f3995acc642412a6912b6468a6950674e0dd61b9b23d06cfd92cb52182a2976a19e0e736ef1f498ab8013430192e8eb67296073ba7cd02a8fafd884e6f9e7b4607f132fb988f9697c7cb8a0eac9f390c43addff969d04acdbcbf341e3d6f52f08fa5cd1577348d01f4f77185865f82e4b2761d48df47c5ae92df74aab6fffc468ec761c2e87a6f6b673cddbbe9d501bd3bb27c92dcf2908fbb4b253df16d46f73b75e9ff12510ba88090eaea86e389ed8f6c9ca50bac7e13c437e0ddf7b1d6f6685ef9549bdd13a25e2424221628baa99ce67a3cec0be945806f3d27780aad89e92fd743c95cd2642e28d912aca1ccf78b4ee3c97d9c3b7f465a44a93b34b8cb9d859a10a3c01d918fa009f04cbd63922a2aaa8acba7873ac935a7650add33eeefac7e2dd96fe9e1089b17d131708d37f5e2b6a30e56009e691dc7bc8671461b757ad14e4a9203d98685ddbddda9f34940b2b4bd343f8f39bb28d03dbde2f9599bf055933e78ae834b22657778cf377b81754050d913e7f6bc960a846e22a500b5781ee9295c408b9b1f2c4004711d0baa99c78449ef43e6e05a08718382094596879863be46461c4a03ff3c31bf7b3e0fcc3ac29a580c154dc80e912a647db3d291e51fd24d9a473d08ab3fd0e2acd1d1ac0aa3f0ef01569ca16cdd711eeceb5e46456456c5a901736b0eb8a988092fb19a4a3a3ecea020fbd253725e3dc9ef46e6aa0db56791e29cface1d1e018940945ad9d84a45fcce713e753bb3eff258123d1d69ebff02734ae262e5b251e72f8f1762245dbdcac07cef86dbe7284f3d8a315d57efab534523a085fdac71bcfb41f9c751ddc85dbbb5e6f505c8eb23e7e29b7e19e246e520651f9077d2c357d936fdaa08d1444887b00143e71a1039515c69ab2f70239e9ff8f0c624b2fcd91896bcb3c6b72b043b89236e9cdf7fb825fcdc955f14e0860bb26b69b510bc8e4cf376800133091403db7f213cab83b00be4dce1b1f62859010cbe4e94f1ac492f29efdac56798fb2d26b1b2613fcd293b98326ef31e5f5b69927a5c56b273dc279ddad92157e654654d99a8ff26ef8045a59b9a5c8c497620b0e6bdd956e72a595ce38cb6b9337a56197dd7c5cff4f7f29f8dae75b65de75bf296608b646e998f3e8d790974d44583e28809daef60dbd05e675b2c802f21f8e95501327db31fda8b6dfbdaf42b2b99a0674ac032643d5981dc096a11fb59ec5bbfd641c32b7d4d118d254ac06981ae550c859b5506b14686b52a8477ba255123c8d27558a8482f34120dba8670c208bdbfac4c96f9184f92670bfd58ba058bc066e04c46d2c8f9d7b19ac99ea31a423482a9269709152a3d4809bf7ae18c602540f79a0be3ff3180252dbac5dd1f15971743bcb796adfea748d90321a824964d53f2b6d35cd8d3d45fb7b8e262463cc49bebdfd8bbb873ae363e97689d029f684cd5d9bfa12e8f11e05d35b4985fc4e9bf78e83dd39afcea41025e03537bb85ec5bca8a87bc6c99fa9319e64b8b383fc5f73d2aa5059f7d584f2d0ce1ed6b9eef140b363f9908d6ba8a199fa214f1dcb3cc8606f46a366c1357ab142850dc7936e8569c2bca5d1b35ab553af0dc9ca2ad0fa8931b684908b2ef6114ac3dccb90b8f238ec3c35405ee8d98741417ba240a9a3ba9da7e5d2609169fc65d9b6e5a942bc59be52f55a485ab8e8c5b575bb71b66ca93769b9ab9456ca7c0f83c47f62c5fa7ce9eee34b27e850da03c2693d61692811aa45355b9b2c559ddd637d17055d3bf5b991ae43bb5a0e912f26e3adb9bcf0d1358c82d5b06abfcb98696df8a72d50fb9c6708abe92f3871a07ca1de1e8a89815d6fac136cf391535d0e9a6c82385369948602c4ecc4076af7fe81a2691126fb75d1b65efc0e9d4ffdc02146fd59b625458677f7d2afa549b62384235296f166a3e43e352805052de27042000389151e4799a0ff494deb33e4bddc26456b34545ebaae445f62d06bb19769bc618b5c5ff7cb45c21d05386be68f46bf549993e198c70d94a7b9145ab7633a64f742db206ebd81703f5c6c5e279173574cf403efbefbac763652c4cae31ea2d17a47f82fd5b5b7cb38baa18be59132198ce8604f829b356901516cc79529138c0534de80baf274696da8e6db0ea06b3ad6b2aad1efd2e041abc658664b35b1a4149a0836a3fe855a864a335d6fb2aba17b5153e805b19146f4f2eeb2532dddc61f152495655ca12d3999ad56317c243183c5f40aff4285a90cc6c829121b94cef65bc7fa584ea48bbeb3c67fb144fce5e2e9398fe1fef9262d10460de7b9c2ed702870b008d2745015853abac641352cc07b7153f1e2968a414cacef8760753aec0113dcd024834dee90003523651a651cd55d07af51c31b460fd5078abc4934b0944df7db2955783c49530f7b078006a1bfa24a67112343a6ba0daee3355807c6d25dc6ab63cc60d1eba574d8ade9cda275d12ae6594542fa2ecbeb4ec15dc2d27e204d8cb8dc9451dad9ae0910cb5435a9ee7b279fc4d5fbd7a54cb5c585147c930b6824e42c289b64af1d1cc1f0235a80443f9f5da91ab151c643e133310e6775cd3dd7e8fdb92e44ccf174bd6b3e2f4727cfda9ab83d598e378bbaae942a8ebfbbae9bad8641041a57f74ff6c94e8be62dfd86db2354f57d7f5ee91f3ca31333e5d5f6eaaae2566682e78a8898e177f9a9ce20b5e5e043a7d998c860aeb76413e406daf4a7834f49b6a4ed0902df4b13fd89ae87827f5c8be0fef545ab18bfd3fba38d274896caec588c2b0ee09bcba2fbf0db1a5e7d7e42763680bd07848fb7ddeae407116c9192eef26bc05c9e72fa26bb8059a72bc2a156570b416a4b58ffd4c9f52b1b6347329ab17b9580b15c6560b915994c844e663590124375c29611c95c39a91004316735cddd281dd2098082c964d05a627a602e933cbe926b6b53b019f55629e1d452ddacd4144dbef6c7c550d80c51fe0b9b0c621a884970730ec7e1c14e0425e53f6a462c25e86bdc3990ab807cee31085c81a22c019adee9931cd1fb0c35a99f29dbee1194c1b8f5661bea8688309ed54518d615674fb7f79c8e0f2bc1e21f7af1fe0a15ed91317d581ee448609eb3491772c9c082d7f83b130d56d752134033220a9242f12b8e02f862dca1874e76a711fa4046eefb50c33c5203c24f6a7403b8fc3c78b5e9c7ff000bcfcc7b9253b83d817552e0fb489f86d7f7df04a796bcc3d67abc26a78720b606841ab84662731c3a246ec4ca3145a95d3be26a1289cda176b09792491681385c316e5cecb6be3e1519023630e3a466462d2d30312b4d20d40641268b35e13c7d97723a992310a03d2b6e31d61f3c16145109b4a1a3d9e4491573e6dc7f1a6189ef818623fffd8b8b200cb13a65fee8a1b58faca48a95b77a9d641d24f55f2ed3bc2fa526e6fb666dbc2242a3282dc2a4f2d283425ee2a2378d9381a67ffe1e6b68aae3fe3badb27db8b9a91720f13907ba91cea1a2cea10fc2bf89d162de68119431faa709beb380f4b17f953ec1e7cd59c64b6aa5dc29f984c8decf73496d0b73b8a82fad1cdc51c59c266d4ddbe406e5c374fee19c6fe26e7f55bf465b9d0f857f628403219cc1cbbf683f665a1b5994ac624f114ecca865324e5f95d34099385541e790cc43d7f66e9f16d9ce5f2241387fc97d48ac3181da5ed4a2decb21c687d45cf3cca478e047ab71e434b60572c28e9ee156aa52b9c0efe333859ccf29ea5538ef0a0e745b58e8a87291e3bec398928a556733586848298343e681b10585e90e1feac44bb75cf78990480f47c8125887fb38d81241d06f0199eff2137dff24814df9ee045215ddf2198dc6002cb7ae08e47b18f8a9dea214f35981e487368000aaff4f443cc35a67baf6fb390ca067a4463399a2918873378aa5dcd154e2f7e93feaf4000eec1795c70fd87c36359bc7aa9e1ae766b22e57eba6fac84f46612748f90e38a2f1574dfb5a69f4e6d892a3b7262c2e04bcebf6415fbdf8fa1bfbd8f622490cef532e9f23d226445b87bfb6ea49c87f4fab576716d9d92eefbccbd282bbca228361d5a77428b5c201cb2f6b19b6a21f3406ef32929a3a3a202b09f111fd90cfc07d8b2028dce2d8b293fddf059180be0ceea2ff29abed152d20844849937d4d5b9e790c28aa2cafde36b7155c40bfca8cdee82c6accc5a7ba03ac7b979b76038073a78f3daf04441c31a1c75b3143037738f15d0c7b17b582b2daae066f0638045a180713dbfb377333db0a96617aeda859e84fc6e9c9b768b2c74d9faca055c4d42b9b654d49cfa3d72456cce22182938f929794e57b40261934d7755c1bd2a010c94e4824adb4591de804f6e908d0f82cc2ba2c636bfe25e07f9c616aa620e0845129b7282c17bf4686a0b5201bcdd4cd23a2e991dd99fd03b76dd2c79a8e1c7618a542fae0bff163bbad6ff19d38a1d9211b0311383b42644f338cb5786edf9d45558dadf3cfe7827a1a40dda6f5020fdd21f469761b2ef37b8dab4969762cab057bcd88cd2e4eade90291f6c5fe27b9721beaf3cbf336b393abe101b89f12374fcc6120d2386949a28dd142ed2fc47057da15da7f2e2e726a91d169a69e5c60e064eeef3ada4d143d2f153ac86e812dde5ced948d01bd5d42faf55aac32499fe27897d63192cac039c28677bfe22634d5c58b5860c6cfc7597150bbe673977081ac245be6", 0x1000}, {&(0x7f0000000500)="2118528d55c4b04324bda7ca0935eada1e9203452e449452947db0279c789f8c84c5cffa0d38a953bcdbcf94fa80f9b630c68baa202abaec63eab2c10d13ce99cb620bedae01404acd034c3cc22f05528b04a67d2a4029f8261d766c051e13d4070659b9e47c2aca9386b44ba5eeeae35b713c89ea954930ae01f31aaed2a3eda966d674c9b92284121b55a7b7bdeb19806bbe5c184860fc61e644a0b6cdbe661eac618420eca5016ae2679c5bf264733ab38b6212aead509080b7f7b231c12c5270225228b28dfe5f0a0fdc0567fad25d86c39387", 0xd5}], 0x4, 0x0, 0x0, 0x40009a0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008010) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x220682, 0x0) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000b46, 0x9, 0x5eef, 0x4, 0x3}, 0x0) r5 = io_uring_setup(0x152e, &(0x7f0000000480)={0x0, 0x1ca, 0x800, 0x8000002, 0x38b}) r6 = socket$inet6(0xa, 0x800000000000002, 0x6) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f0000000240)) sendmsg(r3, 0x0, 0x50) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r7, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000140)="c50359f3d697", 0x6}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) 5.546716052s ago: executing program 2 (id=558): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000080)={0x18, r3}) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x7, 0x6, 0x1, 0x9}}, &(0x7f0000000040)=0xb0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) ptrace(0x4207, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x1, 'pimreg1\x00', {}, 0x4}) 5.062046926s ago: executing program 2 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020007b0300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000010000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140020007b0300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000010000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) 4.813711442s ago: executing program 2 (id=561): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x33, 0x4, "41f9ac76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) dup2(r1, r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x33, 0x4, "41f9ac76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$key(0xf, 0x3, 0x2) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) (async) dup2(r1, r2) (async) 4.709332878s ago: executing program 4 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x20, 0x0, 0x0, 0xfbfff00c}]}, 0x10) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_cache\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/225, 0xe1}], 0x1, 0x7, 0x3) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000100000007"], 0x12000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00002000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x0) 4.351939303s ago: executing program 1 (id=564): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x121e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xa1b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xd, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xd1, 0x1, 0xf0}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x3, 0x99, 0x10, 0x9}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0x7, 0xb, 0x5, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4b78f90a035c5e5094e7cad71ded8a95"}]}, 0x9, [{0xc5, &(0x7f0000000240)=@string={0xc5, 0x3, "0b58c27e99725beaaf778c92dfb10d922af1392a50fdda3905e2ae4af4c18d00fbad5895a226cea5c81d478d6d7e43fff7b0ba0f2fbb6cdd44ce52df6b6f077caa292050a95be2626e2cae0bc364a6bedb048b72210c71aecd9e022728cbd7c0f39ca111e8d35de53a4dde2fa68aaf8ceef8ab53ed589ae46683c40e46ab5caa05ec55b6ce9b020a0a16f7da7e48b52ae3427a444c3f16e1266adb77d13dbd90ae77068994df3ea44e17d788e3b877ec23a48fd17ed50db203b2a5c59659e19d714568"}}, {0xe7, &(0x7f0000000380)=@string={0xe7, 0x3, "d521ab8ae7e59939a9e9a9b4c75dc3b3ccf752d6cbcd55a179a105b3a56f72cb67a30d30ef709b0a17101c4d4dccad23a9e1dc2c23666a7489d989bd4186d38b4ca23205aa6ea1c57b93b1ec3c2d539f4a34bd6b368bc2ba47f0a88e652d1e6e8041499e8cfbfda804c820d6b7afffde434e7b4e55ab88542dab1142b040885c4be38b118612f08d0f71e60f3871f9808e17f51dbcf42e5db722208b974bbec54ee506515b6dd0ccfb916c3b21dd705c8a9f31b5f17712cf4028330e33daee5dc7dc5d45c87af087112f77c30d4c314cf6e14041ab2dc92f50d48751abcd58492dc036b8fc"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x52, &(0x7f00000004c0)=@string={0x52, 0x3, "ef4bfc8e490ff346ff1e0b31d9a39bec20f6359ca9251b72e1383d4b222b1f4465c7393d94f0f6c3b0c07b964e9b2af480894db6fc3617a8a4e4f4dbba1ddee4c14d147fdb0143c06f7989ca7af34d0b"}}, {0x64, &(0x7f0000000540)=@string={0x64, 0x3, "e4941785489b6684a379af3c10686b6eaf47f89b6a41f7c508179c76612ac0dcd7ca2657ccfead3baf3145d5ae69c749610f3cf0c083aac7c74fb58bb18cfca62a7b17a54ad5791853594c4898683364a8aacde42f06a388fd6d02c187a95b4adc94"}}, {0x65, &(0x7f00000005c0)=@string={0x65, 0x3, "9351451dfbd0c7a9e901dd47ac1525a8e6be2270bb11c6f1e3423eef47cca1962f3cb138826c323b4fc86c692f93bb238f4c0510d3880a545ffa72b73f0716ccc25ee0c866230ba9ad8e2c3a7e7a00a0e1c9c78418bf74e7f74f7ca1a9d7ad83e21977"}}, {0x8d, &(0x7f0000000640)=@string={0x8d, 0x3, "0d4cec6b4428267df83017c96be04928a8417d89d406d7ea1b9bf2688b59baa2f88fd64bdc74bbf7bbbc7dbf7395ca0766dce5fdb00ff5c3221e4e60d3d5ea7c2f180739e31deda6f4264d6a3cb25826ba1c33cc72fac593bc18c2925db9151767dd654c4a958efbd92e9dab4a3c5de6cbb614150f32e6d19cafcd2d31c43e653a4a3d2dfd0664487cdb24"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, &(0x7f00000007c0)={0x20, 0xe, 0x93, {0x93, 0x4, "274ab23037c178fa03a63a14ce204c42c60098e87fa1b1dc26f064a1f63c69abc4e9bdd8349383c64c92b02da7b64ea1c691de184a873a66e9bdaab0414b40336e8bab2be0f746317d8dec1d1d1eccb09461b478e4ce6b9d9608193156d340da5358e7a7f62b2a6bfe71b40ac8ab94680d117669d059399d911f07bd39dc44939b301eb0f9ed4ae21d349821d49881caa4"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f00000008c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0x8, '$\a'}, @local=@item_012={0x2, 0x2, 0x9, '|@'}, @global=@item_012={0x1, 0x1, 0x5, '-'}, @main=@item_4={0x3, 0x0, 0x2, "23c236ab"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x231}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0x17, 0x75, "7a3cadeecb8e2ed145824effae007e9d3630303047b803b68a96b45910b37af2b0378874720d0f8b9f51d0a4e8507e52921875695f31e1b0eecde6730f68bd8b1f367575b97e5e0e9b6c96682a45fa0f9aea5ffa117df231074a19c44e383eb942f5f6340775bc8c6b2a48be806e633cc8815c0a9d"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8a}, &(0x7f0000000a80)={0x20, 0x1, 0xf1, "1a7137a007e3467ae316d53f4cc5313cc268314c4397093eed181ca5857daa6ca48ae934005b7fb461e7edb00f73ad6930765ba3689f5aa439feb16d6c0e5371c79ec8a491f7e8cb7df243b2032d9f3706567bd2f756fb09b459d3a9c061dd82852a9a21c72101bcf2b877f4322e3c69b6101feaf52f6d745c5054366487df4741254f93c37eaac7fd9665b9dc06d3c712ef32294326fc6abb508e57ea4d7a8476b1502a7171d345d8acc54eef52d75a59212d4daad385fbc88fefff40207447f0e3d49f8223dd96ef4f5d9cb0bff7ac5b14ffb413444eccee2e62c6a94f800fed7b1e630636294cfee08da7276bc8eeb6"}, &(0x7f0000000b80)={0x20, 0x3, 0xfea8, 0x2}}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000000000/0x4000)=nil, 0x4000}) 4.210469545s ago: executing program 3 (id=565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4ba0b2000000", 0x0, 0x0, 0x16, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000040000000400000025bf"], 0x50) bind(r0, &(0x7f00000004c0)=@ethernet={0x6}, 0x80) close(r3) recvmsg$can_j1939(r1, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) r4 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="9399069b89fb45e15c1156cb0155390335e444bb2afba2a50664f419b5a8e159f9a79e3188b2e5f28bcf19ce3aac3402cc4c101145cdc02ee0a5bee295d7db0243c0cc2dd34e74e831e1f380fa851f02781a0308c12b59f8086f29918abc43e691f37b1abf21df6d9f1296dba36e7409166419762a87f030234543fb0ccdd8f734329fc9aa258dd6bcf466c1de6f212a8096da297d6640648b4b97c387bb2c70d8dcd93060d0cc67f89db6be5c26884f8f8e7527b4e231502e9620e188ecd00a77cad10d13521027ac0abb366cb5005817dc602f496be81fdd", 0xd9}, {&(0x7f0000000280)="83f8e1239c178ccec27d286fa5fadabe4da64be0ffca34b0dce210e650bb6efd6c0c2a8961ca0331b669a5ee825f05725dc5ca5840bba7e8f916c23929fb82e8daa34c8ba9d7fbabefc7bebfd4af46ad25473839d528a6c42c0b47808d", 0x5d}, {&(0x7f0000000300)="2cadc8a3865598c0258684848b62fbff0fbc4a75d23a7373b3c2a06c783eef0819ee8b2d4aa107f25c0297d2420bcaa11be242e7df84cfbf9da15b5e35e0b948bedaab3882037c08ffbe12c22007c315873d29eab8e351b804980dac75e71b8e0029507fefdcc711f0cd56c1e6b0d4d7c357bb1a0d4b49d01a8131e331b703534b3239ecbfea717c91f01e1ca13f0bb854a280c4d83c97c4cc15fda983f5aec6e942471a8b7c640eb1d68cd9d9a81c35fd1d97a975f6831799c752dec8564278fbf8b35b51713eeefdad88fb3c4f9fa32fa01f3bc072f1ee5f36c9e2e457", 0xde}, {&(0x7f0000000400)="89e2538c7b16210059a475f6275df49da3fcc4bd1ba7a8d5add2542d41754359588ea11f6180aa96ded7661c245168d22b364d71c749ad7f32271e261855b17f8d96dd0fd9d5fc6ef9a3fc7ecf09f05d52f2c0128f5d32edfea79e3636247f4afd3b3b8e7db558728394e62d4eaff3f4f2dc78849214c2d6c0edf368dfe959ec62406daa8410250779803e8e696815131f2cc89af3e5883c49c55e310f425f94063e4d0e886509f2f9eed0", 0xab}], 0x4, &(0x7f0000000680)=[@iv={0xd8, 0x117, 0x2, 0xbf, "3c4f51d9619b0381214262e53a18862c9ab5f6770541ea59ecb99deab68d350b6dc8b166a5e174f23b1824716ca4f0298e6f854f26e3e8652f4b7c7f149e9e834742e9c699f3d12efdb7915c302890ffaa970691800441705e75ed9f8dafafabe2fa2fecab5f8de878819eb684e0ed7ec698db4aea6925fe1d774e0800c3e9a5388d6b53115d8ca6c527218a22be75fcb5981875f8ff162421a97d2b8ab2774ae5d698b7c2cf133132ccf700b8e494aade9b970d3b4df9acbe7b4d7de34ac7"}], 0xd8, 0x44000}], 0x1, 0x4000001) 3.208263671s ago: executing program 3 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24003f00190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3.160418455s ago: executing program 3 (id=568): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010400000000000000000900000004000380300002802c00018014000300fc00000000000000000000000000002014000400fc"], 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x4a8c, 0x870, 0x3000000, 0x0, 0xdd9f80, 0x19f2, 0xdd, 0x19ef, 0x2, 0x0, 0x2800, 0x27ff, 0x2, 0xd0, 0xc, 0x30, {0x8, 0xffffffff}, 0xd1, 0x9}}) (async) r1 = socket(0x10, 0x80002, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.851118992s ago: executing program 3 (id=569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x300000, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/166, 0xa6}], 0x1}, 0x2}], 0x1, 0x20, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.679836778s ago: executing program 4 (id=570): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000100)='btrfs\x00', 0x1) r0 = socket(0x2a, 0x0, 0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2, 0xdddd}}, [0xcab6, 0xfffffffffffffff7, 0x3, 0x3, 0xbe, 0x7fff, 0x800, 0x4, 0x400, 0x3459, 0xeab, 0x1, 0x1, 0x9, 0xffffffff]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000340)=0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = eventfd(0x0) fremovexattr(r5, &(0x7f0000000400)=@known='trusted.overlay.origin\x00') r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000500)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000540)=@multiplanar_mmap={0x240, 0x4, 0x4, 0x20, 0x4, {}, {0x5, 0xc, 0x7, 0x0, 0x4, 0xd, "cca96261"}, 0x3, 0x1, {&(0x7f0000000480)=[{0xffffffff, 0x98, {0xffffffffffffffff}}, {0x80000000, 0x7, {0xc}, 0x7}]}, 0x7, 0x0, r7}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002640)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf8, 0x1f8, 0xf8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000002600), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x2, 0xe, [0x3d, 0x2, 0x40, 0xf, 0x8, 0x4, 0x14, 0x37, 0x5, 0x2f, 0x5, 0x21, 0x14, 0x2a, 0x3, 0x17], 0x0, 0x291, 0x5}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x827}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x9, 0x10, [0x23, 0x3b, 0x3c, 0x5, 0x2f, 0x1, 0x6, 0x2f, 0x26, 0x3a, 0x0, 0x2, 0xa, 0x11, 0x31, 0x3e], 0x0, 0x4, 0x8}}}, {{@ip={@loopback, @empty, 0xff000000, 0x0, 'veth0_macvtap\x00', 'veth0_to_team\x00', {0xff}, {}, 0x84, 0x2, 0x5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 0xcded, 0x3, [0x30, 0x3c, 0x3e, 0x34, 0x2a, 0x30, 0x20, 0xb, 0x20, 0xd, 0x9, 0xc, 0x2c, 0x1a, 0x3, 0x3d], 0x0, 0x8000, 0x101}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) write$9p(r4, &(0x7f0000002a00)="b9131fd45ef88c7b7c7b3918bfe506445cf4180e1e391a1823a7a323c2e34c0fb074a22f397c2dbdbd6a8fd354e0d24148e1c2df09348a34e6dac500b139c19b6d5aff3479c3a4f38f38a807c7fc05598f3fd39d9b3a0b1858abf5c9a1ce9ba73ae6fea6dc73d3e2c340e074b14c9be5d3c6c98ec9d0b4322b6fa914a49fc02036037b8b553d0c2ea062324003a5a9f43d8f317b45508a9d3d37d33b2528a6524bf40f7e9a52333e46408d", 0xab) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000002ac0)=0x2) io_setup(0xe6, &(0x7f0000002b00)) r8 = add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000002b40), &(0x7f0000002b80)={'syz', 0x3}, &(0x7f0000002bc0)="616afb0d21c866ec935fc89cadd3706cb06f2bc24d6da3677d743cc58d88b0ea070096d41bc9e3aeb03888268175fa60d6eddd62c1a39a5391cde71be27f58ccda6b64b95cdab5806856960dc8bc70076860947a30860f217bb50f0ae9178136bfa63eb0b87985ccc6ca89d3c3ff1cb7087ba8c81479cfcdb62aeab42eee077ae4271a4ee5263f78972d5c1aeb60583be9e159cae4cfe86e63d7ac0f36cfc50f971af5080f1faefc1164b6888ddc6b3a858f170590caa52e4967f6bf240120f5a7bba32073c58118c9c7b074196b318b2cece4db01117c62581a", 0xda, r8) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000002d40)=r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003140)={r4, 0xe0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000002ec0)=[0x0, 0x0], &(0x7f0000002f00)=[0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000002f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002f80), &(0x7f0000002fc0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000003000)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x2, 0x8, &(0x7f0000002d80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x1, 0x6, 0x8, 0x100, 0x8}, @exit, @exit], &(0x7f0000002dc0)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x1e00, 0x2a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000002e00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002e40)={0x4, 0xe, 0x8, 0x4}, 0x10, r10, r4, 0x3, &(0x7f0000003180)=[r4, r4, r3], &(0x7f00000031c0)=[{0x5, 0x3, 0x1, 0xb}, {0x2, 0x2, 0x2, 0xa}, {0x2, 0x2, 0x10, 0xb}], 0x10, 0x3032}, 0x94) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f00000032c0), 0x0, 0x0) write$UHID_DESTROY(r11, &(0x7f0000003300), 0x4) syz_open_dev$sndctrl(&(0x7f0000003340), 0x95, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003380), 0x60701, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r12, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2001c801}, 0x4000) timer_create(0x5, &(0x7f0000003640)={0x0, 0x36, 0x2, @thr={&(0x7f0000003500)="036f52681d686fcddf4ab21e47f6efefab44a5fe41bab923a3e871e55949e99c6554996315c5a212ce6307663d8f094e204f9f771cb927c124231c2f5d36202e6693790a7b238f810405e822ac729ea8eeedfd3a056c78e1728447a8c0336fcdc776262393178c5999e8aad3314c97477873a50609701291a1fa0bd1fcce341c1a8df7393e821eae4bfe036dae131863657a14be617efc93", &(0x7f00000035c0)="732b2a7debf09a2704bdcf1a939dbffce9945b7bd0e83019087415fb42edd92b4ca52704f7e97234d9ad560227d485e1d8843515b5abedb9a1197d7191db0dd89d35b769655cf9fbbd8aebb4619c7b4c478ef0e082d6b0e9b1b50359de0060958529895b9505d60dace2fd67becb"}}, &(0x7f0000003680)) 2.512706934s ago: executing program 4 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0xb, "75c7"}, @local=@item_012={0x1, 0x2, 0x9, 'P'}]}}, 0x0}, 0x0) accept4(r0, &(0x7f0000000040)=@tipc, &(0x7f0000000100)=0x80, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) 2.180082986s ago: executing program 0 (id=575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}, @redirect={0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0xb, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x45}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$kcm(0x10, 0x100000000002, 0x4) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2.068317883s ago: executing program 0 (id=576): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_io_uring_setup(0x2f2e, &(0x7f0000000080)={0x0, 0x4b84, 0xb03ea78c150f220b, 0x1, 0xd1}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_setup(0x3b08, &(0x7f0000000140)={0x0, 0x4c9d, 0x10, 0x1, 0xc1, 0x0, r0}) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) 2.044816389s ago: executing program 0 (id=577): socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x8, 0x8000, 0xd, 0x24b, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast1, @remote, {[@generic={0x83, 0xb, "314a6a6157d668a70c"}, @ssrr={0x89, 0x13, 0xd3, [@loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@getchain={0x0, 0x66, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0x9}, {0x6, 0xfff2}, {0xf, 0xfff1}}, [{0x0, 0xb, 0xff}, {0x0, 0xb, 0x7}, {0x0, 0xb, 0x1}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) r2 = socket(0x6, 0x2, 0x4) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000080)={'syzkaller0\x00', @ifru_mtu=0x5}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r3, &(0x7f0000000880)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1, 0xa26d, 0xc46) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c10"]) lseek(r3, 0x0, 0x0) 1.956095997s ago: executing program 2 (id=578): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb10a8f9c4afb5900d3000000002b223f084000000904b109"], 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) (async) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/8, 0x8}, {&(0x7f0000001300)=""/88, 0x58}, {&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/125, 0x7d}], 0x9, &(0x7f0000001680)=""/159, 0x9f}, 0x8}, {{&(0x7f00000027c0)=@nfc, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000002840)=""/4096, 0x1000}, 0x34}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003840)=""/34, 0x22}, {&(0x7f0000003880)=""/172, 0xac}], 0x2, &(0x7f0000003980)=""/79, 0x4f}, 0x51}], 0x3, 0x12120, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xf8c00, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x1800000000000000}, 0x50) link(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00') 1.836049779s ago: executing program 3 (id=579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup2(r2, r3) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) r8 = memfd_create(&(0x7f0000000440)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xf5\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\xb8e\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xbb\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x9e`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x03\x16\x805\x9b\x01\xf9\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r8, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, ',[.-[\xce!,'}, {}], 0xa, "d1de004c9b138a102ef23956445c9dde71388d49b6ad7c49de86fba88b631c8fc4d7a1678a8897c181ae53685898887f8c1c7dbfa4d39de2d2e972eceb889f4ace0000000000"}, 0x2) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.83555634s ago: executing program 0 (id=580): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000040)={0x6, 0x1700, "778d8ce72aa8f35457c8617739b4948e07180be64604d3a5", {0x9, 0x8}, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x1f8}, 0x20000080) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040), 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x10000a47) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[], 0x14}}, 0x40800) 1.673808379s ago: executing program 0 (id=581): pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000200000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r11, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x809) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) 1.317816957s ago: executing program 1 (id=582): r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') socket$kcm(0x2, 0x5, 0x84) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r4, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10010, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r6, 0x0, 0x0) syz_open_pts(r6, 0x240) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x47, 0x6) 1.10808073s ago: executing program 1 (id=583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf252800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@local, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, {}, {}, 0x0, 0x4, 0xa, 0x1, 0x8, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) dup(r5) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004e"], 0x1c}}, 0x80) 638.523813ms ago: executing program 4 (id=584): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) 82.569912ms ago: executing program 0 (id=585): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x57}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x44) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x40002, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000580)={'veth0_vlan\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000540)={0x0, 0x1, r2}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="000100000314000128bd7000ffdbdf250900020073797a3100000000080041007278650014003300766574683100000000000000000000000900020073797a30000000000800410073697700140033006e657464657673696d3000e4ef46c2000900020073797a3100000000080041007278650014003300767863616e31000000000000000000000900020073797a320000000008004100736977001400330064766d727030000000000000000000000900020073797a300000000008004100727865001400330076657468310000000000000000000000091c020073797a3000000033006772657423cd3000"/256], 0x100}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010041000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="dc81a89b764ff61416722631821dffea2189fc8153"], 0x44}}, 0x4000) 0s ago: executing program 3 (id=586): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x4, 0x2, 0x5, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) r1 = getpid() r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prlimit64(r1, 0x9, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x9, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xa15c, 0x404, 0x7, 0xffffffff}}) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async) r7 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}) (async) io_uring_enter(r7, 0x55, 0x84a23, 0xf, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000008bd9726b50163cd6c7f2301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 3] Use struct sctp_sack_info instead [ 317.126176][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133499][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.142492][ T6614] loop6: partition table beyond EOD, truncated [ 317.316104][ T6614] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.849833][ T6630] netlink: 'syz.1.169': attribute type 30 has an invalid length. [ 317.858265][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 318.168737][ T6630] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 318.342765][ T5944] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 318.380547][ T6637] netlink: 'syz.0.171': attribute type 29 has an invalid length. [ 318.482774][ T5944] usb 4-1: device descriptor read/64, error -71 [ 318.610863][ T6637] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 318.733678][ T5944] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 318.915842][ T5945] usb 5-1: USB disconnect, device number 14 [ 318.933786][ T5944] usb 4-1: device descriptor read/64, error -71 [ 319.087993][ T5944] usb usb4-port1: attempt power cycle [ 319.299409][ T977] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 319.443400][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'. [ 319.470995][ T5944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 319.493726][ T5944] usb 4-1: device descriptor read/8, error -71 [ 319.508094][ T977] usb 2-1: config 0 has no interfaces? [ 319.517074][ T977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 319.526404][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.542361][ T977] usb 2-1: Product: syz [ 319.547719][ T977] usb 2-1: Manufacturer: syz [ 319.560331][ T977] usb 2-1: SerialNumber: syz [ 319.576423][ T977] usb 2-1: config 0 descriptor?? [ 319.643244][ T5945] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 319.743324][ T5944] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 319.763384][ T5944] usb 4-1: device descriptor read/8, error -71 [ 319.803590][ T5945] usb 5-1: device descriptor read/64, error -71 [ 319.811411][ T6644] netlink: 100 bytes leftover after parsing attributes in process `syz.1.173'. [ 319.822811][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.832487][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.886134][ T5944] usb usb4-port1: unable to enumerate USB device [ 320.046068][ T5945] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 320.193060][ T5945] usb 5-1: device descriptor read/64, error -71 [ 320.317687][ T5945] usb usb5-port1: attempt power cycle [ 320.492766][ T5944] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 320.662110][ T5944] usb 3-1: config 0 has no interfaces? [ 320.682565][ T5944] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 320.701575][ T5945] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 320.711813][ T6665] delete_channel: no stack [ 320.759667][ T6665] delete_channel: no stack [ 320.760370][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.774770][ T5944] usb 3-1: Product: syz [ 320.779181][ T5944] usb 3-1: Manufacturer: syz [ 320.784374][ T5944] usb 3-1: SerialNumber: syz [ 320.793475][ T5945] usb 5-1: device descriptor read/8, error -71 [ 320.801434][ T6665] delete_channel: no stack [ 320.803917][ T5944] usb 3-1: config 0 descriptor?? [ 321.040179][ T5945] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 321.083665][ T5945] usb 5-1: device descriptor read/8, error -71 [ 321.193417][ T5945] usb usb5-port1: unable to enumerate USB device [ 321.893256][ T5944] usb 2-1: USB disconnect, device number 14 [ 322.326533][ T6703] netlink: 'syz.3.187': attribute type 75 has an invalid length. [ 322.476813][ T6704] netlink: 'syz.3.187': attribute type 6 has an invalid length. [ 322.571092][ T30] audit: type=1326 audit(1751942172.419:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.3.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x0 [ 323.217347][ T5944] usb 3-1: USB disconnect, device number 12 [ 323.375981][ T44] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 323.593163][ T44] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.657045][ T44] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.697985][ T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.751321][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.841243][ T30] audit: type=1326 audit(1751942173.689:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 323.868233][ T6724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.884487][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.926471][ T30] audit: type=1326 audit(1751942173.739:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 323.993131][ T30] audit: type=1326 audit(1751942173.739:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.022908][ T30] audit: type=1326 audit(1751942173.739:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.178206][ T30] audit: type=1326 audit(1751942173.739:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.201633][ T30] audit: type=1326 audit(1751942173.749:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.224172][ T30] audit: type=1326 audit(1751942173.749:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.247013][ T30] audit: type=1326 audit(1751942173.749:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.274456][ T30] audit: type=1326 audit(1751942173.749:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 324.365736][ T6722] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 324.384221][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.447814][ T6744] CUSE: DEVNAME unspecified [ 324.547993][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.737928][ T6748] netlink: 666 bytes leftover after parsing attributes in process `syz.3.200'. [ 325.133271][ T44] usb 5-1: USB disconnect, device number 19 [ 325.335688][ T5920] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 325.522767][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 325.529792][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.543948][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.560477][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.581887][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.407970][ T6764] netlink: 96 bytes leftover after parsing attributes in process `syz.3.205'. [ 326.527880][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.715065][ T5920] usb 2-1: config 0 descriptor?? [ 326.946076][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 327.082754][ T10] usb 4-1: device descriptor read/64, error -71 [ 327.194643][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 327.200771][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 327.213458][ T5920] usb 2-1: USB disconnect, device number 15 [ 327.343689][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 327.471502][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.499834][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.543456][ T10] usb 4-1: device descriptor read/64, error -71 [ 327.663910][ T10] usb usb4-port1: attempt power cycle [ 327.885900][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 327.922617][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 327.942525][ T6780] wireguard0: entered promiscuous mode [ 327.948877][ T6780] wireguard0: entered allmulticast mode [ 327.957052][ T6783] netlink: 120 bytes leftover after parsing attributes in process `syz.2.210'. [ 328.022858][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.053644][ T10] usb 4-1: device descriptor read/8, error -71 [ 328.082877][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 328.263202][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.271250][ T5920] usb 2-1: config 0 has no interface number 0 [ 328.282578][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.293959][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.304265][ T5920] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.313048][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 328.317549][ T5920] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 328.335932][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.348523][ T5920] usb 2-1: config 0 descriptor?? [ 328.353636][ T10] usb 4-1: device descriptor read/8, error -71 [ 328.452745][ T5945] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 328.463231][ T10] usb usb4-port1: unable to enumerate USB device [ 328.595186][ T5945] usb 3-1: device descriptor read/64, error -71 [ 328.775130][ T5920] usbhid 2-1:0.1: can't add hid device: -71 [ 328.781347][ T5920] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 328.798023][ T5920] usb 2-1: USB disconnect, device number 16 [ 328.833034][ T5945] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 328.862903][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 328.962790][ T5945] usb 3-1: device descriptor read/64, error -71 [ 329.012894][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 329.021980][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 329.031602][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.039637][ T10] usb 5-1: Product: syz [ 329.043999][ T10] usb 5-1: Manufacturer: syz [ 329.048609][ T10] usb 5-1: SerialNumber: syz [ 329.056142][ T10] usb 5-1: config 0 descriptor?? [ 329.068205][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 329.074762][ T5945] usb usb3-port1: attempt power cycle [ 329.413726][ T5945] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 329.445971][ T5945] usb 3-1: device descriptor read/8, error -71 [ 329.481094][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 329.491959][ T10] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 329.508662][ T10] usb 5-1: USB disconnect, device number 20 [ 329.576158][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 329.576175][ T30] audit: type=1326 audit(1751942179.419:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.609720][ T30] audit: type=1326 audit(1751942179.429:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.634825][ T30] audit: type=1326 audit(1751942179.429:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.660245][ T30] audit: type=1326 audit(1751942179.429:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.689532][ T30] audit: type=1326 audit(1751942179.429:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.692775][ T5945] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 329.731334][ T30] audit: type=1326 audit(1751942179.459:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.755401][ T30] audit: type=1326 audit(1751942179.459:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.783265][ T5945] usb 3-1: device descriptor read/8, error -71 [ 329.790202][ T30] audit: type=1326 audit(1751942179.459:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.819596][ T30] audit: type=1326 audit(1751942179.459:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 329.893136][ T5945] usb usb3-port1: unable to enumerate USB device [ 330.254456][ T30] audit: type=1326 audit(1751942180.089:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6805 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x7ffc0000 [ 330.624416][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 330.656416][ T6825] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.820462][ T6825] kvm: pic: non byte read [ 330.833419][ T6825] kvm: pic: level sensitive irq not supported [ 330.833532][ T6825] kvm: pic: non byte read [ 330.858528][ T6825] kvm: pic: level sensitive irq not supported [ 330.861105][ T6825] kvm: pic: non byte read [ 331.072946][ T5945] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 331.212753][ T5945] usb 2-1: device descriptor read/64, error -71 [ 331.378101][ T6835] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.462734][ T5945] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 332.112770][ T5945] usb 2-1: device descriptor read/64, error -71 [ 332.242035][ T5945] usb usb2-port1: attempt power cycle [ 332.412985][ T5920] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 332.450030][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 332.570764][ T5920] usb 5-1: device descriptor read/64, error -71 [ 332.662858][ T5945] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 332.703440][ T5945] usb 2-1: device descriptor read/8, error -71 [ 332.842907][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 332.858087][ T5920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 332.945150][ T5945] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 332.979490][ T5945] usb 2-1: device descriptor read/8, error -71 [ 333.008462][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.023546][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 333.035591][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.052738][ T5920] usb 5-1: device descriptor read/64, error -71 [ 333.066368][ T9] usb 4-1: config 0 descriptor?? [ 333.094665][ T5945] usb usb2-port1: unable to enumerate USB device [ 333.193755][ T5920] usb usb5-port1: attempt power cycle [ 333.485912][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 333.508561][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input12 [ 333.562912][ T5920] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 333.594122][ T5920] usb 5-1: device descriptor read/8, error -71 [ 333.655164][ T5912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 333.733066][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 333.852787][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 333.858122][ T5920] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 333.875635][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.895851][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.913187][ T9] usb 4-1: USB disconnect, device number 19 [ 333.917664][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.927807][ T5920] usb 5-1: device descriptor read/8, error -71 [ 333.946603][ T5912] usb 3-1: Product: syz [ 333.963498][ T5912] usb 3-1: Manufacturer: syz [ 333.965333][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 333.968131][ T5912] usb 3-1: SerialNumber: syz [ 333.996819][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 334.000272][ T5912] usb 3-1: config 0 descriptor?? [ 334.023193][ T6867] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 334.038244][ T5912] hub 3-1:0.0: bad descriptor, ignoring hub [ 334.046271][ T5920] usb usb5-port1: unable to enumerate USB device [ 334.054087][ T5912] hub 3-1:0.0: probe with driver hub failed with error -5 [ 334.262757][ T5945] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 334.427305][ T5945] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 334.448300][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 334.461157][ T5945] usb 2-1: can't read configurations, error -61 [ 334.560622][ T6884] loop9: detected capacity change from 0 to 7 [ 334.577023][ T6417] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.582505][ T6417] loop9: partition table partially beyond EOD, truncated [ 334.591339][ T6417] loop9: p1 size 501170297 extends beyond EOD, truncated [ 334.602790][ T5945] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 334.629339][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'. [ 334.634089][ T6884] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.648369][ T6884] loop9: partition table partially beyond EOD, truncated [ 334.656544][ T6884] loop9: p1 size 501170297 extends beyond EOD, truncated [ 334.674715][ T6867] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 334.734103][ T6417] udevd[6417]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 334.763318][ T5945] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 334.772614][ T6417] udevd[6417]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 334.779289][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 334.812867][ T5945] usb 2-1: can't read configurations, error -61 [ 334.821207][ T5945] usb usb2-port1: attempt power cycle [ 334.839472][ T6867] usb 3-1: device firmware changed [ 334.849292][ T5912] usb 3-1: USB disconnect, device number 17 [ 335.003036][ T5912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 335.152909][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 335.166193][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 335.172783][ T5945] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 335.189353][ T5912] usb 3-1: string descriptor 0 read error: -22 [ 335.198036][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.213855][ T5945] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 335.234015][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 335.237961][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.241627][ T5945] usb 2-1: can't read configurations, error -61 [ 335.285572][ T5912] usb 3-1: config 0 descriptor?? [ 335.292149][ T6880] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 335.315137][ T5912] hub 3-1:0.0: bad descriptor, ignoring hub [ 335.321112][ T5912] hub 3-1:0.0: probe with driver hub failed with error -5 [ 335.412937][ T5945] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 335.454421][ T5945] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 335.465659][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 335.474949][ T5945] usb 2-1: can't read configurations, error -61 [ 335.482161][ T5945] usb usb2-port1: unable to enumerate USB device [ 335.824597][ T5912] usb 3-1: USB disconnect, device number 18 [ 336.011580][ T6915] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 336.018326][ T6915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.067733][ T6915] vhci_hcd vhci_hcd.0: Device attached [ 336.128750][ T6917] vhci_hcd: connection closed [ 336.132354][ T6471] vhci_hcd: stop threads [ 336.145469][ T6471] vhci_hcd: release socket [ 336.150212][ T6471] vhci_hcd: disconnect device [ 336.283982][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 336.445145][ T6930] veth1_virt_wifi: entered promiscuous mode [ 336.461483][ T6930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.248'. [ 336.507620][ T6930] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 337.146137][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.155459][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.196755][ T5920] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 337.324181][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 337.402132][ T5920] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 337.417312][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.440767][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.472891][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.487473][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.497755][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.505357][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.505389][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.505423][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 337.505475][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.508108][ T9] usb 3-1: config 0 descriptor?? [ 337.523446][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.586312][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.599061][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.617100][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.626597][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.652218][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.671539][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.698969][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.721537][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.739012][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.766609][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.808466][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.827393][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.840489][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.852303][ T6942] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.862016][ T6942] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.881115][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.892936][ T6942] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.903232][ T6942] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.912460][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.926279][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.951442][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.964462][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 337.981415][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 337.995162][ T9] logitech 0003:046D:CA04.0007: unknown main item tag 0x0 [ 337.997483][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.037424][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 338.047307][ T5920] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 338.058456][ T5920] usb 5-1: Product: syz [ 338.065263][ T5920] usb 5-1: Manufacturer: syz [ 338.226990][ T9] logitech 0003:046D:CA04.0007: unknown main item tag 0x0 [ 338.234306][ T5920] usb 5-1: SerialNumber: syz [ 338.244311][ T977] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 338.254219][ T5920] usb 5-1: config 0 descriptor?? [ 338.272127][ T5920] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 338.278688][ T9] logitech 0003:046D:CA04.0007: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 338.331292][ T9] logitech 0003:046D:CA04.0007: no inputs found [ 338.453677][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 338.462833][ T977] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.494691][ T977] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.520612][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.596147][ T977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.620031][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.640328][ T6963] netlink: 'syz.4.251': attribute type 8 has an invalid length. [ 338.658844][ T977] usb 4-1: Product: syz [ 338.665761][ T977] usb 4-1: Manufacturer: syz [ 338.680534][ T977] usb 4-1: SerialNumber: syz [ 338.780085][ T9] usb 3-1: USB disconnect, device number 19 [ 339.111025][ T977] usb 4-1: 0:2 : does not exist [ 339.286555][ T977] usb 4-1: USB disconnect, device number 20 [ 339.491866][ T6967] loop2: detected capacity change from 0 to 7 [ 339.532103][ T6967] Dev loop2: unable to read RDB block 7 [ 339.540574][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.560749][ T6967] loop2: AHDI p1 p2 p3 [ 339.594111][ T6967] loop2: partition table partially beyond EOD, truncated [ 339.653293][ T6967] loop2: p1 start 1601398130 is beyond EOD, truncated [ 339.719461][ T6967] loop2: p2 start 1702059890 is beyond EOD, truncated [ 340.592851][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 340.608914][ T5920] usb 5-1: USB disconnect, device number 25 [ 340.637752][ T5920] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 340.743154][ T6985] netlink: 168 bytes leftover after parsing attributes in process `syz.1.263'. [ 340.769830][ T6985] MPI: mpi too large (113280 bits) [ 340.786721][ T24] IPVS: starting estimator thread 0... [ 340.893476][ T6989] IPVS: using max 50 ests per chain, 120000 per kthread [ 341.012854][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 341.182725][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 341.199895][ T44] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 341.227853][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.265774][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 341.274927][ T44] usb 3-1: config 0 has no interface number 0 [ 341.277068][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 341.327914][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 341.356331][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.369647][ T44] usb 3-1: Product: syz [ 341.377161][ T44] usb 3-1: Manufacturer: syz [ 341.381956][ T44] usb 3-1: SerialNumber: syz [ 341.419057][ T44] usb 3-1: config 0 descriptor?? [ 341.441843][ T44] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 341.469805][ T44] usb 3-1: No valid video chain found. [ 341.723189][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 341.723206][ T30] audit: type=1800 audit(1751942191.569:40): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.262" name="memory.events" dev="tmpfs" ino=259 res=0 errno=0 [ 341.766885][ T9] usb 3-1: USB disconnect, device number 20 [ 341.916329][ T30] audit: type=1804 audit(1751942191.619:41): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.262" name="/newroot/46/memory.events" dev="tmpfs" ino=259 res=1 errno=0 [ 342.305030][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 343.333572][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 343.341993][ T44] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 343.365409][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.398597][ T44] usb 4-1: config 0 descriptor?? [ 343.443196][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 343.592962][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 343.612376][ T9] usb 3-1: no configurations [ 343.620720][ T9] usb 3-1: can't read configurations, error -22 [ 343.633652][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.659148][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.785271][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 343.898864][ T44] lenovo 0003:17EF:6047.0008: item fetching failed at offset 2/5 [ 343.932760][ T44] lenovo 0003:17EF:6047.0008: hid_parse failed [ 343.939017][ T44] lenovo 0003:17EF:6047.0008: probe with driver lenovo failed with error -22 [ 343.942824][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 343.970293][ T9] usb 3-1: no configurations [ 343.979768][ T9] usb 3-1: can't read configurations, error -22 [ 343.987520][ T9] usb usb3-port1: attempt power cycle [ 344.093769][ T44] usb 4-1: USB disconnect, device number 21 [ 344.333071][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 344.367868][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 344.377055][ T9] usb 3-1: no configurations [ 344.384035][ T9] usb 3-1: can't read configurations, error -22 [ 344.513043][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 344.534167][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 344.540393][ T9] usb 3-1: no configurations [ 344.545234][ T9] usb 3-1: can't read configurations, error -22 [ 344.551948][ T9] usb usb3-port1: unable to enumerate USB device [ 344.663274][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.699432][ T7024] netlink: 'syz.3.274': attribute type 5 has an invalid length. [ 344.714479][ T7024] ip6erspan0: entered promiscuous mode [ 344.833129][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 344.845004][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 344.864197][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.880701][ T10] usb 5-1: config 0 descriptor?? [ 345.736631][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.746176][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.763253][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.806187][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.832769][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.960067][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 345.975616][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 346.012830][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 346.318587][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 346.327681][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 346.755780][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 346.784703][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 346.809367][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 346.836026][ T10] usb 5-1: USB disconnect, device number 26 [ 348.690729][ T7067] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 349.132940][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 349.316833][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 349.333756][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 349.380326][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.403106][ T9] usb 5-1: Product: syz [ 349.407431][ T9] usb 5-1: Manufacturer: syz [ 349.412132][ T9] usb 5-1: SerialNumber: syz [ 349.423397][ T9] usb 5-1: config 0 descriptor?? [ 349.434809][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 349.845852][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 349.861096][ T9] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 349.893737][ T9] usb 5-1: USB disconnect, device number 27 [ 350.352977][ T44] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 350.535185][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 350.563490][ T44] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 350.577024][ T5920] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 350.612904][ T44] usb 3-1: config 0 has no interface number 0 [ 350.639467][ T44] usb 3-1: too many endpoints for config 0 interface 63 altsetting 129: 40, using maximum allowed: 30 [ 350.731572][ T44] usb 3-1: config 0 interface 63 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 350.748166][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 350.753899][ T44] usb 3-1: config 0 interface 63 has no altsetting 0 [ 350.766674][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.778107][ T5920] usb 4-1: config 152 has an invalid interface number: 136 but max is 0 [ 350.787873][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 350.797500][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.807021][ T44] usb 3-1: Product: syz [ 350.811262][ T5920] usb 4-1: config 152 has no interface number 0 [ 350.819522][ T44] usb 3-1: Manufacturer: syz [ 350.824223][ T5920] usb 4-1: config 152 interface 136 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 350.836022][ T44] usb 3-1: SerialNumber: syz [ 350.842271][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.858476][ T5920] usb 4-1: config 152 interface 136 has no altsetting 0 [ 350.866449][ T44] usb 3-1: config 0 descriptor?? [ 350.937298][ T5920] usb 4-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 351.003951][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.031845][ T5920] usb 4-1: Product: syz [ 351.041800][ T5920] usb 4-1: Manufacturer: syz [ 351.053603][ T5920] usb 4-1: SerialNumber: syz [ 351.122882][ T7098] input: syz0 as /devices/virtual/input/input13 [ 351.363557][ T5920] plusb 4-1:152.136: probe with driver plusb failed with error -22 [ 351.464916][ T5920] usb 4-1: USB disconnect, device number 22 [ 352.391337][ T7137] __nla_validate_parse: 4 callbacks suppressed [ 352.391356][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 352.542806][ T977] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 352.704654][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 352.720088][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 352.759532][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.788786][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.799870][ T977] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 352.813662][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.829111][ T977] usb 4-1: config 0 descriptor?? [ 352.868572][ T10] usb 3-1: USB disconnect, device number 25 [ 353.172743][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 353.196771][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 353.362832][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 353.372040][ T5920] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 353.409747][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.474292][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 353.483767][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 353.544914][ T5920] usb 5-1: config 0 descriptor?? [ 353.563019][ T5920] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 353.809367][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 353.845852][ T7171] Cannot find add_set index 0 as target [ 353.982819][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 354.003820][ T24] usb 3-1: config 149 has an invalid interface number: 17 but max is 0 [ 354.012243][ T24] usb 3-1: config 149 has no interface number 0 [ 354.026147][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 354.086959][ T24] usb 3-1: config 149 interface 17 has no altsetting 0 [ 354.126386][ T24] usb 3-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=65.f4 [ 354.136083][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.161208][ T24] usb 3-1: Product: syz [ 354.184966][ T24] usb 3-1: Manufacturer: syz [ 354.221208][ T24] usb 3-1: SerialNumber: syz [ 354.255392][ T7173] hsr_slave_1 (unregistering): left promiscuous mode [ 354.272963][ T5920] gspca_nw80x: reg_r err -110 [ 354.277865][ T5920] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 354.333599][ T9] usb 5-1: USB disconnect, device number 28 [ 354.450726][ T24] cypress_m8 3-1:149.17: HID->COM RS232 Adapter converter detected [ 354.484101][ T24] cyphidcom ttyUSB0: required endpoint is missing [ 354.509133][ T24] usb 3-1: USB disconnect, device number 26 [ 354.521149][ T24] cypress_m8 3-1:149.17: device disconnected [ 355.144537][ T7186] block device autoloading is deprecated and will be removed. [ 355.156017][ T7186] syz.1.314: attempt to access beyond end of device [ 355.156017][ T7186] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 355.536755][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 355.550139][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 355.590686][ T977] usb 4-1: USB disconnect, device number 23 [ 355.901847][ T7203] Cannot find map_set index 0 as target [ 356.550663][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 356.915248][ T7214] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 356.961879][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.986492][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.002712][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.051881][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.074979][ T24] usb 3-1: config 0 descriptor?? [ 357.096719][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 357.122725][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 357.149522][ T977] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 357.222515][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 357.248823][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 357.290373][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 357.310477][ T7203] dvb-usb: bulk message failed: -22 (2/0) [ 357.341921][ T24] usb 3-1: media controller created [ 357.358547][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.377560][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.409042][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 357.430799][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 357.460024][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 357.468809][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.482914][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 357.493425][ T977] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.508556][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 357.526926][ T9] usb 2-1: config 0 has no interface number 0 [ 357.553908][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 357.581241][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 357.654454][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 357.692269][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.733738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.737097][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 357.756421][ T9] usb 2-1: Product: syz [ 357.762298][ T977] usb 4-1: config 0 descriptor?? [ 357.769130][ T9] usb 2-1: Manufacturer: syz [ 357.778764][ T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 357.791711][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 357.800336][ T9] usb 2-1: SerialNumber: syz [ 357.829616][ T977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 357.847374][ T24] dvb-usb: error while querying for an remote control event. [ 357.855625][ T9] usb 2-1: config 0 descriptor?? [ 357.861354][ T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 357.872038][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 357.892143][ T977] usb 4-1: media controller created [ 357.906587][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.116878][ T977] dvb-usb: bulk message failed: -22 (6/0) [ 358.123534][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 358.151488][ T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 358.231427][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 358.260612][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 358.273192][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 358.309204][ T24] dvb-usb: error while querying for an remote control event. [ 358.318325][ T30] audit: type=1326 audit(1751942208.169:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.1.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385038e929 code=0x0 [ 358.426832][ T7220] futex_wake_op: syz.0.322 tries to shift op by 32; fix this program [ 359.391864][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 359.417195][ T24] dvb-usb: error while querying for an remote control event. [ 359.423490][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 359.528356][ T30] audit: type=1326 audit(1751942208.279:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 359.550454][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.562299][ T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 359.712792][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 359.718640][ T9] dvb-usb: error while querying for an remote control event. [ 359.724516][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 359.798019][ T5912] dvb-usb: error while querying for an remote control event. [ 359.968148][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 359.977402][ T977] dvb-usb: error while querying for an remote control event. [ 360.013870][ T7212] netlink: 'syz.3.321': attribute type 13 has an invalid length. [ 360.124126][ T30] audit: type=1326 audit(1751942208.279:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.153241][ T30] audit: type=1326 audit(1751942208.289:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.272722][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 360.282923][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 360.299194][ T5912] dvb-usb: error while querying for an remote control event. [ 360.300819][ T977] dvb-usb: error while querying for an remote control event. [ 360.368610][ T30] audit: type=1326 audit(1751942208.299:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.513355][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 360.523048][ T30] audit: type=1326 audit(1751942208.299:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.545291][ T5912] dvb-usb: error while querying for an remote control event. [ 360.560986][ T44] usb 3-1: USB disconnect, device number 27 [ 360.593380][ T7212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.622903][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 360.643362][ T977] dvb-usb: error while querying for an remote control event. [ 360.695084][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 360.695538][ T5912] usb 2-1: USB disconnect, device number 25 [ 360.717664][ T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 360.718557][ T30] audit: type=1326 audit(1751942208.299:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.748459][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.773401][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 360.822477][ T30] audit: type=1326 audit(1751942208.299:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.845328][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 360.850023][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 360.861508][ T977] dvb-usb: error while querying for an remote control event. [ 360.891782][ T30] audit: type=1326 audit(1751942208.299:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 360.899052][ T5912] quatech2 2-1:0.51: device disconnected [ 360.933664][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 361.002190][ T30] audit: type=1326 audit(1751942208.299:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 361.042847][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 361.048977][ T977] dvb-usb: error while querying for an remote control event. [ 361.223526][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 361.238476][ T9] dvb-usb: error while querying for an remote control event. [ 361.257427][ T7241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.265196][ T7241] IPv6: NLM_F_CREATE should be set when creating new route [ 361.309450][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 361.342870][ T977] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 361.442723][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 361.456830][ T10] dvb-usb: error while querying for an remote control event. [ 361.502858][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 361.520447][ T977] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 361.544764][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.564432][ T977] usb 5-1: Product: syz [ 361.572034][ T977] usb 5-1: Manufacturer: syz [ 361.586477][ T977] usb 5-1: SerialNumber: syz [ 361.605267][ T977] usb 5-1: config 0 descriptor?? [ 361.630728][ T977] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 361.673633][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 361.679445][ T10] dvb-usb: error while querying for an remote control event. [ 361.864571][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.873541][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.935755][ T10] usb 4-1: USB disconnect, device number 24 [ 362.065812][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 362.382784][ T5912] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 362.571530][ T5912] usb 3-1: device descriptor read/64, error -71 [ 362.812815][ T5912] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 362.830459][ T7258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 362.918128][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 362.972744][ T5912] usb 3-1: device descriptor read/64, error -71 [ 363.023015][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 363.046080][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.056015][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.078107][ T977] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 363.089151][ T5912] usb usb3-port1: attempt power cycle [ 363.492898][ T9] usb 2-1: device descriptor read/64, error -71 [ 363.743833][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 363.773075][ T5912] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 363.793836][ T5912] usb 3-1: device descriptor read/8, error -71 [ 363.872920][ T9] usb 2-1: device descriptor read/64, error -71 [ 363.984084][ T9] usb usb2-port1: attempt power cycle [ 364.052825][ T5912] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 364.073322][ T5912] usb 3-1: device descriptor read/8, error -71 [ 364.193504][ T5912] usb usb3-port1: unable to enumerate USB device [ 364.322730][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 364.344767][ T9] usb 2-1: device descriptor read/8, error -71 [ 364.592974][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 364.613980][ T9] usb 2-1: device descriptor read/8, error -71 [ 364.723544][ T9] usb usb2-port1: unable to enumerate USB device [ 364.864994][ T5912] usb 5-1: USB disconnect, device number 29 [ 364.873930][ T5912] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 364.887202][ T5912] ssu100 5-1:0.0: device disconnected [ 365.264036][ T7280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.283399][ T5912] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 365.334645][ T7282] syzkaller1: entered promiscuous mode [ 365.340470][ T7282] syzkaller1: entered allmulticast mode [ 365.422776][ T5912] usb 5-1: device descriptor read/64, error -71 [ 365.692912][ T5912] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 365.848309][ T7287] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.340'. [ 365.862122][ T7287] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 365.918029][ T5912] usb 5-1: device descriptor read/64, error -71 [ 365.933303][ T7287] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 366.043152][ T5912] usb usb5-port1: attempt power cycle [ 366.192943][ T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 366.322803][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.372857][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 366.380298][ T44] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 366.388845][ T5912] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 366.396543][ T44] usb 2-1: config 4 has no interface number 0 [ 366.404747][ T44] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 366.414864][ T44] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 366.425125][ T44] usb 2-1: config 4 interface 9 has no altsetting 0 [ 366.432242][ T5912] usb 5-1: device descriptor read/8, error -71 [ 366.440847][ T44] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 366.450079][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.458221][ T44] usb 2-1: Product: syz [ 366.462373][ T44] usb 2-1: Manufacturer: syz [ 366.467070][ T44] usb 2-1: SerialNumber: syz [ 366.476977][ T7288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.484607][ T7288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.494981][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 366.505438][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.517488][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.525447][ T44] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 366.531816][ T9] usb 4-1: config 1 has no interface number 0 [ 366.549065][ T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 366.560122][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 366.577548][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.586698][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.596813][ T9] usb 4-1: Product: syz [ 366.601002][ T9] usb 4-1: Manufacturer: syz [ 366.605878][ T9] usb 4-1: SerialNumber: syz [ 366.620395][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 366.629008][ T9] cdc_ncm 4-1:1.1: bind() failure [ 366.672955][ T5912] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 366.698852][ T6467] usb 2-1: Failed to submit usb control message: -71 [ 366.698990][ T5912] usb 5-1: device descriptor read/8, error -71 [ 366.706864][ T9] usb 2-1: USB disconnect, device number 30 [ 366.718541][ T6467] usb 2-1: unable to send the bmi data to the device: -71 [ 366.728037][ T6467] usb 2-1: unable to get target info from device [ 366.739877][ T6467] usb 2-1: could not get target info (-71) [ 366.747642][ T6467] usb 2-1: could not probe fw (-71) [ 366.823078][ T5912] usb usb5-port1: unable to enumerate USB device [ 366.829706][ T10] usb 4-1: USB disconnect, device number 25 [ 367.117449][ T7311] netlink: 'syz.2.346': attribute type 4 has an invalid length. [ 367.575714][ T44] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 367.734918][ T44] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 367.745729][ T44] usb 2-1: config 0 has no interface number 0 [ 367.752186][ T44] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.752774][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 367.772038][ T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 367.811777][ T44] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 367.825855][ T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 367.839771][ T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 367.853847][ T44] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.868777][ T44] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 367.879195][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.893446][ T44] usb 2-1: config 0 descriptor?? [ 367.902151][ T7318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.909918][ T7318] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.956923][ T44] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 367.984132][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 367.990261][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 368.035797][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.057747][ T10] usb 3-1: can't read configurations, error -61 [ 368.126913][ T7318] ldusb 2-1:0.55: Write buffer overflow, 2 bytes dropped [ 368.170249][ T24] usb 2-1: USB disconnect, device number 31 [ 368.182310][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 368.288315][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 368.472778][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 368.522329][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 368.549841][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.558699][ T10] usb 3-1: can't read configurations, error -61 [ 368.566537][ T10] usb usb3-port1: attempt power cycle [ 368.935809][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 369.005814][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 369.015101][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 369.064711][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 369.093201][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 369.153550][ T10] usb 3-1: can't read configurations, error -61 [ 369.233628][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 369.271212][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 369.289840][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 369.303055][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 369.320361][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.344890][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 369.350117][ T9] usb 5-1: config 0 has no interface number 0 [ 369.362529][ T10] usb 3-1: too many configurations: 239, using maximum allowed: 8 [ 369.380581][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 369.397111][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 369.410690][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.423033][ T10] usb 3-1: can't read configurations, error -61 [ 369.436982][ T9] usb 5-1: Product: syz [ 369.444082][ T10] usb usb3-port1: unable to enumerate USB device [ 369.452608][ T9] usb 5-1: Manufacturer: syz [ 369.467039][ T9] usb 5-1: SerialNumber: syz [ 369.504699][ T9] usb 5-1: config 0 descriptor?? [ 369.550329][ T9] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 369.576069][ T9] usb 5-1: No valid video chain found. [ 369.745942][ T44] usb 5-1: USB disconnect, device number 34 [ 369.766480][ T7368] futex_wake_op: syz.3.361 tries to shift op by -1; fix this program [ 371.114002][ T7402] syz_tun: entered allmulticast mode [ 371.184055][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 371.255489][ T7407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.949350][ T7398] syz_tun: left allmulticast mode [ 372.833414][ T5945] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 373.013443][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 373.024721][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.041676][ T7432] No such timeout policy "syz1" [ 373.051300][ T5945] usb 4-1: config 0 has no interface number 0 [ 373.059434][ T5912] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 373.088631][ T5945] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 373.130264][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.138859][ T5945] usb 4-1: Product: syz [ 373.153157][ T5945] usb 4-1: Manufacturer: syz [ 373.166532][ T5945] usb 4-1: SerialNumber: syz [ 373.179924][ T5945] usb 4-1: config 0 descriptor?? [ 373.197772][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 373.223099][ T5912] usb 2-1: device descriptor read/64, error -71 [ 373.282829][ T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 373.347034][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 373.347051][ T30] audit: type=1326 audit(1751942223.199:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 373.378998][ T30] audit: type=1326 audit(1751942223.199:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 373.473107][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 373.478704][ T5912] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 373.500244][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.521383][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.542966][ T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.552054][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.611783][ T44] usb 5-1: Product: syz [ 373.624975][ T44] usb 5-1: Manufacturer: syz [ 373.642763][ T5912] usb 2-1: device descriptor read/64, error -71 [ 373.649242][ T44] usb 5-1: SerialNumber: syz [ 373.669013][ T5945] gspca_spca1528: reg_w err -71 [ 373.698226][ T44] usb 5-1: config 0 descriptor?? [ 373.702868][ T5945] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 373.742285][ T5945] usb 4-1: USB disconnect, device number 26 [ 373.758052][ T5912] usb usb2-port1: attempt power cycle [ 373.846628][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 374.172871][ T5912] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 374.214112][ T5912] usb 2-1: device descriptor read/8, error -71 [ 374.291220][ T44] usb 5-1: USB disconnect, device number 35 [ 374.468275][ T5912] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 374.514981][ T5912] usb 2-1: device descriptor read/8, error -71 [ 374.649047][ T5912] usb usb2-port1: unable to enumerate USB device [ 376.262924][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 376.425853][ T9] usb 4-1: config 0 has no interfaces? [ 376.436410][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.457722][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.482366][ T9] usb 4-1: Product: syz [ 376.495594][ T9] usb 4-1: Manufacturer: syz [ 376.511119][ T7500] random: crng reseeded on system resumption [ 376.524822][ T9] usb 4-1: SerialNumber: syz [ 376.539401][ T9] usb 4-1: config 0 descriptor?? [ 376.792513][ T7493] pimreg: entered allmulticast mode [ 376.800201][ T7493] pimreg: left allmulticast mode [ 376.878305][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.888688][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.059754][ T7510] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 377.199043][ T7514] netlink: 'syz.2.396': attribute type 7 has an invalid length. [ 377.210150][ T7514] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 377.228334][ T7512] netlink: 'syz.4.395': attribute type 33 has an invalid length. [ 377.814311][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 378.006238][ T44] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 378.035091][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.061934][ T7533] fuse: Unknown parameter 'rootmo ¨¹lƒû1dOÊ.¸de' [ 378.063260][ T44] usb 2-1: Product: syz [ 378.083363][ T44] usb 2-1: Manufacturer: syz [ 378.088009][ T44] usb 2-1: SerialNumber: syz [ 378.099750][ T44] usb 2-1: config 0 descriptor?? [ 378.351705][ T9] usb 4-1: USB disconnect, device number 27 [ 378.534687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541023][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.683494][ T44] usb 2-1: Firmware version (0.0) predates our first public release. [ 378.692190][ T44] usb 2-1: Please update to version 0.2 or newer [ 378.713420][ T44] usb 2-1: Firmware: build HšèFæá?K:ó-mÖ—„DtUð£^¾µ¬.R³.3& [ 378.782896][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 378.965445][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 378.981568][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 378.999099][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.014932][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 379.042173][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.050681][ T10] usb 5-1: Product: syz [ 379.088693][ T10] usb 5-1: Manufacturer: syz [ 379.093904][ T10] usb 5-1: SerialNumber: syz [ 379.107546][ T10] usb 5-1: config 0 descriptor?? [ 379.217665][ T44] usb 2-1: USB disconnect, device number 36 [ 379.257128][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 379.483970][ T10] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 379.491719][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 379.513908][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 379.827015][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 380.399467][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 380.542912][ T44] usb 2-1: device descriptor read/64, error -71 [ 380.726189][ T30] audit: type=1326 audit(1751942230.579:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.752831][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 380.788524][ T30] audit: type=1326 audit(1751942230.599:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.810685][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.823034][ T44] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 380.831763][ T30] audit: type=1326 audit(1751942230.599:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.858522][ T30] audit: type=1326 audit(1751942230.599:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.893488][ T30] audit: type=1326 audit(1751942230.599:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.917425][ T30] audit: type=1326 audit(1751942230.599:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.917705][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.940416][ T30] audit: type=1326 audit(1751942230.599:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 380.971566][ T44] usb 2-1: device descriptor read/64, error -71 [ 380.978896][ T30] audit: type=1326 audit(1751942230.599:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 381.003503][ T30] audit: type=1326 audit(1751942230.599:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27098e929 code=0x7ffc0000 [ 381.025576][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.031853][ T5912] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 381.040354][ T30] audit: type=1326 audit(1751942230.599:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc270990847 code=0x7ffc0000 [ 381.043060][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.062344][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.083417][ T44] usb usb2-port1: attempt power cycle [ 381.109449][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.119117][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 381.130948][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 381.144292][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.172820][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.180884][ T10] usb 3-1: Product: syz [ 381.190683][ T10] usb 3-1: Manufacturer: syz [ 381.221177][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 381.228216][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 381.238321][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 381.238344][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 381.239584][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 381.246763][ T5912] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 381.246792][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.246812][ T5912] usb 4-1: Product: syz [ 381.246827][ T5912] usb 4-1: Manufacturer: syz [ 381.246842][ T5912] usb 4-1: SerialNumber: syz [ 381.251048][ T5912] usb 4-1: config 0 descriptor?? [ 381.263361][ T5912] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 381.443771][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 381.463995][ T44] usb 2-1: device descriptor read/8, error -71 [ 381.479792][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 381.486658][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 381.487851][ T3099] usb 3-1: USB disconnect, device number 36 [ 381.492747][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 381.508610][ T7585] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 381.517258][ T5961] usb 4-1: USB disconnect, device number 28 [ 381.712801][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 381.733463][ T44] usb 2-1: device descriptor read/8, error -71 [ 381.843568][ T44] usb usb2-port1: unable to enumerate USB device [ 382.433352][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 382.442219][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 382.602262][ T3099] usb 5-1: USB disconnect, device number 37 [ 382.763456][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 384.185411][ T44] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 384.343043][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 384.353899][ T44] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 384.366955][ T44] usb 4-1: config 0 has no interface number 0 [ 384.373502][ T44] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 384.402809][ T44] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 384.461122][ T44] usb 4-1: config 0 interface 41 has no altsetting 0 [ 384.515144][ T44] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 384.524546][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.563387][ T44] usb 4-1: Product: syz [ 384.573147][ T3099] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 384.586967][ T44] usb 4-1: Manufacturer: syz [ 384.613031][ T44] usb 4-1: SerialNumber: syz [ 384.641758][ T44] usb 4-1: config 0 descriptor?? [ 384.670354][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.678112][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.732800][ T3099] usb 5-1: Using ep0 maxpacket: 16 [ 384.763259][ T3099] usb 5-1: config 2 has an invalid interface number: 4 but max is 0 [ 384.779534][ T3099] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 384.871532][ T3099] usb 5-1: config 2 has no interface number 0 [ 384.889943][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.918904][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.938764][ T3099] usb 5-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.949308][ T3099] usb 5-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.968343][ T3099] usb 5-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 384.979124][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.987746][ T3099] usb 5-1: Product: syz [ 384.994506][ T3099] usb 5-1: Manufacturer: syz [ 384.999183][ T3099] usb 5-1: SerialNumber: syz [ 385.030456][ T3099] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.081686][ T3099] snd-usb-audio 5-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 385.137340][ T44] Error reading MAC address [ 385.270556][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.338658][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.346496][ T7622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.562735][ T977] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 385.572862][ T44] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 385.589753][ T44] usb 4-1: USB disconnect, device number 29 [ 385.777709][ T977] usb 2-1: device descriptor read/64, error -71 [ 386.022910][ T977] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 386.162956][ T977] usb 2-1: device descriptor read/64, error -71 [ 386.273332][ T977] usb usb2-port1: attempt power cycle [ 386.412338][ T44] usb 5-1: USB disconnect, device number 38 [ 386.473077][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 386.612788][ T977] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 386.627200][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 386.641547][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 386.659430][ T977] usb 2-1: device descriptor read/8, error -71 [ 386.667500][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 386.676957][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 386.685317][ T10] usb 4-1: Product: syz [ 386.689700][ T10] usb 4-1: Manufacturer: syz [ 386.694799][ T10] usb 4-1: SerialNumber: syz [ 386.902792][ T977] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 386.912033][ T10] usb 4-1: Invalid connection information received from device [ 386.973648][ T977] usb 2-1: device descriptor read/8, error -71 [ 387.086332][ T977] usb usb2-port1: unable to enumerate USB device [ 387.115184][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.125828][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.135059][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.144100][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.153731][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.162619][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.175944][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.185050][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.198912][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.221165][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.378472][ T7665] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 387.463180][ T3099] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 387.642920][ T3099] usb 3-1: Using ep0 maxpacket: 16 [ 387.669544][ T3099] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.683659][ T3099] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.696425][ T3099] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.710911][ T3099] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.762796][ T3099] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 387.771921][ T3099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.791373][ T3099] usb 3-1: config 0 descriptor?? [ 388.068988][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 388.069000][ T30] audit: type=1326 audit(1751942237.919:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.112874][ T30] audit: type=1326 audit(1751942237.949:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.154538][ T30] audit: type=1326 audit(1751942237.949:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.177245][ T30] audit: type=1326 audit(1751942237.949:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.215051][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.225847][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.234811][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.242825][ T30] audit: type=1326 audit(1751942237.949:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.266177][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.282743][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.292516][ T3099] hid-generic 0003:045E:05DA.0009: unknown main item tag 0x0 [ 388.302302][ T30] audit: type=1326 audit(1751942237.949:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.324815][ T3099] hid-generic 0003:045E:05DA.0009: unbalanced collection at end of report description [ 388.398361][ T3099] hid-generic 0003:045E:05DA.0009: probe with driver hid-generic failed with error -22 [ 388.434375][ T30] audit: type=1326 audit(1751942237.949:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.457247][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 388.528946][ T30] audit: type=1326 audit(1751942237.949:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 388.862735][ T3099] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 389.077921][ T3099] usb 2-1: config 0 has no interfaces? [ 389.087000][ T3099] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 389.098795][ T3099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.110722][ T3099] usb 2-1: Product: syz [ 389.118545][ T3099] usb 2-1: Manufacturer: syz [ 389.124748][ T3099] usb 2-1: SerialNumber: syz [ 389.145571][ T3099] usb 2-1: config 0 descriptor?? [ 389.347950][ T5912] usb 4-1: USB disconnect, device number 30 [ 389.752854][ T5912] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 390.067986][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 390.088886][ T5912] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 390.098073][ T5912] usb 4-1: config 0 has no interface number 0 [ 390.104420][ T5912] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.114961][ T5912] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.128271][ T5912] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 390.145297][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.161377][ T5912] usb 4-1: Product: syz [ 390.171445][ T5912] usb 4-1: Manufacturer: syz [ 390.177709][ T977] usb 3-1: USB disconnect, device number 37 [ 390.183870][ T5912] usb 4-1: SerialNumber: syz [ 390.216195][ T5912] usb 4-1: config 0 descriptor?? [ 390.249252][ T7692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.272623][ T7692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.333275][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 390.390942][ T7696] binder: BINDER_SET_CONTEXT_MGR already set [ 390.397714][ T7696] binder: 7695:7696 ioctl 4018620d 200000000040 returned -16 [ 390.514702][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.528500][ T7692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.532760][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.545089][ T7692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.579862][ T5912] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 390.601986][ T5912] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 390.618655][ T5912] asix 4-1:0.251: probe with driver asix failed with error -5 [ 390.628938][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.667685][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.730328][ T7694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 390.766060][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.907229][ T5912] usb 4-1: USB disconnect, device number 31 [ 391.123175][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.151057][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.220071][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.238598][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.572737][ T3099] usb 2-1: USB disconnect, device number 45 [ 392.176222][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 392.482772][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 392.518454][ T30] audit: type=1800 audit(1751942242.369:162): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 392.633031][ T10] usb 2-1: device descriptor read/64, error -71 [ 392.902825][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 392.952023][ T7735] xt_socket: unknown flags 0x8 [ 393.044306][ T10] usb 2-1: device descriptor read/64, error -71 [ 393.213076][ T10] usb usb2-port1: attempt power cycle [ 393.227859][ T5912] usb 5-1: USB disconnect, device number 39 [ 393.243163][ T5945] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 393.475099][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.532841][ T5945] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 393.602731][ T5945] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.620338][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.628688][ T10] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 393.634524][ T7743] tipc: Enabling of bearer rejected, failed to enable media [ 393.687433][ T5945] usb 4-1: Product: syz [ 393.714198][ T10] usb 2-1: device descriptor read/8, error -71 [ 393.722709][ T5945] usb 4-1: Manufacturer: syz [ 393.731468][ T5945] usb 4-1: SerialNumber: syz [ 393.956557][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.995079][ T10] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 394.023258][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.074687][ T5945] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 394.114814][ T10] usb 2-1: device descriptor read/8, error -71 [ 394.174214][ T5945] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 394.232881][ T5945] usb 4-1: USB disconnect, device number 32 [ 394.263812][ T10] usb usb2-port1: unable to enumerate USB device [ 394.320232][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.052978][ T3099] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 395.274632][ T3099] usb 5-1: config 0 has no interfaces? [ 395.369271][ T3099] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 395.410254][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.419669][ T3099] usb 5-1: Product: syz [ 395.432524][ T3099] usb 5-1: Manufacturer: syz [ 395.456245][ T3099] usb 5-1: SerialNumber: syz [ 395.496663][ T3099] usb 5-1: config 0 descriptor?? [ 396.716173][ T10] IPVS: starting estimator thread 0... [ 396.756150][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 396.822813][ T7783] IPVS: using max 51 ests per chain, 122400 per kthread [ 397.742707][ T5945] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 397.964049][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.003183][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.088913][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.139517][ T3099] usb 5-1: USB disconnect, device number 40 [ 398.237888][ T5945] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.325499][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.645196][ T5945] usb 3-1: config 0 descriptor?? [ 398.675786][ T5912] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 398.891919][ T5912] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 398.930515][ T5912] usb 5-1: config 0 has no interface number 0 [ 398.930739][ T5167] Bluetooth: hci2: SCO packet for unknown connection handle 100 [ 398.997259][ T5912] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 399.071936][ T30] audit: type=1326 audit(1751942248.919:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.091906][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.109550][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 399.118906][ T30] audit: type=1326 audit(1751942248.919:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.145654][ T5912] usb 5-1: Product: syz [ 399.165023][ T5912] usb 5-1: Manufacturer: syz [ 399.167615][ T5945] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x1 [ 399.170816][ T5912] usb 5-1: SerialNumber: syz [ 399.197539][ T5945] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 10/15 [ 399.209047][ T30] audit: type=1326 audit(1751942248.919:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.236279][ T5945] plantronics 0003:047F:FFFF.000A: parse failed [ 399.244738][ T5912] usb 5-1: config 0 descriptor?? [ 399.249889][ T5945] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 399.299941][ T30] audit: type=1326 audit(1751942248.919:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.327556][ T30] audit: type=1326 audit(1751942248.919:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.362471][ T30] audit: type=1326 audit(1751942248.919:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 399.391650][ T7800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 399.401013][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 399.418797][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.431940][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.456995][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.766016][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.782155][ T30] audit: type=1326 audit(1751942248.919:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 400.146067][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.167175][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.175218][ T5912] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 400.175358][ T5912] usb 5-1: No valid video chain found. [ 400.207475][ T5912] usb 5-1: USB disconnect, device number 41 [ 400.420951][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 400.428405][ T10] usbtmc 4-1:16.0: can't read capabilities [ 400.911456][ T5945] usb 3-1: USB disconnect, device number 38 [ 401.474428][ T5912] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 401.478317][ T7853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.503953][ T7853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.565289][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.485'. [ 401.572703][ T7853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.588587][ T7857] loop2: detected capacity change from 0 to 7 [ 401.599906][ T6417] Dev loop2: unable to read RDB block 7 [ 401.607273][ T6417] loop2: AHDI p1 p2 p3 [ 401.616507][ T6417] loop2: partition table partially beyond EOD, truncated [ 401.624168][ T6417] loop2: p1 start 1601398130 is beyond EOD, truncated [ 401.642065][ T6417] loop2: p2 start 1702059890 is beyond EOD, truncated [ 401.661458][ T7853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.694704][ T5912] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.721021][ T7853] geneve2: entered promiscuous mode [ 401.727367][ T5912] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.739980][ T7853] geneve2: entered allmulticast mode [ 401.759560][ T5912] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.784680][ T5945] usb 4-1: USB disconnect, device number 33 [ 401.789803][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.790912][ T7857] Dev loop2: unable to read RDB block 7 [ 401.825277][ T7845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 401.850691][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.889092][ T7857] loop2: AHDI p1 p2 p3 [ 401.897982][ T7857] loop2: partition table partially beyond EOD, truncated [ 401.915857][ T7857] loop2: p1 start 1601398130 is beyond EOD, truncated [ 401.946304][ T7857] loop2: p2 start 1702059890 is beyond EOD, truncated [ 401.973417][ T7853] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.996450][ T7853] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.036197][ T7853] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.096374][ T7853] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.198036][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.242992][ T7864] netlink: 'syz.1.488': attribute type 29 has an invalid length. [ 402.261461][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.263351][ T7864] netlink: 'syz.1.488': attribute type 29 has an invalid length. [ 402.332988][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.343225][ T7864] netlink: 596 bytes leftover after parsing attributes in process `syz.1.488'. [ 402.344702][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.458223][ T5912] usb 3-1: USB disconnect, device number 39 [ 402.554068][ T5945] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 402.704170][ T7868] could not allocate digest TFM handle rmd256 [ 402.735727][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.766126][ T7875] loop8: detected capacity change from 0 to 79 [ 402.768176][ T5945] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 402.811864][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.842856][ T5945] usb 4-1: Product: syz [ 402.847080][ T5945] usb 4-1: Manufacturer: syz [ 402.865739][ T5945] usb 4-1: SerialNumber: syz [ 402.880835][ T5945] usb 4-1: config 0 descriptor?? [ 402.893441][ T7875] loop8: detected capacity change from 79 to 78 [ 402.910906][ T5945] option 4-1:0.0: GSM modem (1-port) converter detected [ 402.922046][ T7878] fuse: Bad value for 'user_id' [ 402.927059][ T7878] fuse: Bad value for 'user_id' [ 403.102424][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.131268][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.131627][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.151911][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.192458][ T9] usb 4-1: USB disconnect, device number 34 [ 403.218074][ T9] option 4-1:0.0: device disconnected [ 403.345178][ T3099] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 403.364453][ T7890] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 403.524667][ T3099] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 403.533087][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.546819][ T3099] usb 5-1: config 0 has no interface number 0 [ 403.558082][ T3099] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 403.572711][ T3099] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 403.581672][ T3099] usb 5-1: Product: syz [ 403.586581][ T3099] usb 5-1: Manufacturer: syz [ 403.591221][ T3099] usb 5-1: SerialNumber: syz [ 403.600034][ T3099] usb 5-1: config 0 descriptor?? [ 403.618035][ T3099] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 403.628223][ T3099] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 403.648061][ T3099] usb 5-1: Failed to create links for entity 1 [ 403.671153][ T3099] usb 5-1: Failed to register entities (-22). [ 403.732304][ T9] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 403.785168][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 403.855983][ T5945] usb 5-1: USB disconnect, device number 42 [ 403.917722][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 403.937338][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 403.975803][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 404.021503][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.066095][ T9] usb 3-1: config 0 descriptor?? [ 404.074636][ T7892] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 404.202885][ T44] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 404.293136][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.306208][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.409141][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 404.427773][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 404.446919][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.472432][ T44] usb 4-1: Product: syz [ 404.498901][ T44] usb 4-1: Manufacturer: syz [ 404.506674][ T44] usb 4-1: SerialNumber: syz [ 404.525392][ T44] usb 4-1: config 0 descriptor?? [ 404.533812][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 404.539862][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 404.590669][ T9] usb 3-1: USB disconnect, device number 40 [ 404.767295][ T44] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 404.802929][ T3099] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 404.982898][ T3099] usb 5-1: Using ep0 maxpacket: 32 [ 405.024452][ T3099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.075056][ T3099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.114620][ T3099] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.176155][ T3099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.263862][ T3099] usb 5-1: config 0 descriptor?? [ 405.301307][ T3099] hub 5-1:0.0: USB hub found [ 405.479870][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.493218][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.515550][ T3099] hub 5-1:0.0: 1 port detected [ 405.722398][ T3099] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 405.752714][ T3099] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 405.777886][ T3099] usbhid 5-1:0.0: can't add hid device: -71 [ 405.807555][ T3099] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 405.883226][ T3099] usb 5-1: USB disconnect, device number 43 [ 406.170636][ T5945] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 406.260877][ T44] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 406.280366][ T44] usb 4-1: USB disconnect, device number 35 [ 406.412724][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 406.419384][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.450516][ T5945] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 406.495010][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.521908][ T5945] usb 2-1: Product: syz [ 406.538428][ T5945] usb 2-1: Manufacturer: syz [ 406.553073][ T5945] usb 2-1: SerialNumber: syz [ 406.576405][ T5945] usb 2-1: config 0 descriptor?? [ 406.601307][ T5945] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 406.677559][ T5945] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 406.847795][ T44] usb 2-1: USB disconnect, device number 50 [ 407.230606][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'. [ 407.511706][ T7962] fuse: Bad value for 'rootmode' [ 407.682899][ T44] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.854007][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 407.866461][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.881394][ T44] usb 4-1: Product: syz [ 407.888829][ T44] usb 4-1: Manufacturer: syz [ 407.897108][ T44] usb 4-1: SerialNumber: syz [ 407.927353][ T44] usb 4-1: config 0 descriptor?? [ 407.943066][ T44] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 408.142476][ T44] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 408.167353][ T44] sq905c 4-1:0.0: Get version command failed [ 408.186257][ T44] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 408.230685][ T44] usb 4-1: USB disconnect, device number 36 [ 408.766266][ T44] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 408.797119][ T30] audit: type=1326 audit(1751942258.649:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 408.849451][ T30] audit: type=1326 audit(1751942258.669:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 408.882810][ T5912] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 408.907468][ T30] audit: type=1326 audit(1751942258.669:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 408.929554][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.940130][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 408.961729][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.972756][ T30] audit: type=1326 audit(1751942258.669:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 408.981967][ T44] usb 5-1: config 4 has an invalid interface number: 10 but max is 0 [ 408.994937][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.010338][ T3099] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 409.022227][ T44] usb 5-1: config 4 has no interface number 0 [ 409.039360][ T44] usb 5-1: config 4 interface 10 has no altsetting 0 [ 409.047977][ T30] audit: type=1326 audit(1751942258.669:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.057762][ T44] usb 5-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 409.101450][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.116599][ T5912] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 409.129758][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.143649][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.151847][ T44] usb 5-1: Product: syz [ 409.156872][ T44] usb 5-1: Manufacturer: syz [ 409.161509][ T44] usb 5-1: SerialNumber: syz [ 409.166529][ T3099] usb 4-1: Using ep0 maxpacket: 16 [ 409.173048][ T30] audit: type=1326 audit(1751942258.669:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.175619][ T5912] usb 2-1: config 0 descriptor?? [ 409.195139][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.219077][ T3099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.234627][ T3099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.246919][ T3099] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 409.256713][ T3099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.271204][ T30] audit: type=1326 audit(1751942258.669:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.293426][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.303184][ T30] audit: type=1326 audit(1751942258.669:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.327031][ T3099] usb 4-1: config 0 descriptor?? [ 409.353829][ T30] audit: type=1326 audit(1751942258.669:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.377182][ T30] audit: type=1326 audit(1751942258.669:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c61b8e929 code=0x7ffc0000 [ 409.574560][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 409.581938][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.595563][ T5912] usb 2-1: USB disconnect, device number 51 [ 409.645801][ T44] radio-si470x 5-1:4.10: could not find interrupt in endpoint [ 409.654429][ T44] radio-si470x 5-1:4.10: probe with driver radio-si470x failed with error -5 [ 409.664760][ T44] usbhid 5-1:4.10: couldn't find an input interrupt endpoint [ 409.684257][ T44] usb 5-1: USB disconnect, device number 44 [ 409.693273][ T5945] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 409.758223][ T8000] tipc: Enabled bearer , priority 0 [ 409.767690][ T8000] syzkaller0: entered promiscuous mode [ 409.773690][ T8000] syzkaller0: entered allmulticast mode [ 409.782484][ T8000] veth1_to_bridge: mtu less than device minimum [ 409.852908][ T3099] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 409.858440][ T5945] usb 3-1: config 1 interface 0 has no altsetting 0 [ 409.861482][ T3099] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 409.877172][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 409.886841][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.895740][ T5945] usb 3-1: Product: syz [ 409.900095][ T5945] usb 3-1: Manufacturer: syz [ 409.905018][ T5945] usb 3-1: SerialNumber: syz [ 410.151059][ T5945] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 410.171717][ T5945] usb 3-1: USB disconnect, device number 41 [ 410.182088][ T5945] usblp0: removed [ 410.442471][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 410.542966][ T3099] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 410.736478][ T3099] usb 5-1: Using ep0 maxpacket: 16 [ 410.748129][ T3099] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 410.757744][ T3099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.772764][ T3099] usb 5-1: Product: syz [ 410.778126][ T3099] usb 5-1: Manufacturer: syz [ 410.785695][ T3099] usb 5-1: SerialNumber: syz [ 410.793946][ T3099] usb 5-1: config 0 descriptor?? [ 410.803628][ T3099] as10x_usb: device has been detected [ 410.809551][ T3099] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 410.830896][ T3099] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 410.872898][ T44] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 410.930693][ T3099] as10x_usb: error during firmware upload part1 [ 410.938079][ T3099] Registered device Sky IT Digital Key (green led) [ 410.958295][ T5912] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 411.004842][ T8021] random: crng reseeded on system resumption [ 411.029426][ T5945] usb 5-1: USB disconnect, device number 45 [ 411.061743][ T5945] Unregistered device Sky IT Digital Key (green led) [ 411.064065][ T5945] as10x_usb: device has been disconnected [ 411.065775][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.092167][ T44] usb 2-1: config 0 has no interface number 0 [ 411.101102][ T44] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 411.112516][ T44] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 411.123670][ T44] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.134306][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.145421][ T44] usb 2-1: config 0 descriptor?? [ 411.152309][ T8025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 411.165066][ T44] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 411.395733][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.404581][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.588602][ T8035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.870383][ T7999] tipc: Resetting bearer [ 411.900332][ T7999] tipc: Disabling bearer [ 411.967635][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 411.981422][ T5945] usb 2-1: USB disconnect, device number 52 [ 412.047606][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 412.056970][ T8046] bridge_slave_1: left allmulticast mode [ 412.062794][ T8046] bridge_slave_1: left promiscuous mode [ 412.069308][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.139394][ T8046] bridge_slave_0: left allmulticast mode [ 412.146893][ T8046] bridge_slave_0: left promiscuous mode [ 412.153678][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.345516][ T8053] @: renamed from vlan0 (while UP) [ 412.796742][ T5961] usb 4-1: USB disconnect, device number 37 [ 413.761339][ T8063] delete_channel: no stack [ 413.809795][ T30] kauditd_printk_skb: 615 callbacks suppressed [ 413.809813][ T30] audit: type=1326 audit(1751942263.659:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.016550][ T30] audit: type=1326 audit(1751942263.659:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.063966][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 414.190463][ T30] audit: type=1326 audit(1751942263.669:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.366132][ T30] audit: type=1326 audit(1751942263.669:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.519096][ T30] audit: type=1326 audit(1751942263.669:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.600385][ T30] audit: type=1326 audit(1751942263.669:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.622948][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 414.692903][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 414.755276][ T30] audit: type=1326 audit(1751942263.669:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.846458][ T30] audit: type=1326 audit(1751942263.689:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.869200][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 414.878171][ T30] audit: type=1326 audit(1751942263.689:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 414.927156][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.952971][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 414.977161][ T30] audit: type=1326 audit(1751942263.689:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c3c72ab19 code=0x7ffc0000 [ 415.023505][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.093483][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 415.103797][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.150279][ T9] usb 4-1: config 0 descriptor?? [ 415.155614][ T977] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 415.176643][ T8075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.187493][ T9] hub 4-1:0.0: USB hub found [ 415.345038][ T8087] input: syz1 as /devices/virtual/input/input19 [ 415.358855][ T977] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 415.451284][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 415.473248][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.487600][ T8087] random: crng reseeded on system resumption [ 415.535758][ T977] usb 2-1: Product: syz [ 415.556649][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 415.577036][ T977] usb 2-1: Manufacturer: syz [ 415.580086][ T8094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.597628][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 415.609988][ T977] usb 2-1: SerialNumber: syz [ 415.651044][ T977] usb 2-1: config 0 descriptor?? [ 415.680595][ T977] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 415.698925][ T9] usb 4-1: USB disconnect, device number 38 [ 415.730646][ T977] usb 2-1: setting power ON [ 415.751996][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 415.800658][ T977] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 415.856701][ T977] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 415.879142][ T977] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 415.978300][ T8087] Unrecognized hibernate image header format! [ 415.986102][ T8087] PM: hibernation: Image mismatch: architecture specific data [ 416.010480][ T977] usb 2-1: USB disconnect, device number 53 [ 416.346527][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 416.480653][ T8117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.546407][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 416.562938][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 416.578021][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 416.590635][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.618861][ T9] usb 3-1: Product: syz [ 416.626735][ T9] usb 3-1: Manufacturer: syz [ 416.631352][ T9] usb 3-1: SerialNumber: syz [ 416.651113][ T9] usb 3-1: config 0 descriptor?? [ 416.677030][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 416.732750][ T5904] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 416.757808][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.767009][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.775153][ T10] usb 5-1: Product: syz [ 416.780806][ T10] usb 5-1: Manufacturer: syz [ 416.785596][ T10] usb 5-1: SerialNumber: syz [ 416.836874][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.882448][ T977] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.891738][ T5904] usb 2-1: Invalid ep0 maxpacket: 64 [ 417.023299][ T5904] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 417.183021][ T5904] usb 2-1: Invalid ep0 maxpacket: 64 [ 417.191969][ T5904] usb usb2-port1: attempt power cycle [ 417.523452][ T5945] usb 5-1: USB disconnect, device number 46 [ 417.535822][ T5904] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 417.563855][ T5904] usb 2-1: Invalid ep0 maxpacket: 64 [ 417.746692][ T5904] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 417.778542][ T5904] usb 2-1: Invalid ep0 maxpacket: 64 [ 417.784527][ T5904] usb usb2-port1: unable to enumerate USB device [ 417.800245][ T8132] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.810019][ T8132] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.819210][ T8132] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.828578][ T8132] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.143009][ T977] usb 5-1: Service connection timeout for: 256 [ 418.150603][ T977] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 418.178382][ T977] ath9k_htc: Failed to initialize the device [ 418.189139][ T5945] usb 5-1: ath9k_htc: USB layer deinitialized [ 418.673289][ T5945] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 418.769125][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.781113][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.822565][ T9] gspca_sonixj: reg_w err -71 [ 418.827800][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 418.851775][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.875495][ T9] usb 3-1: USB disconnect, device number 42 [ 418.893351][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 418.919877][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.951493][ T5945] usb 5-1: config 0 descriptor?? [ 419.156744][ T8175] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1936550626/1936550628 [ 419.167934][ T8175] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1936550626/1936550628 [ 419.242984][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 419.407353][ T5945] lg-g15 0003:046D:C222.000C: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 419.433504][ T9] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 419.449505][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 419.476601][ T9] usb 3-1: can't read configurations, error -61 [ 419.646320][ T5945] usb 5-1: USB disconnect, device number 47 [ 419.682785][ T9] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 419.943686][ T9] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 419.954180][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 419.961889][ T9] usb 3-1: can't read configurations, error -61 [ 419.968772][ T9] usb usb3-port1: attempt power cycle [ 420.155922][ T5945] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 420.299998][ T5945] usb 2-1: device descriptor read/64, error -71 [ 420.422756][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 420.453940][ T9] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 420.463519][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 420.471324][ T9] usb 3-1: can't read configurations, error -61 [ 420.612922][ T5945] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 420.632851][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 420.664165][ T9] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 420.674423][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 420.682198][ T9] usb 3-1: can't read configurations, error -61 [ 420.694656][ T9] usb usb3-port1: unable to enumerate USB device [ 420.752911][ T5945] usb 2-1: device descriptor read/64, error -71 [ 420.829440][ T8191] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 420.841508][ T8191] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 420.849928][ T8191] CPU: 0 UID: 0 PID: 8191 Comm: syz.0.585 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 420.860179][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.870254][ T8191] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 420.875640][ T8191] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 6a 4f 3e f8 85 [ 420.895252][ T8191] RSP: 0018:ffffc9000448f070 EFLAGS: 00010206 [ 420.901323][ T8191] RAX: ffffffff8981dab3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 420.909314][ T8191] RDX: ffffc90005031000 RSI: 0000000000000308 RDI: 0000000000000309 [ 420.917283][ T8191] RBP: dffffc0000000000 R08: ffff8880306e0000 R09: 0000000000000002 [ 420.925248][ T8191] R10: 00000000ffffffff R11: ffffffff8981da90 R12: dffffc0000000000 [ 420.933211][ T8191] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888078084000 [ 420.941176][ T8191] FS: 00007f8c62a796c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 420.950096][ T8191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.956665][ T8191] CR2: 000000110c42dc86 CR3: 00000000768d2000 CR4: 00000000003526f0 [ 420.964627][ T8191] Call Trace: [ 420.967893][ T8191] [ 420.970808][ T8191] qdisc_tree_reduce_backlog+0x29c/0x480 [ 420.976452][ T8191] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 420.982163][ T8191] fq_codel_change+0xa96/0xef0 [ 420.986914][ T8191] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 420.992451][ T8191] ? __pfx_fq_codel_change+0x10/0x10 [ 420.997797][ T8191] ? __sock_sendmsg+0x21c/0x270 [ 421.002695][ T8191] fq_codel_init+0x355/0x960 [ 421.007292][ T8191] ? lockdep_rtnl_is_held+0x26/0x40 [ 421.012477][ T8191] ? __pfx_fq_codel_init+0x10/0x10 [ 421.017587][ T8191] qdisc_create+0x7ac/0xea0 [ 421.022097][ T8191] tc_modify_qdisc+0x1426/0x2010 [ 421.027020][ T8191] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 421.032293][ T8191] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 421.037558][ T8191] rtnetlink_rcv_msg+0x779/0xb70 [ 421.042491][ T8191] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 421.047585][ T8191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.053041][ T8191] ? ref_tracker_free+0x63a/0x7d0 [ 421.058052][ T8191] ? __copy_skb_header+0xa7/0x550 [ 421.063071][ T8191] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.068436][ T8191] ? __skb_clone+0x63/0x7a0 [ 421.072925][ T8191] netlink_rcv_skb+0x208/0x470 [ 421.077672][ T8191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.083117][ T8191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.088395][ T8191] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.093578][ T8191] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.098757][ T8191] netlink_unicast+0x75b/0x8d0 [ 421.103511][ T8191] netlink_sendmsg+0x805/0xb30 [ 421.108267][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.113539][ T8191] ? aa_sock_msg_perm+0x94/0x160 [ 421.118464][ T8191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.123739][ T8191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.129029][ T8191] __sock_sendmsg+0x21c/0x270 [ 421.133697][ T8191] ____sys_sendmsg+0x505/0x830 [ 421.138449][ T8191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.143717][ T8191] ? import_iovec+0x74/0xa0 [ 421.148205][ T8191] ___sys_sendmsg+0x21f/0x2a0 [ 421.152886][ T8191] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.158098][ T8191] ? __fget_files+0x2a/0x420 [ 421.162681][ T8191] ? __fget_files+0x3a0/0x420 [ 421.167357][ T8191] __x64_sys_sendmsg+0x19b/0x260 [ 421.172287][ T8191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.177925][ T8191] ? rcu_is_watching+0x15/0xb0 [ 421.182685][ T8191] ? do_syscall_64+0xbe/0x3b0 [ 421.187346][ T8191] do_syscall_64+0xfa/0x3b0 [ 421.191829][ T8191] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.197015][ T8191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.203064][ T8191] ? clear_bhb_loop+0x60/0xb0 [ 421.207720][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.213620][ T8191] RIP: 0033:0x7f8c61b8e929 [ 421.218025][ T8191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.237619][ T8191] RSP: 002b:00007f8c62a79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.246017][ T8191] RAX: ffffffffffffffda RBX: 00007f8c61db5fa0 RCX: 00007f8c61b8e929 [ 421.253972][ T8191] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006 [ 421.261923][ T8191] RBP: 00007f8c61c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 421.269872][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.277851][ T8191] R13: 0000000000000000 R14: 00007f8c61db5fa0 R15: 00007f8c61edfa28 [ 421.285822][ T8191] [ 421.288844][ T8191] Modules linked in: [ 421.292806][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.298932][ T8191] ---[ end trace 0000000000000000 ]--- [ 421.304410][ T8191] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 421.309776][ T8191] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 4d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 6a 4f 3e f8 85 [ 421.329410][ T8191] RSP: 0018:ffffc9000448f070 EFLAGS: 00010206 [ 421.335485][ T8191] RAX: ffffffff8981dab3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 421.343482][ T8191] RDX: ffffc90005031000 RSI: 0000000000000308 RDI: 0000000000000309 [ 421.351456][ T8191] RBP: dffffc0000000000 R08: ffff8880306e0000 R09: 0000000000000002 [ 421.359482][ T8191] R10: 00000000ffffffff R11: ffffffff8981da90 R12: dffffc0000000000 [ 421.367465][ T8191] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888078084000 [ 421.375443][ T8191] FS: 00007f8c62a796c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 421.384420][ T8191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.390995][ T8191] CR2: 000000110c42dc86 CR3: 00000000768d2000 CR4: 00000000003526f0 [ 421.399021][ T8191] Kernel panic - not syncing: Fatal exception in interrupt [ 421.406468][ T8191] Kernel Offset: disabled [ 421.410777][ T8191] Rebooting in 86400 seconds..