last executing test programs: 14m49.305844042s ago: executing program 32 (id=903): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x541b, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 14m26.667449509s ago: executing program 33 (id=947): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="485085731c62b14537c596645bc59e6740374166dcd5a54a95a0a797af11460301eb4ce03e867a4762fffd91b2484a8c7523a533543878a6ed6e58033701f6bbd5c4d156a6fd0e0eb57df7250401d39103e1c4ee596fcc0c6849befc6328cc55db67eccf58b7eb258649c569e3c186f00b", 0x71}, {&(0x7f0000000400)}, {&(0x7f0000001d00)="1c9a3e8086b11bf2d0f8572cbbdb3ec0c98d443b486fcf2e17b542567e1fc9fb8bcd47c74aa86398574ab086cd0926fbb9994e9fd6ee039ab863aa093d1ce16cb8887afbe4f0d8d442df3209a5d4b2fbd0b378a05aa92e52007dec0225ce9d53f770d192e2e0745abae33ce7117eb71e1fa84c405cbe8a0fab586bf6cca1586a623ed9ce71212fa0b788d2389fbca69a44a43b3003f20f7b2c36792af55b8a1eb4f826b3e84659329332dd1bf1659b2f0e068334ceac2235156c6ccdf1e4496b1668c04a71922fe1e0925d76d4c7a5bae04d4ce3404940469c06f0319113666e99c0f9", 0xe3}, {&(0x7f0000001e00)="05ee7a4f4446838a2cebdf48a96cefb90ffebc73fb5a73a5776f595cd51f239c7e8b237ae22db53b0f428ba5122931aa86eca94959aa7671dd03d6e14f37c93d47f1429403310eede3fdd391224d94a13cb1553954b147eea8cd93d98e11417a0482af28cafe0c5161cadf666a257cf8d760", 0x72}, {&(0x7f0000001e80)}], 0x5, &(0x7f00000034c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r4, r6, r1, r8, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r0, r0, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x100, 0x40}}], 0x1, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) 12m21.072157021s ago: executing program 5 (id=1245): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 12m19.271951671s ago: executing program 5 (id=1248): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000d00), 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {0x0}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 12m17.195127324s ago: executing program 5 (id=1254): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) 12m15.604531525s ago: executing program 0 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01f92bbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r6, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a000fe08000008009f000d00000008"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d5161255516fd0e9bdb19f3ddd83b57ed08aafbb909efed4fb63f4e388e273461c65dbbb2bc7365b638d85376092a333c7efbfccbef7a3d33dd2eb73881b30913e68e00cab660d1dc4bf4057af049311a968fd0ff19ad6ec0815d24000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000080)={r10}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 12m14.243534975s ago: executing program 0 (id=1264): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000d00), 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {0x0}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 12m12.87512016s ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m12.738817028s ago: executing program 1 (id=1268): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1f, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x520beaf08043c77b, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r5, r4}, 0xc) 12m12.668954918s ago: executing program 5 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x2, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 12m11.117453401s ago: executing program 5 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4044800) 12m10.907685314s ago: executing program 1 (id=1274): socket(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12m10.70698556s ago: executing program 1 (id=1276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x0) 12m10.685052174s ago: executing program 1 (id=1277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x8008804) 12m10.616847042s ago: executing program 1 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="8fedcb5d07081175f3ea38e486dd37847302198721"], 0xfdef) 12m9.07751558s ago: executing program 0 (id=1280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESDEC], 0x27) 12m8.914986893s ago: executing program 0 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x40}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x240000c4) 12m8.553884535s ago: executing program 5 (id=1285): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], &(0x7f0000000040)=""/270, 0x82, 0x10e, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 12m8.403403363s ago: executing program 0 (id=1287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8008804) 12m8.29083364s ago: executing program 0 (id=1289): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000d00), 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {0x0}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 11m55.405650445s ago: executing program 34 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="8fedcb5d07081175f3ea38e486dd37847302198721"], 0xfdef) 11m53.424971485s ago: executing program 35 (id=1285): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], &(0x7f0000000040)=""/270, 0x82, 0x10e, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 11m53.218036247s ago: executing program 36 (id=1289): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000d00), 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xed}, {0x0}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 11m23.50287778s ago: executing program 4 (id=1397): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 11m22.580009208s ago: executing program 4 (id=1398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000450009000000bc30083d000003000000080002"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11m22.352652295s ago: executing program 4 (id=1399): sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) setregid(0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x1) 11m20.53082199s ago: executing program 4 (id=1400): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 11m20.430034427s ago: executing program 4 (id=1401): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m20.37868304s ago: executing program 4 (id=1402): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f0000000440)="11eb534bfc0bb2", 0x7, 0x2400d011, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) socket(0x10, 0x3, 0x0) 11m5.319646972s ago: executing program 37 (id=1402): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f0000000440)="11eb534bfc0bb2", 0x7, 0x2400d011, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) socket(0x10, 0x3, 0x0) 8m16.689930652s ago: executing program 3 (id=1793): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) setxattr$incfs_size(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=0x5, 0x8, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000140)={0x20340, 0x110, 0x2}, 0x18) 8m15.962700976s ago: executing program 3 (id=1803): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000880)={0x106, 0x7f, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) 8m15.57922144s ago: executing program 3 (id=1808): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESHEX=r0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 8m15.337058679s ago: executing program 3 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10001, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 8m14.983682843s ago: executing program 3 (id=1820): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x80805, 0x0) socket(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket(0x2, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x3e, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x105, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0x1000a098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m12.430568819s ago: executing program 3 (id=1845): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) 8m11.948222617s ago: executing program 38 (id=1845): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) 13.585451701s ago: executing program 7 (id=3684): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r7) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r7, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) read$char_usb(r7, &(0x7f0000000380)=""/190, 0xbe) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 11.298229549s ago: executing program 8 (id=3687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x8) restart_syscall() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 9.149287289s ago: executing program 2 (id=3693): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xa7, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff5}, 0x1c, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x4800) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x200, 0x200, 0x2d0, 0x410, 0x410, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0x0, 0xff], [0xffffffff, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0xf5, 0x3, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8, 0xfffffffd, 0x5d7, 0x7ae2, 0x0, 0x2, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'vlan0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5c, 0xa, 0x1, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x82}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xff000000, 0x0, 0xffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'macvtap0\x00', 'veth1\x00', {}, {0x7f}, 0x62, 0x3, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@broadcast, 0x3, 0x21}}}, {{@ipv6={@local, @remote, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xffffff00], 'dvmrp1\x00', 'geneve0\x00', {}, {0xff}, 0x2b, 0x9, 0x0, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd, 0x40, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) syz_open_dev$I2C(&(0x7f0000003980), 0x0, 0x80801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) 9.045683142s ago: executing program 7 (id=3694): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) 7.156412751s ago: executing program 7 (id=3695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0xa031, 0xffffffffffffffff, 0xeb92e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000100)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 7.008938136s ago: executing program 2 (id=3696): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'lo\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x2000, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) write$tun(r1, &(0x7f0000000240)={@void, @void, @x25={0x2, 0xa6, 0xf, "1c1073259caf511c8625f8ed871e6f9db02c3cd13221ee5af9e9b29479f2e66e0d555c7c4d2b01455a91487bda511b34ad75ae9d74d6a7be2e53ee156629207c08a451af5de7ce5214f379c7afc93d2133e9f41984496d1e9df2492a8961e75ff2c9d406d75d5599148272dabee63dacf020acf84c6f654ee422a041fc076497c6be9d1c418365aa7f54eae208f7a3b3aad41bfc15b30f4ab80d85e1f6421a33f2f2c79e5b2ac6882af216f3dc64e548ab"}}, 0xb4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r3, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 6.632917584s ago: executing program 6 (id=3697): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 5.733226363s ago: executing program 7 (id=3698): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8000, 0x400000000, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0x0, 0x40000000000000, 0xd}, 0x0, 0x0, 0x0, 0x1, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_setup(0x5dd5, &(0x7f00000001c0)={0x0, 0xeec2, 0x1, 0x3, 0x115}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000140)=r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r7 = io_uring_setup(0x4fee, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000100)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000cc0)={0x14}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 5.540219999s ago: executing program 6 (id=3700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x80, 0xc, 0x8, 0x4, 0x2, 0xff, 0xf7, 0x1, 0xa5, 0xfe, 0xc0, 0x1, 0x295}, {0x2, 0x401, 0x1, 0x6, 0x2, 0x6, 0xb, 0x6, 0x3, 0x7f, 0x2, 0xc8, 0x5}, {0x7, 0x4, 0x4, 0x3, 0x4, 0x6, 0x9, 0x8, 0x8, 0xf, 0xba, 0x3d, 0x3}], 0x6}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x9, 0xa, 0x80, 0x0, 0x9, 0x2, 0x1, 0x1, 0x0, 0x0, 0x2, 0xf9, 0x0, 0x5, 0x4, 0x8, 0x8, 0x5, 0x3, '\x00', 0xe8, 0x8}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.032167383s ago: executing program 9 (id=3702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.906376759s ago: executing program 8 (id=3703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x30314247, 0x2, 0x6, 0x2, 0x5, 0xa6e, 0x0, 0x4, 0x0, 0x5}}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40080) 4.80283956s ago: executing program 6 (id=3704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x8) restart_syscall() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 4.384539094s ago: executing program 9 (id=3705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004454) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 4.139551811s ago: executing program 9 (id=3706): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.836473256s ago: executing program 7 (id=3707): syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000ff"], 0x5c}}, 0x0) 3.520037645s ago: executing program 8 (id=3708): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"0f380a669766ba6100b000eeb98f090000b88c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cde08c461f8ae18"}}, @rdmsr={0x32, 0x18, {0x2bd}}, @wr_crn={0x46, 0x20, {0x0, 0x69f}}, @in_dx={0x82, 0x20, {0xaea, 0x7}}, @in_dx={0x82, 0x20, {0xfd90, 0x6}}, @cpuid={0x14, 0x18}, @rdmsr={0x32, 0x18, {0x40000082}}], 0x100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.379245226s ago: executing program 9 (id=3709): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x4000010) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.317566079s ago: executing program 2 (id=3710): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@code={0xa, 0x5d, {"48b80a8eec45000000000f23c80f21f835040090000f23f8650f01cab9800000c0426f3500100000f3430f23720f01f82e44d8d7c4213972d30ac4017d2b837f300000450f082636420f01c5"}}], 0x5d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x4, 0xc, 0x6, 0x3, 0x40, 0x3, 0x42, 0x9, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x6c7e}, {0x2, 0xc8b, 0x5, 0x4, 0x8, 0x1, 0xfd, 0x40, 0x5, 0x15, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.048133242s ago: executing program 6 (id=3711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.962688296s ago: executing program 6 (id=3712): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r8, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 2.841669279s ago: executing program 8 (id=3713): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}, @wrmsr={0x1e, 0x20, {0x203, 0xffffffffffffff84}}, @uexit={0x0, 0x18, 0x1}, @wr_crn={0x46, 0x20, {0x2, 0x10000}}, @code={0xa, 0x64, {"8f891801b304000000b9de0a00000f32f3460faeb4d72b870000362e0fc7b9ac4100002e430f00d6f0211d002000000fc7720066baf80cb89298d58fef66bafc0c66b8121f66efc4639d787b5c0066ba6100ec"}}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x4b564d00}}, @rdmsr={0x32, 0x18, {0x316}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffff00}}, @wrmsr={0x1e, 0x20, {0x339, 0x7fffffff}}, @code={0xa, 0x58, {"641084b9236400000f746ff866b8a4000f00d8b9040400000f32dcf4b9d40b00000f32c40119599cb06d97676866baf80cb836f2b780ef66bafc0cb0e4eec402359ae9440f01f1"}}, @wr_crn={0x46, 0x20, {0x2, 0x4000000}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @rdmsr={0x32, 0x18, {0x2d3}}, @rdmsr={0x32, 0x18, {0x35c}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x65, {"8f88308512f066baf80cb83d74568eef66bafc0cec66baf80cb88821e88bef66bafc0cb871050000ef450f01d76566460f3882100f011d0f000000f0876da5660fc7b1030000002e0fc75800460fc79e6e3966eb"}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @wr_crn={0x46, 0x20, {0x4}}, @wrmsr={0x1e, 0x20, {0x340, 0x8}}, @cpuid={0x14, 0x18, {0x401, 0x7}}, @uexit={0x0, 0x18, 0xfffffffffffff701}, @wrmsr={0x1e, 0x20, {0x0, 0x3ff}}, @rdmsr={0x32, 0x18, {0x8b2}}, @rdmsr={0x32, 0x18, {0xbae}}], 0x409}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.400001029s ago: executing program 6 (id=3714): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@code={0xa, 0x5d, {"48b80a8eec45000000000f23c80f21f835040090000f23f8650f01cab9800000c0426f3500100000f3430f23720f01f82e44d8d7c4213972d30ac4017d2b837f300000450f082636420f01c5"}}], 0x5d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x4, 0xc, 0x6, 0x3, 0x40, 0x3, 0x42, 0x9, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x6c7e}, {0x2, 0xc8b, 0x5, 0x4, 0x8, 0x1, 0xfd, 0x40, 0x5, 0x15, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.359486679s ago: executing program 7 (id=3715): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.297748841s ago: executing program 8 (id=3716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004454) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2.129118159s ago: executing program 8 (id=3717): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@code={0xa, 0x5d, {"48b80a8eec45000000000f23c80f21f835040090000f23f8650f01cab9800000c0426f3500100000f3430f23720f01f82e44d8d7c4213972d30ac4017d2b837f300000450f082636420f01c5"}}], 0x5d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0x4, 0xc, 0x6, 0x3, 0x40, 0x3, 0x42, 0x9, 0x0, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x6, 0x2, 0x1, 0x9, 0xf, 0x6c7e}, {0x2, 0xc8b, 0x5, 0x4, 0x8, 0x1, 0xfd, 0x40, 0x5, 0x15, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.103553928s ago: executing program 9 (id=3718): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r5) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r5, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) read$char_usb(r5, &(0x7f0000000380)=""/190, 0xbe) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 1.647202266s ago: executing program 2 (id=3719): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(0x0, 0x0) setpgid(0x0, 0x0) stat(&(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580)) lstat(&(0x7f00000006c0)='./cgroup\x00', 0x0) 1.497255898s ago: executing program 9 (id=3720): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'lo\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x2000, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) write$tun(r1, &(0x7f0000000240)={@void, @void, @x25={0x2, 0xa6, 0xf, "1c1073259caf511c8625f8ed871e6f9db02c3cd13221ee5af9e9b29479f2e66e0d555c7c4d2b01455a91487bda511b34ad75ae9d74d6a7be2e53ee156629207c08a451af5de7ce5214f379c7afc93d2133e9f41984496d1e9df2492a8961e75ff2c9d406d75d5599148272dabee63dacf020acf84c6f654ee422a041fc076497c6be9d1c418365aa7f54eae208f7a3b3aad41bfc15b30f4ab80d85e1f6421a33f2f2c79e5b2ac6882af216f3dc64e548ab"}}, 0xb4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r3, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 1.346665266s ago: executing program 2 (id=3721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x4) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x5, 0x800, 0xfe6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0xfffffffffffffffe, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r6, 0x9}, 0x8) 0s ago: executing program 2 (id=3722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getgid() sendmmsg$unix(r1, 0x0, 0x0, 0x8001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x27, 0x1, 0x2) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): th error -5 [ 1208.553538][ T991] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1208.725348][ T991] usb 8-1: Using ep0 maxpacket: 8 [ 1208.739046][ T991] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.739075][ T991] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1208.755860][ T991] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1208.755896][ T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.755932][ T991] usb 8-1: Product: syz [ 1208.755951][ T991] usb 8-1: Manufacturer: syz [ 1208.755969][ T991] usb 8-1: SerialNumber: syz [ 1209.049551][ T991] usb 8-1: USB disconnect, device number 42 [ 1209.131578][ T5946] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1209.294301][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.294338][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.294378][ T5946] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1209.294403][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.349111][ T5946] usb 3-1: config 0 descriptor?? [ 1209.491457][T10387] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1209.646703][T10387] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.646732][T10387] usb 9-1: config 0 has no interfaces? [ 1209.651066][T10387] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1209.651092][T10387] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.651110][T10387] usb 9-1: Product: syz [ 1209.651129][T10387] usb 9-1: Manufacturer: syz [ 1209.651146][T10387] usb 9-1: SerialNumber: syz [ 1209.672211][T10387] usb 9-1: config 0 descriptor?? [ 1209.787353][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 1209.787487][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1209.813630][ T5946] usb 3-1: USB disconnect, device number 102 [ 1210.107566][ T5946] usb 10-1: USB disconnect, device number 32 [ 1211.300681][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.278129][T10387] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1212.279592][ T5885] usb 9-1: USB disconnect, device number 16 [ 1212.531974][T10387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.532010][T10387] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.532035][T10387] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1212.533498][T10387] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1212.534646][T10387] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.553091][T10387] usb 10-1: config 0 descriptor?? [ 1214.212697][T16389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.475808][T10387] usbhid 10-1:0.0: can't add hid device: -71 [ 1215.475943][T10387] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1215.546397][T10387] usb 10-1: USB disconnect, device number 33 [ 1218.099240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.053160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.561733][ T10] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1219.631448][T10387] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1219.711520][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1219.727757][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.727778][ T10] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1219.763293][T10387] usb 7-1: device descriptor read/64, error -71 [ 1219.909440][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1219.909465][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.909479][ T10] usb 10-1: Product: syz [ 1219.909490][ T10] usb 10-1: Manufacturer: syz [ 1219.909501][ T10] usb 10-1: SerialNumber: syz [ 1220.026730][T10387] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1220.151491][T10387] usb 7-1: device descriptor read/64, error -71 [ 1220.209358][ T10] usb 10-1: USB disconnect, device number 34 [ 1220.262283][T10387] usb usb7-port1: attempt power cycle [ 1220.291450][T10386] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1220.531173][T10386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.531211][T10386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.531255][T10386] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1220.532045][T10386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.538410][T10386] usb 9-1: config 0 descriptor?? [ 1220.611454][T10387] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1220.632278][T10387] usb 7-1: device descriptor read/8, error -71 [ 1220.951429][T10387] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1220.972384][T10387] usb 7-1: device descriptor read/8, error -71 [ 1220.987792][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.987835][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.987869][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.987904][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.987937][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.987970][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1220.988005][T10386] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1221.057096][T10386] cp2112 0003:10C4:EA90.0055: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1221.262693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.353861][T10386] cp2112 0003:10C4:EA90.0055: Part Number: 0x82 Device Version: 0xFE [ 1221.381194][T10387] usb usb7-port1: unable to enumerate USB device [ 1221.589992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.021616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.271575][T10386] cp2112 0003:10C4:EA90.0055: error requesting SMBus config [ 1222.306354][T10386] cp2112 0003:10C4:EA90.0055: probe with driver cp2112 failed with error -71 [ 1222.328686][T10386] usb 9-1: USB disconnect, device number 17 [ 1222.775508][T16445] fido_id[16445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1222.939485][T16456] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3064'. [ 1223.582264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.682064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.206793][T16475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1225.206828][T16475] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1225.290425][T16475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1225.290445][T16475] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1225.291508][T10352] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1225.331487][ T5946] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1225.356721][T16475] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1225.356745][T16475] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1225.422043][T16475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1225.422069][T16475] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1225.449669][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.449707][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.449733][T10352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1225.449777][T10352] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1225.449804][T10352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.461424][ T5946] usb 9-1: device descriptor read/64, error -71 [ 1225.516495][T10352] usb 10-1: config 0 descriptor?? [ 1225.586800][T16475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1225.586826][T16475] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1225.702308][ T5946] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1225.841739][ T5946] usb 9-1: device descriptor read/64, error -71 [ 1225.952137][ T5946] usb usb9-port1: attempt power cycle [ 1225.979233][T10352] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1226.301509][ T5946] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1226.323642][ T5946] usb 9-1: device descriptor read/8, error -71 [ 1226.567082][ T5946] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1226.623067][ T5946] usb 9-1: device descriptor read/8, error -71 [ 1226.742496][ T5946] usb usb9-port1: unable to enumerate USB device [ 1227.261969][T16472] usb 10-1: string descriptor 0 read error: -2 [ 1227.937031][T10386] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1228.033429][ T991] usb 10-1: USB disconnect, device number 35 [ 1228.098135][T10386] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1228.098160][T10386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.098175][T10386] usb 3-1: Product: syz [ 1228.098186][T10386] usb 3-1: Manufacturer: syz [ 1228.098196][T10386] usb 3-1: SerialNumber: syz [ 1228.205751][T10386] usb 3-1: config 0 descriptor?? [ 1228.445888][T10386] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1228.653300][T10386] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1228.701474][ T991] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1228.751446][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1228.864437][ T991] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1228.864470][ T991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.864485][ T991] usb 10-1: Product: syz [ 1228.864496][ T991] usb 10-1: Manufacturer: syz [ 1228.864509][ T991] usb 10-1: SerialNumber: syz [ 1228.874897][ T991] usb 10-1: config 0 descriptor?? [ 1228.924079][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.924115][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.924155][ T10] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1228.924180][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.930410][ T10] usb 9-1: config 0 descriptor?? [ 1229.174980][ T991] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1229.592463][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 1229.592602][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1229.667832][ T10] usb 9-1: USB disconnect, device number 22 [ 1230.983706][ T991] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1231.030723][ T5946] usb 3-1: USB disconnect, device number 103 [ 1231.961528][ T5885] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1232.038455][ T10] usb 10-1: USB disconnect, device number 36 [ 1232.122554][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1232.145164][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.145192][ T5885] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1232.151249][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1232.151450][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.151477][ T5885] usb 3-1: Product: syz [ 1232.151496][ T5885] usb 3-1: Manufacturer: syz [ 1232.151517][ T5885] usb 3-1: SerialNumber: syz [ 1232.371478][T10386] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1233.174763][T10386] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1233.174787][T10386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.174802][T10386] usb 8-1: Product: syz [ 1233.174812][T10386] usb 8-1: Manufacturer: syz [ 1233.174823][T10386] usb 8-1: SerialNumber: syz [ 1233.184993][T10386] usb 8-1: config 0 descriptor?? [ 1233.191463][ T5885] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1233.371636][ T5894] usb 3-1: USB disconnect, device number 104 [ 1233.418189][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.418228][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.418260][ T5885] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1233.418329][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.429002][T10386] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1233.567843][ T5885] usb 10-1: config 0 descriptor?? [ 1233.576596][ T5946] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1233.630985][T10386] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1233.737446][ T5946] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1233.737486][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.737509][ T5946] usb 7-1: Product: syz [ 1233.737528][ T5946] usb 7-1: Manufacturer: syz [ 1233.737546][ T5946] usb 7-1: SerialNumber: syz [ 1233.783495][ T5946] usb 7-1: config 0 descriptor?? [ 1234.007089][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007121][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007153][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007192][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007229][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007256][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.007280][ T5885] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1234.016430][ T5885] cp2112 0003:10C4:EA90.0057: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1234.112340][ T5946] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1234.211208][ T5885] cp2112 0003:10C4:EA90.0057: Part Number: 0x82 Device Version: 0xFE [ 1234.399290][ T5885] cp2112 0003:10C4:EA90.0057: error requesting SMBus config [ 1234.403840][ T5885] cp2112 0003:10C4:EA90.0057: probe with driver cp2112 failed with error -32 [ 1234.490258][ T5885] usb 10-1: USB disconnect, device number 37 [ 1235.107413][T10352] usb 8-1: USB disconnect, device number 43 [ 1235.641507][ T5885] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1235.794248][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.794286][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.794608][ T5885] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1235.794655][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.898562][ T5885] usb 10-1: config 0 descriptor?? [ 1236.295492][ T5946] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1236.410044][ T5885] usbhid 10-1:0.0: can't add hid device: -71 [ 1236.410140][ T5885] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1236.419175][ T5885] usb 10-1: USB disconnect, device number 38 [ 1236.431466][T10352] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1236.584033][T10352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1236.584089][T10352] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1236.584114][T10352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.664435][T10352] usb 8-1: config 0 descriptor?? [ 1236.665640][T16560] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1237.096068][T10352] elan 0003:04F3:0755.0058: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1237.293956][ T5885] usb 8-1: USB disconnect, device number 44 [ 1237.433542][T10386] usb 7-1: USB disconnect, device number 58 [ 1237.459150][T10352] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1237.483995][T16571] fido_id[16571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1237.616857][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.616895][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.616919][T10352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1237.616969][T10352] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1237.616997][T10352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.674995][T10352] usb 10-1: config 0 descriptor?? [ 1238.471143][T10352] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1238.651539][ T5885] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1238.770534][T10352] usb 10-1: USB disconnect, device number 39 [ 1238.777721][T16577] usb 10-1: string descriptor 0 read error: -19 [ 1238.801411][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 1238.849890][ T5885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.849919][ T5885] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1238.854840][ T5885] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1238.854872][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.854892][ T5885] usb 9-1: Product: syz [ 1238.854908][ T5885] usb 9-1: Manufacturer: syz [ 1238.854924][ T5885] usb 9-1: SerialNumber: syz [ 1239.264944][ T5885] usb 9-1: USB disconnect, device number 23 [ 1239.316794][T16586] fido_id[16586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1239.751584][ T5885] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 1239.924099][ T5885] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1239.924133][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.924156][ T5885] usb 8-1: Product: syz [ 1239.924172][ T5885] usb 8-1: Manufacturer: syz [ 1239.924188][ T5885] usb 8-1: SerialNumber: syz [ 1239.930132][ T5885] usb 8-1: config 0 descriptor?? [ 1240.136222][ T5885] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1240.342926][ T5885] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1241.541429][ T5885] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1241.729567][ T5885] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1241.729602][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.729625][ T5885] usb 7-1: Product: syz [ 1241.729641][ T5885] usb 7-1: Manufacturer: syz [ 1241.729656][ T5885] usb 7-1: SerialNumber: syz [ 1241.766873][ T5885] usb 7-1: config 0 descriptor?? [ 1241.831511][ T5894] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1241.975834][ T5885] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1241.981431][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 1241.992122][ T5894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.992149][ T5894] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1242.001706][ T5894] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1242.001801][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.001824][ T5894] usb 10-1: Product: syz [ 1242.001841][ T5894] usb 10-1: Manufacturer: syz [ 1242.001857][ T5894] usb 10-1: SerialNumber: syz [ 1242.356466][ T5894] usb 10-1: USB disconnect, device number 40 [ 1242.642005][T10387] usb 8-1: USB disconnect, device number 45 [ 1242.981827][T16623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.685086][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.685242][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.708430][ T5885] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1244.897225][ T5885] usb 7-1: USB disconnect, device number 59 [ 1245.251738][ T5946] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1245.401455][ T5885] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1245.423537][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.423563][ T5946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.423579][ T5946] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1245.423611][ T5946] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1245.423628][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.427949][ T5946] usb 9-1: config 0 descriptor?? [ 1245.562470][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 1245.582318][ T5885] usb 7-1: config 6 has an invalid interface number: 223 but max is 0 [ 1245.582349][ T5885] usb 7-1: config 6 has no interface number 0 [ 1245.582385][ T5885] usb 7-1: config 6 interface 223 has no altsetting 0 [ 1245.585878][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1245.585908][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.585932][ T5885] usb 7-1: Product: syz [ 1245.585947][ T5885] usb 7-1: Manufacturer: syz [ 1245.585964][ T5885] usb 7-1: SerialNumber: syz [ 1245.928817][T16631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.947221][T16631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.212389][ T5885] hdpvr 7-1:6.223: Could not find bulk-in endpoint [ 1246.212484][ T5885] hdpvr 7-1:6.223: probe with driver hdpvr failed with error -12 [ 1246.256038][ T5885] usb 7-1: USB disconnect, device number 60 [ 1246.286462][T11501] udevd[11501]: setting mode of /dev/bus/usb/007/060 to 020664 failed: No such file or directory [ 1246.286683][T11501] udevd[11501]: setting owner of /dev/bus/usb/007/060 to uid=0, gid=0 failed: No such file or directory [ 1246.393898][T10387] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1246.564408][T10387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.564445][T10387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.564472][T10387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1246.564520][T10387] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1246.564546][T10387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.639986][T10387] usb 3-1: config 0 descriptor?? [ 1246.816622][ T5946] usbhid 9-1:0.0: can't add hid device: -71 [ 1246.816762][ T5946] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1246.847523][ T5946] usb 9-1: USB disconnect, device number 24 [ 1247.096504][T10387] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1247.135063][T16649] binder: 16647:16649 unknown command 0 [ 1247.135094][T16649] binder: 16647:16649 ioctl c0306201 200000000080 returned -22 [ 1247.431508][ T5946] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1247.597610][ T5946] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1247.597685][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.597701][ T5946] usb 10-1: Product: syz [ 1247.597712][ T5946] usb 10-1: Manufacturer: syz [ 1247.597723][ T5946] usb 10-1: SerialNumber: syz [ 1247.651467][T10387] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1247.656396][ T5946] usb 10-1: config 0 descriptor?? [ 1247.820076][T10387] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1247.820110][T10387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.820134][T10387] usb 8-1: Product: syz [ 1247.820150][T10387] usb 8-1: Manufacturer: syz [ 1247.820166][T10387] usb 8-1: SerialNumber: syz [ 1247.867631][T10387] usb 8-1: config 0 descriptor?? [ 1247.954646][ T5946] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1248.093715][T10387] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1248.179342][ T5946] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1248.301049][T16668] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3132'. [ 1248.354851][T16640] usb 3-1: string descriptor 0 read error: -71 [ 1249.190623][T10352] usb 3-1: USB disconnect, device number 105 [ 1250.330637][T10352] usb 10-1: USB disconnect, device number 41 [ 1250.761037][T10387] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1250.791544][T10386] usb 8-1: USB disconnect, device number 46 [ 1250.800012][T10352] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1250.970193][T10352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.970230][T10352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.970272][T10352] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1250.970298][T10352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.030345][T10352] usb 3-1: config 0 descriptor?? [ 1251.524056][T16703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.559578][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559611][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559631][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559651][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559670][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559689][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.559709][T10352] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1251.623843][T10352] cp2112 0003:10C4:EA90.005B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1251.747770][T10352] cp2112 0003:10C4:EA90.005B: Part Number: 0x82 Device Version: 0xFE [ 1252.084148][T10352] cp2112 0003:10C4:EA90.005B: error requesting SMBus config [ 1253.010285][T10386] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1253.143863][T10352] cp2112 0003:10C4:EA90.005B: probe with driver cp2112 failed with error -5 [ 1253.176298][T10352] usb 3-1: USB disconnect, device number 106 [ 1253.235901][T10386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.235927][T10386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.235943][T10386] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1253.235974][T10386] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1253.235992][T10386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.316219][T10386] usb 10-1: config 0 descriptor?? [ 1253.799694][T10386] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1254.109129][T10352] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1254.285783][T10352] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1254.285816][T10352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.285838][T10352] usb 9-1: Product: syz [ 1254.285854][T10352] usb 9-1: Manufacturer: syz [ 1254.285870][T10352] usb 9-1: SerialNumber: syz [ 1254.350278][T10352] usb 9-1: config 0 descriptor?? [ 1254.733619][T10352] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1255.071096][T10352] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1255.102716][T16707] usb 10-1: string descriptor 0 read error: -71 [ 1255.834524][ T5885] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1255.893992][T10375] usb 10-1: USB disconnect, device number 42 [ 1256.157237][ T5885] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1256.157272][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.157294][ T5885] usb 8-1: Product: syz [ 1256.157310][ T5885] usb 8-1: Manufacturer: syz [ 1256.157325][ T5885] usb 8-1: SerialNumber: syz [ 1256.891708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.969195][ T5885] usb 8-1: config 0 descriptor?? [ 1257.169312][T16748] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3157'. [ 1257.192647][ T5885] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1257.224059][ T10] usb 9-1: USB disconnect, device number 25 [ 1257.431383][ T5894] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1257.541465][T10375] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1257.621408][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 1257.629714][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.629745][ T5894] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1257.662341][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1257.662376][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.662398][ T5894] usb 3-1: Product: syz [ 1257.662414][ T5894] usb 3-1: Manufacturer: syz [ 1257.662430][ T5894] usb 3-1: SerialNumber: syz [ 1257.696435][T10375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.696478][T10375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.696523][T10375] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1257.696549][T10375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.706809][T10375] usb 10-1: config 0 descriptor?? [ 1258.113818][ T5894] usb 3-1: USB disconnect, device number 107 [ 1258.285115][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285162][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285194][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285223][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285252][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285280][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.285307][T10375] cp2112 0003:10C4:EA90.005D: unknown main item tag 0x0 [ 1258.313221][T10375] cp2112 0003:10C4:EA90.005D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1258.401205][T10375] cp2112 0003:10C4:EA90.005D: Part Number: 0x82 Device Version: 0xFE [ 1258.622672][T10375] cp2112 0003:10C4:EA90.005D: error requesting SMBus config [ 1258.652591][T10375] cp2112 0003:10C4:EA90.005D: probe with driver cp2112 failed with error -5 [ 1258.831916][T10387] usb 10-1: USB disconnect, device number 43 [ 1258.956792][T16760] fido_id[16760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1259.491420][T10375] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1259.648821][T10375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.648860][T10375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.649030][T10375] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1259.649208][T10375] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1259.649561][T10375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.783268][T10375] usb 9-1: config 0 descriptor?? [ 1259.890106][ T5885] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1259.921538][ T5885] usb 8-1: USB disconnect, device number 47 [ 1260.292038][T10375] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1261.781644][T16767] usb 9-1: string descriptor 0 read error: -2 [ 1262.281476][ T5885] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 1262.447178][ T5885] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1262.447202][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.447217][ T5885] usb 8-1: Product: syz [ 1262.447228][ T5885] usb 8-1: Manufacturer: syz [ 1262.447239][ T5885] usb 8-1: SerialNumber: syz [ 1262.501712][ T5885] usb 8-1: config 0 descriptor?? [ 1262.554632][T10352] usb 9-1: USB disconnect, device number 26 [ 1262.715229][ T5885] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1263.071496][T10352] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1263.274092][T10352] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1263.277458][T10352] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1263.277488][T10352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.277510][T10352] usb 9-1: Product: syz [ 1263.277527][T10352] usb 9-1: Manufacturer: syz [ 1263.277542][T10352] usb 9-1: SerialNumber: syz [ 1263.337882][ T5885] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1263.374358][T10352] usb 9-1: config 0 descriptor?? [ 1263.681480][T16789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3171'. [ 1264.285642][ T37] audit: type=1326 audit(1763765863.655:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16801 comm="syz.6.3176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2e1ef749 code=0x0 [ 1265.030393][ T5885] usb 8-1: USB disconnect, device number 48 [ 1265.635979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.794892][ T5946] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1265.840936][T10352] usb 9-1: USB disconnect, device number 27 [ 1265.862408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.462078][T10375] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1266.481391][ T5946] usb 10-1: Using ep0 maxpacket: 8 [ 1266.483963][ T5946] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1266.483989][ T5946] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.484011][ T5946] usb 10-1: config 0 has no interface number 0 [ 1266.498843][ T5946] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1266.498881][ T5946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.498906][ T5946] usb 10-1: Product: syz [ 1266.498924][ T5946] usb 10-1: Manufacturer: syz [ 1266.498942][ T5946] usb 10-1: SerialNumber: syz [ 1266.511809][ T5946] usb 10-1: config 0 descriptor?? [ 1266.600321][ T5946] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1266.600364][ T5946] uvcvideo 10-1:0.31: No valid video chain found. [ 1266.631456][T10375] usb 8-1: Using ep0 maxpacket: 16 [ 1266.634023][T10375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.634058][T10375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.634083][T10375] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1266.634138][T10375] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1266.634163][T10375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.637819][T16831] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1267.091444][ T5946] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1267.091716][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 1267.209237][ T5885] usb 10-1: USB disconnect, device number 44 [ 1267.223576][ T5946] usb 9-1: device descriptor read/64, error -32 [ 1267.239026][T10375] usb 8-1: config 0 descriptor?? [ 1267.472191][ T5946] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1267.631348][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 1267.641108][ T5946] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.642560][ T5946] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1267.671796][ T5946] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1267.671890][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.671913][ T5946] usb 9-1: Product: syz [ 1267.671929][ T5946] usb 9-1: Manufacturer: syz [ 1267.671946][ T5946] usb 9-1: SerialNumber: syz [ 1267.688421][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688466][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688501][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688533][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688567][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688601][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688634][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688668][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688700][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.688733][T10375] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0 [ 1267.731366][ T5885] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1267.763531][T10375] microsoft 0003:045E:07DA.005F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1267.763574][T10375] microsoft 0003:045E:07DA.005F: no inputs found [ 1267.763591][T10375] microsoft 0003:045E:07DA.005F: could not initialize ff, continuing anyway [ 1267.899059][ T5885] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1267.899094][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.899116][ T5885] usb 7-1: Product: syz [ 1267.899131][ T5885] usb 7-1: Manufacturer: syz [ 1267.899147][ T5885] usb 7-1: SerialNumber: syz [ 1267.944062][ T5885] usb 7-1: config 0 descriptor?? [ 1268.082175][T10375] usb 9-1: USB disconnect, device number 29 [ 1268.101403][ T5894] usb 8-1: USB disconnect, device number 49 [ 1268.178172][ T5885] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1268.405721][T10387] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 1268.591670][T10386] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1268.610641][T10387] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1268.610737][T10387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.610760][T10387] usb 10-1: Product: syz [ 1268.610774][T10387] usb 10-1: Manufacturer: syz [ 1268.610790][T10387] usb 10-1: SerialNumber: syz [ 1268.669469][T10387] usb 10-1: config 0 descriptor?? [ 1268.747193][T10386] usb 3-1: Using ep0 maxpacket: 8 [ 1268.751110][T10386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.751139][T10386] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1268.759157][T16845] fido_id[16845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1268.796824][T10386] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1268.796854][T10386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.796919][T10386] usb 3-1: Product: syz [ 1268.796931][T10386] usb 3-1: Manufacturer: syz [ 1268.796942][T10386] usb 3-1: SerialNumber: syz [ 1268.814855][ T5885] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1268.877676][T10387] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1269.205996][T10386] usb 3-1: USB disconnect, device number 108 [ 1269.398150][T16848] input: syz1 as /devices/virtual/input/input82 [ 1269.416793][T16848] binder: 16847:16848 ioctl c0306201 0 returned -14 [ 1269.567893][T10387] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1269.630188][T16848] syz.7.3190 (16848): drop_caches: 2 [ 1269.707022][ T5132] usb 7-1: USB disconnect, device number 61 [ 1270.348227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.405953][T16860] input: syz1 as /devices/virtual/input/input83 [ 1271.517540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.568068][T16860] binder: 16859:16860 ioctl c0306201 0 returned -14 [ 1271.577838][T16860] syz.7.3194 (16860): drop_caches: 2 [ 1271.599575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.712999][T10375] usb 10-1: USB disconnect, device number 45 [ 1272.431393][ T5946] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1272.532142][T10375] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 1272.581380][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 1272.601734][T10387] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 1272.674111][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.674142][ T5946] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1272.678686][ T5946] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1272.678718][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.678740][ T5946] usb 3-1: Product: syz [ 1272.678757][ T5946] usb 3-1: Manufacturer: syz [ 1272.678772][ T5946] usb 3-1: SerialNumber: syz [ 1272.759500][T10375] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1272.759536][T10375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.759558][T10375] usb 8-1: Product: syz [ 1272.759575][T10375] usb 8-1: Manufacturer: syz [ 1272.759591][T10375] usb 8-1: SerialNumber: syz [ 1272.819340][T10375] usb 8-1: config 0 descriptor?? [ 1272.853386][T10387] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1272.853419][T10387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.853443][T10387] usb 10-1: Product: syz [ 1272.853458][T10387] usb 10-1: Manufacturer: syz [ 1272.853475][T10387] usb 10-1: SerialNumber: syz [ 1272.911435][T10387] usb 10-1: config 0 descriptor?? [ 1272.961368][T10386] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1273.078068][T10375] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1273.131668][T10387] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1273.132321][T10386] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1273.132443][T10386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.132466][T10386] usb 9-1: Product: syz [ 1273.132488][T10386] usb 9-1: Manufacturer: syz [ 1273.132502][T10386] usb 9-1: SerialNumber: syz [ 1273.170200][T10386] usb 9-1: config 0 descriptor?? [ 1273.283021][T10375] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1273.393785][T10386] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1275.299714][T10375] usb 8-1: USB disconnect, device number 50 [ 1275.489009][T10386] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1275.519997][T10386] usb 9-1: USB disconnect, device number 30 [ 1275.578925][ T991] usb 3-1: USB disconnect, device number 109 [ 1275.681761][T10352] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1276.007488][T10387] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1276.069449][T10387] usb 10-1: USB disconnect, device number 46 [ 1276.074524][T10352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.074567][T10352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.074595][T10352] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1276.074646][T10352] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1276.074674][T10352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.143359][ T991] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1276.246970][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.783140][ T991] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1276.783177][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.783200][ T991] usb 3-1: Product: syz [ 1276.783216][ T991] usb 3-1: Manufacturer: syz [ 1276.783233][ T991] usb 3-1: SerialNumber: syz [ 1276.926559][T10352] usb 7-1: config 0 descriptor?? [ 1277.129026][ T991] usb 3-1: config 0 descriptor?? [ 1277.383266][T16913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.457403][ T991] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1278.117067][ T991] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1278.411586][T10352] usbhid 7-1:0.0: can't add hid device: -71 [ 1278.411721][T10352] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1278.415583][T10352] usb 7-1: USB disconnect, device number 62 [ 1279.204647][ T5885] usb 3-1: USB disconnect, device number 110 [ 1279.691438][ T5885] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1279.877963][ T5885] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1279.877987][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.878002][ T5885] usb 8-1: Product: syz [ 1279.878013][ T5885] usb 8-1: Manufacturer: syz [ 1279.878024][ T5885] usb 8-1: SerialNumber: syz [ 1279.934945][ T5885] usb 8-1: config 0 descriptor?? [ 1280.232241][ T5885] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1280.528490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.544185][ T5885] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1281.052376][T10352] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1281.131375][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 1281.224816][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.621649][T10352] usb 10-1: device descriptor read/64, error -32 [ 1281.881384][T10352] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1281.917338][T16959] overlayfs: overlapping lowerdir path [ 1282.281299][T10352] usb 10-1: Using ep0 maxpacket: 8 [ 1282.284203][T10352] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.284232][T10352] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1282.287902][T10352] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1282.287934][T10352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.287957][T10352] usb 10-1: Product: syz [ 1282.287980][T10352] usb 10-1: Manufacturer: syz [ 1282.287997][T10352] usb 10-1: SerialNumber: syz [ 1282.515295][T10387] usb 8-1: USB disconnect, device number 51 [ 1284.107213][ T991] usb 10-1: USB disconnect, device number 48 [ 1285.771636][T17005] overlayfs: overlapping lowerdir path [ 1285.891472][T10352] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1286.052949][T10352] usb 3-1: Using ep0 maxpacket: 16 [ 1286.054941][T10352] usb 3-1: config 6 has an invalid interface number: 223 but max is 0 [ 1286.054961][T10352] usb 3-1: config 6 has no interface number 0 [ 1286.054985][T10352] usb 3-1: config 6 interface 223 has no altsetting 0 [ 1286.058484][T10352] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1286.058505][T10352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.058520][T10352] usb 3-1: Product: syz [ 1286.058531][T10352] usb 3-1: Manufacturer: syz [ 1286.058541][T10352] usb 3-1: SerialNumber: syz [ 1286.345054][T17003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.348805][T17003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.391404][ T9379] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 1286.404040][T10352] hdpvr 3-1:6.223: Could not find bulk-in endpoint [ 1286.404103][T10352] hdpvr 3-1:6.223: probe with driver hdpvr failed with error -12 [ 1286.442491][T10352] usb 3-1: USB disconnect, device number 111 [ 1286.562116][ T9379] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1286.562148][ T9379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.562164][ T9379] usb 7-1: Product: syz [ 1286.562175][ T9379] usb 7-1: Manufacturer: syz [ 1286.562185][ T9379] usb 7-1: SerialNumber: syz [ 1286.624195][ T9379] usb 7-1: config 0 descriptor?? [ 1286.838330][ T9379] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1287.045024][ T9379] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1287.544099][T17025] input: syz1 as /devices/virtual/input/input84 [ 1287.571389][T10352] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1287.610568][T17025] binder: 17023:17025 ioctl c0306201 0 returned -14 [ 1287.627316][T17025] syz.8.3243 (17025): drop_caches: 2 [ 1287.681484][ T9379] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1287.725996][T10352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.726022][T10352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.726046][T10352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.726079][T10352] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.726095][T10352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.734993][T10352] usb 3-1: config 0 descriptor?? [ 1287.871576][ T9379] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.871715][ T9379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.871740][ T9379] usb 8-1: Product: syz [ 1287.871756][ T9379] usb 8-1: Manufacturer: syz [ 1287.871773][ T9379] usb 8-1: SerialNumber: syz [ 1287.911482][T10375] usb 7-1: USB disconnect, device number 63 [ 1287.943518][ T9379] usb 8-1: config 0 descriptor?? [ 1288.194501][ T9379] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1288.549774][T17033] input: syz1 as /devices/virtual/input/input85 [ 1290.068789][T17030] binder: 17027:17030 ioctl c0306201 0 returned -14 [ 1290.189787][T10352] usbhid 3-1:0.0: can't add hid device: -71 [ 1290.189923][T10352] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1290.291375][T10352] usb 3-1: USB disconnect, device number 112 [ 1290.385700][T17030] syz.8.3244 (17030): drop_caches: 2 [ 1291.363212][ T9379] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1291.414284][ T9379] usb 8-1: USB disconnect, device number 52 [ 1291.474179][T10387] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1291.641518][T10387] usb 10-1: Using ep0 maxpacket: 16 [ 1291.644331][T10387] usb 10-1: config 6 has an invalid interface number: 223 but max is 0 [ 1291.644433][T10387] usb 10-1: config 6 has no interface number 0 [ 1291.644469][T10387] usb 10-1: config 6 interface 223 has no altsetting 0 [ 1291.647492][T10387] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1291.647522][T10387] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.647544][T10387] usb 10-1: Product: syz [ 1291.647560][T10387] usb 10-1: Manufacturer: syz [ 1291.647576][T10387] usb 10-1: SerialNumber: syz [ 1291.861402][ T5894] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1291.933636][T17054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.934167][T17054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.015583][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.015726][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.015755][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1292.015801][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.015827][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.084632][ T5894] usb 3-1: config 0 descriptor?? [ 1292.086949][T10387] hdpvr 10-1:6.223: Could not find bulk-in endpoint [ 1292.087010][T10387] hdpvr 10-1:6.223: probe with driver hdpvr failed with error -12 [ 1292.118628][T10387] usb 10-1: USB disconnect, device number 49 [ 1292.938935][ T5894] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1293.260375][ T5894] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1293.440735][ T5894] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1293.440771][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.440794][ T5894] usb 10-1: Product: syz [ 1293.440870][ T5894] usb 10-1: Manufacturer: syz [ 1293.440888][ T5894] usb 10-1: SerialNumber: syz [ 1293.502515][ T5894] usb 10-1: config 0 descriptor?? [ 1293.591419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1293.776987][ T5894] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1294.281322][T17060] usb 3-1: string descriptor 0 read error: -71 [ 1294.306913][ T5894] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1294.449049][T10387] usb 3-1: reset high-speed USB device number 113 using dummy_hcd [ 1294.543913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.761442][ T9379] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1294.835481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.499827][ T991] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1295.519944][ T9379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.519981][ T9379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.520006][ T9379] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1295.520052][ T9379] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1295.520077][ T9379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.579002][ T9379] usb 8-1: config 0 descriptor?? [ 1295.688394][ T991] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1295.688491][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.688514][ T991] usb 9-1: Product: syz [ 1295.688530][ T991] usb 9-1: Manufacturer: syz [ 1295.688546][ T991] usb 9-1: SerialNumber: syz [ 1295.733809][ T5894] usb 3-1: USB disconnect, device number 113 [ 1295.814283][ T991] usb 9-1: config 0 descriptor?? [ 1296.001417][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1296.171354][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1296.190344][ T991] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1296.248439][ T10] usb 7-1: config 6 has an invalid interface number: 223 but max is 0 [ 1296.248469][ T10] usb 7-1: config 6 has no interface number 0 [ 1296.248504][ T10] usb 7-1: config 6 interface 223 has no altsetting 0 [ 1296.308634][ T9379] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1296.308742][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1296.308768][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.308788][ T10] usb 7-1: Product: syz [ 1296.308803][ T10] usb 7-1: Manufacturer: syz [ 1296.308817][ T10] usb 7-1: SerialNumber: syz [ 1296.385710][T10375] usb 10-1: USB disconnect, device number 50 [ 1296.576683][T17098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.577563][T17098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.763802][ T10] hdpvr 7-1:6.223: Could not find bulk-in endpoint [ 1296.763896][ T10] hdpvr 7-1:6.223: probe with driver hdpvr failed with error -12 [ 1296.781509][ T10] usb 7-1: USB disconnect, device number 64 [ 1296.975749][T10387] usb 8-1: USB disconnect, device number 53 [ 1296.990691][T17084] usb 8-1: string descriptor 0 read error: -19 [ 1297.372799][T17108] fido_id[17108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1298.270375][ T991] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1298.286733][ T991] usb 9-1: USB disconnect, device number 31 [ 1300.981484][ T991] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1301.179259][ T991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.179287][ T991] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.179304][ T991] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1301.179337][ T991] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1301.179355][ T991] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.241275][ T991] usb 10-1: config 0 descriptor?? [ 1301.794000][T10387] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1301.941391][T10387] usb 7-1: Using ep0 maxpacket: 16 [ 1301.945936][T10387] usb 7-1: config 6 has an invalid interface number: 223 but max is 0 [ 1301.945957][T10387] usb 7-1: config 6 has no interface number 0 [ 1301.945981][T10387] usb 7-1: config 6 interface 223 has no altsetting 0 [ 1301.949411][T10387] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1301.949432][T10387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.949447][T10387] usb 7-1: Product: syz [ 1301.949458][T10387] usb 7-1: Manufacturer: syz [ 1301.949469][T10387] usb 7-1: SerialNumber: syz [ 1302.217989][ T991] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1302.438597][T17155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.453425][T17155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.724434][T10387] hdpvr 7-1:6.223: Could not find bulk-in endpoint [ 1302.724706][T10387] hdpvr 7-1:6.223: probe with driver hdpvr failed with error -12 [ 1302.758837][T10387] usb 7-1: USB disconnect, device number 65 [ 1303.361428][T17156] usb 10-1: string descriptor 0 read error: -32 [ 1304.152870][ T991] usb 10-1: USB disconnect, device number 51 [ 1304.232873][ T5885] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1304.383488][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.383514][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.383531][ T5885] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1304.383563][ T5885] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1304.383580][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.405790][ T5885] usb 8-1: config 0 descriptor?? [ 1305.156569][T17176] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1305.200286][ T5885] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1305.631442][ T10] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1305.655245][T17182] svc: failed to register nfsdv3 RPC service (errno 111). [ 1305.703327][T17182] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1305.774288][T17174] usb 8-1: string descriptor 0 read error: -71 [ 1305.774545][T10375] usb 8-1: USB disconnect, device number 54 [ 1305.804239][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.804274][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.804298][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1305.804342][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.804366][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.972194][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.972268][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.029021][ T10] usb 9-1: config 0 descriptor?? [ 1307.011088][ T10] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1307.331503][T10387] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1307.548214][ T991] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1307.610355][T10387] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1307.610387][T10387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.610409][T10387] usb 7-1: Product: syz [ 1307.610424][T10387] usb 7-1: Manufacturer: syz [ 1307.610440][T10387] usb 7-1: SerialNumber: syz [ 1307.678921][T10387] usb 7-1: config 0 descriptor?? [ 1307.701403][ T991] usb 8-1: Using ep0 maxpacket: 16 [ 1307.704857][ T991] usb 8-1: config 6 has an invalid interface number: 223 but max is 0 [ 1307.704938][ T991] usb 8-1: config 6 has no interface number 0 [ 1307.704974][ T991] usb 8-1: config 6 interface 223 has no altsetting 0 [ 1307.738476][ T991] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1307.738511][ T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.738594][ T991] usb 8-1: Product: syz [ 1307.738607][ T991] usb 8-1: Manufacturer: syz [ 1307.738624][ T991] usb 8-1: SerialNumber: syz [ 1308.005267][T10387] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1308.026216][T17209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.028601][T17209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.107764][ T9379] usb 9-1: USB disconnect, device number 32 [ 1308.115218][T17200] usb 9-1: string descriptor 0 read error: -19 [ 1308.368733][ T991] hdpvr 8-1:6.223: Could not find bulk-in endpoint [ 1308.369483][ T991] hdpvr 8-1:6.223: probe with driver hdpvr failed with error -12 [ 1308.403124][ T991] usb 8-1: USB disconnect, device number 55 [ 1309.951420][T10352] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1310.129771][T10352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.129807][T10352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.129831][T10352] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1310.129879][T10352] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1310.129904][T10352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.233306][T10352] usb 9-1: config 0 descriptor?? [ 1310.287034][T10387] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1310.347207][T10387] usb 7-1: USB disconnect, device number 66 [ 1311.246997][T10352] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1311.578713][ T37] audit: type=1800 audit(1763765910.955:24): pid=17238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3300" name="memory.events" dev="tmpfs" ino=1030 res=0 errno=0 [ 1311.603719][ T37] audit: type=1804 audit(1763765910.965:25): pid=17238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3300" name="/newroot/173/memory.events" dev="tmpfs" ino=1030 res=1 errno=0 [ 1312.031456][T10375] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1312.184242][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.184278][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.184303][T10375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.184351][T10375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.184378][T10375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.198589][T10375] usb 7-1: config 0 descriptor?? [ 1312.515112][T17220] usb 9-1: string descriptor 0 read error: -2 [ 1312.666670][T10375] plantronics 0003:047F:FFFF.0066: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1312.945958][T10352] usb 7-1: USB disconnect, device number 67 [ 1313.291877][T10387] usb 9-1: USB disconnect, device number 33 [ 1313.577830][T10375] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1313.610720][T17271] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 1314.249872][T10375] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1314.249908][T10375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.249931][T10375] usb 10-1: Product: syz [ 1314.249946][T10375] usb 10-1: Manufacturer: syz [ 1314.249963][T10375] usb 10-1: SerialNumber: syz [ 1314.317147][T10375] usb 10-1: config 0 descriptor?? [ 1314.532636][T10375] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1315.511398][T10352] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1315.677749][T10352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.678222][T10352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.678264][T10352] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1315.678553][T10352] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.678582][T10352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.750103][T10352] usb 7-1: config 0 descriptor?? [ 1315.871408][ T991] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1316.001798][ T991] usb 9-1: device descriptor read/64, error -71 [ 1316.241381][ T991] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1316.371474][ T991] usb 9-1: device descriptor read/64, error -71 [ 1316.438773][T10352] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1316.481769][ T991] usb usb9-port1: attempt power cycle [ 1316.813367][T10375] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1316.843348][ T991] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1316.862144][ T991] usb 9-1: device descriptor read/8, error -71 [ 1316.913908][T10375] usb 10-1: USB disconnect, device number 52 [ 1316.939428][T11501] udevd[11501]: setting owner of /dev/bus/usb/010/052 to uid=0, gid=0 failed: No such file or directory [ 1317.111449][ T991] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1317.186177][ T991] usb 9-1: device descriptor read/8, error -71 [ 1317.292633][ T991] usb usb9-port1: unable to enumerate USB device [ 1317.602370][T17294] usb 7-1: string descriptor 0 read error: -71 [ 1317.731368][T10375] usb 7-1: reset high-speed USB device number 68 using dummy_hcd [ 1319.201909][T10375] usb 7-1: device descriptor read/64, error -32 [ 1319.451487][T10375] usb 7-1: reset high-speed USB device number 68 using dummy_hcd [ 1319.778752][T17347] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 1320.388079][T10387] usb 7-1: USB disconnect, device number 68 [ 1321.351409][ T991] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1321.514691][ T991] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1321.514724][ T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.514739][ T991] usb 8-1: Product: syz [ 1321.514751][ T991] usb 8-1: Manufacturer: syz [ 1321.514762][ T991] usb 8-1: SerialNumber: syz [ 1321.519386][ T991] usb 8-1: config 0 descriptor?? [ 1321.802514][ T991] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1323.952855][T17388] kvm: emulating exchange as write [ 1324.121475][T10352] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1324.274375][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.274413][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.274438][T10352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1324.274485][T10352] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.274512][T10352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.291397][T10352] usb 10-1: config 0 descriptor?? [ 1324.412884][ T991] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1324.429231][T10375] usb 8-1: USB disconnect, device number 56 [ 1324.803051][T10352] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1325.275330][T17415] usb 10-1: string descriptor 0 read error: -71 [ 1325.275767][ T5885] usb 10-1: USB disconnect, device number 53 [ 1325.884974][ T5885] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1325.914936][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3365'. [ 1326.031455][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 1326.040728][ T5885] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.040749][ T5885] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1326.068804][ T5885] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1326.068828][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.068843][ T5885] usb 8-1: Product: syz [ 1326.068854][ T5885] usb 8-1: Manufacturer: syz [ 1326.068865][ T5885] usb 8-1: SerialNumber: syz [ 1326.430700][ T5885] usb 8-1: USB disconnect, device number 57 [ 1326.731447][T10387] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1327.041366][T10387] usb 9-1: Using ep0 maxpacket: 8 [ 1327.131365][ T5132] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1327.458778][T10387] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.458918][T10387] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1327.496869][T10387] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1327.496910][T10387] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.496933][T10387] usb 9-1: Product: syz [ 1327.496949][T10387] usb 9-1: Manufacturer: syz [ 1327.496964][T10387] usb 9-1: SerialNumber: syz [ 1329.291332][ T5132] usb 3-1: Using ep0 maxpacket: 8 [ 1329.293793][ T5132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.293821][ T5132] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1329.297142][ T5132] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1329.297172][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.297195][ T5132] usb 3-1: Product: syz [ 1329.297211][ T5132] usb 3-1: Manufacturer: syz [ 1329.297226][ T5132] usb 3-1: SerialNumber: syz [ 1329.695387][ T5132] usb 3-1: USB disconnect, device number 114 [ 1331.131087][T17476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.462202][T10352] usb 9-1: USB disconnect, device number 38 [ 1332.879330][ T37] audit: type=1800 audit(1763765932.255:26): pid=17497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.3386" name="memory.events" dev="tmpfs" ino=1865 res=0 errno=0 [ 1332.879393][ T37] audit: type=1804 audit(1763765932.255:27): pid=17497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.3386" name="memory.events" dev="tmpfs" ino=1865 res=1 errno=0 [ 1333.169525][T17498] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1333.169677][T17498] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 1333.192132][T17498] kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 1333.218504][T17498] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1333.331404][T10352] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1333.349041][T17508] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3389'. [ 1333.487199][T10352] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1333.487268][T10352] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1333.487310][T10352] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1333.487332][T10352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.543810][T17504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1333.543951][T17504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1333.571924][T10352] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1333.590809][T17508] svc: failed to register nfsdv3 RPC service (errno 111). [ 1333.602273][T17508] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1333.767491][T10352] usb 3-1: USB disconnect, device number 115 [ 1333.935212][T17514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1333.935274][T17514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1334.360882][ T5885] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1334.393239][ T37] audit: type=1326 audit(1763765933.775:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17521 comm="syz.7.3393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9677b3f749 code=0x0 [ 1334.421597][T10387] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1334.521690][ T5885] usb 10-1: Using ep0 maxpacket: 8 [ 1334.545421][ T5885] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.545442][ T5885] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1334.550517][ T5885] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1334.550541][ T5885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.550558][ T5885] usb 10-1: Product: syz [ 1334.550570][ T5885] usb 10-1: Manufacturer: syz [ 1334.550581][ T5885] usb 10-1: SerialNumber: syz [ 1334.601483][T10387] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1334.601591][T10387] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.601619][T10387] usb 9-1: Product: syz [ 1334.601638][T10387] usb 9-1: Manufacturer: syz [ 1334.601655][T10387] usb 9-1: SerialNumber: syz [ 1334.627752][T10387] usb 9-1: config 0 descriptor?? [ 1334.850398][T10387] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1334.928450][T10375] usb 10-1: USB disconnect, device number 54 [ 1336.739631][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 1336.743202][T10387] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1336.872371][T10387] usb 9-1: USB disconnect, device number 39 [ 1336.894761][T17547] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1336.894825][T17547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1337.276757][T17552] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1337.276909][T17552] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 1337.277339][T17552] kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 1337.307630][T17552] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1339.101383][ T5885] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1339.273806][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.273844][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.273888][ T5885] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1339.273912][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.279690][ T5885] usb 3-1: config 0 descriptor?? [ 1339.545243][T17584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.713412][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713466][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713497][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713525][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713554][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713578][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.713606][ T5885] cp2112 0003:10C4:EA90.0069: unknown main item tag 0x0 [ 1339.776906][ T5885] cp2112 0003:10C4:EA90.0069: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1339.917819][ T5885] cp2112 0003:10C4:EA90.0069: Part Number: 0x82 Device Version: 0xFE [ 1340.278287][T17588] overlayfs: missing 'lowerdir' [ 1340.550956][ T5885] cp2112 0003:10C4:EA90.0069: error reading lock byte: -71 [ 1340.567955][ T5885] usb 3-1: USB disconnect, device number 116 [ 1341.131382][ T991] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1341.281674][ T991] usb 9-1: Using ep0 maxpacket: 8 [ 1341.284905][ T991] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.284932][ T991] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1341.352306][ T991] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1341.352341][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.352365][ T991] usb 9-1: Product: syz [ 1341.352380][ T991] usb 9-1: Manufacturer: syz [ 1341.352394][ T991] usb 9-1: SerialNumber: syz [ 1341.529209][T17600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.606902][T10375] usb 9-1: USB disconnect, device number 40 [ 1344.219823][T17620] overlayfs: missing 'lowerdir' [ 1344.586710][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3426'. [ 1344.882961][T17628] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3427'. [ 1345.033574][T17634] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3429'. [ 1345.094869][ T5885] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1345.186018][T17628] svc: failed to register nfsdv3 RPC service (errno 111). [ 1345.197860][T17628] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1345.244482][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.244520][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.244545][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1345.244592][ T5885] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1345.244617][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.307948][ T5885] usb 9-1: config 0 descriptor?? [ 1345.910491][ T5885] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1345.921378][ T5892] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1346.261374][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 1346.352658][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.352680][ T5892] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1346.564214][T17650] usb 9-1: string descriptor 0 read error: -71 [ 1346.579253][ T5132] usb 9-1: USB disconnect, device number 41 [ 1346.906285][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1346.906319][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.906340][ T5892] usb 3-1: Product: syz [ 1346.906356][ T5892] usb 3-1: Manufacturer: syz [ 1346.906372][ T5892] usb 3-1: SerialNumber: syz [ 1347.206613][T17659] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3433'. [ 1347.222504][ T5885] usb 3-1: USB disconnect, device number 117 [ 1349.346747][T17672] overlayfs: missing 'lowerdir' [ 1349.840382][T17634] svc: failed to register nfsdv3 RPC service (errno 111). [ 1349.840631][T17634] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1350.398488][T17659] svc: failed to register nfsdv3 RPC service (errno 512). [ 1350.398793][T17659] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1351.224548][ T37] audit: type=1326 audit(1763765950.605:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17695 comm="syz.9.3441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01e262f749 code=0x0 [ 1352.654266][T17717] overlayfs: missing 'workdir' [ 1354.591397][ T5946] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1354.772628][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 1354.775754][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.775778][ T5946] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.779758][ T5946] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1354.779790][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.779812][ T5946] usb 3-1: Product: syz [ 1354.779830][ T5946] usb 3-1: Manufacturer: syz [ 1354.779847][ T5946] usb 3-1: SerialNumber: syz [ 1355.006085][ T5892] usb 3-1: USB disconnect, device number 118 [ 1355.757368][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3453'. [ 1356.335484][T17745] svc: failed to register nfsdv3 RPC service (errno 111). [ 1356.338424][T17745] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1357.425805][T17764] overlayfs: missing 'workdir' [ 1358.673626][T17777] input: syz1 as /devices/virtual/input/input96 [ 1358.703668][T17777] binder: 17772:17777 ioctl c0306201 0 returned -14 [ 1358.728339][T17777] syz.7.3463 (17777): drop_caches: 2 [ 1359.680216][T17782] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3466'. [ 1360.105524][T17782] svc: failed to register nfsdv3 RPC service (errno 111). [ 1360.161605][T17782] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1360.451375][ T5132] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1360.724215][ T5132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.724250][ T5132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.724275][ T5132] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1360.724309][ T5132] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1360.724326][ T5132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.852992][ T5132] usb 7-1: config 0 descriptor?? [ 1361.563919][ T5132] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1361.781497][ T991] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1361.907573][T17805] input: syz1 as /devices/virtual/input/input98 [ 1361.961397][ T991] usb 10-1: Using ep0 maxpacket: 8 [ 1361.978348][ T991] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.978368][ T991] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1362.102899][T17805] binder: 17798:17805 ioctl c0306201 0 returned -14 [ 1362.177638][ T991] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1362.177663][ T991] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.177679][ T991] usb 10-1: Product: syz [ 1362.177697][ T991] usb 10-1: Manufacturer: syz [ 1362.177708][ T991] usb 10-1: SerialNumber: syz [ 1362.656879][T10386] usb 10-1: USB disconnect, device number 55 [ 1362.801679][T17799] usb 7-1: string descriptor 0 read error: -2 [ 1363.073275][ T991] usb 7-1: reset high-speed USB device number 69 using dummy_hcd [ 1363.176942][T17812] overlayfs: missing 'workdir' [ 1363.201356][ T991] usb 7-1: device descriptor read/64, error -32 [ 1363.431670][T17815] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3473'. [ 1363.893142][T17815] svc: failed to register nfsdv3 RPC service (errno 111). [ 1363.941329][ T5132] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1363.967253][T17815] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1364.143759][ T5885] usb 7-1: USB disconnect, device number 69 [ 1365.191309][ T5132] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1365.423812][ T5132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.423849][ T5132] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.423882][ T5132] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1365.423930][ T5132] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1365.423954][ T5132] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.453795][ T5132] usb 8-1: config 0 descriptor?? [ 1365.611430][T10375] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1366.931318][T10375] usb 9-1: Using ep0 maxpacket: 8 [ 1367.003689][T10375] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.003710][T10375] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1367.054053][T10375] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1367.054086][T10375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.054108][T10375] usb 9-1: Product: syz [ 1367.054186][T10375] usb 9-1: Manufacturer: syz [ 1367.054203][T10375] usb 9-1: SerialNumber: syz [ 1367.363637][T17844] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1367.363797][T17844] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 1367.366687][T17844] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 1367.400620][T17844] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 1367.408893][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.408972][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.437251][T17844] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1367.580114][T17844] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1367.581849][T17844] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 1367.582738][T17844] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 1367.587423][T17844] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 1367.588359][T17844] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 1367.835183][ T5132] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1367.872428][ T5885] usb 9-1: USB disconnect, device number 42 [ 1368.261374][T17847] usb 8-1: string descriptor 0 read error: -71 [ 1368.288167][T10375] usb 8-1: USB disconnect, device number 59 [ 1368.672830][T17856] fido_id[17856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1368.983577][ T5132] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1369.184041][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.184077][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.184102][ T5132] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1369.184150][ T5132] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1369.184177][ T5132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.190342][ T5132] usb 10-1: config 0 descriptor?? [ 1369.971079][ T5132] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1371.255541][T17862] usb 10-1: string descriptor 0 read error: -71 [ 1371.761324][T10386] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1371.931368][T10386] usb 8-1: Using ep0 maxpacket: 16 [ 1371.934499][T10386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.934524][T10386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.934542][T10386] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1371.934572][T10386] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1371.934590][T10386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.938554][T10386] usb 8-1: config 0 descriptor?? [ 1372.029073][ T5132] usb 10-1: USB disconnect, device number 56 [ 1374.665715][T10386] usbhid 8-1:0.0: can't add hid device: -71 [ 1374.665853][T10386] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1374.696228][T10386] usb 8-1: USB disconnect, device number 60 [ 1376.371499][ T5885] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1376.521445][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 1376.561689][ T5885] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.561792][ T5885] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1376.575538][ T5885] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1376.575571][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.575593][ T5885] usb 8-1: Product: syz [ 1376.575608][ T5885] usb 8-1: Manufacturer: syz [ 1376.575623][ T5885] usb 8-1: SerialNumber: syz [ 1376.902661][T10386] usb 8-1: USB disconnect, device number 61 [ 1377.830370][T10375] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1378.025583][T10375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.025619][T10375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.025662][T10375] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1378.025698][T10375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.112848][T10375] usb 9-1: config 0 descriptor?? [ 1378.610654][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610699][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610730][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610757][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610784][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610813][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.610843][T10375] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 1378.673022][T10375] cp2112 0003:10C4:EA90.006E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1378.787440][T10375] cp2112 0003:10C4:EA90.006E: Part Number: 0x82 Device Version: 0xFE [ 1379.221423][ T5892] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1379.391351][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 1379.392504][T10375] cp2112 0003:10C4:EA90.006E: error reading lock byte: -71 [ 1379.418904][T10375] usb 9-1: USB disconnect, device number 43 [ 1379.465194][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.465223][ T5892] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1379.700852][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1379.700953][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.700976][ T5892] usb 3-1: Product: syz [ 1379.700993][ T5892] usb 3-1: Manufacturer: syz [ 1379.701008][ T5892] usb 3-1: SerialNumber: syz [ 1380.038960][ T5892] usb 3-1: USB disconnect, device number 119 [ 1380.137321][T17939] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3504'. [ 1381.859412][T17942] svc: failed to register nfsdv3 RPC service (errno 512). [ 1381.859773][T17942] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1382.412848][T17954] input: syz1 as /devices/virtual/input/input101 [ 1382.480452][T17954] binder: 17948:17954 ioctl c0306201 0 returned -14 [ 1382.517710][T17954] syz.2.3507 (17954): drop_caches: 2 [ 1383.182145][T17968] input: syz1 as /devices/virtual/input/input102 [ 1383.240399][T17968] binder: 17963:17968 ioctl c0306201 0 returned -14 [ 1383.311352][ T5132] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1383.363407][T17968] syz.7.3510 (17968): drop_caches: 2 [ 1383.489788][ T5132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.489825][ T5132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.489841][ T5132] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1383.489874][ T5132] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.489891][ T5132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.581600][ T5132] usb 7-1: config 0 descriptor?? [ 1384.097680][ T5132] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1384.276937][ T5885] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1384.451322][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 1384.507680][ T5885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.507837][ T5885] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1384.547304][ T5885] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1384.547340][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.547362][ T5885] usb 9-1: Product: syz [ 1384.547378][ T5885] usb 9-1: Manufacturer: syz [ 1384.547394][ T5885] usb 9-1: SerialNumber: syz [ 1385.124340][ T5892] usb 9-1: USB disconnect, device number 44 [ 1385.334281][T17980] usb 7-1: string descriptor 0 read error: -2 [ 1385.521352][ T5885] usb 7-1: reset high-speed USB device number 70 using dummy_hcd [ 1385.661364][ T5885] usb 7-1: device descriptor read/64, error -32 [ 1386.661352][ T5885] usb 7-1: reset high-speed USB device number 70 using dummy_hcd [ 1386.662558][ T5885] usb 7-1: device reset changed ep0 maxpacket size! [ 1386.667200][ T9379] usb 7-1: USB disconnect, device number 70 [ 1386.861354][ T9379] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1387.021344][ T9379] usb 7-1: Using ep0 maxpacket: 16 [ 1387.106605][ T9379] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.108697][ T9379] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1387.109751][ T9379] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1387.109795][ T9379] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1387.109830][ T9379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.836717][ T9379] usb 7-1: config 0 descriptor?? [ 1388.240296][T18003] overlayfs: missing 'lowerdir' [ 1388.316629][ T9379] usbhid 7-1:0.0: can't add hid device: -71 [ 1388.316732][ T9379] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1388.365363][ T9379] usb 7-1: USB disconnect, device number 71 [ 1388.900552][T18015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.133160][T10386] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1389.291292][T10386] usb 9-1: Using ep0 maxpacket: 16 [ 1390.128788][T10386] usb 9-1: device descriptor read/all, error -71 [ 1390.269970][T18031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.973013][T18038] Bluetooth: MGMT ver 1.23 [ 1392.043185][T18048] overlayfs: missing 'lowerdir' [ 1392.121759][ T5132] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1392.293805][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.293842][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.293866][ T5132] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.293913][ T5132] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.293938][ T5132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.354305][ T5132] usb 10-1: config 0 descriptor?? [ 1393.301336][ T5892] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1393.451315][ T5892] usb 9-1: Using ep0 maxpacket: 8 [ 1393.489609][ T5892] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.489632][ T5892] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1393.593920][ T5892] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1393.593953][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.593975][ T5892] usb 9-1: Product: syz [ 1393.593990][ T5892] usb 9-1: Manufacturer: syz [ 1393.594005][ T5892] usb 9-1: SerialNumber: syz [ 1393.681402][ T5132] plantronics 0003:047F:FFFF.0070: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1393.962379][T10375] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1394.053641][ T5132] usb 9-1: USB disconnect, device number 47 [ 1394.111383][T10375] usb 7-1: Using ep0 maxpacket: 16 [ 1394.181811][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.181849][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.181876][T10375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1394.181925][T10375] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1394.181952][T10375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.272218][T10386] usb 10-1: USB disconnect, device number 57 [ 1394.316117][T18056] usb 10-1: string descriptor 0 read error: -19 [ 1394.316251][T18064] plantronics 0003:047F:FFFF.0070: usb_submit_urb(ctrl) failed: -19 [ 1394.363091][T10375] usb 7-1: config 0 descriptor?? [ 1394.813734][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813777][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813808][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813838][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813868][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813897][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813926][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.813975][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.814004][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.814034][T10375] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 1394.833479][T10375] microsoft 0003:045E:07DA.0071: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1394.833531][T10375] microsoft 0003:045E:07DA.0071: no inputs found [ 1394.833550][T10375] microsoft 0003:045E:07DA.0071: could not initialize ff, continuing anyway [ 1395.012096][T10386] usb 7-1: USB disconnect, device number 72 [ 1395.793201][ T37] audit: type=1800 audit(1763765995.175:30): pid=18085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3542" name="memory.events" dev="tmpfs" ino=909 res=0 errno=0 [ 1395.794305][ T37] audit: type=1804 audit(1763765995.175:31): pid=18085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.3542" name="/newroot/159/memory.events" dev="tmpfs" ino=909 res=1 errno=0 [ 1395.852633][T10386] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1396.152221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.301363][T10386] usb 8-1: Using ep0 maxpacket: 8 [ 1396.792105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1396.912047][T10386] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.912076][T10386] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1397.000644][T10386] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1397.000680][T10386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.000703][T10386] usb 8-1: Product: syz [ 1397.000720][T10386] usb 8-1: Manufacturer: syz [ 1397.000736][T10386] usb 8-1: SerialNumber: syz [ 1397.327732][T10375] usb 8-1: USB disconnect, device number 62 [ 1400.591457][T10386] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1400.744043][T10386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.744081][T10386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.744107][T10386] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1400.744154][T10386] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1400.744180][T10386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.822030][T10386] usb 3-1: config 0 descriptor?? [ 1400.971364][ T9379] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1401.121427][ T9379] usb 8-1: Using ep0 maxpacket: 8 [ 1401.125189][ T9379] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.125220][ T9379] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1401.128242][ T9379] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1401.128265][ T9379] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.128281][ T9379] usb 8-1: Product: syz [ 1401.128339][ T9379] usb 8-1: Manufacturer: syz [ 1401.128351][ T9379] usb 8-1: SerialNumber: syz [ 1401.438945][ T9379] usb 8-1: USB disconnect, device number 63 [ 1401.790995][T18129] ip6gre1: entered promiscuous mode [ 1402.009475][T10386] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1402.475334][ T9379] usb 3-1: USB disconnect, device number 120 [ 1402.475418][T18127] usb 3-1: string descriptor 0 read error: -71 [ 1402.498327][T18139] plantronics 0003:047F:FFFF.0072: usb_submit_urb(ctrl) failed: -19 [ 1402.511575][ T5892] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1402.674104][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.674236][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.674254][ T5892] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1402.674298][ T5892] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1402.674316][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.679988][ T5892] usb 9-1: config 0 descriptor?? [ 1403.684717][ T5892] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1404.150601][T18168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1405.061366][T18134] usb 9-1: string descriptor 0 read error: -71 [ 1405.913335][T10375] usb 9-1: USB disconnect, device number 48 [ 1407.081465][T10386] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1407.231470][T10386] usb 9-1: Using ep0 maxpacket: 8 [ 1407.234455][T10386] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1407.234476][T10386] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.234491][T10386] usb 9-1: config 0 has no interface number 0 [ 1407.236568][T10386] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1407.236589][T10386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.236605][T10386] usb 9-1: Product: syz [ 1407.236615][T10386] usb 9-1: Manufacturer: syz [ 1407.236626][T10386] usb 9-1: SerialNumber: syz [ 1407.318262][T10386] usb 9-1: config 0 descriptor?? [ 1407.418805][T10386] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1407.418843][T10386] uvcvideo 9-1:0.31: No valid video chain found. [ 1407.579961][T10386] usb 9-1: USB disconnect, device number 49 [ 1407.641339][T10375] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1407.795933][T10375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.795972][T10375] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.795997][T10375] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1407.796044][T10375] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1407.796069][T10375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.819203][T10375] usb 10-1: config 0 descriptor?? [ 1408.111308][ T5885] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1408.261317][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 1408.263981][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.264042][ T5885] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1408.264071][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.269935][ T5885] usb 8-1: config 0 descriptor?? [ 1408.318064][ T5885] dvb-usb: found a 'TeVii S662' in warm state. [ 1408.318123][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1408.318799][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 1408.348384][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1408.349408][ T5885] dvbdev: DVB: registering new adapter (TeVii S662) [ 1408.349468][ T5885] usb 8-1: media controller created [ 1408.349749][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349767][ T5885] dw2102: i2c transfer failed. [ 1408.349788][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349803][ T5885] dw2102: i2c transfer failed. [ 1408.349822][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349838][ T5885] dw2102: i2c transfer failed. [ 1408.349857][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349873][ T5885] dw2102: i2c transfer failed. [ 1408.349891][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349906][ T5885] dw2102: i2c transfer failed. [ 1408.349925][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 1408.349940][ T5885] dw2102: i2c transfer failed. [ 1408.349951][ T5885] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1408.477607][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1408.506174][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 1408.506200][ T5885] dw2102: command 0x0e transfer failed. [ 1408.506212][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 1408.508804][ T5885] dw2102: command 0x0e transfer failed. [ 1408.591304][ T9379] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1408.743806][ T9379] usb 3-1: Using ep0 maxpacket: 8 [ 1408.747240][ T9379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.747268][ T9379] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1408.749585][ T9379] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1408.749606][ T9379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.749621][ T9379] usb 3-1: Product: syz [ 1408.749632][ T9379] usb 3-1: Manufacturer: syz [ 1408.749643][ T9379] usb 3-1: SerialNumber: syz [ 1408.752807][T18214] input: syz1 as /devices/virtual/input/input109 [ 1408.819498][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 1408.819515][ T5885] dw2102: command 0x0e transfer failed. [ 1408.819523][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 1408.819534][ T5885] dw2102: command 0x0e transfer failed. [ 1408.819540][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 1408.819550][ T5885] dw2102: command 0x51 transfer failed. [ 1408.819557][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 1408.819566][ T5885] dw2102: i2c probe for address 0x68 failed. [ 1408.819575][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 1408.819585][ T5885] dw2102: i2c probe for address 0x69 failed. [ 1408.819593][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 1408.819603][ T5885] dw2102: i2c probe for address 0x6a failed. [ 1408.819626][ T5885] dw2102: probing for demodulator failed. Is the external power switched on? [ 1408.819634][ T5885] dvb-usb: no frontend was attached by 'TeVii S662' [ 1408.822161][T18206] dvb-usb: bulk message failed: -22 (5/0) [ 1408.822184][T18206] dw2102: i2c transfer failed. [ 1408.887881][T18216] syz.8.3576 (18216): drop_caches: 2 [ 1408.921917][T10375] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1409.256426][ T5885] rc_core: IR keymap rc-tt-1500 not found [ 1409.256518][ T5885] Registered IR keymap rc-empty [ 1409.273510][ T5885] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1409.305460][ T5885] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input110 [ 1409.392298][ T5892] usb 3-1: USB disconnect, device number 121 [ 1409.481811][T10375] usb 10-1: USB disconnect, device number 58 [ 1409.482329][T18212] usb 10-1: string descriptor 0 read error: -19 [ 1409.482486][T18219] plantronics 0003:047F:FFFF.0074: usb_submit_urb(ctrl) failed: -19 [ 1409.613585][ T5885] dvb-usb: schedule remote query interval to 250 msecs. [ 1409.613611][ T5885] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1409.613626][ T5885] dvb-usb: TeVii S662 successfully initialized and connected. [ 1409.658074][ T5885] usb 8-1: USB disconnect, device number 64 [ 1410.124022][ T5885] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1410.461386][ T5885] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1410.619205][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.619242][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.619265][ T5885] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1410.619310][ T5885] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1410.619332][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.728858][ T5885] usb 8-1: config 0 descriptor?? [ 1412.285134][ T5885] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1412.399801][ T5885] usb 8-1: USB disconnect, device number 65 [ 1412.687051][T18256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.000283][T18253] fido_id[18253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1413.290109][T18262] input: syz1 as /devices/virtual/input/input112 [ 1413.522501][T18265] binder: 18259:18265 ioctl c0306201 0 returned -14 [ 1413.568634][T18265] syz.7.3585 (18265): drop_caches: 2 [ 1415.098830][T18281] 9pnet_fd: Insufficient options for proto=fd [ 1417.615369][T10375] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1417.813545][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.813572][T10375] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.813589][T10375] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1417.813621][T10375] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1417.813638][T10375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.886921][T10375] usb 7-1: config 0 descriptor?? [ 1418.707361][T18323] 9pnet_fd: Insufficient options for proto=fd [ 1418.967979][T10375] plantronics 0003:047F:FFFF.0076: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1419.346577][T18338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1420.229688][T18324] usb 7-1: string descriptor 0 read error: -71 [ 1420.361540][T10375] usb 7-1: reset high-speed USB device number 73 using dummy_hcd [ 1420.495243][T10375] usb 7-1: device descriptor read/64, error -32 [ 1421.384848][ T5946] usb 7-1: USB disconnect, device number 73 [ 1423.314242][T18373] create_pit_timer: 8 callbacks suppressed [ 1423.314256][T18373] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 1424.791440][T10386] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1425.764000][T10386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.764026][T10386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.764044][T10386] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1425.764076][T10386] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1425.764093][T10386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.831604][T10386] usb 9-1: config 0 descriptor?? [ 1427.688129][T10386] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1427.898566][T18419] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1428.062442][T18419] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 1428.084030][T18419] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1428.095517][T18419] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 1428.105695][T18419] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1428.271284][T10375] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1428.461300][T10375] usb 3-1: Using ep0 maxpacket: 8 [ 1428.477936][T10375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.477968][T10375] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1428.594643][T10375] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1428.594746][T10375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.594770][T10375] usb 3-1: Product: syz [ 1428.594786][T10375] usb 3-1: Manufacturer: syz [ 1428.594803][T10375] usb 3-1: SerialNumber: syz [ 1428.849785][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.849861][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.985900][T18403] usb 9-1: string descriptor 0 read error: -2 [ 1429.339705][T18433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1429.756109][T10386] usb 9-1: USB disconnect, device number 50 [ 1430.909339][T18444] input: syz1 as /devices/virtual/input/input115 [ 1430.982862][T18444] binder: 18441:18444 ioctl c0306201 0 returned -14 [ 1430.996480][T18444] syz.8.3634 (18444): drop_caches: 2 [ 1432.739801][T10386] usb 3-1: USB disconnect, device number 122 [ 1433.491928][ T5132] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1433.647642][ T5132] usb 3-1: Using ep0 maxpacket: 8 [ 1433.664814][ T5132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.664844][ T5132] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1433.700864][ T5132] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1433.700972][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.700995][ T5132] usb 3-1: Product: syz [ 1433.701010][ T5132] usb 3-1: Manufacturer: syz [ 1433.701026][ T5132] usb 3-1: SerialNumber: syz [ 1435.041294][ T5132] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1435.106924][T18478] ip6gre1: entered promiscuous mode [ 1435.208373][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.208806][ T5132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.208838][ T5132] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1435.209047][ T5132] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1435.209075][ T5132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.278678][ T5132] usb 10-1: config 0 descriptor?? [ 1435.444350][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1435.820799][T18489] 9pnet_fd: Insufficient options for proto=fd [ 1436.203829][ T5132] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1437.331684][T18487] usb 10-1: string descriptor 0 read error: -71 [ 1437.431330][T10386] usb 10-1: reset high-speed USB device number 59 using dummy_hcd [ 1437.591293][T10386] usb 10-1: device descriptor read/64, error -32 [ 1438.646003][ T9379] usb 10-1: USB disconnect, device number 59 [ 1439.223545][T18514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.220548][T10386] usb 3-1: USB disconnect, device number 123 [ 1440.801378][ T9379] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1440.964070][ T9379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.964107][ T9379] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.964132][ T9379] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1440.964180][ T9379] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.964205][ T9379] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.001383][T10386] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1441.035652][ T9379] usb 8-1: config 0 descriptor?? [ 1441.201276][T10386] usb 10-1: Using ep0 maxpacket: 8 [ 1441.208953][T10386] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.209022][T10386] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1441.220208][T10386] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1441.220234][T10386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.220299][T10386] usb 10-1: Product: syz [ 1441.220311][T10386] usb 10-1: Manufacturer: syz [ 1441.220322][T10386] usb 10-1: SerialNumber: syz [ 1441.670729][ T9379] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1442.239194][T18544] usb 8-1: string descriptor 0 read error: -71 [ 1442.251929][ T9379] usb 8-1: USB disconnect, device number 66 [ 1442.596276][T18542] fido_id[18542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1443.101295][ T9379] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1443.251293][ T9379] usb 9-1: Using ep0 maxpacket: 8 [ 1443.255439][ T9379] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.255469][ T9379] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1443.259946][ T9379] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1443.259979][ T9379] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.260003][ T9379] usb 9-1: Product: syz [ 1443.260019][ T9379] usb 9-1: Manufacturer: syz [ 1443.260035][ T9379] usb 9-1: SerialNumber: syz [ 1445.540932][ T5946] usb 10-1: USB disconnect, device number 60 [ 1445.730299][ T9379] usb 9-1: USB disconnect, device number 51 [ 1450.360675][T18631] input: syz1 as /devices/virtual/input/input118 [ 1450.377594][T18631] binder: 18626:18631 ioctl c0306201 0 returned -14 [ 1450.378464][T18631] binder: 18626:18631 ioctl c0306201 0 returned -14 [ 1450.801558][T18631] syz.8.3687 (18631): drop_caches: 2 [ 1455.602720][T18657] 9pnet_fd: Insufficient options for proto=fd [ 1455.921306][T10386] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1456.071241][T10386] usb 3-1: Using ep0 maxpacket: 8 [ 1456.073718][T10386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.073746][T10386] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1456.159975][T10386] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1456.160014][T10386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.160152][T10386] usb 3-1: Product: syz [ 1456.160173][T10386] usb 3-1: Manufacturer: syz [ 1456.160193][T10386] usb 3-1: SerialNumber: syz [ 1456.555270][T10375] usb 3-1: USB disconnect, device number 124 [ 1457.037610][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3705'. [ 1457.791359][ T5946] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1457.954398][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 1457.958039][ T5946] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1457.958071][ T5946] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.958093][ T5946] usb 8-1: config 0 has no interface number 0 [ 1458.011577][ T5946] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1458.011611][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.011634][ T5946] usb 8-1: Product: syz [ 1458.011650][ T5946] usb 8-1: Manufacturer: syz [ 1458.011667][ T5946] usb 8-1: SerialNumber: syz [ 1458.055344][ T5946] usb 8-1: config 0 descriptor?? [ 1458.068019][ T5946] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1458.068060][ T5946] uvcvideo 8-1:0.31: No valid video chain found. [ 1458.316077][T10386] usb 8-1: USB disconnect, device number 67 [ 1458.503321][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.503437][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.529576][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.617194][T18707] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1458.707596][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.730946][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.745514][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.748008][T18707] wg1 speed is unknown, defaulting to 1000 [ 1458.750295][T18707] wg1 speed is unknown, defaulting to 1000 [ 1459.082314][T18716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3716'. [ 1459.161335][T10386] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 1459.333200][T10386] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1459.333235][T10386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.333257][T10386] usb 8-1: Product: syz [ 1459.333272][T10386] usb 8-1: Manufacturer: syz [ 1459.333289][T10386] usb 8-1: SerialNumber: syz [ 1459.381508][T10386] usb 8-1: config 0 descriptor?? [ 1459.618290][T10386] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1461.141279][T10375] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1461.371498][T10375] usb 10-1: Using ep0 maxpacket: 8 [ 1462.486603][T10386] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1462.508485][T10375] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.508517][T10375] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1462.620139][T10375] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1462.620175][T10375] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.620198][T10375] usb 10-1: Product: syz [ 1462.620214][T10375] usb 10-1: Manufacturer: syz [ 1462.620229][T10375] usb 10-1: SerialNumber: syz [ 1462.679398][ T5946] ================================================================== [ 1462.679417][ T5946] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.679457][ T5946] Read of size 8 at addr ffffc9000fe3a008 by task kworker/0:6/5946 [ 1462.679477][ T5946] [ 1462.679491][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1462.679516][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1462.679532][ T5946] Workqueue: usb_hub_wq hub_event [ 1462.679559][ T5946] Call Trace: [ 1462.679569][ T5946] [ 1462.679579][ T5946] dump_stack_lvl+0x189/0x250 [ 1462.679625][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.679657][ T5946] ? __pfx__printk+0x10/0x10 [ 1462.679689][ T5946] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1462.679741][ T5946] ? __virt_addr_valid+0xdc/0x5c0 [ 1462.679791][ T5946] ? __virt_addr_valid+0xdc/0x5c0 [ 1462.679824][ T5946] print_report+0xca/0x240 [ 1462.679854][ T5946] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.679890][ T5946] kasan_report+0x118/0x150 [ 1462.679923][ T5946] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.679954][ T5946] __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.679987][ T5946] kcov_remote_start+0x2b0/0x6f0 [ 1462.680016][ T5946] hub_event+0x158/0x4a20 [ 1462.680039][ T5946] ? cpuacct_charge+0x117/0x320 [ 1462.680063][ T5946] ? sched_clock+0x3f/0x60 [ 1462.680090][ T5946] ? do_raw_spin_lock+0x121/0x290 [ 1462.680113][ T5946] ? look_up_lock_class+0x74/0x170 [ 1462.680145][ T5946] ? register_lock_class+0x51/0x320 [ 1462.680175][ T5946] ? __lock_acquire+0xab9/0xd20 [ 1462.680205][ T5946] ? __pfx_hub_event+0x10/0x10 [ 1462.680229][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.680259][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 1462.680290][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.680315][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.680341][ T5946] process_scheduled_works+0xae1/0x17b0 [ 1462.680383][ T5946] ? __pfx_process_scheduled_works+0x10/0x10 [ 1462.680418][ T5946] worker_thread+0x8a0/0xda0 [ 1462.680458][ T5946] kthread+0x711/0x8a0 [ 1462.680492][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 1462.680519][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.680548][ T5946] ? rt_spin_unlock+0x150/0x200 [ 1462.680577][ T5946] ? rt_spin_unlock+0x161/0x200 [ 1462.680602][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.680634][ T5946] ret_from_fork+0x4bc/0x870 [ 1462.680661][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 1462.680699][ T5946] ? __switch_to_asm+0x39/0x70 [ 1462.680721][ T5946] ? __switch_to_asm+0x33/0x70 [ 1462.680742][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.680773][ T5946] ret_from_fork_asm+0x1a/0x30 [ 1462.680802][ T5946] [ 1462.680811][ T5946] [ 1462.680818][ T5946] The buggy address belongs to a vmalloc virtual mapping [ 1462.680838][ T5946] Memory state around the buggy address: [ 1462.680860][ T5946] ffffc9000fe39f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.680876][ T5946] ffffc9000fe39f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.680890][ T5946] >ffffc9000fe3a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.680907][ T5946] ^ [ 1462.680918][ T5946] ffffc9000fe3a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.680933][ T5946] ffffc9000fe3a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1462.680945][ T5946] ================================================================== [ 1462.680968][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1462.680985][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1462.681010][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1462.681025][ T5946] Workqueue: usb_hub_wq hub_event [ 1462.681049][ T5946] Call Trace: [ 1462.681058][ T5946] [ 1462.681067][ T5946] dump_stack_lvl+0x99/0x250 [ 1462.681104][ T5946] ? __asan_memcpy+0x40/0x70 [ 1462.681128][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.681175][ T5946] ? __pfx__printk+0x10/0x10 [ 1462.681208][ T5946] vpanic+0x237/0x6d0 [ 1462.681228][ T5946] ? __pfx_vpanic+0x10/0x10 [ 1462.681253][ T5946] panic+0xb9/0xc0 [ 1462.681272][ T5946] ? __pfx_panic+0x10/0x10 [ 1462.681289][ T5946] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1462.681324][ T5946] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1462.681358][ T5946] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.681386][ T5946] check_panic_on_warn+0x89/0xb0 [ 1462.681408][ T5946] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.681435][ T5946] end_report+0x78/0x160 [ 1462.681465][ T5946] kasan_report+0x129/0x150 [ 1462.681498][ T5946] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.681529][ T5946] __list_del_entry_valid_or_report+0xb5/0x190 [ 1462.681558][ T5946] kcov_remote_start+0x2b0/0x6f0 [ 1462.681590][ T5946] hub_event+0x158/0x4a20 [ 1462.681613][ T5946] ? cpuacct_charge+0x117/0x320 [ 1462.681637][ T5946] ? sched_clock+0x3f/0x60 [ 1462.681672][ T5946] ? do_raw_spin_lock+0x121/0x290 [ 1462.681698][ T5946] ? look_up_lock_class+0x74/0x170 [ 1462.681731][ T5946] ? register_lock_class+0x51/0x320 [ 1462.681764][ T5946] ? __lock_acquire+0xab9/0xd20 [ 1462.681798][ T5946] ? __pfx_hub_event+0x10/0x10 [ 1462.681822][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.681853][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 1462.681883][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.681907][ T5946] ? process_scheduled_works+0x9ef/0x17b0 [ 1462.681934][ T5946] process_scheduled_works+0xae1/0x17b0 [ 1462.681977][ T5946] ? __pfx_process_scheduled_works+0x10/0x10 [ 1462.682022][ T5946] worker_thread+0x8a0/0xda0 [ 1462.682063][ T5946] kthread+0x711/0x8a0 [ 1462.682096][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 1462.682122][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.682153][ T5946] ? rt_spin_unlock+0x150/0x200 [ 1462.682180][ T5946] ? rt_spin_unlock+0x161/0x200 [ 1462.682204][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.682236][ T5946] ret_from_fork+0x4bc/0x870 [ 1462.682262][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 1462.682291][ T5946] ? __switch_to_asm+0x39/0x70 [ 1462.682313][ T5946] ? __switch_to_asm+0x33/0x70 [ 1462.682333][ T5946] ? __pfx_kthread+0x10/0x10 [ 1462.682364][ T5946] ret_from_fork_asm+0x1a/0x30 [ 1462.682394][ T5946] [ 1462.682872][ T5946] Kernel Offset: disabled