last executing test programs: 9.037792859s ago: executing program 3 (id=901): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) listen(r1, 0xfffffffc) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 8.894403151s ago: executing program 3 (id=903): r0 = socket$inet6(0xa, 0x80000, 0x7) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_usb_connect(0x0, 0xa1, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 6.634295276s ago: executing program 3 (id=914): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) listen(r1, 0xfffffffc) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 6.151455306s ago: executing program 3 (id=916): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x280802) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x14, r3, r1}) (async) syz_usb_connect(0x1, 0x5d, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r4, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=[0x20000, 0x80000000, 0x1, 0xfffffffe, 0x8001, 0x6], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 4.426377256s ago: executing program 1 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xc4, 0x1a, 0x100, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0xc, 0xff, 0x0, 0x0, @u64=0x2}, @generic="c3c424806479338138228e57e3917a5353f3e714ffea1eecdbf42a27c547e739f995bba23338afd346537b3d30338812c2965b199901cecfd60f06e97b6eb5ad2b498ba1e6be5eb8eb986117fff799153c2cb52165b236f618dcadb712f6f9c95cb75fa9f300d6b0deb7c5cbd50300b175de500dc4f700307606599aef7111e2431a430809b00ac2af95ede20c924a4587222c5868a5eac9519cb3a113beb6f444ff77"]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) sendmsg$nl_generic(r0, &(0x7f00000021c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000000fc0)={0x14, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x20000010) 3.269488237s ago: executing program 1 (id=930): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x18102, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000080), 0x200000, 0x4) 3.155063168s ago: executing program 2 (id=931): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg$inet_sctp(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x20, 0x10}], 0x1, 0x40000) (fail_nth: 3) 3.069045429s ago: executing program 1 (id=932): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) (async) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x516b, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2b, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000040)) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.780130907s ago: executing program 0 (id=933): r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000340)='.\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f0000000080)="f2aa67360f014d06b85f000f00d82ef20fa4afde21c40f01c266b97e02000066b829d5d99466ba000000000f30660f38806a7dbaf80c66b878f6648366efbafc0c66b863bd59aa66ef829a7ad2f6baf80c66b80975ee8066efbafc0cb007ee", 0x5f}], 0x1, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.779668241s ago: executing program 2 (id=934): add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x14, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.778817827s ago: executing program 3 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0xa16da000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x400, 0x8000}}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x2404c8d5}, 0x8004) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x445c, 0x4) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x28, &(0x7f0000000080)=@raw=[@ringbuf_query, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@ld}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84a}}, @call={0x85, 0x0, 0x0, 0xbc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query], &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0x1, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x2, 0x6, 0x3}], 0x10, 0x200, @void, @value}, 0x94) 2.644732549s ago: executing program 1 (id=936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x8000) ioctl$I2C_TIMEOUT(r1, 0x702, 0x150) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.638391483s ago: executing program 2 (id=937): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bacc0000202ca6f43daba61c81c93f6ec60360504f47de4a282361be3ea20825"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = io_uring_setup(0x6f6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000005480), 0x0}, 0x20) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = eventfd(0xffffffff) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000500)={0x0, 0x24, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4, 0xf, 0x3], [0x1000, 0xfffffffc], [0x0, 0x0, 0x2000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r9}) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r10, &(0x7f0000000000)=""/178, 0xb2) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010000000000000000000a00030000000000040004000600070007000000f32608716b1e3ec85230a88e4f64a1e02e95169fc781803c963d0f0a3a254aed0c8a93bd97819bdc59a59b8422671f25bcc96f239aca4aeae151d7329c8bebd592f89c7c37ab843acb"], 0x24}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.500134481s ago: executing program 0 (id=938): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) listen(r1, 0xfffffffc) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 2.385953999s ago: executing program 1 (id=939): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x20000a}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0xf000, 0x1000, &(0x7f0000fef000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) rt_sigaction(0x40, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000640)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x2020) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000ff00060009000000ce7aae6495bb64eb941420563629fe3dff9088c883946207de45b2c91373a3e57be3fe07dd11d2b933ca696e7873e39aecdb90d20203c0bfbcb229fea7bd6c61db2e0776999d4791298b741fb437ed5f4565ff02ca677b5db2aebdbd82c6536c91f895aa0ad17dc275b5dc410fd048445de890b50fd219845fc6158da9e33ba915f5e672a07f481d100222ff1a1a649812ed0ce95dce8041838237686a2ca232c4a5a221e6e23160b2f29e810016f27bcb9de77eb33c890c1700527d74fd7c7019"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = dup(r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x601}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000049325376d324f715c65730b992ce2475c7e54ae02742b680bbc25bd3d37646f72c7960536c38", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) pidfd_getfd(r7, r3, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) 2.325002628s ago: executing program 0 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xc4, 0x1a, 0x100, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0xc, 0xff, 0x0, 0x0, @u64=0x2}, @generic="c3c424806479338138228e57e3917a5353f3e714ffea1eecdbf42a27c547e739f995bba23338afd346537b3d30338812c2965b199901cecfd60f06e97b6eb5ad2b498ba1e6be5eb8eb986117fff799153c2cb52165b236f618dcadb712f6f9c95cb75fa9f300d6b0deb7c5cbd50300b175de500dc4f700307606599aef7111e2431a430809b00ac2af95ede20c924a4587222c5868a5eac9519cb3a113beb6f444ff77"]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) sendmsg$nl_generic(r0, &(0x7f00000021c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000000fc0)={0x14, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x20000010) 2.128178628s ago: executing program 4 (id=941): syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) pipe(&(0x7f00000045c0)) io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x1ce2, 0x400, 0x2, 0x3c1}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000080), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2.013600065s ago: executing program 4 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x4ef, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 1.857079455s ago: executing program 1 (id=943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@allocspi={0x22c, 0x16, 0x100, 0x70bd29, 0x25dfdbfc, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x3, 0x9, 0x2, 0x0, 0x2, 0x20, 0xa0, 0x29}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x33}, @in6=@remote, {0x0, 0x6, 0x8, 0x6, 0xc, 0xf, 0x8, 0xf}, {0x3, 0x976a, 0x1, 0x1}, {0x1, 0x0, 0x3}, 0x70bd2c, 0x3507, 0x2, 0x1, 0x7, 0x48}, 0x401, 0x1}, [@etimer_thresh={0x8, 0xc, 0x5}, @lifetime_val={0x24, 0x9, {0x6, 0x12, 0x8000000000000001, 0x6}}, @proto={0x5, 0x19, 0x3c}, @extra_flags={0x8, 0x18, 0x337b6776}, @sa={0xe4, 0x6, {{@in=@local, @in6=@loopback, 0x4e22, 0x0, 0x4e24, 0x2, 0xa, 0x80, 0x20, 0xc}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d6, 0x33}, @in=@empty, {0x8, 0x7, 0x92, 0x2, 0x2, 0x4, 0x1, 0x12}, {0xa, 0x1000000000000000, 0x7f, 0x3ff}, {0x0, 0x3, 0x9}, 0x70bd2b, 0x3507, 0xa, 0x1, 0x0, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x22c}}, 0x4c050) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000000a010100000000000000000000000000e0000002000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000003c00000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000008400000000000000000000000000400000000000000000000000000000000000000000000000000044000500ac1414aa00000000000000000000d5c50000000000003c00000000000000ffffffff0000000000000000000000000000000000032000000000000100000000000000"], 0xfc}}, 0x4009000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000240)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x0, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x8, 0x0, 0x1, 0x0, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x7, 0x6, 0x9}], 0xfffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], 0x0, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000940)='C\t', 0x2) setsockopt$inet_opts(r9, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) getsockopt$inet_opts(r9, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28) 1.388442014s ago: executing program 0 (id=944): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/4, 0x4}], 0x1) userfaultfd(0x801) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) (async) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000082, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x3444, 0x872b, 0x2, 0xa3}, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) 1.076333048s ago: executing program 0 (id=945): r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfd, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11, 0x0, 0x801}, 0x40040) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, {0xa, 0x4e20, 0x3b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0xffffffffffffffff, {[0x7, 0x6, 0x5, 0xb63, 0x400, 0x7, 0x2, 0x3ef]}}, 0x5c) 987.232545ms ago: executing program 4 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='jffs2\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x68, 0x23b) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) close(r1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002400128009000100626f6e640000000014000280060019008800000005000100010000000000"], 0x44}}, 0x0) 825.471213ms ago: executing program 4 (id=947): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000240)="62a1b1f64d9edb1e537e07a5f32034dd5b7ae40278b3c13cdfb5cd398c2450745b", 0x21}], 0x1, 0x0, 0x0, 0x20004001}, 0x850) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18974bf592b92134b831ae68eb7b3d2b4fee3c8a7eff46f77743fdaa4a629155f6558ea4d0e32915433577289a3927a62de29bc8aa9c632d396b10ea64d23c09c4d4ee099906c9655d5d67bbcffecf4fff4311da038b4e962402355faa8cce74"], 0xb8}}, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) chdir(&(0x7f0000000040)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 710.414629ms ago: executing program 0 (id=948): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800452800300000000000219078ac1e0001ac1414aa05009078051414bb450000000000000000000000e0000002ac141400adaf732d394c2cafc3e40a102fab9c6ff851160bcb3a62dbb163b4ee9ef60f8d1a547fedcb"], 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="2500000004"], 0x25) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) splice(r0, &(0x7f00000021c0)=0x35, r1, &(0x7f0000002200)=0x5, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fallocate(r7, 0x40, 0x100000000, 0x9c7) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x96cb, 0xc3, 0xe, 0x401, 0x8, "cc7fcd8919a1487f4eff4d7dbab8d52bf158d9", 0x1, 0xef}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d65746100000000140002800800014000000010080002400000000514000000110001"], 0xf8}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008680)="b4b53918b2d3e41567caaf4a40bd0070fa730e5c4fb724862048e7f4565a6d7dd766badb0d4f446a32abffbaf736e8009c4633a0be35241f034b99e605c78212f62dccd38e0d148642585a0c519c2625af11e22a47958358b1d1e629f07d8a952d0d38407a20da1f5ead78ee41ca83173efa1406a286d3516b16b7b3261c6e4ff607d43b0d3cd60b7200322b83e1b5c8a63abcd8449aebc454d41c870a5018bb4f482b4d12a1572c2030a20de882f08183df9b17d05710c58e6905303f83f1832ea6badd66602a51b2701480f255dfe99e654b921a46838767704e6684e340567a91baf56e22198ceb2fd40e8a6089807f95f60da4aa4fb16ea127417b6be58ff57e794230f355cc207398463f727e4c18a748ccaf483f6d8b17c6b8b0a808768a03bfc932da5f1cb146ba2f4031c9ed3c6fb3442ee11976a0985a0220ba4ca51e2ed01c0bb76f37871651c9810c49bc8b8ce840649d0317a9a6e2d0c0593374141f09c03db906489bf42c55d81ef58ac1e574b0610b83aea7ea5384e02a8634de887ad5bab898b4e3a0a9c00c33c00fb8d6d54f89875b6ee5cfeb7286bee2af13c39a0fc09f7f96dce4e2d1195ea656772c9fc5a83f5616f88663f2ff95af70f530b8af78450ebd667ad4afb6577688d4eb05840947a6765a82852e0f96f5a670ab450beec5a9ea7ea0e58e05b20a572c0356df64829e948fb6f56b3359a09889b6b6222d0daa37505036165eb46781c63d4e3abbf2a89fc86c6dafe6d26e551d849b5564aa7b926b66b8be9256061aff88831c4f2b3f31ef25e7abe2621cd646a34f7bfb60badac46e368ce46396fdceab56a817a340a9a361e8d3cfccd5fe72c5a49a1349b26ae159f0228ec1ca2de8237c59776140269082e883af459ccdf07cc182ffa675b559a6a54bbac92b227b1229390aded89c007d87af878f46b63c84a9635d9e0d9ec640dc3d0eace492c0f6ede1a544f83067c30dd34fa3f3d464af6d19e5835eb4c47075a5bc82adee6b09375a364c9779d31d2efbcb25a76c90a92712c1df5218778dad0810c45e9ce02c8489a5da8afdbf9a28efdf1d6e5aa058506981bcafbfc532c4deee23da247825cd86793ed338a05681759a50379627801ab59ae5445b10dced5f05c5bc0dba6917b69be731e203b9cd3da1d2ad81abb97df13e68b72a61c434720c6ce29b6c3cb1f4264a12297becb0b2f7c9f28b7c47ee869c6d70611d3ca727454e18eea5ba9154e352b63d81a811a1ca97375531a8ecaf34d77df16d4bb229b57933d93ca4c0ef63191c164eb4a8c505076f49504c2f35f17a1660b3524609bcd14cd14324c50d0060b5b744a8119d964121f8b2cab72b9bac8c93249418e5f2452db5bad960cf256832069f17f556cf42b78c76e5dff113cf017a1a7ddd3a2f8c345f4265f8b19a1d4e38e862ff34c7f273725f7b3c4529247067e2a16c414d8674e5873f1ef9a8d7d2a7452824c3739d93ef5430d546cc88fb39b3750538cd10d80c822c0423fc405c9fde960bfcf5fa6c2cb9ff75067b45d2b082e848d2efab29da850298e274dcfd47e1572f67cbad056c52225fdf01d182627ab2030f675e4ab8c8cb81a978440d38cd8aec8dfab4a436724110f5fe5ee522a43a66a3f7d1b137ddb4c43cda73096d1655f7948cd14f797d8b20bb501ef3e18585408d299c053df5a6f447d93124bac19b2516d591cfbe97e7bfd856b2ca961035cba05e616f0a1b2e242e8cdbd31d160d18c72b8f121e317c5b5f759a1e8bad4462b020fa65339e9f1eead0ec6b01f7a12d65ca764370e3ecc8564fa7bb1479c49f0de1ab8434684d5de2892155d82af075bce5415ad995f459037d078c9617bbcde146218bfed98b8b0b926301ce57e171d15d747d68b5a93fc5034e59d32c8b9e1cc054974d593e891ae00642914babd727f05e06ca32d56b1a9e249bc279a5351e8aa6d17d911fa9d91dd50a22b9fc279d5f9ef47238e3801c8ebda01d15baeaf153b6c25f9f8af7abdd3040e8db71780876a5535cf05aa602a4929d6a314ac704016e6dbcb52e7f460662476fcd353738571c278284e32d90b4499242f668c36b64ed7f7478283ba22b0df04c3f22d6963796b6a0b208dd580609cc4068c837cd405e684ec3f26cbe7992b06c40550a68b78f44b67fcdd50f65e64c1e533eaae93616478695a8f9c9b6045f00bd8b61364f03a336fe1f78f88e16b57a6d43d5670113f715b2f6c37e6caf0d2cae0d129d24fdad02e4b87d9eda94de1c4c351ca15e92d3c0ceae5bd9e2518741362cbf650f33c6f6c89583b23f516d2533b7ec25ad64448d0a51cf13f170cbe1eb9e68a9bb1e7525ad67667561180fbd97bf34f4ad37ab769f3d077c5cea5d7eb320b6e0ecbfe27b5f159073f0b0e0c3d1244467b3a07fd85e893d1bdfa2d97fc161b293b106dbbfdf140d811788c5c221d0449e97a1d4f04d068da6d5c18260cce2f6bd1f0923f2b5881e3a00112f9486a6c6ce67e9cd93547644b8cb1077e395605dc39e90d7e5dae3aebcdc6c7335f181e33304bdcc3a5c7414ae4189a00dba7954807a06d4df6e5481507b809b7035892bc097be0dbf65224e04d36233cb88850a01f6133129920d5639188b3bbb7010bd329889314ca203a34d8a4695d6bd799be617a203b7ac9704aa819e660005d53aa01194682e4326770dd494299815a873d267083ed98163544c1b7e07e39db980afca471d4fb13872f9d863e7679f099192692ba06120df030acbb6be8a09523d7634830d3cb9e82f707933412c6ea84c34c5ba6ab2aecaa3db3f7a655324f77f3c3983836ddf88ee2b5621ab7ebe486ea33d8c140dd4cd221b6375df971ab7d34a73e168c37cad34fb6a41fa0b05feae3c73bb45bdeefb79e94a697aa82e5d655e310b4d8c145a29b41e24db416a29b93a4f2c3f501d8905c9f7d4cb97767de4b86dfa7b4d07aaf7ac5e6bcdda920b1f63564d5fbfc7437b540da0a29c93bf534b5f5f62f51bfecccfcbc9f77b117a7975c1dd3fb01977120834d765e9146862d2fd5f299960a660bbafe19e248b670b89a3b5ca674ebb1e0623890f97dbeb0f75e55e1ef0d045e1c1fc29aab5f0af56a5ac784a01082ed74d8db77f339cbcaaef253ceb6f107bb8e55c52f7f4b6c9b84caafb79d5d13d9b6fc1e75875e45bcef999094774037dde954b0a5c50f28da03b5aafa830d445fe4f4366df423df23d1cdbe902b44bdb4a7f06c1f392b8d097bf09565dc7d80c2024ab4b05cb2f496662dcf293a4472b16588b24e83c0ae0f016640dca2ca122dc413de3e6fd12afc850dc241c8d57ab2fda8a793498796c3a03c191ec31d625e4f8bd8eff538058da874c24e1b4350cfb4664848438fcf082f2db36443cd8c9bba93b3ffee8fdf4ad7d338d179c252e255491d4e41f6268e9ddd8d13e97eee1f7db3c4b51d3adb727a348b174308a9cbff2685654971de6ec06881787b0fe267ffa4c37e41bc6aee1ef2fdec4ed04ab7b6193228d3cac38a2c19228f3970615263a84c253fdc9f16ac9e0122abdfb494a6f04eb806d1d582d3502d7e3c9d758caf91453eef909723c6b8378fe5a69473ed7b22acd7e4cce84a6477c4a23934ee61535c44bfde5f547cc43179217b0087d9a57ed7874737b7e2c1c46a4426fea0655d3f0770d338a1d2999e77aaab58f4d3263e862a446805205ddf032f15a79c6935069114f4f4db6ade52a5569de0a214f3ab79905522f954d4292e2cfafaef546afdf2db396624eb3fd28c35996017edacd17816911b62efdaa72dd35262af71d285d6c5a9c462156d8531e4641e58e55470926e4dfcc1a7ef1a7703c7405f1cd920bf3e85670314b65ea0ca2afcaf54bc344b3f5953f24a2cc6f8ede6417b3af39f90ba1a50f0ba020bbc1543d66d0d61b22e7df64d57b0e7eab7a78781a506df813825b592dcd139321c7b30fb919c623be09dea86018e9e3ce7907894094cb8e315e6a3af6bdaae332eb5b9f4c3442682cb802c79d41f2c7bcec64544b783e81b0625cd04275173663bba8c04d7f52602f41699ad4c677d942184fefb3df9099422b9f97839c2eefdfa47dcca5f9cc5444fcca20e70dc00443f12d76fe2fcd9b4082c94fb8917140d63729fbc507816a981c37938678b3c1c855657b7243bcbdb4149318d9070a22c70035e0560582975df6e5c7d64ae3e8c484f46b26dd4be3475ca63db95366a2d25ba648704b56521744f0d8d8620c82aa26e46c6a73308bc22cb0e943bd572fe30cb40c8a6b45841d186e0a8eede3715f52b03534420c216df694968c78c3bff3dc0414380cb9c44daba0414533552a1bd2c5d98fb466fe07dacf8d894f47c7a8bb7eb204a228ee1b6e0aa2ddb750d2d7c9f270c686b805bc2a81f332672205f17ae8ae9eba7c2a011e80b4fd7778ee1a2d93008a4793a64e294bdcd73f4af0d89d81962d8a91bb66c1776d1c2ae3aa390337cbb2bb2e90a042e1bf67b350d7965aa136f39886bb14b4f645cde5adb7e518a613021bdb72e2a54fc2b1b0129a3b720af5c9a5a6a420585a146bdfe4fb54b85aafa7ea55eba8ac46337e84300d3d2e63ff8d7618037d4dafd5d20796f984a20a553eb6fb3580cada52278c60354604bde6eb4441480c2b3e67184167ca0d1933de04a794a3f178b4b42be5c53790a59495c38a8a164751d661b00a6a6b2f30500905069fc4b73501107291994036be8190cfda78aab1fd6f0eb12c1cb656871f9566b4db21fabc141aad7dd80b942b0758419ca2daec9b8e576e40e6cd7f6af203fe0cb390ad5d77ad82110a99b6ce3d4c1a516a52af2dd1abf4c1231869df26c12af918c319d0fb6e2bc60e159695a284fff4235b49a2097f015a7b0cc4fbafedae3219371e708438bae51b11738dd9f393557b0ab34c3f2488298955b38a62bdd45a3ee8d0bfefdeb099cec4a0d28400a8743f9ae873cc2d403f8873ff6ba4612e5a125886469c676743476c30ae9dd05cbf219352b85e60cada4d298aab7f3029a702f65da044186f23632eca42f989e4863ff299d6408bff0fce8abc8411bb730f6ed173ee8e8fb417ad3cc6d679c0555b59b608a70eda737f1444671b2aec0400663ad761e7b3cc095bffc30b94aa01ac39f93968c7a20891ef385e44613c9b4ebd0fd180311bd03200daa9837e2b10b7d1003b4d9ebde1d83b256b7ca8cc01804f722d7eba5bfb3c88cbd3e8922b6453e734322473d9267b98e5df8806680bb7f9df85cb963ce6245f6c87ada94ea72b5c1b559e2582af33d4353f068d633a27fbc933fe281763d21961f2342190486615a5a9482c0c09944308c8d89d37bbd705dfdcca3334e190171fcea1a297f9b516260c7c8c6a4c14fb2d85d6c2a0ec37310338a27a0f11dd75899c95a149d5cf4c224eb7b4aff8531fb7e625f1a0743a72e89edf09be0f2f1d0bb91f839e328b12ec1e22c460964b1032ded12bb7775091d981e2fa3566d3b55a48250115304548726615c800f433d36918f6e99852964f2a71ee1df288cdc97fddf2da25c625640561a7e1e2263a9d300af98d8432af7c89363d5d114f7b1872e3ed0c77a7792b006f9c8d6c8717f3df53f37df8df3f74e1f1463f2057ff862d11e7e14705ad92e57b1422057ccdf1ded779b1a85b5bbb0978cd4ca793bacc8b037c52a7b5a47aaaf605aa1dd886ea824118f64b89602a2f75a5b658d217aada9d6a5c9d2bdf324e82e649358e5c9ddc1a7d8e50c913ec349791b5475068256eba5ec955f56742e54f78c602389a322814fe5276a314b81ce13e966548c618bf896a259914b3d45a5b6b0d4afd98a31c775d80b2f944e39932bb8a2ba3deb740e07ca2877798e3e391df43c410b4fd4006c8552bbd333ba513aa2e382357619dab1280cd1e9188e801b1791c0256588503eeae4d3435f7d7f3ef3696f9d377640684bae2e08b6685314517d19163bf808e0ed910770db3026257505975e317b6eae79d7fa41938ae49b8e947b24637e57273237d95c3bd6466ac30f3377da79b6255a5c1602c5cf756178b2d7fcfe03807ac4854280417a728b160a6596152be6ad3435a9f70955c54e87fdcd36afd8a62a4d3675525bfb81919223059eec92489c4cc367c252f42d3bc14657a249d657448c2047df03176e4788f29d551fc245d358e9addb9b962640e4a9ff98ccfe09727a2e0711a93b1258ea0eeda14b872be19f57a670f6bf016bf26d63f9f0b3d17a31c8ebfa89c1c850bee54a2853d99d5a7112bfa09558a5dc759268c420f48c29db3f407917927c80b70894c1f6211a4878de0d9472116fab84fcde109065535313c31337164e7682b7b7da546be08a58f240a56c0801a182b57448c484c30acd47ff015f443a99d67aa71157bc514d84c98eaa2fac81e0b488e562dd5adb195f0dad871dcb69334b428daa99842c4251423f0cd53058744b61de8bd4c41a5b2e8cc239a145286a39309d6db5a980f7144ebd915e80b3acd3b1e9ffd4bcca09e3b6c2792372fa7101f64a81f47afa1e1c7f077a9f89a287b8e9668b0c0d43d3c548117fb07e92f081b671cb6a4666d4bf4c5cdc0a36816986ec32f4a77f0d3f04d6abe8e54440282cb06763f650dc59be1f912f6018dec954b0e26efd4ae5298271eb53fb32537c9f32da1eda40299b3e737c8a8dcebd493d5556d22ef3bda6f253a8725bde154d184e3f3ac994ae7d2d7b9b3ca1755f6c6abf08b32a286c5d0fabbe13d926693c446637b9ceee6f8422da29e819edc455b1683acc86e00c903869acd1f9ad2bc0d42de882aa439b4364fd2ba63d762e7d84b85b93e6818d0d3ff259afd815668de940f93ccd4022c8c4f68713cd2c39c3e8cdbbb1c133f0a8294c1819cd24c71e6fd2e561da4e62ff644fccd54ee2f86bf9b4de378007fb74d2a1b187cc09fc3d9dc34f0c9027e3f1180af208890643d1787f73a87b42ec9111f5b1af37f5c812fbb9f1d1d149b7a97bc83e7e4bd9617bf9630809bddca820e5de57602277871652475e478ecf80c8726c2fb6ef9158a461493262ebd8599c155c8a8e23c8d106234c32f82db61faf464a0a19690aef713f75b2393b7d6618aef66785c6733da01b50092116f3b5b6de225b6eb931dc35b1e6defbeac36a896f621aa2ffac5a550cba0cfcc2b7fa5519167741540b0cc745d10c09130fa6ee57281062cc8bfca1353c92a00fd70bd60f7097c5b7d9b6e9436d99cdc1805af010c407e65807c6003e9fef137e22717571b7e647b65f057b975545c2bca567b1fd01c6da90a81633ae776f67bbac5a5cb711ae86c8248e479f7c5f23c0aa83028dda34935da1607d1215dd39520c39f0dfdf87002feb929bd4d5b9d68eab43ab604e3161f1465a736233f50c74b7eac49fed58e6f9d50f400fb8d25a44c293560093ebe0258281da5ad314aca942ad18d8622884c4a52267f26630ea773ae51475e222ef5db9330c2196e9a89a07d724283015c7aea53c82610dcef66bfc2d3838b97656911cbe7b788bf5a94c045e990cdbec9861bce597aa639c3bf0705eecb8b188c32f69582505751bc5adc17cd469e254c1d81be867603defbcd87c241b81bd9460fc11160b5f7b1768ac21147dba3aac11c42c5d7778696c75f37ab2b9ef2e89efe4d21fe9998fd7e01647e8ccbf28b7f450cf259afc0a1b55e948a98a5f10c1769c2eb2679898b91c73f373480904fe01bf8765594addd7ae6d52b4534cf7e95424f70a027eca378414e1aaa7eb2d138044e9a24428307b7514702ccd66417524f0e602ad035eb5628238b3bb50f2ac74e679540a49de8b9fef95e3cf1e9a01608a8cb82e11f43812243ee460ecb4607ec8cf252c7f39a097754228bcf28f90484f25cb8ed9cf454db5fcb49fa4686065e7f9b11fc4bafed171a59063e5976a006142c318d3ed5bb9e2002f9536b2caf1de0eda879ac7be473303ea1bdad1782b3515cc03b7695f06b08e32f23ded1c4da2c856c7e22e76f22c16aa83dfc4ed9bbe2e716a2175662f2dfddfcbd0566fddfae19955ca9598faffcd264fe4df8b74804d605ac79eba2b3cf52ea90ae6d679505317f5d522567aaccef3840c00fb4609758793e939e145c0eed8261b233f9fa33a62a167b48ce4398ca3a7b9a207b4286b2d50cb979837116edce3df04d84d497f3da2196272861d054b31959585fa1656e676102717ed9c1986c39e95aa314c2d289cf3cbcab6cd77da44bf1e1651b5134297607436154f6006b8aa5b768a1d4e65cb47ac199a005942c533904895e879c41bf2d957a8242ebe78c61e1c3eb583bac58f14d7d2f4d724958759a228ab111afc2e8460485f1a28125be09916c071a83d01766fcb02edc66bbba443bd5a5143cf43d7d7c3068aafb75fcc6d4f48a3b61bcdcdb156af7cea988d59299f474306aedad66b36cc6c9190324991639068a4c098b75b82975100a0669f57c28a765e6770fc8b029bc13cadbeb822cf6256fcf00d45afe4c083a8c75495132471b3240c213fa4a32c224962c061a658735df6195ae6fd817fcaf92bf4a08b747bfbe6c63ad28ee689805d5446839745718ba03143f7d57530407cc3bb77f9df28562f97573b5fefa8782fb571d2ae6b3b57576ad7dbe95a957c3d7d0a2f7067702feb792a0d1eabc2b414a3b7d0053f0f4c741dfa8e79373e07edcd12d77ea6bb7db1ccb9b736fc01e9380149e7d86af7d03d8a35cf1be59a77d72a91fc38d84c8c0071fc56b425b7b78d7ac41c1a2ba71b71087a32b9596896ee954ec9dcce920bcc9a0929779366cf12115b485b079e11daa176991dae4aa6887c61ba64d6795c7c5c29e7be1c10ca533e9d82ecfa9ad13e3095e7feb71946451c729c43e0ede3b12e757364ddd2a05f791dc4730e061b18eea1ca3a946052623e325be62695e3a8cdb805022a769e73f412cb19ebc783f1bbf8814d2bb57d14696531d990cb092f996b253da664187697f6fb079d099af7975be42f896c4c1fd9577986c6c658a8230260030ab962501c71e26cc9e6bdc204eb9c833ba10df5aa394dda1b95f5b29445126c0550c4db7c62bd08cac3e40aa598747e0473ec2de72f60399d8e3a67adfe7be46b559130818608864626b257482e15e0b48f0a8cb10b1cb1f2a56b3763e1d1daed78271fb4b36af882524cc14baed0fc7c6a8b54997afd70f618a91e0925d6e16cb872b8d45d0ad1254821998dd299b2b0f9e7360ee2d130375bdea082186dbaf531c8fda4d8dfeb9c84a40f7eec26ca044acd38dcd24753ca511cb9f3b50cf0f6f101f2a477d3cf769f4aa431850397997b874eda836a9d945225fb62b88393e8fce22ac31187f13bf7b8092cdf0b1a0e2a0cdfcb2d1a1f79502d9728d6f0875baba5aee04afdc20a14cc720309fff182c5a29e54bd0d56d8b5cd73fcd76a831ccc0e623c3dc0935ba74636f68c1a97ac55dd9886f45c8c3110f37b51e0e864167c93919fb9cdcb74f4e5a53f89e7c689d7831e4aa0f66ff666022b71453cb1b37893ae4491004bc13f198921f25b0918f565e4228c3201b3f004198b02d5dd0e55a29cae81536878d6563343c841cc7be49fad4ac095d31db1489385d486bf7a7877520a2b0d0cd752cce72ac4d1b7139c205e4c6eb59e8da8514e08a863ca30d36cee84252d4ee1dc2bce208cd2ab4b9d897e545edcaa48d30ba6de29331fb863dec5dc6d706528758066815aa73aad2f320e9d6f6568ef2fb8d67e9043d8fcae8985fc48e30184f7ae1de3e14c311467edcd9a2a180c1a781149a6a12fc6e92e6ca7897c8e24963889d067c77e07615e64c6df922bc9b0fbc4cc659f81fbf985cc188ad7460071c0628c7cf909409491cdad08b7af9ce28ffc379f902d1dc046b42807071dd87852c16e4de7826b2bd1c6f1adce346e6069ddc0e256df950cc5980ab9b20f80da40ea8399bc1ebae0e6b34df431bfbcbd121d2511235346dc09c00890c19bc54b3e74f5286d16dcffa2328a30c8fcafcf3f3aabd511a76737f0da79acecd994d034bc38066981a613679afa24f4076e4f63be566ddb5f2001f26a6c897967ebf4099f99ddb8bd9db7b0f716127eef059c7c662cd6e76d5af1fd932f37c2a56a5823b9d7565844e36a79424e6cc145e40885f990b25bb50ba7b3a2920f1f2dafa595ff50243a1bbd6b3b54581a31f0120d832aa4a3794f6f4359066df3bead35c7eb08949792a9a17559b3633151d7cd5c1d76117cb7e6db5ab95e4fa002a7911fb8328a8c4c9d83f676143824ee61a0e5346123aa8bb815c6c317fdf839e8cc0ab6476657d6b35bd62db9136c9aaa63a756e47c135389ea2fd5cc587d8e19864694952b6fb229c34d420bfb89e60e4d88b3d22339c96d52ae3ecbcbbc231405b8b4a52ede6143b91b37f4e3f4bfc2b69335d758e687bcea1ef9bdce4dfd45c3ea33f35b913e61324db34b0df26e0017566c80e193f8b5ca650a8dde30d750a619289cc469459d0be89a4ed127d0267f9b2b90a86b8b7593c546a5007ef9a3f12f961f77f511386f448abf496028424d680964c53c81aa80d5d0cbbad964d93acf3cb5394202dea85e6311ecec93f2863266748e922742c1c709c2cfac24535cc50a3b59f2b8e90b333876e869b81ec21930f1d93bac1386a2532d9da4b302f7e97f04c8eb188319642b89e78013f3a9c7df82bcf5d9d2ace1923633eaa2ab1c2409e351752c941e7bfd72d5002d1b0c0632cc34bb8ccfea1a017a130297be76a04a22201acc34993465306989f081747f96858785ae06407eb332aea5f430ad078db97114f5429dd0c237b2000db9f2e5f759048ef4754d3c1dcbebcf9e235b55db61b94ebad5b57ca784bea73d771fe553c461e610acd4fcb303ebce016506a457539701ed2198fb6040da048667e364ddfc7d5354314a61bef738c2c8044656f793427dfa1f5241dcf6de39c86a65a735598c10bf6dd095f18249af81fe4ab9fc4ddae6d70aad3b19583f90f2086be2ceaaedb5b7b490bee5ca76079767c4680891260357697eb206bb47cfa4d5007b0423a8423a87d6727a897d963d59bb84c0641a4faf8b5806a4f57795b2700739aa2b50195c07fec7da4d22e7b7ce3ac438cd58715910c6602e399ef16448a3ab117dccabc2e1fb5c5c6328a362cc9c3ab70cdd6e3909dc6e37c69f394067d7f3ec09dcc49edf6273ad2ab5301983f0877b22b8c6a8b7c28f480945c1dddbbc1f37feab72bc0d73e4386340d1bb333fd48a82a2d329c9c80cf1a708ab90b8083c8ba03a1eced74082a93e8ec74a5a421758399dabb4968f0dacbce996c2ef6aa2d7e9374b23b4746ccfbb37b58a6e839083f9c2d1bdbb466ae4d2ba19d5f199764a94a9565c6adff3d029d73934f32801f236affefe17092b7e3f3aae59e4cfcddccddda7bdd83f4f8db184aca8df943d304d65bb20d2d6498467661198b38c22095ef63182615261d974919bf91f350165042e0902673b373eb2b6daf689d76bb611f90484dfc3199dcbde51f46c2222afda68d53edc5626e643e34c970c846bbd63f2b730e5fb6ea47bb141e45c9be1d73d7ef968ad4b600", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0xfffffffffffffffe, 0xffffffff, {0x400, 0x8, 0x0, {0x0, 0x100000, 0x80000000, 0x8e1, 0x4, 0x6, 0x2, 0x4, 0xfffffc01, 0x0, 0x1, r3, r4, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005480)='./file0\x00', 0x0, 0x100) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002380), r7) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000002480)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x48, r9, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004084) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000002500)={0x0, 0xfffffc78, 0x4, '\x00', &(0x7f00000024c0)=0x1}) 583.731019ms ago: executing program 2 (id=949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x8000) ioctl$I2C_TIMEOUT(r1, 0x702, 0x150) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 336.235627ms ago: executing program 2 (id=950): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) listen(r1, 0xfffffffc) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 332.081577ms ago: executing program 3 (id=951): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000180)=""/126, 0x7e, &(0x7f00000005c0)={&(0x7f0000000400)={'sm3\x00'}}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) read(r1, &(0x7f0000000140)=""/224, 0xe0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x18102, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f00000010c0)={{0x3, 0xffffffff, 0x5, 0x8, 0x1000, 0x9}, 0x242, [0x6, 0xdab, 0xb, 0x9, 0x0, 0xe8c, 0x200, 0x7fff, 0x0, 0x6, 0x81, 0x896b, 0x7, 0x4, 0x400, 0xff, 0xfffff000, 0x3a, 0x1, 0x9, 0x71, 0x9, 0xea74, 0x3ec1, 0x1, 0xd96c, 0x24000000, 0x1, 0x2, 0x2, 0x0, 0xa2, 0xeda, 0xef8, 0x65, 0xff, 0xfc, 0x7, 0x8, 0x3, 0x6, 0x7, 0xd, 0x1, 0x344054a0, 0x3, 0x100, 0x2, 0x4, 0xe1, 0x0, 0xf80, 0x1b0, 0x1, 0x4, 0x1, 0x492, 0x88, 0x5, 0x10, 0x401, 0x9, 0x0, 0x8000, 0x81, 0x7ff, 0x3ff, 0x6, 0x7, 0x2, 0x0, 0x3, 0x5, 0x1, 0x6c, 0x8, 0x3, 0x6, 0x8, 0x8001, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x7, 0x10000, 0x1, 0xa20, 0xffffffff, 0x0, 0x5, 0x8, 0x6, 0x3, 0xe1, 0x4, 0x4, 0x3, 0x5, 0x2, 0x81, 0x10000, 0x0, 0x3, 0xfffffff9, 0xc, 0xfff, 0xfffffff6, 0x0, 0x63, 0xfffffffd, 0x0, 0xfffff000, 0x200, 0x5, 0x1, 0xfffffffe, 0xff, 0x8, 0xfffffff8, 0xfffffff7, 0x2, 0x9, 0x2008, 0x8c, 0x8, 0x2, 0x9, 0xffff, 0xffff, 0xff, 0x2, 0x7, 0x5, 0xf, 0x7, 0x8, 0x9, 0x0, 0xa, 0x9, 0x5, 0xf, 0x2, 0x1, 0x4, 0x40, 0x10000000, 0x5, 0x1, 0x9, 0xbc4, 0x4033, 0x400, 0x8, 0x80000001, 0x5, 0x8, 0x800, 0x2, 0x7, 0xec48, 0x6, 0x81, 0x0, 0x8, 0x4, 0x8, 0x7, 0x5, 0x1, 0x3, 0x9, 0x80000001, 0x7, 0x8, 0xfffffff3, 0x2, 0xffffff6e, 0x2, 0x6, 0x7, 0x3, 0xf7ea, 0x80000001, 0x5, 0x0, 0x7fff, 0x7, 0x3, 0x6e2fc2f6, 0xfffffff7, 0x7ff, 0x50, 0xe, 0x180, 0x4, 0xcc, 0x7, 0x0, 0x6, 0x6e, 0x9, 0xe0000000, 0x9, 0x3b5e, 0x4, 0x0, 0xda, 0x4, 0x9, 0xd, 0x0, 0x1, 0x1, 0x7fffffff, 0xf88, 0x3, 0x2, 0x5, 0x6, 0x4e7, 0x73b, 0x8, 0xe2d7, 0xd, 0x2, 0x5, 0xffff50ca, 0x9, 0x3, 0x3af1f10, 0x3, 0x1, 0x7ff8000, 0x4, 0x9, 0x4faa, 0x2, 0xecf, 0x9, 0x1, 0x3, 0x101, 0x3f3, 0xa, 0xfffffffd, 0x8, 0x0, 0x800, 0x13, 0x1, 0x4, 0x9, 0x4, 0x0, 0x6, 0xe, 0x94, 0x5, 0x3, 0xf05, 0x80, 0x0, 0x7, 0xc, 0xffff, 0x0, 0x1000, 0xe6, 0x200, 0xf, 0x42f, 0x10001, 0x6, 0x6, 0x6, 0x1a1, 0xa96, 0x3, 0xa69, 0x5, 0x2, 0x6, 0x2, 0xdf46, 0x401, 0x1, 0x80, 0x3, 0x1, 0x2800000, 0x3, 0xffffffbc, 0xfffffc00, 0x3b2, 0x45db, 0xfff, 0xef, 0x6, 0x7, 0x2, 0x7, 0x5ad9b8de, 0x8, 0x4, 0xfffff001, 0x8, 0x200, 0x101, 0x9, 0x5, 0x8, 0x2, 0x8, 0x2250, 0x1, 0x8, 0x8, 0x75d, 0xffffffff, 0x8, 0x3, 0x2d85, 0x3, 0x7ff, 0x8001, 0x0, 0x8, 0x7, 0x6, 0xe, 0x2, 0x2, 0xdf2a, 0x4, 0x10001, 0x7, 0x3, 0x1, 0x6, 0x3, 0x6, 0xfffffb04, 0x80000000, 0x1, 0x5, 0x100, 0xff, 0x7, 0xa8fb, 0x3, 0x2, 0x3, 0x5, 0x0, 0x8, 0x4, 0xfffffff9, 0x9, 0x3, 0x1000, 0x8, 0xd67, 0xffffffc0, 0x200004, 0x1, 0x101, 0x43, 0x5, 0x723, 0x7, 0xffffffff, 0x467d, 0xfff, 0x7, 0x57a8, 0x400, 0x74, 0xaa1, 0x2, 0x2, 0x4, 0xffff, 0x1, 0x1000, 0x7, 0x4, 0x5, 0x2000000, 0x8, 0x7fff, 0x6d, 0x1, 0x5, 0x4080, 0x3, 0x5, 0xa372, 0xffffff81, 0x5, 0x5, 0x4d000000, 0x7, 0x9, 0x7ae, 0x2000, 0x7, 0xfffffffb, 0x4aa1, 0x7, 0x2, 0x0, 0x2, 0x298c, 0x989f, 0x1, 0x8, 0x1, 0x3, 0xfffffff7, 0x40, 0x2, 0xffff, 0x9, 0x200, 0x9, 0x3ff, 0x32c7, 0x400, 0x5, 0x7c1, 0x1f, 0x7, 0x7, 0x4, 0x8, 0x80000000, 0xd, 0x278e142d, 0x2, 0x10005, 0x7f, 0xc0, 0x1, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfff, 0x6, 0x4, 0xaf9, 0x1, 0x8, 0x1ff, 0x7, 0x8, 0x7, 0x5, 0x800, 0x7, 0x40, 0x7, 0x2, 0x400, 0x800, 0xffffffff, 0x9, 0x0, 0x5, 0x9, 0x2, 0x4, 0x3, 0x8, 0x400, 0x6, 0xfffffff9, 0x100, 0x2, 0x3c, 0x2b51, 0xe3, 0x6, 0x3, 0x3e0f, 0x5, 0x2, 0x2, 0x99, 0x80000000, 0x2a3, 0x5, 0x1, 0x2, 0xe, 0x7ff, 0x4, 0x4, 0x80, 0x401, 0x7, 0xa, 0x10, 0x1, 0x9, 0x7fff, 0x2, 0x6, 0x8001, 0x0, 0x804e, 0xcc, 0x8, 0x8, 0xa, 0x9, 0x87, 0x4, 0x8, 0x6, 0xfffffbff, 0x3, 0x8, 0xbec, 0x9, 0x9, 0xbbf6, 0x2, 0x2, 0x0, 0x2, 0x5, 0xffff, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x2, 0x9, 0x2, 0x55, 0xfffffa90, 0x92bf, 0x1, 0x40000, 0x9, 0x4, 0x2, 0x2, 0x7, 0x0, 0x9, 0x7, 0x9, 0xf6, 0x8, 0x3, 0x9a27, 0x6, 0x0, 0x4, 0x4, 0x2000, 0x5, 0x96, 0x1, 0x5, 0x1, 0x3, 0xff, 0x5, 0x3, 0x10, 0x684, 0x40, 0x3491, 0x0, 0xffffffff, 0x1, 0x1, 0xffff8001, 0x2, 0x6, 0x6, 0x4, 0x7fffffff, 0xe, 0x18000, 0x401, 0xc, 0x2, 0xfffffff9, 0x8, 0xacb, 0x8, 0x72c, 0x1000, 0x0, 0x10, 0x4, 0x1, 0xffffffff, 0x8, 0x4, 0x5, 0x7fffffff, 0x0, 0x5, 0x8b, 0x4, 0x2, 0x6, 0x1000, 0xeb3a, 0x0, 0xffffffff, 0x0, 0x101, 0x3, 0xfffffff9, 0x8, 0x9, 0x5, 0xffff, 0xc, 0x9, 0xff, 0x8, 0x8792, 0xfffffffd, 0xce, 0x1000, 0x9, 0xbab, 0x2, 0x80, 0x9, 0x8, 0x8, 0x1, 0x0, 0x8, 0x2, 0x3, 0x2, 0x2, 0x3ff, 0x5, 0x9, 0x9603, 0x7, 0x5, 0x44, 0x9, 0x6, 0x52000000, 0x5, 0x1ff, 0x1, 0x81, 0x30, 0x3, 0x0, 0x7, 0x2, 0x6, 0x3ff, 0x6, 0x6df1, 0x0, 0x60b3, 0x0, 0xa, 0xffd, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x1400, 0x50, 0x8, 0x898, 0x3, 0x0, 0x79d8, 0x1d06, 0x7, 0x200, 0x8, 0x2, 0x5, 0x9, 0x6, 0x3ff, 0x8, 0xbd, 0x7, 0xd, 0x2, 0xff, 0x8, 0xfffffa5f, 0x100, 0x3, 0x1, 0x5f66, 0xe, 0x0, 0x4, 0xffb, 0x8001, 0x9, 0x8, 0x1, 0x8001, 0x6, 0x8, 0x8001, 0x81, 0x68c, 0x5, 0x571, 0x2, 0x1, 0x3, 0x5, 0x5, 0x0, 0x1ff, 0x7, 0x3, 0x5, 0x600, 0x3, 0x10000, 0x3, 0x7ff, 0x401, 0x80, 0x6, 0x20, 0x8, 0xe, 0x1000, 0xffff, 0x101, 0x2, 0x1ff, 0x8001, 0x3, 0x7, 0x80000000, 0x24, 0xf8, 0x10000, 0xf7d4, 0x4, 0x7f, 0x9, 0x2, 0x10001, 0x8, 0x2, 0x0, 0x10001, 0x1cd, 0xffffffff, 0xd, 0x7, 0xac8f, 0xfffffffa, 0x9, 0x0, 0x3, 0xc1c3, 0x4, 0x1, 0x5, 0x5, 0x8, 0x8, 0x8, 0x1, 0x5, 0x7ff, 0x5, 0x7fff, 0xb, 0x6, 0x5, 0x5, 0x4, 0x4, 0x9, 0xd, 0x8001, 0x7f76, 0x8, 0x5, 0x62, 0x9, 0x0, 0x0, 0x800, 0x3, 0xe145, 0x9, 0xe94, 0x7, 0x8, 0x3, 0xfffffff7, 0x7, 0x100, 0x5, 0x5, 0x4, 0x723d3593, 0x40, 0x1, 0x5, 0x5dd3, 0x0, 0xfff, 0x4, 0x0, 0xe184, 0x7, 0x9, 0xe163, 0x4800000, 0xffffea27, 0x7f, 0x4, 0x80, 0x2a7f957b, 0x9, 0x6, 0x7ff, 0x1, 0xbc, 0x8, 0xe, 0x7f, 0x623, 0x5, 0x317b, 0x8001, 0x9, 0x3ff, 0x7fffffff, 0x1ff, 0x74b6, 0x9, 0x1, 0xb57, 0x6, 0x0, 0x800, 0xd, 0x400, 0x99, 0x2, 0x7fff, 0xb2, 0x8001, 0xcd8, 0x80, 0xfffffffe, 0xfffffff7, 0x1000, 0xd, 0x4, 0x1, 0x0, 0x6, 0xfff, 0x4, 0x5, 0x7f, 0x7, 0x5, 0x0, 0xffffff01, 0xffffffff, 0x8, 0xffff, 0x0, 0x8, 0xfffffff9, 0x7, 0x1, 0x35, 0xfffffffe, 0x7, 0x4, 0x1, 0x4, 0x1, 0x6, 0x8, 0x6, 0x8000, 0xd5, 0x7, 0x4, 0x5, 0x4, 0x359, 0x9, 0xaa90, 0x6, 0x101, 0x81, 0x1, 0x7, 0x1ab, 0x3, 0x10, 0x10000, 0xa, 0x8, 0x8, 0x2, 0x1, 0x80, 0x4, 0x40, 0x4, 0x5e, 0xac2, 0x6911977, 0x0, 0xd2a, 0x2, 0x1c000, 0xf, 0x7, 0x11, 0x6, 0x7, 0x6, 0x4, 0x10001, 0x6, 0xffffffff, 0x4b8c70f6, 0xff5a, 0x301b, 0x8, 0xaa26, 0x5, 0x10, 0x6cfc, 0x2, 0xa00000, 0x2, 0x366, 0x5, 0x1800, 0x0, 0x800, 0x9, 0x1, 0xb, 0x479a74a, 0x6, 0x3b, 0x8, 0x2, 0x4, 0xfff, 0x98f, 0x0, 0x6, 0x36, 0x6, 0x10, 0x1, 0x1000, 0x3ff, 0x5, 0x9e8, 0x1c6fafc3, 0x200, 0xb1, 0x8, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0xa2, 0x40, 0x0, 0x8, 0x9, 0x7, 0x8c, 0x4, 0x3, 0xb8c, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x9400, 0x6, 0x0, 0x9, 0x7, 0x100]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x200000, 0x4) 209.526333ms ago: executing program 4 (id=952): syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) pipe(&(0x7f00000045c0)) io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x1ce2, 0x400, 0x2, 0x3c1}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000080), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 34.580653ms ago: executing program 4 (id=953): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/238, 0xee) (fail_nth: 4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x18102, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000080), 0x200000, 0x4) 0s ago: executing program 2 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xc4, 0x1a, 0x100, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0xc, 0xff, 0x0, 0x0, @u64=0x2}, @generic="c3c424806479338138228e57e3917a5353f3e714ffea1eecdbf42a27c547e739f995bba23338afd346537b3d30338812c2965b199901cecfd60f06e97b6eb5ad2b498ba1e6be5eb8eb986117fff799153c2cb52165b236f618dcadb712f6f9c95cb75fa9f300d6b0deb7c5cbd50300b175de500dc4f700307606599aef7111e2431a430809b00ac2af95ede20c924a4587222c5868a5eac9519cb3a113beb6f444ff77"]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) sendmsg$nl_generic(r0, &(0x7f00000021c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000000fc0)={0x14, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x20000010) kernel console output (not intermixed with test programs): rror -71 [ 232.275254][ T5961] usb 2-1: USB disconnect, device number 59 [ 232.436444][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 232.457888][ T10] usb 4-1: device descriptor read/8, error -71 [ 232.566847][ T10] usb usb4-port1: unable to enumerate USB device [ 232.609247][ T5892] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 232.621320][ T5892] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 232.629709][ T5892] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 232.645821][ T5892] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 232.673812][ T5892] usb 1-1: USB disconnect, device number 62 [ 233.037345][ T5892] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 233.186530][ T5892] usb 2-1: device descriptor read/64, error -71 [ 233.409695][ T7848] x_tables: duplicate underflow at hook 2 [ 233.446798][ T5892] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 233.549456][ T7856] loop2: detected capacity change from 0 to 5 [ 233.558201][ T7856] Dev loop2: unable to read RDB block 5 [ 233.563812][ T7856] loop2: AHDI p3 [ 233.568672][ T7856] loop2: partition table partially beyond EOD, truncated [ 233.588328][ T5892] usb 2-1: device descriptor read/64, error -71 [ 233.651893][ T7858] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 233.738662][ T5892] usb usb2-port1: attempt power cycle [ 234.177407][ T5892] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 234.267490][ T5892] usb 2-1: device descriptor read/8, error -71 [ 234.678438][ T5892] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 234.707442][ T5892] usb 2-1: device descriptor read/8, error -71 [ 234.806578][ T5895] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 234.817143][ T5892] usb usb2-port1: unable to enumerate USB device [ 234.946382][ T5961] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 234.956715][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 234.966940][ T5895] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 234.976808][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.984968][ T5895] usb 5-1: Product: syz [ 234.991012][ T5895] usb 5-1: Manufacturer: syz [ 234.995783][ T5895] usb 5-1: SerialNumber: syz [ 235.006001][ T5895] usb 5-1: config 0 descriptor?? [ 235.076559][ T5961] usb 3-1: device descriptor read/64, error -71 [ 235.316836][ T5961] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.476435][ T5961] usb 3-1: device descriptor read/64, error -71 [ 235.597260][ T5961] usb usb3-port1: attempt power cycle [ 235.967766][ T5961] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 235.987962][ T5961] usb 3-1: device descriptor read/8, error -71 [ 236.246489][ T5961] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 236.267401][ T5961] usb 3-1: device descriptor read/8, error -71 [ 236.396893][ T5961] usb usb3-port1: unable to enumerate USB device [ 236.402780][ T7906] kvm: kvm [7902]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 236.641612][ T7911] ipip0: entered promiscuous mode [ 236.659285][ T7911] ipip0: entered allmulticast mode [ 236.834782][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.936957][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.940777][ T7919] warning: `syz.1.528' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 237.262787][ T5895] usb 5-1: USB disconnect, device number 46 [ 237.276739][ T5961] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 237.408869][ T120] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 237.496377][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 237.503428][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.511239][ T5961] usb 2-1: no configurations [ 237.515858][ T5961] usb 2-1: can't read configurations, error -22 [ 237.576375][ T120] usb 4-1: Using ep0 maxpacket: 32 [ 237.659397][ T5961] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 237.736547][ T5895] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 237.780595][ T120] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.866378][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 237.887355][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.895787][ T5961] usb 2-1: no configurations [ 237.900795][ T5961] usb 2-1: can't read configurations, error -22 [ 237.915400][ T120] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 237.924010][ T5961] usb usb2-port1: attempt power cycle [ 237.929562][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 237.935637][ T120] usb 4-1: can't read configurations, error -71 [ 237.943971][ T5895] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 237.983262][ T5895] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.994902][ T5895] usb 5-1: config 2 has no interface number 0 [ 238.001279][ T5895] usb 5-1: config 2 interface 31 has no altsetting 0 [ 238.036631][ T5837] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 238.059647][ T5895] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 238.079422][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.109961][ T5895] usb 5-1: Product: syz [ 238.135464][ T5895] usb 5-1: Manufacturer: syz [ 238.141462][ T5895] usb 5-1: SerialNumber: syz [ 238.157254][ T5895] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 238.172560][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.236355][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 238.256813][ T5837] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 238.275273][ T5837] usb 1-1: config 0 has no interface number 0 [ 238.281792][ T5837] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.323663][ T5961] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 238.349851][ T5837] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.367154][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 238.417073][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.425188][ T5895] usb 5-1: USB disconnect, device number 47 [ 238.435798][ T5961] usb 2-1: no configurations [ 238.448618][ T5961] usb 2-1: can't read configurations, error -22 [ 238.558027][ T5837] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 238.586927][ T5961] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 238.648218][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 238.663551][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.688599][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.748516][ T5837] usb 1-1: config 0 descriptor?? [ 238.776563][ T5961] usb 2-1: no configurations [ 238.807096][ T5961] usb 2-1: can't read configurations, error -22 [ 238.833941][ T5961] usb usb2-port1: unable to enumerate USB device [ 238.840829][ T120] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 239.048375][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.075264][ T120] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 239.125424][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.163429][ T120] usb 4-1: config 0 descriptor?? [ 239.326387][ T7938] x_tables: duplicate underflow at hook 3 [ 239.401313][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.485728][ T52] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 239.493930][ T5961] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 239.528899][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.666481][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 239.676410][ T52] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 239.686191][ T5961] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 239.703067][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.712093][ T52] usb 3-1: config 0 has no interface number 0 [ 239.719524][ T52] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 239.729815][ T5961] usb 5-1: Product: syz [ 239.734056][ T5961] usb 5-1: Manufacturer: syz [ 239.738994][ T5961] usb 5-1: SerialNumber: syz [ 239.743778][ T52] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 239.752794][ T7945] fuse: Bad value for 'user_id' [ 239.758574][ T5961] usb 5-1: config 0 descriptor?? [ 239.766143][ T7945] fuse: Bad value for 'user_id' [ 239.767813][ T52] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 239.782371][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.791255][ T52] usb 3-1: Product: syz [ 239.795505][ T52] usb 3-1: Manufacturer: syz [ 239.800538][ T52] usb 3-1: SerialNumber: syz [ 239.812305][ T52] usb 3-1: config 0 descriptor?? [ 239.818723][ T7949] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 239.826614][ T7949] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 239.864452][ T120] usbhid 4-1:0.0: can't add hid device: -71 [ 239.875140][ T120] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.889235][ T120] usb 4-1: USB disconnect, device number 48 [ 240.040919][ T7955] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 240.055145][ T7955] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 240.070104][ T52] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 240.090683][ T52] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 240.102988][ T52] asix 3-1:0.251: probe with driver asix failed with error -5 [ 240.327326][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 240.939905][ T5961] usb 5-1: ignoring: probably an ADSL modem [ 241.023188][ T5837] usbhid 1-1:0.4: can't add hid device: -71 [ 241.095749][ T5837] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 241.133921][ T5837] usb 1-1: USB disconnect, device number 63 [ 241.147376][ T5892] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 241.348766][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.372645][ T5961] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 241.383990][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.394772][ T5961] usb 5-1: USB disconnect, device number 48 [ 241.422294][ T5892] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 241.459392][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.484836][ T5892] usb 4-1: config 0 descriptor?? [ 241.576410][ T5837] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 241.716712][ T5837] usb 1-1: device descriptor read/64, error -71 [ 241.903506][ T5892] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 241.913427][ T5892] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 241.928826][ T5892] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0009/input/input18 [ 241.956947][ T5837] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 241.980411][ T5892] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 242.031558][ T7980] netlink: 'syz.1.545': attribute type 5 has an invalid length. [ 242.116364][ T5837] usb 1-1: device descriptor read/64, error -71 [ 242.204086][ T5892] usb 4-1: USB disconnect, device number 49 [ 242.220417][ T120] usb 3-1: USB disconnect, device number 38 [ 242.227533][ T5837] usb usb1-port1: attempt power cycle [ 242.356948][ T7983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.604976][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 242.604993][ T30] audit: type=1326 audit(1743885887.262:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.2.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb57f8d169 code=0x0 [ 242.606428][ T5837] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 242.687430][ T5837] usb 1-1: device descriptor read/8, error -71 [ 242.817107][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 243.047896][ T5837] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 243.097511][ T5837] usb 1-1: device descriptor read/8, error -71 [ 243.206810][ T5837] usb usb1-port1: unable to enumerate USB device [ 243.376469][ T10] usb 3-1: device descriptor read/64, error -71 [ 243.393607][ T7999] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 243.417650][ T8000] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 243.491811][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.656779][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 243.816411][ T5837] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 243.826764][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 243.835612][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.854699][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.872060][ T10] usb 3-1: Product: syz [ 244.112775][ T10] usb 3-1: Manufacturer: syz [ 244.119151][ T10] usb 3-1: SerialNumber: syz [ 244.129283][ T10] usb 3-1: config 0 descriptor?? [ 244.196815][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 244.223228][ T5837] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 244.258909][ T5837] usb 5-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 244.269629][ T5837] usb 5-1: config 0 has no interface number 0 [ 244.277297][ T5837] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 244.289358][ T5837] usb 5-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.309646][ T5837] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 244.334132][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.344257][ T5837] usb 5-1: Product: syz [ 244.348693][ T5837] usb 5-1: Manufacturer: syz [ 244.364749][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 244.370198][ T5837] usb 5-1: SerialNumber: syz [ 244.412425][ T5837] usb 5-1: config 0 descriptor?? [ 244.432554][ T8010] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 244.442843][ T5837] net1080 5-1:0.183: probe with driver net1080 failed with error -22 [ 244.916450][ T5892] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 245.529979][ T5892] usb 1-1: config index 0 descriptor too short (expected 64028, got 77) [ 245.552807][ T5892] usb 1-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 245.564511][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.581620][ T5892] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 241 [ 245.600744][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.612561][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.628423][ T5892] usb 1-1: Product: syz [ 245.632714][ T5892] usb 1-1: Manufacturer: syz [ 245.643158][ T5892] usb 1-1: SerialNumber: syz [ 245.657550][ T5892] usb 1-1: config 0 descriptor?? [ 245.936485][ T5892] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 246.097630][ T5892] usb 4-1: config 0 has no interfaces? [ 246.113139][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.134550][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.144534][ T5892] usb 4-1: Product: syz [ 246.153361][ T5892] usb 4-1: Manufacturer: syz [ 246.160052][ T5892] usb 4-1: SerialNumber: syz [ 246.173828][ T5892] usb 4-1: config 0 descriptor?? [ 246.454326][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.485467][ T10] usb 3-1: USB disconnect, device number 40 [ 246.602233][ T5892] usb 5-1: USB disconnect, device number 49 [ 246.705065][ T8033] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 247.206826][ T52] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 247.401540][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 247.470167][ T52] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 247.512148][ T8042] loop2: detected capacity change from 0 to 5 [ 247.532314][ T8042] Dev loop2: unable to read RDB block 5 [ 247.540096][ T52] usb 5-1: config 0 has no interface number 0 [ 247.576782][ T5892] usb 1-1: USB disconnect, device number 68 [ 247.593053][ T8042] loop2: AHDI p3 [ 247.618962][ T52] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.640114][ T8042] loop2: partition table partially beyond EOD, truncated [ 247.723046][ T52] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.810782][ T8045] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 247.826711][ T52] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 247.855571][ T8045] veth1_vlan: entered allmulticast mode [ 247.871138][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.922155][ T52] usb 5-1: config 0 descriptor?? [ 247.941771][ T8045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.428172][ T8037] x_tables: duplicate underflow at hook 3 [ 248.539694][ T8055] loop2: detected capacity change from 0 to 7 [ 248.547693][ T8055] Dev loop2: unable to read RDB block 7 [ 248.553359][ T8055] loop2: unable to read partition table [ 248.559429][ T8055] loop2: partition table beyond EOD, truncated [ 248.565823][ T8055] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.624817][ T5837] usb 4-1: USB disconnect, device number 50 [ 249.032537][ T8066] can: request_module (can-proto-0) failed. [ 249.116541][ T5837] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 249.156549][ T120] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 249.260677][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 249.278097][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 249.286150][ T5837] usb 4-1: config 1 interface 0 altsetting 121 bulk endpoint 0x82 has invalid maxpacket 32 [ 249.296352][ T5892] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 249.308234][ T5837] usb 4-1: config 1 interface 0 altsetting 121 bulk endpoint 0x3 has invalid maxpacket 1023 [ 249.319303][ T5837] usb 4-1: config 1 interface 0 has no altsetting 0 [ 249.329243][ T5837] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.338777][ T120] usb 3-1: Using ep0 maxpacket: 32 [ 249.344052][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.352722][ T5837] usb 4-1: Product: syz [ 249.358010][ T5837] usb 4-1: Manufacturer: syz [ 249.364607][ T5837] usb 4-1: SerialNumber: syz [ 249.371221][ T120] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 249.385014][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.393544][ T8062] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.401361][ T8062] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.408830][ T120] usb 3-1: Product: syz [ 249.413188][ T120] usb 3-1: Manufacturer: syz [ 249.420445][ T120] usb 3-1: SerialNumber: syz [ 249.428659][ T120] usb 3-1: config 0 descriptor?? [ 249.439102][ T120] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 249.449717][ T5892] usb 1-1: config 0 has no interfaces? [ 249.460930][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.473794][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.482228][ T5892] usb 1-1: Product: syz [ 249.486961][ T5892] usb 1-1: Manufacturer: syz [ 249.491747][ T5892] usb 1-1: SerialNumber: syz [ 249.500175][ T5892] usb 1-1: config 0 descriptor?? [ 249.632591][ T5837] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 249.655741][ T5837] usb 4-1: USB disconnect, device number 51 [ 250.370089][ T52] usbhid 5-1:0.4: can't add hid device: -71 [ 250.382332][ T52] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 250.413105][ T52] usb 5-1: USB disconnect, device number 50 [ 250.840138][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 250.924604][ T52] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 251.072076][ T120] gspca_topro: reg_r err -71 [ 251.077287][ T120] gspca_topro: Sensor soi763a [ 251.084562][ T52] usb 5-1: device descriptor read/64, error -71 [ 251.117774][ T120] usb 3-1: USB disconnect, device number 41 [ 251.257099][ T8097] team0 (unregistering): Port device team_slave_0 removed [ 251.285007][ T8097] team0 (unregistering): Port device team_slave_1 removed [ 251.363587][ T52] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 251.536707][ T52] usb 5-1: device descriptor read/64, error -71 [ 251.659788][ T52] usb usb5-port1: attempt power cycle [ 251.952448][ T120] usb 1-1: USB disconnect, device number 69 [ 252.007861][ T52] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 252.050393][ T52] usb 5-1: device descriptor read/8, error -71 [ 252.126859][ T5961] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 252.297195][ T5961] usb 3-1: config 0 has no interfaces? [ 252.317280][ T52] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 252.335660][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.347729][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.360741][ T5961] usb 3-1: Product: syz [ 252.365000][ T5961] usb 3-1: Manufacturer: syz [ 252.372276][ T5961] usb 3-1: SerialNumber: syz [ 252.379720][ T52] usb 5-1: device descriptor read/8, error -71 [ 252.389247][ T5961] usb 3-1: config 0 descriptor?? [ 252.487197][ T52] usb usb5-port1: unable to enumerate USB device [ 252.665372][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 252.665396][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 254.081261][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.584'. [ 254.094273][ T8128] netlink: 'syz.4.584': attribute type 7 has an invalid length. [ 254.111271][ T8128] netlink: 'syz.4.584': attribute type 8 has an invalid length. [ 254.119750][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 254.410990][ T8134] futex_wake_op: syz.4.586 tries to shift op by 32; fix this program [ 254.683401][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 254.796656][ T52] usb 3-1: USB disconnect, device number 42 [ 254.912158][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 255.237322][ T5892] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 255.426523][ T5892] usb 4-1: device descriptor read/64, error -71 [ 255.589833][ T8176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.632461][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 255.637107][ T5891] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 255.683103][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.597'. [ 255.695147][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 255.704523][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.597'. [ 255.737101][ T5892] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 255.789139][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.795605][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.829379][ T5891] usb 1-1: config 0 has no interfaces? [ 255.874626][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 255.884491][ T5892] usb 4-1: device descriptor read/64, error -71 [ 255.949013][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.965963][ T5891] usb 1-1: Product: syz [ 255.990225][ T5891] usb 1-1: Manufacturer: syz [ 255.995658][ T5891] usb 1-1: SerialNumber: syz [ 256.021570][ T5891] usb 1-1: config 0 descriptor?? [ 256.057852][ T5892] usb usb4-port1: attempt power cycle [ 256.396786][ T5892] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 256.440076][ T5892] usb 4-1: device descriptor read/8, error -71 [ 256.504890][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 256.717181][ T5892] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 256.747394][ T5892] usb 4-1: device descriptor read/8, error -71 [ 256.890313][ T5892] usb usb4-port1: unable to enumerate USB device [ 258.396465][ T52] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 258.561095][ T52] usb 5-1: config 0 has no interfaces? [ 258.591063][ T5895] usb 1-1: USB disconnect, device number 70 [ 258.603654][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.639764][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.674254][ T52] usb 5-1: Product: syz [ 258.694697][ T52] usb 5-1: Manufacturer: syz [ 258.743778][ T52] usb 5-1: SerialNumber: syz [ 258.775154][ T52] usb 5-1: config 0 descriptor?? [ 258.797492][ T8198] loop2: detected capacity change from 0 to 5 [ 258.811033][ T8198] Dev loop2: unable to read RDB block 5 [ 258.823852][ T8198] loop2: AHDI p3 [ 258.844972][ T8198] loop2: partition table partially beyond EOD, truncated [ 258.917085][ T5892] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 259.106401][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 259.110568][ T5892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.110607][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.110632][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.110650][ T5892] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.110681][ T5892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.110698][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.416443][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.441874][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.524121][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.557267][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.569049][ T5892] usb 4-1: GET_CAPABILITIES returned 0 [ 259.580280][ T5892] usbtmc 4-1:16.0: can't read capabilities [ 259.782599][ T5892] usb 4-1: USB disconnect, device number 56 [ 260.314388][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.384652][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.399440][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 260.468597][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.485225][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.493531][ T5892] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 260.515280][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.526684][ T5891] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 260.627072][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.696332][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 260.704082][ T5892] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 260.713289][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.727743][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.738164][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.764789][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.787134][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.796618][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.879586][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 260.888365][ T52] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 260.888968][ T5891] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 260.932522][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.946819][ T5891] usb 3-1: config 0 descriptor?? [ 260.958201][ T5891] usb 3-1: invalid MIDI EP [ 260.963730][ T5891] usb 3-1: snd-bcd2000: error during probing [ 260.971790][ T5891] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 261.040564][ T5892] usb 1-1: usb_control_msg returned -32 [ 261.054025][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 261.086359][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 261.100583][ T52] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 261.125059][ T52] usb 2-1: config 0 has no interface number 0 [ 261.131600][ T5961] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 261.190134][ T52] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.204406][ T5895] usb 3-1: USB disconnect, device number 43 [ 261.221162][ T52] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.232786][ T52] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 261.247906][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.271465][ T52] usb 2-1: config 0 descriptor?? [ 261.433383][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.445602][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.465375][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.485575][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.546824][ T5895] usb 5-1: USB disconnect, device number 55 [ 261.607412][ T5961] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.620187][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.629972][ T5961] usb 4-1: Product: syz [ 261.634162][ T5961] usb 4-1: Manufacturer: syz [ 261.641730][ T5961] usb 4-1: SerialNumber: syz [ 261.984397][ T8241] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 262.055061][ T8227] x_tables: duplicate underflow at hook 3 [ 262.151389][ T8231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.884068][ T5892] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 262.904171][ T5961] usb 4-1: cannot find UAC_HEADER [ 263.070317][ T5961] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 263.100960][ T5961] usb 4-1: USB disconnect, device number 57 [ 263.161532][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.279847][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 263.316106][ T5892] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 263.382784][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.395903][ T5892] usb 3-1: Product: syz [ 263.400396][ T5892] usb 3-1: Manufacturer: syz [ 263.405251][ T5892] usb 3-1: SerialNumber: syz [ 263.469130][ T5892] usb 3-1: config 0 descriptor?? [ 263.481355][ T5892] gspca_main: mars-2.14.0 probing 093a:050f [ 263.575994][ T5961] usb 1-1: USB disconnect, device number 71 [ 263.691575][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.618'. [ 264.535061][ T52] usbhid 2-1:0.4: can't add hid device: -71 [ 264.546854][ T52] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 264.582219][ T52] usb 2-1: USB disconnect, device number 68 [ 265.511039][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 265.671323][ T8273] fuse: Unknown parameter '000000000000000000000x0000000000000008' [ 265.763343][ T5892] usb 3-1: USB disconnect, device number 44 [ 265.782577][ T8273] syzkaller1: entered allmulticast mode [ 265.857940][ T5895] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 266.040248][ T5895] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 266.058095][ T5895] usb 1-1: config 0 has no interface number 0 [ 266.069008][ T5895] usb 1-1: config 0 interface 169 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 266.084284][ T8286] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 266.151016][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 266.247377][ T5895] usb 1-1: config 0 interface 169 has no altsetting 0 [ 266.255703][ T5895] usb 1-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 266.273256][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.373764][ T5895] usb 1-1: config 0 descriptor?? [ 266.591750][ T5895] usb 1-1: string descriptor 0 read error: -71 [ 266.691429][ T5895] usb-storage 1-1:0.169: USB Mass Storage device detected [ 267.096326][ T52] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 267.144592][ T5895] usb-storage 1-1:0.169: Quirks match for vid 0451 pid 5416: 2 [ 267.228982][ T5895] usb 1-1: USB disconnect, device number 72 [ 267.276571][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 267.291070][ T52] usb 3-1: config 0 has no interfaces? [ 267.302079][ T52] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 267.379988][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.416142][ T52] usb 3-1: Product: syz [ 267.467879][ T52] usb 3-1: Manufacturer: syz [ 267.481543][ T52] usb 3-1: SerialNumber: syz [ 267.586347][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 267.593404][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.608530][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.622253][ T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 267.641771][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.664148][ T10] usb 4-1: config 0 descriptor?? [ 267.727339][ T52] usb 3-1: config 0 descriptor?? [ 268.245891][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 268.341741][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 268.348155][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.366150][ T10] usb 4-1: USB disconnect, device number 58 [ 268.691791][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 268.726756][ T8315] netlink: 'syz.0.637': attribute type 21 has an invalid length. [ 269.370499][ T5892] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 269.426372][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 269.536874][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 269.549918][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 269.563434][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 269.573283][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.593639][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 269.606913][ T5892] usb 4-1: Product: syz [ 269.617025][ T5892] usb 4-1: Manufacturer: syz [ 269.623261][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.631550][ T10] usb 1-1: config 0 has no interface number 0 [ 269.642608][ T5892] usb 4-1: SerialNumber: syz [ 269.653860][ T5897] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 269.669826][ T10] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 269.680418][ T5892] usb 4-1: config 0 descriptor?? [ 269.685474][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.700879][ T5892] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 269.719232][ T10] usb 1-1: Product: syz [ 269.737195][ T10] usb 1-1: Manufacturer: syz [ 269.753346][ T10] usb 1-1: SerialNumber: syz [ 269.776182][ T10] usb 1-1: config 0 descriptor?? [ 269.795560][ T1206] usb 3-1: USB disconnect, device number 45 [ 269.815580][ T5897] usb 5-1: config 0 has no interfaces? [ 269.830819][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 269.842102][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.859207][ T5897] usb 5-1: Product: syz [ 269.863603][ T5897] usb 5-1: Manufacturer: syz [ 269.869851][ T5897] usb 5-1: SerialNumber: syz [ 269.882749][ T5897] usb 5-1: config 0 descriptor?? [ 270.194048][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 270.464794][ T10] usb 1-1: selecting invalid altsetting 1 [ 270.473956][ T10] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 270.543099][ T10] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 270.678291][ T5892] gspca_zc3xx: reg_w_i err -110 [ 270.701388][ T8351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 270.717176][ T10] speedtch 1-1:0.1: probe with driver speedtch failed with error -22 [ 270.835484][ T10] usb 1-1: USB disconnect, device number 73 [ 271.266701][ T5892] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 271.278243][ T5892] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 271.496932][ T5837] usb 4-1: USB disconnect, device number 59 [ 272.304718][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 272.980559][ T10] usb 5-1: USB disconnect, device number 56 [ 273.483838][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 274.096443][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 274.121068][ T10] usb 5-1: config 9 has an invalid interface number: 160 but max is 0 [ 274.155360][ T10] usb 5-1: config 9 has no interface number 0 [ 274.172604][ T8367] team0 (unregistering): Port device team_slave_0 removed [ 274.205704][ T10] usb 5-1: config 9 interface 160 has no altsetting 0 [ 274.258071][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f [ 274.349642][ T8367] team0 (unregistering): Port device team_slave_1 removed [ 274.416900][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.425504][ T10] usb 5-1: Product: syz [ 274.429808][ T10] usb 5-1: Manufacturer: syz [ 274.434431][ T10] usb 5-1: SerialNumber: syz [ 274.659807][ T10] ftdi_sio 5-1:9.160: FTDI USB Serial Device converter detected [ 274.670497][ T10] ftdi_sio ttyUSB0: unknown device type: 0x4e3f [ 274.697991][ T10] usb 5-1: USB disconnect, device number 57 [ 274.708254][ T1206] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 274.722378][ T10] ftdi_sio 5-1:9.160: device disconnected [ 274.878960][ T1206] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 274.888274][ T1206] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 274.903432][ T1206] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 274.913359][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.921987][ T1206] usb 3-1: Product: syz [ 274.926766][ T1206] usb 3-1: Manufacturer: syz [ 274.931569][ T1206] usb 3-1: SerialNumber: syz [ 275.462810][ T1206] usb 3-1: USB disconnect, device number 46 [ 275.655625][ T8396] FAULT_INJECTION: forcing a failure. [ 275.655625][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 275.706796][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.0.657 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 275.706821][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.706840][ T8396] Call Trace: [ 275.706846][ T8396] [ 275.706853][ T8396] dump_stack_lvl+0x241/0x360 [ 275.706884][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.706906][ T8396] ? __pfx__printk+0x10/0x10 [ 275.706935][ T8396] should_fail_ex+0x424/0x570 [ 275.706956][ T8396] _copy_to_user+0x31/0xb0 [ 275.706983][ T8396] simple_read_from_buffer+0xc4/0x170 [ 275.707009][ T8396] proc_fail_nth_read+0x1ef/0x260 [ 275.707027][ T8396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.707045][ T8396] ? rw_verify_area+0x246/0x630 [ 275.707061][ T8396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.707078][ T8396] vfs_read+0x21f/0xb90 [ 275.707098][ T8396] ? __pfx___mutex_lock+0x10/0x10 [ 275.707118][ T8396] ? __pfx_vfs_read+0x10/0x10 [ 275.707137][ T8396] ? __fget_files+0x2a/0x420 [ 275.707152][ T8396] ? __fget_files+0x39d/0x420 [ 275.707165][ T8396] ? __fget_files+0x2a/0x420 [ 275.707185][ T8396] ksys_read+0x19d/0x2d0 [ 275.707204][ T8396] ? __pfx_ksys_read+0x10/0x10 [ 275.707220][ T8396] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 275.707244][ T8396] ? syscall_user_dispatch+0x4e/0x90 [ 275.707266][ T8396] do_syscall_64+0xf3/0x230 [ 275.707285][ T8396] ? clear_bhb_loop+0x45/0xa0 [ 275.707303][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.707318][ T8396] RIP: 0033:0x7fd2bb58bb7c [ 275.707332][ T8396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.707344][ T8396] RSP: 002b:00007fd2b93d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.707361][ T8396] RAX: ffffffffffffffda RBX: 00007fd2bb7a6080 RCX: 00007fd2bb58bb7c [ 275.707372][ T8396] RDX: 000000000000000f RSI: 00007fd2b93d50a0 RDI: 0000000000000003 [ 275.707382][ T8396] RBP: 00007fd2b93d5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.707392][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.707401][ T8396] R13: 0000000000000000 R14: 00007fd2bb7a6080 R15: 00007fd2bb8cfa28 [ 275.707423][ T8396] [ 275.994244][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.661'. [ 276.490389][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 276.860282][ T8423] loop2: detected capacity change from 0 to 5 [ 277.006438][ T1206] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 277.365077][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.380597][ T8423] Dev loop2: unable to read RDB block 5 [ 277.395821][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.403018][ T8423] loop2: AHDI p3 [ 277.413168][ T1206] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 277.436763][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.448965][ T8423] loop2: partition table partially beyond EOD, truncated [ 277.451785][ T1206] usb 1-1: config 0 descriptor?? [ 277.878154][ T1206] lenovo 0003:17EF:6047.000A: unknown main item tag 0x1 [ 277.896813][ T5897] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 277.942178][ T1206] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 277.986634][ T5895] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 278.078933][ T1206] usb 1-1: USB disconnect, device number 74 [ 278.089612][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 278.149120][ T5895] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.158571][ T5895] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.172807][ T5897] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 278.178251][ T5895] usb 3-1: config 220 has no interface number 2 [ 278.191112][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.240349][ T5895] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.254206][ T5895] usb 3-1: config 220 interface 0 has no altsetting 0 [ 278.261593][ T5895] usb 3-1: config 220 interface 76 has no altsetting 0 [ 278.269146][ T5895] usb 3-1: config 220 interface 1 has no altsetting 0 [ 278.278274][ T5895] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.287835][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.306781][ T5895] usb 3-1: Product: syz [ 278.313335][ T5895] usb 3-1: Manufacturer: syz [ 278.314514][ T5897] usb 2-1: config 0 descriptor?? [ 278.330290][ T5895] usb 3-1: SerialNumber: syz [ 278.399742][ T5897] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 278.590618][ T5895] usb 3-1: selecting invalid altsetting 0 [ 278.609698][ T5895] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 278.617918][ T5895] usb 3-1: No valid video chain found. [ 278.635806][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.644809][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.653330][ T52] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 278.684444][ T5895] usb 3-1: selecting invalid altsetting 0 [ 278.707355][ T5895] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 278.800025][ T5895] usb 3-1: USB disconnect, device number 47 [ 278.870434][ T52] usb 5-1: config 0 has no interfaces? [ 278.888319][ T52] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.912654][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.946885][ T52] usb 5-1: Product: syz [ 278.951602][ T52] usb 5-1: Manufacturer: syz [ 278.985161][ T52] usb 5-1: SerialNumber: syz [ 279.289522][ T52] usb 5-1: config 0 descriptor?? [ 279.400016][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 279.703784][ T1206] usb 5-1: USB disconnect, device number 58 [ 280.049843][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 280.486793][ T1206] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 280.969066][ T1206] usb 4-1: config 0 has no interfaces? [ 281.075875][ T52] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 281.095523][ T1206] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 281.112041][ T5837] usb 2-1: USB disconnect, device number 69 [ 281.169852][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.274348][ T1206] usb 4-1: Product: syz [ 281.285166][ T1206] usb 4-1: Manufacturer: syz [ 281.304814][ T1206] usb 4-1: SerialNumber: syz [ 281.316489][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 281.347164][ T52] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 281.357662][ T52] usb 5-1: config 0 has no interface number 0 [ 281.371361][ T52] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.387434][ T52] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.398248][ T8480] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 281.410990][ T52] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 281.421259][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.448412][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 281.476559][ T1206] usb 4-1: config 0 descriptor?? [ 281.478134][ T52] usb 5-1: config 0 descriptor?? [ 281.971909][ T8470] x_tables: duplicate underflow at hook 3 [ 283.275600][ T5837] usb 4-1: USB disconnect, device number 60 [ 283.684763][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.689'. [ 283.800829][ T52] usbhid 5-1:0.4: can't add hid device: -71 [ 283.807764][ T52] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 283.855464][ T52] usb 5-1: USB disconnect, device number 59 [ 284.116919][ T1206] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 284.226058][ T8526] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 284.298636][ T1206] usb 4-1: config 0 has no interfaces? [ 284.364859][ T1206] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 284.390710][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.403237][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 284.436575][ T1206] usb 4-1: Product: syz [ 284.440802][ T1206] usb 4-1: Manufacturer: syz [ 284.445424][ T1206] usb 4-1: SerialNumber: syz [ 284.574249][ T1206] usb 4-1: config 0 descriptor?? [ 284.954968][ T1206] usb 4-1: USB disconnect, device number 61 [ 285.510140][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 285.586703][ T52] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 285.627546][ T5837] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 285.736902][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 285.757180][ T52] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 285.768270][ T52] usb 1-1: config 0 has no interface number 0 [ 285.785770][ T52] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.804760][ T5837] usb 3-1: config 0 has no interfaces? [ 285.823004][ T5837] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 285.845561][ T52] usb 1-1: config 0 interface 85 has no altsetting 0 [ 285.855096][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.876768][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 285.887500][ T5837] usb 3-1: Product: syz [ 285.897611][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.907769][ T5837] usb 3-1: Manufacturer: syz [ 285.924883][ T5837] usb 3-1: SerialNumber: syz [ 285.969831][ T52] usb 1-1: Product: syz [ 285.977983][ T52] usb 1-1: Manufacturer: syz [ 285.998882][ T5837] usb 3-1: config 0 descriptor?? [ 286.007801][ T52] usb 1-1: SerialNumber: syz [ 286.044199][ T52] usb 1-1: config 0 descriptor?? [ 286.156599][ T1206] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 286.336511][ T1206] usb 4-1: config 0 has no interfaces? [ 286.365415][ T1206] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.394713][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.423877][ T1206] usb 4-1: Product: syz [ 286.430461][ T1206] usb 4-1: Manufacturer: syz [ 286.438322][ T1206] usb 4-1: SerialNumber: syz [ 286.459669][ T1206] usb 4-1: config 0 descriptor?? [ 286.665840][ T52] appletouch 1-1:0.85: Geyser mode initialized. [ 286.676088][ T52] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input20 [ 286.890198][ T52] usb 1-1: USB disconnect, device number 75 [ 287.022544][ T52] appletouch 1-1:0.85: input: appletouch disconnected [ 287.702947][ T5897] hid (null): invalid report_count 26609 [ 287.733067][ T5897] hid-generic 00A0:0006:0003.000B: invalid report_count 26609 [ 287.769442][ T5897] hid-generic 00A0:0006:0003.000B: item 0 2 1 9 parsing failed [ 287.803622][ T5897] hid-generic 00A0:0006:0003.000B: probe with driver hid-generic failed with error -22 [ 287.966870][ T1206] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 288.130056][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 288.142781][ T1206] usb 1-1: config 0 has no interfaces? [ 288.154712][ T1206] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 288.175713][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.184817][ T1206] usb 1-1: Product: syz [ 288.192295][ T1206] usb 1-1: Manufacturer: syz [ 288.197523][ T1206] usb 1-1: SerialNumber: syz [ 288.215704][ T1206] usb 1-1: config 0 descriptor?? [ 288.331177][ T5837] usb 3-1: USB disconnect, device number 48 [ 288.435746][ T8569] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 288.456661][ T52] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 288.636698][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 288.643762][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.654391][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.676962][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.687440][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.704260][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.706528][ T1206] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 288.714730][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.735524][ T5837] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 288.747382][ T52] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 288.759595][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.767816][ T52] usb 5-1: Product: syz [ 288.772066][ T52] usb 5-1: Manufacturer: syz [ 288.777003][ T52] usb 5-1: SerialNumber: syz [ 288.785255][ T52] usb 5-1: config 0 descriptor?? [ 288.793714][ T52] usb 5-1: bad CDC descriptors [ 288.799527][ T52] cdc_acm 5-1:0.0: Zero length descriptor references [ 288.807333][ T52] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 288.890031][ T1206] usb 2-1: config 0 has no interfaces? [ 288.896546][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 288.903847][ T1206] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.906868][ T5837] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 288.913417][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.933888][ T1206] usb 2-1: Product: syz [ 288.938500][ T1206] usb 2-1: Manufacturer: syz [ 288.939412][ T5837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.943269][ T1206] usb 2-1: SerialNumber: syz [ 288.958513][ T5837] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.962573][ T1206] usb 2-1: config 0 descriptor?? [ 288.973462][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.982358][ T5837] usb 3-1: Product: syz [ 288.989855][ T5837] usb 3-1: Manufacturer: syz [ 288.994701][ T5837] usb 3-1: SerialNumber: syz [ 289.011462][ T52] usb 5-1: USB disconnect, device number 60 [ 289.235136][ T5837] usb 3-1: 0:2 : does not exist [ 289.245651][ T5837] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 289.275567][ T5837] usb 3-1: USB disconnect, device number 49 [ 289.314792][ T52] usb 2-1: USB disconnect, device number 70 [ 289.468007][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.689695][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 290.214544][ T8602] IPVS: length: 51 != 8 [ 290.216657][ T1206] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 290.376596][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 290.421319][ T1206] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.462970][ T1206] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.531884][ T1206] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.549086][ T1206] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 290.563351][ T10] usb 1-1: USB disconnect, device number 76 [ 290.634627][ T1206] usb 3-1: Product: syz [ 290.639235][ T1206] usb 3-1: Manufacturer: syz [ 290.654313][ T1206] hub 3-1:4.0: USB hub found [ 291.059198][ T8591] xfrm0: entered promiscuous mode [ 291.064397][ T30] audit: type=1326 audit(1743885935.722:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.106064][ T8591] xfrm0: entered allmulticast mode [ 291.148559][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.176892][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.211436][ T30] audit: type=1326 audit(1743885935.722:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.217214][ T1206] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 291.248136][ T30] audit: type=1326 audit(1743885935.722:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.336850][ T30] audit: type=1326 audit(1743885935.722:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.390733][ T1206] usb 3-1: USB disconnect, device number 50 [ 291.424217][ T30] audit: type=1326 audit(1743885935.722:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.446435][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.463595][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 291.541581][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 291.626326][ T30] audit: type=1326 audit(1743885935.722:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.633295][ T120] usb 4-1: USB disconnect, device number 62 [ 291.648429][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.669794][ T30] audit: type=1326 audit(1743885935.772:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.736523][ T30] audit: type=1326 audit(1743885935.772:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb57f8d169 code=0x7ffc0000 [ 291.855010][ T30] audit: type=1326 audit(1743885935.812:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb57f8bad0 code=0x7ffc0000 [ 291.990836][ T30] audit: type=1326 audit(1743885935.812:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb57f8cd6b code=0x7ffc0000 [ 292.012935][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.115036][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'. [ 292.386987][ T1206] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 292.550351][ T1206] usb 5-1: config 0 has no interfaces? [ 292.577773][ T1206] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 292.591319][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.626081][ T1206] usb 5-1: Product: syz [ 292.630768][ T1206] usb 5-1: Manufacturer: syz [ 292.635624][ T1206] usb 5-1: SerialNumber: syz [ 292.642642][ T8626] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 292.647715][ T1206] usb 5-1: config 0 descriptor?? [ 292.676741][ T120] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 292.705998][ T8626] veth1_vlan: entered allmulticast mode [ 292.816700][ T120] usb 3-1: device descriptor read/64, error -71 [ 293.003137][ T5897] usb 5-1: USB disconnect, device number 61 [ 293.076533][ T120] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 293.246599][ T120] usb 3-1: device descriptor read/64, error -71 [ 293.367005][ T120] usb usb3-port1: attempt power cycle [ 293.719760][ T120] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 293.750139][ T120] usb 3-1: device descriptor read/8, error -71 [ 293.996748][ T120] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 294.028068][ T120] usb 3-1: device descriptor read/8, error -71 [ 294.126492][ T1206] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 294.158569][ T120] usb usb3-port1: unable to enumerate USB device [ 294.286557][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 294.298848][ T1206] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 294.314572][ T1206] usb 5-1: config 0 has no interface number 0 [ 294.325963][ T1206] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.337382][ T1206] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.347304][ T1206] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 294.356655][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.385356][ T1206] usb 5-1: config 0 descriptor?? [ 294.830762][ T8643] x_tables: duplicate underflow at hook 3 [ 294.906682][ T120] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 295.086417][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 295.154539][ T120] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 295.154572][ T120] usb 1-1: config 0 has no interface number 0 [ 295.154617][ T120] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.278345][ T120] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.278405][ T120] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 295.278432][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.297363][ T120] usb 1-1: config 0 descriptor?? [ 295.416595][ T5897] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 295.567297][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 295.592631][ T5897] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 295.592676][ T5897] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 295.592702][ T5897] usb 4-1: config 135 has no interface number 0 [ 295.592755][ T5897] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.596908][ T5897] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 295.596936][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.596976][ T5897] usb 4-1: Product: syz [ 295.596989][ T5897] usb 4-1: Manufacturer: syz [ 295.597030][ T5897] usb 4-1: SerialNumber: syz [ 295.666975][ T5897] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 295.667045][ T5897] usb 4-1: No valid video chain found. [ 295.728505][ T8647] x_tables: duplicate underflow at hook 3 [ 296.163981][ T8657] loop2: detected capacity change from 0 to 5 [ 296.169658][ T8657] Dev loop2: unable to read RDB block 5 [ 296.169691][ T8657] loop2: AHDI p3 [ 296.169723][ T8657] loop2: partition table partially beyond EOD, truncated [ 296.303977][ T5961] usb 4-1: USB disconnect, device number 63 [ 296.936624][ T1206] usbhid 5-1:0.4: can't add hid device: -71 [ 296.943206][ T1206] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 297.039083][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.740'. [ 297.139459][ T1206] usb 5-1: USB disconnect, device number 62 [ 297.360892][ T8665] bridge2: entered promiscuous mode [ 297.653007][ T120] usbhid 1-1:0.4: can't add hid device: -71 [ 297.659352][ T120] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 297.710394][ T120] usb 1-1: USB disconnect, device number 77 [ 297.806530][ T5897] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 297.981234][ T5897] usb 5-1: config 0 has no interfaces? [ 298.005480][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 298.269355][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.299210][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.404502][ T5897] usb 5-1: Product: syz [ 298.426093][ T5897] usb 5-1: Manufacturer: syz [ 298.513941][ T5897] usb 5-1: SerialNumber: syz [ 298.546948][ T5897] usb 5-1: config 0 descriptor?? [ 298.636646][ T5961] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 298.816524][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.836990][ T5961] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.851676][ T5961] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 298.873203][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.977634][ T5961] usb 3-1: config 0 descriptor?? [ 298.983084][ T5961] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 298.983200][ T5961] dvb-usb: bulk message failed: -22 (3/0) [ 298.991997][ T5961] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 299.004381][ T5961] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 299.004444][ T5961] usb 3-1: media controller created [ 299.016914][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.062656][ T5961] dvb-usb: bulk message failed: -22 (6/0) [ 299.063671][ T5961] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 299.071086][ T5961] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 299.122630][ T5961] dvb-usb: schedule remote query interval to 150 msecs. [ 299.122658][ T5961] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 299.277682][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 299.284311][ T52] dvb-usb: error while querying for an remote control event. [ 299.417062][ T5897] usb 3-1: USB disconnect, device number 55 [ 299.462136][ T5897] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 300.216984][ T120] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 300.453790][ T120] usb 2-1: config 0 has no interfaces? [ 300.462861][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.494121][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.549677][ T120] usb 2-1: Product: syz [ 300.563973][ T120] usb 2-1: Manufacturer: syz [ 300.638368][ T5961] usb 5-1: USB disconnect, device number 63 [ 300.699891][ T120] usb 2-1: SerialNumber: syz [ 300.737511][ T120] usb 2-1: config 0 descriptor?? [ 300.955392][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 301.577018][ T120] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 301.736723][ T120] usb 3-1: Using ep0 maxpacket: 32 [ 301.744809][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.761866][ T8713] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 301.790268][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 301.831600][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.860430][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 301.893712][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.920261][ T120] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ae.89 [ 301.946982][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.972650][ T120] usb 3-1: config 0 descriptor?? [ 301.996150][ T120] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.056614][ T5961] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 302.196860][ T5961] usb 5-1: device descriptor read/64, error -71 [ 302.232135][ T120] usb 3-1: USB disconnect, device number 56 [ 302.437491][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.450054][ T5961] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 302.538043][ T120] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 302.590610][ T120] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.630242][ T5961] usb 5-1: device descriptor read/64, error -71 [ 302.746719][ T5961] usb usb5-port1: attempt power cycle [ 302.796891][ T8719] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 303.027465][ T5891] usb 2-1: USB disconnect, device number 71 [ 303.326570][ T5961] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 303.445814][ T5961] usb 5-1: device descriptor read/8, error -71 [ 303.786378][ T5961] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 303.816956][ T5961] usb 5-1: device descriptor read/8, error -71 [ 303.875663][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.763'. [ 303.927922][ T5961] usb usb5-port1: unable to enumerate USB device [ 304.015328][ T8715] 8021q: VLANs not supported on nlmon0 [ 304.136859][ T120] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 304.301254][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 304.375903][ T120] usb 1-1: config 0 has no interfaces? [ 304.396904][ T120] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 304.426599][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.434652][ T120] usb 1-1: Product: syz [ 304.505895][ T120] usb 1-1: Manufacturer: syz [ 304.516035][ T120] usb 1-1: SerialNumber: syz [ 304.557888][ T120] usb 1-1: config 0 descriptor?? [ 304.778871][ T5961] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 304.948052][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.950339][ T5961] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 304.950362][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.950377][ T5961] usb 4-1: Product: syz [ 304.950389][ T5961] usb 4-1: Manufacturer: syz [ 304.950400][ T5961] usb 4-1: SerialNumber: syz [ 304.996059][ T5961] usb 4-1: config 0 descriptor?? [ 305.001083][ T5961] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 305.157068][ T8738] team0 (unregistering): Port device team_slave_0 removed [ 305.163300][ T8738] team0 (unregistering): Port device team_slave_1 removed [ 305.238593][ T5961] usb 4-1: USB disconnect, device number 64 [ 305.281927][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.355112][ T8756] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 306.854592][ T5897] usb 1-1: USB disconnect, device number 78 [ 307.899566][ T5897] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 308.366372][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 308.384497][ T5897] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 308.393897][ T5897] usb 1-1: config 0 has no interface number 0 [ 308.432049][ T5897] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.449708][ T8768] x_tables: duplicate entry at hook 2 [ 308.458740][ T5897] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.483152][ T5897] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 308.493822][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.526598][ T1206] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 308.538033][ T5897] usb 1-1: config 0 descriptor?? [ 308.643801][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.809772][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 308.846390][ T5891] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 308.915975][ T1206] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 308.972027][ T1206] usb 4-1: config 0 has no interface number 0 [ 308.999458][ T1206] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.061581][ T1206] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.108608][ T1206] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 309.143591][ T8776] x_tables: duplicate underflow at hook 3 [ 309.163067][ T5891] usb 3-1: config 0 has no interfaces? [ 309.174263][ T5891] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.204689][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.212987][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.475925][ T1206] usb 4-1: config 0 descriptor?? [ 309.482279][ T5891] usb 3-1: Product: syz [ 309.487104][ T5891] usb 3-1: Manufacturer: syz [ 309.506498][ T5891] usb 3-1: SerialNumber: syz [ 309.546406][ T5891] usb 3-1: config 0 descriptor?? [ 309.571125][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 309.729997][ T8783] loop2: detected capacity change from 0 to 5 [ 309.740665][ T8783] Dev loop2: unable to read RDB block 5 [ 309.748728][ T8783] loop2: AHDI p3 [ 309.754377][ T8783] loop2: partition table partially beyond EOD, truncated [ 309.990899][ T8763] x_tables: duplicate underflow at hook 3 [ 310.262540][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 310.336908][ T5961] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 310.506352][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 310.520201][ T5961] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 310.535507][ T5961] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 310.550971][ T5961] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 310.645724][ T5961] usb 5-1: config 250 has no interface number 0 [ 310.693718][ T5961] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 310.743530][ T5961] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 310.798848][ T5897] usbhid 1-1:0.4: can't add hid device: -71 [ 310.807085][ T5897] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 310.930123][ T5961] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 310.947930][ T5961] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 310.956998][ T5897] usb 1-1: USB disconnect, device number 79 [ 311.044297][ T5961] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 311.123937][ T5961] usb 5-1: config 250 interface 228 has no altsetting 0 [ 311.153969][ T5961] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 311.166840][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 311.179031][ T5961] usb 5-1: Product: syz [ 311.184327][ T5961] usb 5-1: SerialNumber: syz [ 311.217665][ T5961] hub 5-1:250.228: bad descriptor, ignoring hub [ 311.235882][ T5961] hub 5-1:250.228: probe with driver hub failed with error -5 [ 311.419985][ T5961] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 68 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 311.486840][ T52] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 311.649404][ T52] usb 1-1: config 0 has no interfaces? [ 311.658750][ T52] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.668195][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.692925][ T52] usb 1-1: Product: syz [ 311.716385][ T52] usb 1-1: Manufacturer: syz [ 311.735318][ T52] usb 1-1: SerialNumber: syz [ 311.740695][ T5961] usb 5-1: USB disconnect, device number 68 [ 311.762778][ T5961] usblp0: removed [ 311.804410][ T52] usb 1-1: config 0 descriptor?? [ 312.045327][ T1206] usbhid 4-1:0.4: can't add hid device: -71 [ 312.085119][ T1206] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 312.375177][ T1206] usb 4-1: USB disconnect, device number 65 [ 312.502369][ T8806] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 313.028436][ T5961] usb 3-1: USB disconnect, device number 57 [ 313.106844][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.781'. [ 313.361638][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 313.684665][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.785'. [ 314.157767][ T5892] usb 1-1: USB disconnect, device number 80 [ 314.777374][ T120] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 314.956012][ T120] usb 1-1: config 0 has no interfaces? [ 315.145220][ T120] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 315.189297][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.245511][ T5897] IPVS: starting estimator thread 0... [ 315.260636][ T120] usb 1-1: Product: syz [ 315.332579][ T120] usb 1-1: Manufacturer: syz [ 315.405163][ T120] usb 1-1: SerialNumber: syz [ 315.428881][ T120] usb 1-1: config 0 descriptor?? [ 315.436825][ T8842] IPVS: using max 26 ests per chain, 62400 per kthread [ 316.016381][ T120] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 316.089189][ T5892] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 316.230080][ T120] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 316.239449][ T120] usb 3-1: config 0 has no interface number 0 [ 316.250218][ T120] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 316.266568][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 316.274554][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.278994][ T5892] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 316.293634][ T5892] usb 4-1: config 0 has no interface number 0 [ 316.301440][ T5892] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.332429][ T120] usb 3-1: Product: syz [ 316.340238][ T5892] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.380096][ T8858] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 316.391086][ T120] usb 3-1: Manufacturer: syz [ 316.402464][ T5892] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 316.431797][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.449138][ T120] usb 3-1: SerialNumber: syz [ 316.487302][ T5892] usb 4-1: config 0 descriptor?? [ 316.505533][ T120] usb 3-1: config 0 descriptor?? [ 316.605220][ T120] mvusb_mdio 3-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 316.733958][ T8836] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 316.968697][ T8850] x_tables: duplicate underflow at hook 3 [ 317.224347][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.240255][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.261623][ T8869] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 317.691194][ T1206] usb 1-1: USB disconnect, device number 81 [ 317.857371][ T5897] usb 3-1: USB disconnect, device number 58 [ 318.054802][ T8876] loop2: detected capacity change from 0 to 5 [ 318.065357][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 318.091881][ T8876] Dev loop2: unable to read RDB block 5 [ 318.111354][ T8876] loop2: AHDI p3 [ 318.115177][ T8876] loop2: partition table partially beyond EOD, truncated [ 318.486651][ T5961] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 318.619599][ T52] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 318.660940][ T5961] usb 5-1: config 0 has no interfaces? [ 318.672052][ T5961] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 318.704654][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.726368][ T5961] usb 5-1: Product: syz [ 318.745975][ T5961] usb 5-1: Manufacturer: syz [ 318.757812][ T5961] usb 5-1: SerialNumber: syz [ 318.795578][ T5961] usb 5-1: config 0 descriptor?? [ 318.801509][ T120] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 318.916801][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 318.978718][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 318.987111][ T120] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 318.998774][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.052487][ T120] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 319.052576][ T120] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 319.052604][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.069964][ T120] usb 2-1: config 0 descriptor?? [ 319.154951][ T5892] usbhid 4-1:0.4: can't add hid device: -71 [ 319.155057][ T5892] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 319.158499][ T5892] usb 4-1: USB disconnect, device number 66 [ 319.486004][ T120] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 319.577926][ T120] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 319.594543][ T120] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 319.606837][ T120] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 319.621507][ T120] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 319.647588][ T120] hid-u2fzero 0003:10C4:8ACF.000D: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 319.712824][ T120] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero LED initialised [ 319.742339][ T120] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero RNG initialised [ 319.896870][ T120] usb 2-1: USB disconnect, device number 72 [ 320.636444][ T5961] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 320.766604][ T5961] usb 2-1: device descriptor read/64, error -71 [ 320.929257][ T8903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.936989][ T8903] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 321.028243][ T8903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.034370][ T8903] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 321.076742][ T5961] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 321.132016][ T8903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.155040][ T8903] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 321.201870][ T8903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.209707][ T5895] usb 5-1: USB disconnect, device number 69 [ 321.226591][ T8903] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 321.287045][ T120] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 321.295137][ T5961] usb 2-1: device descriptor read/64, error -71 [ 321.367922][ T8903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.394338][ T8903] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 321.457248][ T5961] usb usb2-port1: attempt power cycle [ 321.526570][ T8917] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 321.555809][ T120] usb 4-1: config 0 has no interfaces? [ 321.582110][ T120] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.629480][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.689216][ T120] usb 4-1: Product: syz [ 321.716960][ T120] usb 4-1: Manufacturer: syz [ 321.756343][ T120] usb 4-1: SerialNumber: syz [ 321.826675][ T5961] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 321.848176][ T120] usb 4-1: config 0 descriptor?? [ 321.897305][ T5961] usb 2-1: device descriptor read/8, error -71 [ 321.967470][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 322.156637][ T5961] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 322.193605][ T5961] usb 2-1: device descriptor read/8, error -71 [ 322.326876][ T5961] usb usb2-port1: unable to enumerate USB device [ 322.372791][ T8926] loop2: detected capacity change from 0 to 5 [ 322.381995][ T8926] Dev loop2: unable to read RDB block 5 [ 322.389281][ T8926] loop2: AHDI p3 [ 322.393082][ T8926] loop2: partition table partially beyond EOD, truncated [ 322.796954][ T5892] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 322.968566][ T5892] usb 5-1: config index 0 descriptor too short (expected 8192, got 441) [ 322.977336][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.999937][ T5892] usb 5-1: config 0 has no interfaces? [ 323.005705][ T5892] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.018740][ T5897] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 323.027711][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.050851][ T5892] usb 5-1: config 0 descriptor?? [ 323.196747][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 323.220507][ T5897] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 323.249321][ T5897] usb 3-1: config 0 has no interface number 0 [ 323.269277][ T5897] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.292153][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.300942][ T5897] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.311983][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.341147][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.376444][ T5897] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 323.402031][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.415197][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.439475][ T5897] usb 3-1: config 0 descriptor?? [ 323.463033][ T5892] usb 5-1: string descriptor 0 read error: -71 [ 323.497400][ T5892] usb 5-1: USB disconnect, device number 70 [ 323.713954][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 323.735913][ T8942] syz_tun: entered promiscuous mode [ 323.749712][ T8942] syz_tun: left promiscuous mode [ 323.889373][ T1206] usb 4-1: USB disconnect, device number 67 [ 323.976568][ T5892] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 324.068896][ T8937] x_tables: duplicate underflow at hook 3 [ 324.317049][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 324.324478][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.373353][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.383580][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.398325][ T5892] usb 5-1: Product: syz [ 324.407800][ T5892] usb 5-1: Manufacturer: syz [ 324.417215][ T5892] usb 5-1: SerialNumber: syz [ 324.448890][ T5892] usb 5-1: selecting invalid altsetting 1 [ 324.570108][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 324.596682][ T5961] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 324.648312][ T8929] capability: warning: `syz.4.813' uses 32-bit capabilities (legacy support in use) [ 324.752383][ T8962] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 324.818445][ T5961] usb 4-1: config 0 has no interfaces? [ 324.832191][ T5961] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 324.841542][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.849963][ T5961] usb 4-1: Product: syz [ 324.854270][ T5961] usb 4-1: Manufacturer: syz [ 324.859137][ T5961] usb 4-1: SerialNumber: syz [ 324.973221][ T8929] ucma_write: process 562 (syz.4.813) changed security contexts after opening file descriptor, this is not allowed. [ 324.999091][ T5961] usb 4-1: config 0 descriptor?? [ 325.162880][ T5892] cdc_ncm 5-1:1.0: bind() failure [ 325.234258][ T5892] usb 5-1: USB disconnect, device number 71 [ 325.661890][ T5897] usbhid 3-1:0.4: can't add hid device: -71 [ 325.675413][ T5897] usbhid 3-1:0.4: probe with driver usbhid failed with error -71 [ 325.724190][ T5897] usb 3-1: USB disconnect, device number 59 [ 326.006519][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.824'. [ 326.023103][ T8970] loop2: detected capacity change from 0 to 5 [ 326.042207][ T8970] Dev loop2: unable to read RDB block 5 [ 326.063893][ T8970] loop2: AHDI p3 [ 326.082004][ T8970] loop2: partition table partially beyond EOD, truncated [ 326.470559][ T5961] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 326.638826][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.650265][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.661900][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.675381][ T5961] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.684678][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.695882][ T5961] usb 5-1: config 0 descriptor?? [ 326.707123][ T5892] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 326.866658][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 326.894510][ T5892] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 326.921899][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.959286][ T5892] usb 1-1: config 0 descriptor?? [ 326.981294][ T5892] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 327.055462][ T5897] usb 4-1: USB disconnect, device number 68 [ 327.123909][ T5961] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 327.177294][ T5961] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 327.398961][ T8999] PKCS7: Unknown OID: [5] (bad) [ 327.433440][ T8999] PKCS7: Only support pkcs7_signedData type [ 327.455828][ T8999] (unnamed net_device) (uninitialized): option mode: invalid value (223) [ 327.486115][ T5895] usb 5-1: USB disconnect, device number 72 [ 327.488914][ T9004] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -19 [ 327.544322][ T5892] gspca_nw80x: reg_r err -71 [ 327.568992][ T5892] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 327.624860][ T5892] usb 1-1: USB disconnect, device number 83 [ 327.751668][ T9012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 328.007242][ T9018] loop2: detected capacity change from 0 to 5 [ 328.025277][ T9018] Dev loop2: unable to read RDB block 5 [ 328.043017][ T9018] loop2: AHDI p3 [ 328.049981][ T9018] loop2: partition table partially beyond EOD, truncated [ 328.197651][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.840'. [ 328.253975][ T9025] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 328.306292][ T5892] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 328.486626][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 328.556390][ T5892] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 328.564529][ T5892] usb 1-1: config 0 has no interface number 0 [ 328.571391][ T5892] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.583070][ T5892] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.600562][ T5892] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 328.627710][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.677458][ T5892] usb 1-1: config 0 descriptor?? [ 329.422976][ T9015] x_tables: duplicate underflow at hook 3 [ 329.511150][ T5897] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 329.736452][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 329.753555][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 329.762895][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.772048][ T5897] usb 5-1: Product: syz [ 329.782691][ T5897] usb 5-1: Manufacturer: syz [ 329.818289][ T5897] usb 5-1: SerialNumber: syz [ 329.994449][ T5897] usb 5-1: config 0 descriptor?? [ 330.007629][ T5897] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 330.217536][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.233424][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.967380][ T5892] usbhid 1-1:0.4: can't add hid device: -71 [ 330.973871][ T5892] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 331.025093][ T5892] usb 1-1: USB disconnect, device number 84 [ 331.311152][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 331.555469][ T5892] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 331.741673][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 331.766787][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.830805][ T5892] usb 1-1: config 0 descriptor?? [ 332.279710][ T5837] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 332.378935][ T5892] logitech 0003:046D:CA03.000F: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0 [ 332.495506][ T5837] usb 2-1: config 0 has no interfaces? [ 332.504382][ T5837] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.520161][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.534325][ T5837] usb 2-1: Product: syz [ 332.580519][ T5892] logitech 0003:046D:CA03.000F: no inputs found [ 332.600117][ T5837] usb 2-1: Manufacturer: syz [ 332.604775][ T5837] usb 2-1: SerialNumber: syz [ 332.712362][ T5897] pwc: Warning: more than 1 configuration available. [ 332.745940][ T5897] pwc: Failed to set LED on/off time (-71) [ 332.824308][ T5895] usb 1-1: USB disconnect, device number 85 [ 332.831338][ T5837] usb 2-1: config 0 descriptor?? [ 332.838776][ T5897] pwc: send_video_command error -71 [ 332.853011][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 332.898012][ T5897] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 332.953223][ T9082] loop2: detected capacity change from 0 to 5 [ 332.971783][ T9082] Dev loop2: unable to read RDB block 5 [ 332.985768][ T5897] usb 5-1: USB disconnect, device number 73 [ 332.990356][ T9082] loop2: AHDI p3 [ 333.008614][ T9082] loop2: partition table partially beyond EOD, truncated [ 333.490942][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 333.814866][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 334.077103][ T9108] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 334.458185][ T9115] input: syz0 as /devices/virtual/input/input23 [ 335.116719][ T5961] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 335.189132][ T5837] usb 2-1: USB disconnect, device number 77 [ 335.266603][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 335.423108][ T5961] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 335.432883][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.441096][ T5961] usb 3-1: Product: syz [ 335.453014][ T5961] usb 3-1: Manufacturer: syz [ 335.461084][ T9126] loop2: detected capacity change from 0 to 5 [ 335.497806][ T5961] usb 3-1: SerialNumber: syz [ 335.525050][ T9126] Dev loop2: unable to read RDB block 5 [ 335.532848][ T5961] usb 3-1: config 0 descriptor?? [ 335.551161][ T9126] loop2: AHDI p3 [ 335.558919][ T5961] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 335.573713][ T9126] loop2: partition table partially beyond EOD, truncated [ 335.765249][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.775335][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.286540][ T5837] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 336.983961][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'. [ 337.438664][ T5897] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 337.601865][ T5897] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 337.632608][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.660090][ T5897] usb 2-1: Product: syz [ 337.671234][ T5897] usb 2-1: Manufacturer: syz [ 337.681778][ T5897] usb 2-1: SerialNumber: syz [ 337.715904][ T5897] usb 2-1: config 0 descriptor?? [ 337.752898][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 337.806810][ T120] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 337.986730][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 337.999655][ T120] usb 5-1: config 0 has an invalid interface number: 190 but max is 1 [ 338.016574][ T120] usb 5-1: config 0 has an invalid interface number: 2 but max is 1 [ 338.084490][ T120] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 338.106405][ T120] usb 5-1: config 0 has no interface number 1 [ 338.117167][ T120] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.156325][ T120] usb 5-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 338.218153][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.236442][ T120] usb 5-1: config 0 interface 2 has no altsetting 0 [ 338.246537][ T120] usb 5-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 338.256710][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.276418][ T120] usb 5-1: Product: syz [ 338.286844][ T120] usb 5-1: Manufacturer: syz [ 338.296271][ T120] usb 5-1: SerialNumber: syz [ 338.314270][ T120] usb 5-1: config 0 descriptor?? [ 338.403061][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.413436][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.526429][ T5897] gspca_sunplus: reg_r err -71 [ 338.531372][ T5897] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 338.616798][ T5837] usb 1-1: device descriptor read/64, error -71 [ 338.617273][ T5897] usb 2-1: USB disconnect, device number 78 [ 338.628065][ T5961] pwc: Warning: more than 1 configuration available. [ 338.717736][ T5961] pwc: Failed to set LED on/off time (-71) [ 338.733611][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.763667][ T5961] pwc: send_video_command error -71 [ 338.772940][ T5961] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 338.813203][ T5961] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 338.828177][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.854457][ T5961] usb 3-1: USB disconnect, device number 60 [ 338.877251][ T5837] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 338.908187][ T9170] loop2: detected capacity change from 0 to 5 [ 338.950161][ T9170] Dev loop2: unable to read RDB block 5 [ 338.990396][ T9170] loop2: AHDI p3 [ 338.994119][ T9170] loop2: partition table partially beyond EOD, truncated [ 339.081285][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 339.203065][ T5837] usb 1-1: config 0 has no interfaces? [ 339.245327][ T5837] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.261693][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.284189][ T5837] usb 1-1: Product: syz [ 339.295617][ T5837] usb 1-1: Manufacturer: syz [ 339.393352][ T5837] usb 1-1: SerialNumber: syz [ 339.453382][ T5837] usb 1-1: config 0 descriptor?? [ 339.496401][ T120] usb 5-1: selecting invalid altsetting 0 [ 339.658385][ T120] usb 5-1: USB disconnect, device number 74 [ 339.836482][ T5897] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 340.077024][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 340.083700][ T5897] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 340.093222][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 340.116413][ T5897] usb 2-1: can't read configurations, error -22 [ 340.285973][ T5897] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 340.333023][ T9187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 340.476459][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 340.503115][ T5897] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 340.541443][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 340.593710][ T5897] usb 2-1: can't read configurations, error -22 [ 340.634715][ T5897] usb usb2-port1: attempt power cycle [ 341.011520][ T5897] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 341.070899][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 341.094505][ T5897] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 341.122597][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 341.148917][ T5897] usb 2-1: can't read configurations, error -22 [ 341.280390][ T9202] xt_hashlimit: size too large, truncated to 1048576 [ 341.310749][ T5897] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 341.374810][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 341.385455][ T5897] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 341.433894][ T5897] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 23 [ 341.457391][ T5897] usb 2-1: can't read configurations, error -22 [ 341.476944][ T5897] usb usb2-port1: unable to enumerate USB device [ 341.875823][ T5897] usb 1-1: USB disconnect, device number 87 [ 341.886586][ T5961] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 342.076486][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 342.117377][ T5961] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 342.183488][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.226050][ T5961] usb 5-1: Product: syz [ 342.258094][ T5961] usb 5-1: Manufacturer: syz [ 342.262756][ T5961] usb 5-1: SerialNumber: syz [ 342.404373][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'. [ 342.452927][ T5961] usb 5-1: config 0 descriptor?? [ 342.492895][ T9238] xt_TCPMSS: Only works on TCP SYN packets [ 342.537964][ T5961] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 342.721571][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.731664][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.743260][ T5897] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 342.845935][ T9250] FAULT_INJECTION: forcing a failure. [ 342.845935][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.860507][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.1.907 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 342.860540][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.860554][ T9250] Call Trace: [ 342.860562][ T9250] [ 342.860571][ T9250] dump_stack_lvl+0x241/0x360 [ 342.860612][ T9250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.860649][ T9250] ? __pfx__printk+0x10/0x10 [ 342.860686][ T9250] should_fail_ex+0x424/0x570 [ 342.860707][ T9250] _copy_from_user+0x2d/0xb0 [ 342.860734][ T9250] copy_msghdr_from_user+0xb3/0x580 [ 342.860771][ T9250] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 342.860797][ T9250] ? __fget_files+0x2a/0x420 [ 342.860819][ T9250] ? __fget_files+0x2a/0x420 [ 342.860844][ T9250] __sys_sendmmsg+0x361/0x7b0 [ 342.860869][ T9250] ? __pfx___sys_sendmmsg+0x10/0x10 [ 342.860940][ T9250] ? rcu_read_lock_any_held+0x41/0x160 [ 342.860975][ T9250] ? preempt_schedule_irq+0xfe/0x1c0 [ 342.861002][ T9250] ? __pfx___schedule+0x10/0x10 [ 342.861022][ T9250] ? __mutex_unlock_slowpath+0x229/0x800 [ 342.861051][ T9250] ? preempt_schedule_irq+0x145/0x1c0 [ 342.861104][ T9250] __x64_sys_sendmmsg+0xa0/0xb0 [ 342.861127][ T9250] do_syscall_64+0xf3/0x230 [ 342.861152][ T9250] ? clear_bhb_loop+0x45/0xa0 [ 342.861169][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.861183][ T9250] RIP: 0033:0x7f853898d169 [ 342.861196][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.861215][ T9250] RSP: 002b:00007f85398ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.861238][ T9250] RAX: ffffffffffffffda RBX: 00007f8538ba5fa0 RCX: 00007f853898d169 [ 342.861252][ T9250] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 342.861265][ T9250] RBP: 00007f85398ca090 R08: 0000000000000000 R09: 0000000000000000 [ 342.861277][ T9250] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 342.861289][ T9250] R13: 0000000000000000 R14: 00007f8538ba5fa0 R15: 00007f8538ccfa28 [ 342.861315][ T9250] [ 343.316431][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 343.323581][ T5897] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 343.332413][ T5897] usb 4-1: config 0 has no interface number 0 [ 343.341002][ T5897] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.365599][ T5897] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 343.411562][ T5897] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 343.434769][ T5897] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 343.477484][ T5897] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 343.531964][ T5897] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.584950][ T5897] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 343.606351][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.657008][ T5897] usb 4-1: Product: syz [ 343.691796][ T5897] usb 4-1: Manufacturer: syz [ 343.707423][ T5897] usb 4-1: SerialNumber: syz [ 343.728085][ T5897] usb 4-1: config 0 descriptor?? [ 343.742351][ T9236] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 343.756871][ T9236] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 343.992622][ T9265] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 344.017118][ T5897] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 344.060504][ T5897] etas_es58x 4-1:0.219: could not retrieve the product info string [ 344.464228][ T5897] usb 4-1: USB disconnect, device number 69 [ 344.478731][ T5897] etas_es58x 4-1:0.219: Disconnecting syz syz [ 345.124290][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 345.337237][ T5961] pwc: Warning: more than 1 configuration available. [ 345.360193][ T5961] pwc: Failed to set LED on/off time (-71) [ 345.366876][ T5961] pwc: send_video_command error -71 [ 345.372112][ T5961] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 345.411652][ T9282] loop2: detected capacity change from 0 to 5 [ 345.418014][ T5961] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 345.424086][ T9285] FAULT_INJECTION: forcing a failure. [ 345.424086][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.443667][ T9282] Dev loop2: unable to read RDB block 5 [ 345.452088][ T5961] usb 5-1: USB disconnect, device number 75 [ 345.466400][ T120] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 345.473487][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.0.918 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 345.473524][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.473538][ T9285] Call Trace: [ 345.473547][ T9285] [ 345.473557][ T9285] dump_stack_lvl+0x241/0x360 [ 345.473597][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.473629][ T9285] ? __pfx__printk+0x10/0x10 [ 345.473672][ T9285] should_fail_ex+0x424/0x570 [ 345.473701][ T9285] _copy_from_user+0x2d/0xb0 [ 345.473735][ T9285] ____sys_sendmsg+0x324/0x860 [ 345.473769][ T9285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.473790][ T9285] ? __fget_files+0x2a/0x420 [ 345.473814][ T9285] ? __fget_files+0x2a/0x420 [ 345.473844][ T9285] __sys_sendmmsg+0x3a0/0x7b0 [ 345.473880][ T9285] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.473940][ T9285] ? rcu_read_lock_any_held+0xbb/0x160 [ 345.473973][ T9285] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 345.474006][ T9285] ? vfs_write+0xb29/0xd10 [ 345.474042][ T9285] ? ksys_write+0x24e/0x2d0 [ 345.474070][ T9285] ? __mutex_unlock_slowpath+0x229/0x800 [ 345.474130][ T9285] ? ksys_write+0x275/0x2d0 [ 345.474167][ T9285] __x64_sys_sendmmsg+0xa0/0xb0 [ 345.474193][ T9285] do_syscall_64+0xf3/0x230 [ 345.474219][ T9285] ? clear_bhb_loop+0x45/0xa0 [ 345.474246][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.474268][ T9285] RIP: 0033:0x7fd2bb58d169 [ 345.474287][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.474305][ T9285] RSP: 002b:00007fd2b93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.474330][ T9285] RAX: ffffffffffffffda RBX: 00007fd2bb7a5fa0 RCX: 00007fd2bb58d169 [ 345.474347][ T9285] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 345.474361][ T9285] RBP: 00007fd2b93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 345.474374][ T9285] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 345.474394][ T9285] R13: 0000000000000000 R14: 00007fd2bb7a5fa0 R15: 00007fd2bb8cfa28 [ 345.474427][ T9285] [ 345.543211][ T9282] loop2: AHDI p3 [ 345.735097][ T9282] loop2: partition table partially beyond EOD, truncated [ 345.766336][ T120] usb 4-1: device descriptor read/64, error -71 [ 345.861169][ T9288] can: request_module (can-proto-0) failed. [ 346.026796][ T120] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 346.086315][ T5892] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 346.156318][ T120] usb 4-1: device descriptor read/64, error -71 [ 346.236787][ T52] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 346.246334][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 346.253336][ T5892] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 346.265066][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 346.278291][ T5891] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 346.286981][ T120] usb usb4-port1: attempt power cycle [ 346.289537][ T5892] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 346.301972][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.310516][ T5892] usb 1-1: Product: syz [ 346.314683][ T5892] usb 1-1: Manufacturer: syz [ 346.319503][ T5892] usb 1-1: SerialNumber: syz [ 346.326720][ T5892] usb 1-1: config 0 descriptor?? [ 346.396650][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 346.403794][ T52] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.412719][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 346.424516][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 346.427043][ T5891] usb 5-1: device descriptor read/64, error -71 [ 346.435755][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 346.451697][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.461949][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 346.473730][ T52] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 346.489946][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 346.501272][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 346.515561][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 64576, setting to 64 [ 346.532781][ T52] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 346.541935][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.550300][ T52] usb 3-1: Product: syz [ 346.554505][ T52] usb 3-1: Manufacturer: syz [ 346.559474][ T52] usb 3-1: SerialNumber: syz [ 346.568252][ T52] usb 3-1: config 0 descriptor?? [ 346.579440][ T52] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.626807][ T120] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 346.669326][ T120] usb 4-1: device descriptor read/8, error -71 [ 346.670616][ T7138] udevd[7138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.700952][ T5891] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 346.789092][ T52] usb 3-1: USB disconnect, device number 61 [ 346.837054][ T5891] usb 5-1: device descriptor read/64, error -71 [ 346.926962][ T120] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 346.957492][ T5891] usb usb5-port1: attempt power cycle [ 346.960494][ T120] usb 4-1: device descriptor read/8, error -71 [ 346.998531][ T9307] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 347.057757][ T5892] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 347.093666][ T5892] usb 1-1: setting power ON [ 347.103181][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 347.147674][ T120] usb usb4-port1: unable to enumerate USB device [ 347.154332][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.202057][ T5892] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 347.253053][ T5892] usb 1-1: media controller created [ 347.316918][ T5891] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 347.378937][ T5891] usb 5-1: device descriptor read/8, error -71 [ 347.513449][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.549467][ T5892] usb 1-1: selecting invalid altsetting 6 [ 347.559382][ T9311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.927'. [ 347.582041][ T5892] usb 1-1: digital interface selection failed (-22) [ 347.591653][ T5892] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 347.609520][ T5892] usb 1-1: setting power OFF [ 347.628852][ T5891] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 347.679463][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 347.732270][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 347.742889][ T5891] usb 5-1: device descriptor read/8, error -71 [ 347.775171][ T5892] (NULL device *): no alternate interface [ 347.869822][ T5891] usb usb5-port1: unable to enumerate USB device [ 347.888761][ T9315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.929'. [ 347.923254][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 347.949639][ T5892] usb 1-1: USB disconnect, device number 88 [ 348.092373][ T9320] FAULT_INJECTION: forcing a failure. [ 348.092373][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.116817][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.2.931 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 348.116866][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.116879][ T9320] Call Trace: [ 348.116886][ T9320] [ 348.116894][ T9320] dump_stack_lvl+0x241/0x360 [ 348.116931][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.116961][ T9320] ? __pfx__printk+0x10/0x10 [ 348.116998][ T9320] should_fail_ex+0x424/0x570 [ 348.117044][ T9320] _copy_to_user+0x31/0xb0 [ 348.117076][ T9320] simple_read_from_buffer+0xc4/0x170 [ 348.117123][ T9320] proc_fail_nth_read+0x1ef/0x260 [ 348.117148][ T9320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.117172][ T9320] ? rw_verify_area+0x246/0x630 [ 348.117194][ T9320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.117217][ T9320] vfs_read+0x21f/0xb90 [ 348.117244][ T9320] ? __pfx___mutex_lock+0x10/0x10 [ 348.117270][ T9320] ? __pfx_vfs_read+0x10/0x10 [ 348.117295][ T9320] ? __fget_files+0x2a/0x420 [ 348.117316][ T9320] ? __fget_files+0x39d/0x420 [ 348.117333][ T9320] ? __fget_files+0x2a/0x420 [ 348.117361][ T9320] ksys_read+0x19d/0x2d0 [ 348.117398][ T9320] ? __pfx_ksys_read+0x10/0x10 [ 348.117429][ T9320] ? do_syscall_64+0xb6/0x230 [ 348.117456][ T9320] do_syscall_64+0xf3/0x230 [ 348.117481][ T9320] ? clear_bhb_loop+0x45/0xa0 [ 348.117505][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.117525][ T9320] RIP: 0033:0x7fdb57f8bb7c [ 348.117543][ T9320] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 348.117560][ T9320] RSP: 002b:00007fdb58e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.117583][ T9320] RAX: ffffffffffffffda RBX: 00007fdb581a5fa0 RCX: 00007fdb57f8bb7c [ 348.117599][ T9320] RDX: 000000000000000f RSI: 00007fdb58e570a0 RDI: 0000000000000004 [ 348.117612][ T9320] RBP: 00007fdb58e57090 R08: 0000000000000000 R09: 0000000000000000 [ 348.117625][ T9320] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 348.117638][ T9320] R13: 0000000000000000 R14: 00007fdb581a5fa0 R15: 00007fdb582cfa28 [ 348.117670][ T9320] [ 348.655312][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 348.984905][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 349.007187][ T120] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 349.033244][ T9346] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 349.104415][ T9351] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 349.121612][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.941'. [ 349.195310][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.220429][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.301154][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 349.312467][ T120] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 349.321831][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.344825][ T120] usb 3-1: config 0 descriptor?? [ 349.646509][ T9354] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 349.953696][ T120] usbhid 3-1:0.0: can't add hid device: -71 [ 349.960255][ T120] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.993318][ T120] usb 3-1: USB disconnect, device number 62 [ 350.279845][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.946'. [ 350.290076][ T5891] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 350.417457][ T9372] IPv6: Can't replace route, no match found [ 350.478400][ T5891] usb 2-1: config 0 has no interfaces? [ 350.491931][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 350.502456][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.684809][ T5891] usb 2-1: Product: syz [ 350.725343][ T5891] usb 2-1: Manufacturer: syz [ 350.749127][ T5891] usb 2-1: SerialNumber: syz [ 350.794473][ T5891] usb 2-1: config 0 descriptor?? [ 351.088160][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.952'. [ 351.268277][ T9391] FAULT_INJECTION: forcing a failure. [ 351.268277][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 351.288504][ T9391] CPU: 1 UID: 0 PID: 9391 Comm: syz.4.953 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 351.288535][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.288548][ T9391] Call Trace: [ 351.288556][ T9391] [ 351.288565][ T9391] dump_stack_lvl+0x241/0x360 [ 351.288603][ T9391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.288632][ T9391] ? __pfx__printk+0x10/0x10 [ 351.288664][ T9391] ? __pfx___might_resched+0x10/0x10 [ 351.288710][ T9391] should_fail_ex+0x424/0x570 [ 351.288737][ T9391] should_failslab+0xac/0x100 [ 351.288766][ T9391] kmem_cache_alloc_noprof+0x78/0x390 [ 351.288794][ T9391] ? mas_alloc_nodes+0x267/0x7e0 [ 351.288820][ T9391] mas_alloc_nodes+0x267/0x7e0 [ 351.288850][ T9391] mas_preallocate+0x5ea/0x950 [ 351.288870][ T9391] ? register_lock_class+0x54/0x330 [ 351.288903][ T9391] ? __pfx_mas_preallocate+0x10/0x10 [ 351.288922][ T9391] ? __lock_acquire+0xad5/0xd80 [ 351.288950][ T9391] ? __asan_memset+0x23/0x50 [ 351.288971][ T9391] ? init_multi_vma_prep+0x3e3/0x460 [ 351.289023][ T9391] commit_merge+0x25a/0x730 [ 351.289057][ T9391] ? __pfx_commit_merge+0x10/0x10 [ 351.289090][ T9391] ? dup_anon_vma+0x7d/0x2b0 [ 351.289113][ T9391] ? vma_merge_existing_range+0xba5/0x16c0 [ 351.289147][ T9391] vma_merge_existing_range+0x1226/0x16c0 [ 351.289186][ T9391] ? vma_merge_existing_range+0x811/0x16c0 [ 351.289223][ T9391] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 351.289266][ T9391] vma_modify+0x76/0x390 [ 351.289295][ T9391] vma_modify_flags_uffd+0x395/0x420 [ 351.289328][ T9391] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 351.289380][ T9391] ? mas_find+0x950/0xbb0 [ 351.289408][ T9391] userfaultfd_release_all+0x399/0x620 [ 351.289451][ T9391] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 351.289503][ T9391] userfaultfd_release+0xe9/0x1b0 [ 351.289529][ T9391] ? __pfx_userfaultfd_release+0x10/0x10 [ 351.289562][ T9391] ? evm_file_release+0x10c/0x1e0 [ 351.289581][ T9391] ? __pfx_userfaultfd_release+0x10/0x10 [ 351.289609][ T9391] __fput+0x3e9/0x9f0 [ 351.289640][ T9391] task_work_run+0x251/0x310 [ 351.289670][ T9391] ? __fput_deferred+0x16c/0x1f0 [ 351.289695][ T9391] ? __pfx_task_work_run+0x10/0x10 [ 351.289730][ T9391] ? syscall_exit_to_user_mode+0xa3/0x340 [ 351.289758][ T9391] syscall_exit_to_user_mode+0x13f/0x340 [ 351.289787][ T9391] do_syscall_64+0x100/0x230 [ 351.289812][ T9391] ? clear_bhb_loop+0x45/0xa0 [ 351.289837][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.289857][ T9391] RIP: 0033:0x7f328558d169 [ 351.289876][ T9391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.289902][ T9391] RSP: 002b:00007f328631e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.289924][ T9391] RAX: 0000000000000020 RBX: 00007f32857a5fa0 RCX: 00007f328558d169 [ 351.289938][ T9391] RDX: 00000000000000ee RSI: 0000200000000140 RDI: 0000000000000003 [ 351.289951][ T9391] RBP: 00007f328631e090 R08: 0000000000000000 R09: 0000000000000000 [ 351.289964][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.289977][ T9391] R13: 0000000000000000 R14: 00007f32857a5fa0 R15: 00007f32858cfa28 [ 351.290008][ T9391] [ 351.607887][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.616925][ T9391] BUG: unable to handle page fault for address: fffffffffffffff4 [ 351.624670][ T9391] #PF: supervisor read access in kernel mode [ 351.630658][ T9391] #PF: error_code(0x0000) - not-present page [ 351.636634][ T9391] PGD eb3c067 P4D eb3c067 PUD eb3e067 PMD 0 [ 351.642644][ T9391] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 351.648023][ T9391] CPU: 1 UID: 0 PID: 9391 Comm: syz.4.953 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 351.659571][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.669634][ T9391] RIP: 0010:vma_merge_existing_range+0x2df/0x16c0 [ 351.676065][ T9391] Code: a4 ff 48 85 db 0f 84 87 00 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e1 26 0f 00 <4c> 8b 3b 48 8b 5c 24 78 48 89 df 4c 89 fe e8 be ff a4 ff 4c 39 fb [ 351.695675][ T9391] RSP: 0018:ffffc9000e247880 EFLAGS: 00010246 [ 351.701741][ T9391] RAX: 1ffffffffffffffe RBX: fffffffffffffff4 RCX: dffffc0000000000 [ 351.709714][ T9391] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 351.717682][ T9391] RBP: ffffc9000e2479b0 R08: ffffffff821e5948 R09: 0000000000000000 [ 351.725650][ T9391] R10: ffffc9000e247a80 R11: fffff52001c48f52 R12: 0000200000ce2000 [ 351.733615][ T9391] R13: ffffc9000e247a60 R14: ffffc9000e247a80 R15: ffff888042de9000 [ 351.741584][ T9391] FS: 00007f328631e6c0(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 351.750513][ T9391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.757105][ T9391] CR2: fffffffffffffff4 CR3: 000000007ddce000 CR4: 00000000003526f0 [ 351.765078][ T9391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 351.773043][ T9391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 351.781012][ T9391] Call Trace: [ 351.784286][ T9391] [ 351.787217][ T9391] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 351.793292][ T9391] vma_modify+0x76/0x390 [ 351.797557][ T9391] vma_modify_flags_uffd+0x395/0x420 [ 351.802872][ T9391] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 351.808689][ T9391] ? mas_find+0x8c0/0xbb0 [ 351.813016][ T9391] userfaultfd_release_all+0x399/0x620 [ 351.818481][ T9391] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 351.824485][ T9391] userfaultfd_release+0xe9/0x1b0 [ 351.829509][ T9391] ? __pfx_userfaultfd_release+0x10/0x10 [ 351.835145][ T9391] ? evm_file_release+0x10c/0x1e0 [ 351.840168][ T9391] ? __pfx_userfaultfd_release+0x10/0x10 [ 351.845810][ T9391] __fput+0x3e9/0x9f0 [ 351.849798][ T9391] task_work_run+0x251/0x310 [ 351.854393][ T9391] ? __fput_deferred+0x16c/0x1f0 [ 351.859329][ T9391] ? __pfx_task_work_run+0x10/0x10 [ 351.864449][ T9391] ? syscall_exit_to_user_mode+0xa3/0x340 [ 351.870169][ T9391] syscall_exit_to_user_mode+0x13f/0x340 [ 351.875807][ T9391] do_syscall_64+0x100/0x230 [ 351.880395][ T9391] ? clear_bhb_loop+0x45/0xa0 [ 351.885072][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.890984][ T9391] RIP: 0033:0x7f328558d169 [ 351.895398][ T9391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.915106][ T9391] RSP: 002b:00007f328631e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.923524][ T9391] RAX: 0000000000000020 RBX: 00007f32857a5fa0 RCX: 00007f328558d169 [ 351.931497][ T9391] RDX: 00000000000000ee RSI: 0000200000000140 RDI: 0000000000000003 [ 351.939466][ T9391] RBP: 00007f328631e090 R08: 0000000000000000 R09: 0000000000000000 [ 351.947434][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.955403][ T9391] R13: 0000000000000000 R14: 00007f32857a5fa0 R15: 00007f32858cfa28 [ 351.963377][ T9391] [ 351.966397][ T9391] Modules linked in: [ 351.970315][ T9391] CR2: fffffffffffffff4 [ 351.974467][ T9391] ---[ end trace 0000000000000000 ]--- [ 351.979916][ T9391] RIP: 0010:vma_merge_existing_range+0x2df/0x16c0 [ 351.986357][ T9391] Code: a4 ff 48 85 db 0f 84 87 00 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e1 26 0f 00 <4c> 8b 3b 48 8b 5c 24 78 48 89 df 4c 89 fe e8 be ff a4 ff 4c 39 fb [ 352.006046][ T9391] RSP: 0018:ffffc9000e247880 EFLAGS: 00010246 [ 352.012112][ T9391] RAX: 1ffffffffffffffe RBX: fffffffffffffff4 RCX: dffffc0000000000 [ 352.020083][ T9391] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 352.028048][ T9391] RBP: ffffc9000e2479b0 R08: ffffffff821e5948 R09: 0000000000000000 [ 352.036020][ T9391] R10: ffffc9000e247a80 R11: fffff52001c48f52 R12: 0000200000ce2000 [ 352.043994][ T9391] R13: ffffc9000e247a60 R14: ffffc9000e247a80 R15: ffff888042de9000 [ 352.051974][ T9391] FS: 00007f328631e6c0(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 352.060904][ T9391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.067484][ T9391] CR2: fffffffffffffff4 CR3: 000000007ddce000 CR4: 00000000003526f0 [ 352.075459][ T9391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.083426][ T9391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.091395][ T9391] Kernel panic - not syncing: Fatal exception [ 352.097779][ T9391] Kernel Offset: disabled [ 352.102134][ T9391] Rebooting in 86400 seconds..