last executing test programs: 3m17.684300281s ago: executing program 0 (id=148): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x10006, 0x2, 0x80}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x7, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0x7, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0xc0e4, 0x1, 0x86, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xffffffffffffff67, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1ff, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xe, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) truncate(&(0x7f0000000400)='./file0\x00', 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m16.393397971s ago: executing program 0 (id=152): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c01000019000100fcffffff10000000ffffffff00000000000000000000000000000000000000000000ffffac1414aa00000000f7fb20020a00800000000000e14d21d13aa94035ac1bddf172148705f3e1e3df01743402059000d56cb6cfd241adbd4eeb248d31688942db27a1a9a5d80a21ff20161466a9f53c831ccff60bc17217f0e0644056621bab56b1c75711", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x17c}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0xffffffff}, 0x5, 0x2, 0x6, 0xc, 0x16, 'syz1\x00', "b9e3da63fa172c4a6ba9fd394563f2af2a4f0866e7cab31863800f34a7b8e968", "c6108309bd28ea2e2e70a253fc9de1542577d457310391d12488546ef5aa2e86", [{0x7, 0x7, {0x0, 0x10}}, {0xfafa, 0x9, {0x3, 0x2}}, {0x1, 0x3, {0x2, 0xa}}, {0x2, 0xcc30, {0x2, 0xb}}, {0xdd, 0x3, {0x1, 0x7ff}}, {0xe, 0x1000, {0x1}}, {0x7, 0x8001, {0x3, 0x400}}, {0xa, 0x8001, {0x0, 0xa}}, {0x1, 0x9, {0x1, 0xe}}, {0x7, 0x7, {0x2, 0x5}}, {0x1000, 0x4, {0x2, 0xffffffff}}, {0x2, 0x7f, {0x3, 0x7}}, {0x5, 0xfff, {0x1, 0x4}}, {0xad0, 0xd, {0x0, 0x1000}}, {0x8000, 0x8, {0x3, 0xff}}, {0xba99, 0x8, {0x1, 0x84}}, {0x2, 0xdf0b, {0x1, 0x7}}, {0xe, 0x4, {0x2, 0x6}}, {0x8000, 0x0, {0x0, 0x9}}, {0x0, 0xac6b, {0x1, 0x4}}, {0x4, 0xb74e, {0x3, 0x3}}, {0x2875, 0x4, {0x1, 0x80000001}}, {0x7, 0x400, {0x2, 0x6}}, {0x6, 0x7, {0x0, 0x8}}, {0xb, 0x435f, {0x0, 0xa}}, {0x6, 0x3, {0x3, 0x2}}, {0x71, 0x8, {0x0, 0x9}}, {0x8, 0x8001, {0x1, 0x7}}, {0xfff, 0x4, {0x2, 0x5}}, {0xb529, 0x37, {0x0, 0x5}}, {0x100, 0xd, {0x1, 0x40000000}}, {0x2000, 0x8, {0x3, 0x4}}, {0x0, 0xd03, {0x0, 0xe9d}}, {0x8, 0x1ff, {0x3, 0x8}}, {0x0, 0x8, {0x1, 0x46}}, {0xbd, 0x9, {0x0, 0x9}}, {0x7, 0x0, {0x1, 0x9}}, {0x8, 0xb2e5, {0x2, 0xd70}}, {0xfffb, 0x800, {0x0, 0xd}}, {0x9, 0x6e, {0x1, 0xe32}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x48015) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) (async, rerun: 64) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = syz_ublk_setup_io_uring(0x14d2, &(0x7f0000000140)={0x0, 0xf498, 0x800, 0x0, 0x3d8, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) r5 = io_uring_setup(0xd28, &(0x7f0000000040)={0x0, 0x970, 0x2, 0x1, 0x182, 0x0, r4}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000faffffffffffffff0080000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000000)="e0b9547ed387", 0x0, 0x8330, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) io_uring_enter(r5, 0x12a, 0x14, 0x17, 0x0, 0x0) 3m16.187986121s ago: executing program 0 (id=154): open$dir(&(0x7f00000000c0)='./file0\x00', 0xe8440, 0x20) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xcee971d264cc9a9d, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c003}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x281c49f, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r9 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xf7d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13edee5d}}, 0x8, 0x5}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, 0x6, 0x4}, 0x90) lseek(r8, 0x10001, 0x0) 3m15.673001721s ago: executing program 0 (id=156): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x3d5) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) unshare(0x20000400) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) r7 = syz_io_uring_setup(0x450e, &(0x7f0000000100)={0x0, 0x100577, 0x200, 0x0, 0x42}, &(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="c002000000000000f9ffffff0000000001000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f580000000400000000900000090000009812486db6f5b8", @ANYRES32=r10, @ANYRESHEX=r12, @ANYRES8=r12, @ANYRES32=r10, @ANYRESDEC=r7, @ANYBLOB="040000000800000000000000ffffffffffdfffff01040000000000000b00000004000000262b252a21eb285e2d4000000000000003000000000000000300000000000000010001000000000000020000000000005bfcfffe0800000000000000000000000500000000000000dd0e000000000000ff0000000000000000000000000000000400000000000000ff0f0000000000000b00000000a00000e9f8000050bbcd500b746c4dcd3f6c303a", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYBLOB="08000000000000e4aaeec0234e840500080000000000db25704ccea8f6ebfa00000000000004000002080000000000000000000000000800000000000091c7ed007e6f17053b030000000000000000000000960000000600000000000000010000000000000005000000000000000800000000000000008000000000000003d036b7f98e1beb46d0c511c2000000001a00000700000009000000", @ANYRES64, @ANYRES32=r11, @ANYBLOB="0500000001000000000000000400000000000000000000000000000002000000090000006664000000000000"], 0x0, 0x0, 0x0}) getdents64(r13, &(0x7f0000000100)=""/134, 0x86) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r14 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r14, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 3m12.524224101s ago: executing program 0 (id=166): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='&:}\x00', &(0x7f00000002c0)="1b", 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f00000004c0)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x30314247, 0x0, 0xff, 0xc, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) 3m12.248560366s ago: executing program 0 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x1e, 0x3, 0xfffffffd) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {0x1}, {0xa, 0x17}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x81}, {{0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x95, 0x1, 0x5, 0x1}}}]}]}]}}]}, 0x74}}, 0x40040) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x90800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000000c0)={0x8}) 3m11.795724637s ago: executing program 32 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x1e, 0x3, 0xfffffffd) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {0x1}, {0xa, 0x17}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x81}, {{0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x95, 0x1, 0x5, 0x1}}}]}]}]}}]}, 0x74}}, 0x40040) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x90800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000000c0)={0x8}) 10.314456198s ago: executing program 1 (id=1110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="0f302b27bc88ddf5b9b131559be47d64", 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c28000040000701f6ffffff00000000017c0000040042800c00018006000600800a0000482802803d281480a5030b"], 0x286c}, 0x1, 0x0, 0x0, 0x48815}, 0x400c000) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070002000000000000000002000300060000000903000038000000000000000e00000000002000040005"], 0x58) (async) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070002000000000000000002000300060000000903000038000000000000000e00000000002000040005"], 0x58) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) (async) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000011000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000011000000000000000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 10.044115329s ago: executing program 1 (id=1113): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28000000000000002900000004"], 0x28}, 0x4004004) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 9.903267354s ago: executing program 1 (id=1117): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106, 0x2}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06c9"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_usb_disconnect(r2) read$char_usb(r3, 0x0, 0x0) syz_emit_ethernet(0x63, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x2, 0x17, 0x55, 0x66, 0x0, 0x98, 0x6, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x18, [@rand_addr=0x64010102, @remote]}, @lsrr={0x83, 0x7, 0x68, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @payload_named={{{{{0x29, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x5, 0x2, 0x10, 0x6, 0x2, 0x4e20, 0x4e24}, 0x2, 0x1}, 0x4}}, [0x0]}}}}}, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {0x0}], 0x2) 7.902747215s ago: executing program 5 (id=1124): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x8) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/kcm\x00') socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x0, 0x0, 0xfffe, 0x8000002, 0x40001, 0x0, 0x0, 0x100, 0x100}}, 0x50) r5 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r1, &(0x7f0000000240)={0x130, 0x0, r4, {0x800, 0x4, 0x0, '\x00', {0x1, 0xe0000000, 0xffffffffffffcc2e, 0x6, r5, r6, 0x4000, '\x00', 0x8000, 0x4302, 0x3, 0x7, {0xffffffffffff5723, 0x6}, {0x4, 0x8}, {0x2800000000000000, 0x3}, {0x0, 0xb}, 0x0, 0x2c75, 0x1000, 0x2}}}, 0x130) 7.367792103s ago: executing program 3 (id=1125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x5) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r3 = syz_usb_connect$midi(0x5, 0xef, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4250, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x7f, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x40}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x8, 0x4, [{0x6, 0x6}, {0xa5, 0x3}, {0xfc, 0x8}, {0x7, 0x2}], 0x2}], [{{0x9, 0x5, 0x88, 0x6, 0x10, 0x5, 0x7f, 0x2, {0x11, 0x25, 0x1, 0xd, "57def8ef0d230e9af661bc5107"}}}, {{0x9, 0x5, 0x80, 0x4, 0x787, 0x81, 0x0, 0xf, {0x11, 0x25, 0x1, 0xd, "80b8cd20a70f102c8894fa775c"}}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x8, 0x5, 0x4, {0xf, 0x25, 0x1, 0xb, "98fb4de2df890617d39296"}}}, {{0x9, 0x5, 0xc, 0x1535f7512d97e279, 0x40, 0xf7, 0x9, 0xf1, {0x14, 0x25, 0x1, 0x10, "91cee4d6d05d07879590029d3e4ee84f"}}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x7, 0x7, {0xe, 0x25, 0x1, 0xa, "a8cd36613dabc286ed12"}}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x4, 0x3, {0x12, 0x25, 0x1, 0xe, "5a3e1bb94339b721e582e37b4564"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xa, 0x9, 0x8, {0x12, 0x25, 0x1, 0xe, "b4ee5bed91e4f0faae3f4eed7b43"}}}]}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x6, 0x3, 0x4, 0x10, 0x2}, 0x8, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0xa4, &(0x7f0000000380)=@string={0xa4, 0x3, "c709720abd6581886ea591f68d5c92cdf31fe946c7c25c823f1ce5762bbb123a70cab2d51010bbaaaca9bacecbaab82f5b7b46bf4e426f76d2050a8d9ab158fcb940050fe95d49f110d2ec783535d1c505d5bd214981e9a187fda83e37ded0578eaf4dcad0809ac1051a74ee220e42e11ccfc53dd6ca381f5ac7346d6d7b75f3dcfeefb44ad1f63112aaf51716111d92f3c47f5c057d93a68ca38df2d8f7d20f1744"}}, {0xca, &(0x7f0000000440)=@string={0xca, 0x3, "c9061a9e9befef6cde25bead45594019b64bfa42e7601f272694a24402fbd1b652288c00ccc9ddb6d2ae8404397ad3a3b73803ec6f37a91720cdf18798dd044a1825127baf8d7caf1e305fc27c6fa15f2c641dfddb896784fa5288869f031bf393b6f253df03734fe106e8835b794db8ea1d8036cce80981e200eb7fca47466fc3b1e33c0e09cc7a9767e7741a2446fd5b19c26d6393fd19885b5361ad70e0e5ce5d2962a18a4568d1000cc96c8da3e4d4a56cc7c7481389f60039bf7d3384b7932b15a54c345c51"}}, {0x38, &(0x7f0000000540)=@string={0x38, 0x3, "9fe6c51e62794b0b314881b9ffa646f9380f4717dc89eab988b5becf460c2d340bf33d0da702b35daae10e4770bd1cc9a4a4bb1f6364"}}, {0x9c, &(0x7f0000000580)=@string={0x9c, 0x3, "c336fe59a4a8461abe80ff18b156a5e665026fd5fb150bbea51aac63f9406ab61c3b8565e6143caac907178fd44f86b9dcceee6891b85acca62f668f0431b49838487e97e501f98e6eb590679225d6eea935f358e880a7ff521da491b2dc032bbaa633dd264cc160fbaa792bd5434ce2ad88944dcf5a28fd869563cdcbc23d0664be703eed7c63bb41f5af129e5f809547496126df0339621a31"}}, {0xf5, &(0x7f0000000640)=@string={0xf5, 0x3, "f9cd624144bfdd9ba4fbc23ff9294e1fb1e2d155ef990a7ed32af3256c434afdbd55a4a656e91f220545f5e139d247fa1b78ef6e8b86f86ac3b0f680c80f2305dafcf239e85b228cb98751b68dae8ff546236617cbff4d3244f45086feb7d49fd5df16e00d7692d9ebee25a4c1ea61e099c042948d8d08f273179a584205322545c8f4a7e38ba4c153e188de39062b2dadd731922f6164d6c8877cbf382a3ac9679dcafa60e22c101560493ad5f23292238d8f0a5796db62802aa637bcab052d15c55a875ab2052dd9e81808699fd3993c2352e13ad521294892174ed2052ba10d29998037185208d5fba13ece67b93af9e71e"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x19b02d62274f99d7}}, {0x76, &(0x7f0000000780)=@string={0x76, 0x3, "5a1bc28e4eecfc456579c0e95b73dbc14695a8477db360525d94cd467c9fbfef56f6eb7d2d222432b35bd71c66f821e3de42ec7a17e5c7d687a74268ea694cb4b9931d0f5604e8f287d673fa128f0aad529a8a7c8798d8157b943cbcd0fc996c2014b710307f8c8b3717d7c9bac0e7d9252b6a7e"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44b}}, {0xe4, &(0x7f0000000840)=@string={0xe4, 0x3, "b9d0d68fad14f51157c1457ba8d93835fdd28d10646ec681f44d2a85ddd09bf9656824bfb4e26ba6789f5c966fc9069423c1ec87e4ab75e53bb77dacd0b5d07fad9e0d4dbaf6e7c38d64fc3f217d3eaaa5506d01ab147ac8ca5d56c811ec7f03c46c62df3e50595fd84721ea5ed411992fdea655b25beaf888e8c8d0acd47b2a07cdd3986ed3322f9c1c7163bf14c81d97c1aee8643c953239bd6141915bc5f866d848844aa86e07863bbb1907dd9a6a6981cc2fc910d0acc6012a3244647fb746ab0dafb71e4a8547c594becca6ab4163cc327c90ec4b3154aeb5773474a93b389b"}}]}) syz_usb_control_io$uac2(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x20, 0x24, 0xc, {0xc, 0xe, "c21351e17ad022569de4"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x20, 0x5, 0xd4, "8c18d1ab2504649ddebab03e58cfb9fd0cf593eb6060ff6a506fb63f6422528714f71906d749827278ec8fda641a8c92db968b5dc3c155f3b2495698bfda754198ffede67a387b511b6defb2391897edab839346730921ac5602171bf2755d3dcb97908c1582eb8e39abf8b3e550d0d2591870bc5026e4596b15d8e60c1eb600f90065bcfc633d8733f7d4e3e9ba00da42c6dcfd2a971d8cebc38f1a7a73ce6205ace2c16efb4f425c5de46299f5e93c6ead6e3df3a951e3df5332074005bd85ad6548a99f3ccf11a98b1a1834ac055d265a8068"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c40)={0x20, 0x81, 0x1, "d7"}, &(0x7f0000000c80)={0x20, 0x82, 0x2, "81ee"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "ce51c6"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "043d52"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "c7914f"}}) close(0x3) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6.778110571s ago: executing program 1 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x10004000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x40, 0x1, 0x4, "82836f06"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x1, 0xc, "1536444cda4aa03a1a0ab5f0"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xab}}) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a70003010070000904000000010100000a24010800000201020d2406000103080000000000000c24020601010608000010000c2402080000030000000000092406050601010000092403000000000500112406060205"], 0x0) 5.887774324s ago: executing program 3 (id=1129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x200, 0x1) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2108, 0x0, 0x2}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000300)={0x2001, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000340)={0x0, 0xfffffffd}, 0x8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() timer_create(0x6, 0x0, &(0x7f0000000400)) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x1, &(0x7f0000000380)) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x21, 0x6, 0x3) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x28, 0x4, r9, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f00000003c0)={0x30, r11, 0x1, 0x0, 0x6, 0x1, 0x3ff, &(0x7f0000000000)=""/17}) futex_waitv(&(0x7f0000001240)=[{0x1, &(0x7f0000000100)=0x7fff, 0x86}], 0x1, 0x0, 0x0, 0x1) 5.854080893s ago: executing program 3 (id=1130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104fcffffff8200000000000000", @ANYRES32=0x0, @ANYBLOB="031500000000000028001280090001007665746800000000180018801400010000000000", @ANYRES32=0x0, @ANYBLOB="64800300006002"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$tun(r4, &(0x7f0000000040)=ANY=[], 0x63) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/2911], 0xb5f) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f00000000c0)={0x0, &(0x7f0000000080), 0x4}) 5.699180472s ago: executing program 4 (id=1131): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x1000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000540)=[@code={0xa, 0x52, {"b3c9f0832f56360fc77cf10e66bad00466b8cc4466ef410f23346566420f38817c8aceb805000000b9006800000f01c1640fc76b25e900800000b97e0900000f32"}}], 0x52}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0xe3ce, 0x2}}, @code={0xa, 0x5a, {"420f23ecf047804f0000f38aaca8080000000f32c4a2d93a748d053e41c32e41a766420f38823bc441b1689c1b0000000048b885000000000000000f23d80f21f835800000000f23f8"}}, @uexit={0x0, 0x18, 0x800}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x40000000}}, @in_dx={0x69, 0x20, {0xb273, 0x1}}, @nested_load_code={0x12e, 0x91, {0x1, "48b8e41a0000000000000f23c80f21f8350c00e0000f23f866b823000f00d866baf80cb83c485284ef66bafc0c66b8020066ef8f6970013bc744240000000000c744240200000000c7442406000000000f011424f20f32b8010000000f01c166430f205d420f01cf66baf80cb84de13c86ef66bafc0cb00fee"}}, @uexit={0x0, 0x18, 0x5}, @rdmsr={0x66, 0x18, {0x924}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x66, 0x18, {0x203}}, @in_dx={0x69, 0x20, {0x1e53}}, @in_dx={0x69, 0x20, {0x8bcc}}], 0x243}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363ad", 0x0, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xffffffffffffffe2, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0x9}}) 5.68382968s ago: executing program 3 (id=1132): lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0xc0, 0xa0, ""/160}, &(0x7f0000000380)=0xc0, 0x0) r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r6, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c", @ANYRES8=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc020, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a00010000000000000000001c1400000000000000000000080001000000000039f6870deac7ef4aa214f7cd2c13aedcb82bde154a04970e7720ac55732ecd39b5f048f5778350c57aec10590a4da538e2ff34a5adcb6246ddd3e1dc9a9d78e78aa2d470cc6ed5cf29af2015071ba35909eb87e00be6b9ef3016ed87b8"], 0x24}}, 0x20004980) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r10 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r11 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40020020) bind$l2tp6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x4a, &(0x7f0000000380)=0x10001, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f00000000c0)=""/84) 5.351858933s ago: executing program 4 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) (async, rerun: 32) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000340)) (async, rerun: 32) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x119483, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000000c0)) (async) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000), 0x0, 0x1a) (async) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)="08167241b8", 0x5}], 0x1, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c0100001800000128bd7000fedbdf25802010c5fd04000900110000a6000880c292863cbf8c9327801cfad1dda2c3102a234b3eac6a952502b522e79b0d24d4643a81774b1448514c51f9bd71edbfea8ddf75c4697f25690fbefba88ff7a2a539b06f712ac0b27bf8ace508c086d7b918201ae9e795b67db972b7f5aea38179c8b99aa06f0ea1217dbac4d73e06a50de39418089ec58f684e78652d7b9237d7dcfa9598532da17d567990e6ba82ec3baefe8753fb135c6987aeb216242f254f8606000005001b003a00000008000b000600000006001d004e20000006001c004e220000900016808c00020021100408a0700100ff02000000000000000000000000000100000000000000000000ffffac1414aa00000000000000000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001fe8000000000000000000000000000bbfc0100000000000000000000000000000000000000000000000000000000000108000b007f000000eaadf20c24c8143e03d5fe45625d009f0bd3c2fa40ee399a0095e64550540757d5240be10a00fe24cebbd8e71a23e43ea12131af71bc80f96c86482aef34acad0ee38cd46c349adb32c47e420a0d7b9810e4a6906ba6ee63377828894251d7960f119d36520c7f0b7a1aba0dd96f488ecb4b62e164d0964d242ff117c4ec662f33cb81f0c3346b42969fbd5e3ae4f861f5d2c770bbc85c32cbef590c7a473c145d5f946ea4981678ff3816f17e816ba3a919f65d6f7bc634046d94bcda524a51570296d6376220bfed0c774dc78f9a8946aaca82734f2a90564824a1db5303030c58385933223896"], 0x17c}, 0x1, 0x0, 0x0, 0x40801}, 0x400c800) (async) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r9 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x40000) ioctl$I2C_PEC(r9, 0x703, 0x60) 5.301550662s ago: executing program 4 (id=1134): socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc8, 0x74, 0x13, 0x40, 0x7c4, 0xa4a5, 0x52ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x8, 0x50, 0x5, "", [{{0x9, 0x4, 0x7b, 0x9, 0x0, 0x33, 0xd4, 0x7b, 0xd6}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300"], 0x50}, 0x1, 0x7}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (fail_nth: 57) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) 4.582501867s ago: executing program 5 (id=1135): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b04"], 0x40}, 0x20048024) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x3d, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d617371000000001400028008663f400000001708000140000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="e03f030041000405d25a806c8cfc600000000a00020005358fc13715070000000000000027000c00ea781329fc4136ea304b25d3d8220b1b65832785d920c52b4bd0d0a452d36bd2ba0397ff578d00000000", 0x52}], 0x1}, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x30000000}) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x8, 0x3}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) pipe(0x0) 4.320639371s ago: executing program 1 (id=1136): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x241641, 0x51) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000008) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r3 = add_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)="7ea16d9268537e54770bb3cfc779b1e57cf2fe951c8a27b2eb651362ecae5c57a4aeff5303e0c6571b2fa7d3ec0d3dc130f33cb090b65d4dc02beb37578cd11e925ed253bd2bb21702786a845c6aee34362da98402baf4632d5bc63cdfbd47911b8df50ce156a74684b4ded2312d1fdc41e551a59c78ed289cd896", 0x7b, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000880)='user\x00', &(0x7f00000008c0)='/dev/iommu\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x80000001}]}}}]}, 0x3c}}, 0x4080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r5, @ANYBLOB="00000000000000bb281672ace68ffaf69f5422b400b70800000000bfa200001b00000007020000f8ffffffb703000008000000b704000000000000850000002600000085000057253c60a6eb2e956d0d56f1af4ebb51cc86ab28a94e198d5f091f73d46427b1534afabe6daf1735a8de577d97cf54659f97ba73f6b57b9ee3ccf3a1e692482ab164e75f2b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000091) fsetxattr(r2, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) syz_usb_connect(0x0, 0x3d, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xe, 0x47, 0xc6, 0x8, 0x7a6, 0x986, 0x6dbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x6, 0x5f, 0x60, 0x5, "", [{{0x9, 0x4, 0x78, 0x9, 0x0, 0x51, 0x46, 0x6a, 0x6}}, {{0x9, 0x4, 0xcd, 0x8, 0x1, 0x3, 0x69, 0x2, 0x2, [], [{{0x9, 0x5, 0xe, 0x10, 0x0, 0x5, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x400}]}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x8031, r1, 0xa9525000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4.109119687s ago: executing program 3 (id=1137): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) read$snapshot(r3, &(0x7f0000000100)=""/109, 0x6d) 3.276473596s ago: executing program 5 (id=1140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_vmlaunch={0x12f, 0x18}, @nested_load_code={0x12e, 0x8b, {0x3, "66b8e0008ec866baf80cb864d1c68fef66bafc0c66edc744240090000000c744240200000000ff2c2466ba430066b8000066ef40d96dfff727c744240001000000c744240200000000c7442406000000000f0114240f2146b9bf080000b800800000ba000000000f3066bad004b841000000ef"}}], 0xa3}) io_setup(0x9, &(0x7f0000000180)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x677, r0, &(0x7f00000001c0)="1ade49c4a14ea77c5c5fe1dcf774e261218d79e08e966172b7d7820b45ca2d5c32861a59ee286b3e2a75c3ff90abd9b8f66826b187c9d4bc692f91932c5e9f6571031076b229601b812af6eeaa49d73506eccf534c42ba0e0d9537bebf42235fc2b81cc146102671ed0f1f22637dc627cec0deaffdd20cfff94ff550ddc3f3d79d1cdba3427cdf309cd253bdbe7530166224a40456ac6c64cfb78005ec69", 0x9e, 0x8, 0x0, 0x2}, &(0x7f00000002c0)) (async) ioctl$KVM_SMI(r0, 0xaeb7) (async) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) 3.215762473s ago: executing program 4 (id=1141): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) r1 = userfaultfd(0x1800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f00003c2000/0x1000)=nil, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8000000000000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xa000, 0x0, {0x1}}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000242a297a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) map_shadow_stack(&(0x7f0000692000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.100706726s ago: executing program 5 (id=1142): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="b1490742662055006cbc9c8dcdcee65e74ab3ecff491835684952577056f596160ee03105851ca9d522fa1e67bbba0e03a28f099260e69476a0be1d06e32e7b1100f9c74f9a8251e888dac1c13ce68ff2d54f8c8"], 0x0, 0x0}) 2.733447411s ago: executing program 4 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x5, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x3, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) fcntl$setown(r2, 0x8, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'fo\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@multicast1, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.679813878s ago: executing program 2 (id=1144): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000052", @ANYRES16=r3, @ANYBLOB="010029bd7001000000000100006004000180"], 0x18}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000) 2.385602547s ago: executing program 2 (id=1145): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x840) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '{\x00'}, &(0x7f0000000080)='^\x00', 0x2, 0x1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@align=0x3, {0x2f32, 0x80, 0x4, 0x1847d87e}}, {{[0x5, 0x6, 0x6, 0xd3f]}, 0x0, 0x3, 0x4, 0x0, &(0x7f00000000c0)=[{{@align=0xe, {0x1, 0x0, 0x0, 0x7f}}, 0x9, 0x0, '\n\\\x00'}, {{@align=0x3, {0xff, 0x0, 0x3, 0x8000000000000001}}, 0x1, 0x0, '\x00'}, {{@_ha_fsid={[0xde]}, {0x5, 0x9, 0x7, 0x3}}, 0x7, 0x0, 'security.'}]}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x135100, 0x0) fsync(r1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x7, r0, 'id1\x00'}) io_uring_setup(0x1f44, &(0x7f0000000240)={0x0, 0x6b43, 0x100, 0x1, 0x371, 0x0, r2}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000300)=""/226, &(0x7f0000000400)=0xe2) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000440)={0x3, 0x8}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x100002, 0x0) syz_ublk_setup_io_uring(0x3cf2, &(0x7f00000004c0)={0x0, 0x80f3, 0x1, 0x0, 0x36c, 0x0, r2}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000600)) rt_sigtimedwait(&(0x7f0000000640)={[0x5]}, &(0x7f0000000680), &(0x7f0000000700), 0x8) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000740)={0x20002, 0x0, {[0x8, 0xfffffffffffffe01, 0x5, 0x9, 0xa, 0x3, 0x6c63, 0x6]}}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r2, 0xc0106440, &(0x7f0000000840)={0x0, 0x306, &(0x7f00000007c0)}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000880)=0x6, 0x4) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002900)={0x18, 0xfffffffffffffffe, r5, {0xb}}, 0x18) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000002a40)={&(0x7f0000002940)=[{0x0, 0xcd3c, 0x5, 0x2b8, 0x1}, {0x2000000000, 0x3, 0xf, 0x8000000000000001, 0xc2b}, {0x3, 0x4, 0x8, 0xd, 0xfff}, {0x2, 0x485, 0xa01, 0x81, 0x4}, {0x0, 0x200, 0x0, 0x6, 0x274d}], 0x5, 0x28, 0x1, 0x1ff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000002a80)={0x1, [0x0]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000002ac0)={0x200000000000000, 0x70000, 0xb7, 0x8, 0x1f}) openat$nullb(0xffffffffffffff9c, &(0x7f0000002b00), 0xc000, 0x0) lsetxattr$security_capability(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80), &(0x7f0000002bc0)=@v3={0x3000000, [{0x5, 0x2}, {0x80000001, 0x7}], r6}, 0x18, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000002c00)=@file={0x1, './file0\x00'}, 0x6e) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002cc0)=@o_path={&(0x7f0000002c80)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r7, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002d40), &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000002dc0)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) 2.264175537s ago: executing program 2 (id=1146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9a, 0x60, 0xf9, "", [{{0x9, 0x4, 0x0, 0x65, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0xfda}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x7e, 0xb2, 0x1a, 0x10, 0x4}, 0x49, &(0x7f0000000080)={0x5, 0xf, 0x49, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "2447f20d2075ac4f892e08285cc4b251"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1f0aca91bac6ea240297f3f68fb04dd0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x0, 0xf00, 0x295, [0xff0030, 0xff0030, 0x1f80, 0xffff]}]}, 0x6, [{0xcc, &(0x7f0000000100)=@string={0xcc, 0x3, "2cf91492520d82d6b8a8729233ed0c699ee1ba69a0f4b89a027dee94cb9076f6397ff7421b839068c8a3bf1251ff84667d72a6ad3cc1ec6d3949d329237e7706bcd91900ca2d52718f6efec34f44e004dc897630945527389a9a28f5b9f73b31b59bc47e39e6dd6bc6b73702ebe36b058aba5403857e7c1167c6f2592404f4280cd37e664d27695baed0d9e261fb7854a7a1ff151d09c478de3875315d7855b437674e5675a3c07db20f30713dfb4e93df1c7f01d7db76067782303826a1d302ee5b7696e6d20c98fdfa"}}, {0xe4, &(0x7f0000000300)=@string={0xe4, 0x3, "2546484e85d51105a80885d4bcf82cfb6140328f522361c07f2cd1cf1943bb372ea5024c4742d71ccc657d4c4a67e6c774f3dfab57b58db5d37b65c7122707235449edd0700f68f939e7ac60cb48278adae4fb22252025925f45479344722c8b053c0935fa65530b77d33bfd54931bb28428e419169185b44ce3ca852348935758dd08648289c6bf1e66a38c6c75748515088ac6ce4d811b297f2d65690a7e6289b6d5197c2e2136ecf1910ddf4931a7aba2c1a8a01e8b00459cb43110e35509bad0bff755e029597904211b27c75a3bd2f047d1442865e222cad177062a4e5fc3ec"}}, {0xfe, &(0x7f0000000400)=@string={0xfe, 0x3, "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"}}, {0xe7, &(0x7f0000000500)=@string={0xe7, 0x3, "7cbcf2c730fd657f155eb0745f568dc80d3c1759d70785af4d13bba6fbfc4a2a1e895f1212597441bbc7f501f8272e4aa9383693adaf7de2d294b1d2126a936dfb08aef5a93636affb56a6255780e332143dc71b6fc4c3026c1b0e8d2057665bcdffef79e4d52ac74e3ea0c1b4adc0335d98107b1c5287f0422415cfb943b1b10c76a1cbfa3059601c652744c7e8ab49d63c2df7c9497c95e184cafd0ad80a048ebf7fce34c65911fbf4dfd1d831687a9899ea190962408186712163aa1e8845832427a47ee7e55cc21f19e8148b5566606639b3345d8486b1a53da77d880a365c3a8e0636"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41a}}]}) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0xfb, 0x1d, 0x3, 0x2fd, "4d512c91002a49506761425a7108d7d3f82acf5a895bd900000000000000009c"}) 1.826492536s ago: executing program 1 (id=1147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) chroot(&(0x7f0000000a40)='./file0\x00') setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) syz_usb_disconnect(r0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 00008'], 0x2a) close(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa010101}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1.536122554s ago: executing program 5 (id=1148): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e65772064656661756c7420000000000000000620303030303030303030303030303030303430393300c701e5673c16ebed4c0ed9f026e928b3fd47a00e7c6cc5e98eb88528a2756f6bd2f065d490f26ef55e1502dc91b04c2e4430c76d49ac609134e2f09f1e595d48780a8d19ff4c9bba7c2ac8c09f"], 0x2a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f00000001c0)={0x9, 0x1}) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 1.484319577s ago: executing program 5 (id=1149): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r0, 0x2020}], 0x1, 0xb8) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002bb000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00009c8000/0x2000)=nil, &(0x7f0000449000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0xfeedcafe, 0x0, 0x0, 0x0, 0x3}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0xea61, 0x16, 0x0, 0x0) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x24, 0x0, 0x1, 0x0, 0x20000, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100000}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x24}}, 0x8010) splice(0xffffffffffffffff, &(0x7f0000019080)=0x9, r4, &(0x7f00000190c0), 0x3, 0x5) pselect6(0x40, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x100000000, 0x2, 0x5, 0x1c, 0x9}, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x8c\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x85\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 962.016784ms ago: executing program 3 (id=1150): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000006140)={0x0, 0x0, &(0x7f00000060c0), 0x0, 0x0, 0x0, 0x24000100}, 0x48051) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000300)="84b676c36a6c0beb88ca05e91395bb8c1622f709d156e7cf1b324cdb8a68db2220bf03f95d423902f0b7931125062466d4e44cdfc7faaa3c9fa6512be2d3c8b5bb498eade8abb8bce3bd4609634b084bd3cf66208fcd035dd98adbe719820e9f4fd771c93be58689c12f6edbdacefcca6e91f47d49e719386bb075479e122ef3e0bd144eaa133a2537a8362d4b3356ad10b88016fdb089d859788b9c874b13e32da14b4c8255efb0957e219914097494f304e699d2b9b24e7d4efcc1b0d88cd5", 0xc0, 0xfffffffffffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xfffffd1d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c508}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x8e}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) madvise(&(0x7f0000cf9000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0xfffffffe, 0xffffff6a}, 0x10) unshare(0x62040200) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) 543.955843ms ago: executing program 4 (id=1151): socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc8, 0x74, 0x13, 0x40, 0x7c4, 0xa4a5, 0x52ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x8, 0x50, 0x5, "", [{{0x9, 0x4, 0x7b, 0x9, 0x0, 0x33, 0xd4, 0x7b, 0xd6}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300"], 0x50}, 0x1, 0x7}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (fail_nth: 58) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) 413.433166ms ago: executing program 2 (id=1152): r0 = socket(0x22, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f00000004c0)=[@nested_vmresume={0x130, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xb4, 0x6, 0x401, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0xfffffffffffffffa, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xb7, 0x7, 0x6, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xdb, 0x3, 0xac, 0x3}}], 0xf0}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000780)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) recvmsg$can_j1939(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000640)=""/12, 0xc}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f0000001a80)=""/71, 0x47}], 0x4}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={0x0, 0x68}}, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000200)={0x8, 0x7, [{0x8, 0x0, 0x8}, {0xbba, 0x0, 0x3}, {0x7fffffff, 0x0, 0x8}, {0x68, 0x0, 0x3}, {0x2, 0x0, 0xa}, {0x1, 0x0, 0x4}, {0x3, 0x0, 0x7}, {0x100, 0x0, 0x80000001}, {0x400, 0x0, 0xffffffff}, {0x4, 0x0, 0x2}, {0xf, 0x0, 0x2}, {0x401, 0x0, 0xb268}, {0x1801, 0x0, 0xe15}, {0x9, 0x0, 0x3}, {0x6, 0x0, 0x100}, {0x10000, 0x0, 0x9}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 239.86836ms ago: executing program 2 (id=1153): fanotify_init(0x200, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x2, 0xfffffbff, 0x5}}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=1154): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000001c0)={0x3, {0x6, 0x80000000, 0x400, 0x3, 0x2, 0x6}}) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) landlock_restrict_self(r0, 0xe) syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000302000008b805a1a44000010203010902a10002010860800904000001020d00000d240f01"], &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) kernel console output (not intermixed with test programs): 6] usb 5-1: SerialNumber: syz [ 295.692845][ T9] ums-usbat 4-1:250.230: probe with driver ums-usbat failed with error -5 [ 295.723482][ T5696] usb 5-1: config 0 descriptor?? [ 295.734977][ T9] usb 4-1: USB disconnect, device number 60 [ 295.743781][ T5695] usb 2-1: 0:2 : does not exist [ 295.798420][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 295.825427][ T5709] usb 6-1: config 47 has an invalid interface number: 113 but max is 1 [ 295.835274][ T5709] usb 6-1: config 47 has an invalid interface number: 113 but max is 1 [ 295.844188][ T5709] usb 6-1: config 47 has an invalid interface number: 60 but max is 1 [ 295.853923][ T5709] usb 6-1: config 47 has no interface number 0 [ 295.860590][ T5709] usb 6-1: config 47 has no interface number 1 [ 295.868752][ T5709] usb 6-1: config 47 interface 113 altsetting 87 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 295.885109][ T5709] usb 6-1: config 47 interface 113 has no altsetting 0 [ 295.892160][ T5709] usb 6-1: config 47 interface 113 has no altsetting 1 [ 295.897731][ T5695] usb 2-1: USB disconnect, device number 56 [ 295.899392][ T5709] usb 6-1: config 47 interface 60 has no altsetting 0 [ 295.917201][ T5709] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01bd, bcdDevice=dd.dc [ 295.954795][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.963272][ T5709] usb 6-1: Product: syz [ 295.975447][ T5709] usb 6-1: Manufacturer: syz [ 295.984213][ T5709] usb 6-1: SerialNumber: syz [ 296.011387][ T9417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.041268][ T9417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.060648][ T6601] usb 5-1: USB disconnect, device number 55 [ 296.235775][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.275062][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.305408][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.343359][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.379929][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.424752][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.462297][ T5709] ftdi_sio 6-1:47.113: FTDI USB Serial Device converter detected [ 296.522619][ T5709] ftdi_sio ttyUSB0: unknown device type: 0xdddc [ 296.577158][ T5709] ftdi_sio 6-1:47.60: FTDI USB Serial Device converter detected [ 296.650492][ T5709] ftdi_sio ttyUSB1: unknown device type: 0xdddc [ 296.699305][ T5709] usb 6-1: USB disconnect, device number 53 [ 296.775995][ T5709] ftdi_sio 6-1:47.113: device disconnected [ 296.845820][ T5709] ftdi_sio 6-1:47.60: device disconnected [ 297.001672][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 297.104724][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'. [ 297.133802][ T9468] netlink: 'syz.4.852': attribute type 28 has an invalid length. [ 297.156263][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 297.188628][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 297.205307][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 297.228404][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 297.319909][ T5694] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 297.374095][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.393297][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.403153][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.418102][ T9] usb 3-1: config 0 descriptor?? [ 297.447782][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 297.489686][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 297.509005][ T5694] usb 2-1: config 0 interface 0 altsetting 88 bulk endpoint 0x85 has invalid maxpacket 1024 [ 297.527951][ T5694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.541430][ T5694] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 297.552184][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 297.567499][ T5694] usb 2-1: Product: syz [ 297.572815][ T5694] usb 2-1: Manufacturer: syz [ 297.587940][ T5694] usb 2-1: config 0 descriptor?? [ 297.599573][ T9470] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 297.770699][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 297.770715][ T30] audit: type=1326 audit(1780597300.531:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 297.820853][ T5694] usb 2-1: USB disconnect, device number 57 [ 297.842931][ T30] audit: type=1326 audit(1780597300.561:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 297.877190][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.884149][ T30] audit: type=1326 audit(1780597300.561:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 297.884726][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.931649][ T30] audit: type=1326 audit(1780597300.561:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 297.969006][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.984356][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 298.005439][ T30] audit: type=1326 audit(1780597300.561:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdccf75d68e code=0x7ffc0000 [ 298.036498][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 298.050521][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 298.073328][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 298.092373][ T30] audit: type=1326 audit(1780597300.561:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 298.124805][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 298.145830][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 298.176978][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 298.185745][ T30] audit: type=1326 audit(1780597300.561:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 298.230339][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 298.251879][ T30] audit: type=1326 audit(1780597300.561:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 298.276637][ T30] audit: type=1326 audit(1780597300.561:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 298.324214][ T30] audit: type=1326 audit(1780597300.561:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.860" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccf79ce59 code=0x7ffc0000 [ 298.483760][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.501257][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.532314][ T9505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.555484][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.582661][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.607736][ T9] pwc: Registered as video103. [ 298.669539][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 298.688881][ T6601] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 298.736323][ T9] usb 3-1: USB disconnect, device number 42 [ 298.862036][ T6601] usb 4-1: not running at top speed; connect to a high speed hub [ 298.871995][ T6601] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 298.891886][ T6601] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 4 [ 298.917392][ T6601] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.949824][ T5696] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 298.961900][ T6601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.977892][ T6601] usb 4-1: Product: syz [ 299.008923][ T6601] usb 4-1: Manufacturer: syz [ 299.026064][ T6601] usb 4-1: SerialNumber: syz [ 299.120755][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 299.134285][ T5696] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 299.152717][ T5696] usb 2-1: config 0 has no interface number 0 [ 299.172513][ T5696] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.184505][ T5696] usb 2-1: config 0 interface 89 has no altsetting 0 [ 299.201510][ T5696] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 299.211475][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.220312][ T5696] usb 2-1: Product: syz [ 299.224684][ T5696] usb 2-1: Manufacturer: syz [ 299.239436][ T5696] usb 2-1: SerialNumber: syz [ 299.250493][ T5696] usb 2-1: config 0 descriptor?? [ 299.267173][ T5696] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 299.278456][ T6601] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 299.288421][ T6601] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 299.295284][ T5696] em28xx 2-1:0.89: Video interface 89 found: [ 299.350704][ T6601] usb 4-1: USB disconnect, device number 61 [ 299.390841][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.467963][ T9508] netlink: 'syz.1.864': attribute type 19 has an invalid length. [ 299.608701][ T808] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 299.682587][ T9520] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 299.700567][ T5696] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 299.763018][ T9522] futex_wake_op: syz.5.870 tries to shift op by 35; fix this program [ 299.781350][ T808] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 299.794934][ T5696] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 299.797876][ T808] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 299.803904][ T5696] em28xx 2-1:0.89: board has no eeprom [ 299.830183][ T808] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 299.852010][ T808] usb 3-1: config 220 has no interface number 2 [ 299.885586][ T808] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 299.888338][ T5696] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 299.921944][ T808] usb 3-1: config 220 interface 0 has no altsetting 0 [ 299.937966][ T808] usb 3-1: config 220 interface 76 has no altsetting 0 [ 299.943812][ T5696] em28xx 2-1:0.89: analog set to bulk mode. [ 299.953412][ T808] usb 3-1: config 220 interface 1 has no altsetting 0 [ 299.965625][ T6601] em28xx 2-1:0.89: Registering V4L2 extension [ 299.971269][ T808] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 300.001439][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.019002][ T5696] usb 2-1: USB disconnect, device number 58 [ 300.050747][ T5696] em28xx 2-1:0.89: Disconnecting em28xx [ 300.052490][ T808] usb 3-1: Product: syz [ 300.085655][ T808] usb 3-1: Manufacturer: syz [ 300.104528][ T808] usb 3-1: SerialNumber: syz [ 300.112401][ T6601] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 300.124329][ T6601] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 300.134982][ T6601] em28xx 2-1:0.89: No AC97 audio processor [ 300.160700][ T6601] usb 2-1: Decoder not found [ 300.171383][ T6601] em28xx 2-1:0.89: failed to create media graph [ 300.187697][ T6601] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 300.242865][ T6601] em28xx 2-1:0.89: Registering snapshot button... [ 300.312651][ T6601] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input39 [ 300.359411][ T6601] em28xx 2-1:0.89: Remote control support is not available for this card. [ 300.378616][ T5696] em28xx 2-1:0.89: Closing input extension [ 300.391270][ T5696] em28xx 2-1:0.89: Deregistering snapshot button [ 300.486994][ T808] usb 3-1: selecting invalid altsetting 0 [ 300.516847][ T808] usb 3-1: selecting invalid altsetting 0 [ 300.520279][ T5696] em28xx 2-1:0.89: Freeing device [ 300.562504][ T808] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 300.603489][ T808] uvcvideo 3-1:220.0: No valid video chain found. [ 300.659264][ T808] usb 3-1: selecting invalid altsetting 0 [ 300.690292][ T808] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 300.727210][ T808] usb 3-1: USB disconnect, device number 43 [ 300.829937][ T5696] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 301.000730][ T5696] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 301.010343][ T5696] usb 2-1: config 0 has no interface number 0 [ 301.017589][ T5696] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.028493][ T5696] usb 2-1: config 0 interface 235 has no altsetting 0 [ 301.062483][ T5696] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 301.078890][ T808] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 301.081960][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.094563][ T5696] usb 2-1: Product: syz [ 301.099674][ T5696] usb 2-1: Manufacturer: syz [ 301.104305][ T5696] usb 2-1: SerialNumber: syz [ 301.135115][ T5696] usb 2-1: config 0 descriptor?? [ 301.140195][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 301.153800][ T5696] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 301.180588][ T5696] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 301.200670][ T5696] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 301.211023][ T5696] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 301.220380][ T5696] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 301.238427][ T5696] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 301.260485][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 301.266650][ T5696] keyspan 2-1:0.235: unsupported endpoint type 0 [ 301.276227][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.291798][ T5696] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 301.309341][ T808] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 301.310116][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 301.341174][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.354089][ T24] usb 4-1: too many configurations: 127, using maximum allowed: 8 [ 301.362417][ T5695] usb 2-1: USB disconnect, device number 59 [ 301.369126][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 301.379920][ T24] usb 4-1: can't read configurations, error -61 [ 301.399581][ T808] usb 3-1: config 0 descriptor?? [ 301.415378][ T5695] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 301.427593][ T5695] keyspan 2-1:0.235: device disconnected [ 301.508381][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 301.588830][ T5694] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 301.612507][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.620819][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.630411][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.638812][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.646918][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.656751][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.660241][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 301.671071][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.676080][ T24] usb 4-1: too many configurations: 127, using maximum allowed: 8 [ 301.688319][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.696029][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 301.705333][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.706365][ T24] usb 4-1: can't read configurations, error -61 [ 301.714137][ T808] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 301.722804][ T24] usb usb4-port1: attempt power cycle [ 301.769886][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 301.776323][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.786529][ T5694] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 301.795796][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.805817][ T5694] usb 5-1: config 0 descriptor?? [ 301.820481][ T5694] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 301.982167][ T5696] usb 3-1: USB disconnect, device number 44 [ 302.087925][ T9591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.884'. [ 302.098246][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 302.129032][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 302.135943][ T24] usb 4-1: too many configurations: 127, using maximum allowed: 8 [ 302.157218][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 302.173101][ T24] usb 4-1: can't read configurations, error -61 [ 302.307387][ T9594] VFS: Mount too revealing [ 302.316019][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 302.328508][ T5696] syzkaller0: tun_net_xmit 76 [ 302.362509][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 302.371464][ T24] usb 4-1: too many configurations: 127, using maximum allowed: 8 [ 302.381333][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 302.389487][ T24] usb 4-1: can't read configurations, error -61 [ 302.397014][ T24] usb usb4-port1: unable to enumerate USB device [ 302.449058][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.459268][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.515949][ T808] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 302.581144][ T5695] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 302.674900][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 302.682776][ T808] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 302.691316][ T808] usb 2-1: config 0 has no interface number 0 [ 302.697528][ T808] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.708992][ T808] usb 2-1: config 0 interface 89 has no altsetting 0 [ 302.717969][ T808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 302.733678][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.744784][ T808] usb 2-1: Product: syz [ 302.749351][ T5695] usb 6-1: device descriptor read/64, error -71 [ 302.756275][ T808] usb 2-1: Manufacturer: syz [ 302.761444][ T808] usb 2-1: SerialNumber: syz [ 302.781037][ T808] usb 2-1: config 0 descriptor?? [ 302.791437][ T808] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 302.803116][ T808] em28xx 2-1:0.89: Video interface 89 found: [ 302.997699][ T9595] netlink: 'syz.1.885': attribute type 19 has an invalid length. [ 303.045154][ T5695] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 303.189718][ T808] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 303.196924][ T5694] gspca_vc032x: reg_w err -71 [ 303.202175][ T5694] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 303.231134][ T5695] usb 6-1: device descriptor read/64, error -71 [ 303.237859][ T5694] usb 5-1: USB disconnect, device number 56 [ 303.317510][ T808] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 303.326120][ T808] em28xx 2-1:0.89: board has no eeprom [ 303.348969][ T5695] usb usb6-port1: attempt power cycle [ 303.389002][ T808] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 303.396535][ T808] em28xx 2-1:0.89: analog set to bulk mode. [ 303.402895][ T5639] em28xx 2-1:0.89: Registering V4L2 extension [ 303.422110][ T808] usb 2-1: USB disconnect, device number 60 [ 303.439497][ T808] em28xx 2-1:0.89: Disconnecting em28xx [ 303.467750][ T5639] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 303.475309][ T5639] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 303.485685][ T5639] em28xx 2-1:0.89: No AC97 audio processor [ 303.537337][ T5639] usb 2-1: Decoder not found [ 303.542074][ T5639] em28xx 2-1:0.89: failed to create media graph [ 303.548454][ T5639] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 303.574742][ T5639] em28xx 2-1:0.89: Registering snapshot button... [ 303.583480][ T5639] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input40 [ 303.596094][ T5639] em28xx 2-1:0.89: Remote control support is not available for this card. [ 303.608232][ T808] em28xx 2-1:0.89: Closing input extension [ 303.616706][ T808] em28xx 2-1:0.89: Deregistering snapshot button [ 303.709745][ T5695] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 303.792996][ T5695] usb 6-1: device descriptor read/8, error -71 [ 303.879095][ T808] em28xx 2-1:0.89: Freeing device [ 304.061296][ T5695] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 304.109149][ T5695] usb 6-1: device descriptor read/8, error -71 [ 304.228815][ T5695] usb usb6-port1: unable to enumerate USB device [ 304.473106][ T808] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 304.583348][ T9612] xt_ecn: cannot match TCP bits for non-tcp packets [ 304.653237][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.682643][ T808] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 304.715964][ T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.728797][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.736991][ T808] usb 5-1: Product: syz [ 304.741596][ T808] usb 5-1: Manufacturer: syz [ 304.746249][ T808] usb 5-1: SerialNumber: syz [ 304.775793][ T808] cdc_mbim 5-1:1.0: skipping garbage [ 304.998132][ T9616] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 305.118638][ T5696] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 305.132758][ T9622] loop5: detected capacity change from 0 to 7 [ 305.156842][ T9622] Dev loop5: unable to read RDB block 7 [ 305.164672][ T9622] loop5: AHDI p1 p2 p3 [ 305.171276][ T9622] loop5: partition table partially beyond EOD, truncated [ 305.179885][ T9622] loop5: p1 start 1601398130 is beyond EOD, truncated [ 305.186756][ T9622] loop5: p2 start 1702059890 is beyond EOD, truncated [ 305.283069][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.294743][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.307017][ T5696] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 305.316561][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.336255][ T5696] usb 4-1: config 0 descriptor?? [ 305.378616][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 305.538489][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 305.551561][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.578954][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.594048][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.619551][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.634857][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.645945][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.663850][ T24] usb 6-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 305.674687][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.683202][ T24] usb 6-1: Product: syz [ 305.687626][ T24] usb 6-1: Manufacturer: syz [ 305.708129][ T24] usb 6-1: SerialNumber: syz [ 305.723040][ T24] usb 6-1: config 0 descriptor?? [ 305.934884][ T24] usb 6-1: USB disconnect, device number 58 [ 307.160210][ T9602] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.315073][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.326205][ T808] cdc_mbim 5-1:1.0: bind() failure [ 307.345385][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.358047][ T808] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 307.391290][ T808] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 307.443039][ T808] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 307.452408][ T9641] loop0: detected capacity change from 0 to 2640 [ 307.465281][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 307.479129][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.491111][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.493965][ T808] usb 5-1: USB disconnect, device number 57 [ 307.548944][ T5696] usb 4-1: USB disconnect, device number 66 [ 307.567682][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.588232][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.605931][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.615172][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.631845][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.642845][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.657418][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.675667][ T9641] ldm_validate_partition_table(): Disk read failed. [ 307.682549][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.692344][ T9641] Buffer I/O error on dev loop0, logical block 0, async page read [ 307.700507][ T9641] Dev loop0: unable to read RDB block 0 [ 307.706474][ T9641] loop0: unable to read partition table [ 307.719006][ T9641] loop_reread_partitions: partition scan of loop0 (3 ) failed (rc=-5) [ 307.824678][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'. [ 307.848923][ T5639] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 307.878765][ T5694] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 308.010366][ T5639] usb 6-1: config 6 has an invalid interface number: 250 but max is 0 [ 308.019831][ T5639] usb 6-1: config 6 has no interface number 0 [ 308.026075][ T5639] usb 6-1: config 6 interface 250 has no altsetting 0 [ 308.044288][ T5694] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 308.046748][ T9663] vivid-002: disconnect [ 308.060005][ T5639] usb 6-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=27.15 [ 308.069886][ T5694] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 308.079528][ T5639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.088098][ T5694] usb 2-1: config 150 has no interface number 0 [ 308.094594][ T808] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 308.102572][ T5639] usb 6-1: Product: syz [ 308.107563][ T5639] usb 6-1: Manufacturer: syz [ 308.114341][ T5694] usb 2-1: config 150 interface 204 has no altsetting 0 [ 308.121623][ T5639] usb 6-1: SerialNumber: syz [ 308.132640][ T5694] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 308.148427][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.156534][ T5694] usb 2-1: Product: syz [ 308.161294][ T5694] usb 2-1: Manufacturer: syz [ 308.176494][ T5694] usb 2-1: SerialNumber: syz [ 308.269605][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 308.276565][ T808] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 308.286639][ T808] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 308.298771][ T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.308062][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.316877][ T808] usb 5-1: Product: syz [ 308.321150][ T808] usb 5-1: Manufacturer: syz [ 308.325773][ T808] usb 5-1: SerialNumber: syz [ 308.356048][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.365181][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.392246][ T5694] xr_serial 2-1:150.204: skipping garbage [ 308.402556][ T5639] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6288 [ 308.410241][ T5695] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 308.420557][ T5694] xr_serial 2-1:150.204: xr_serial converter detected [ 308.428688][ T5639] gspca_sn9c20x: Write register 1000 failed -71 [ 308.437468][ T5639] gspca_sn9c20x: Device initialization failed [ 308.444414][ T5639] gspca_sn9c20x 6-1:6.250: probe with driver gspca_sn9c20x failed with error -71 [ 308.462228][ T5639] usb 6-1: USB disconnect, device number 59 [ 308.556805][ T9645] kvm: pic: non byte write [ 308.562543][ T9645] kvm: pic: non byte write [ 308.578804][ T9645] kvm: pic: non byte write [ 308.587332][ T9661] vivid-002: reconnect [ 308.592919][ T9645] kvm: pic: non byte write [ 308.593457][ T9648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.607437][ T9645] kvm: pic: non byte write [ 308.614488][ T5695] usb 3-1: not running at top speed; connect to a high speed hub [ 308.623241][ T9645] kvm: pic: non byte write [ 308.634951][ T9645] kvm: pic: non byte write [ 308.640036][ T5695] usb 3-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 308.650113][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.658653][ T9645] kvm: pic: non byte write [ 308.663202][ T5695] usb 3-1: Product: syz [ 308.667832][ T9645] kvm: pic: non byte write [ 308.673049][ T5695] usb 3-1: Manufacturer: syz [ 308.678168][ T9645] kvm: pic: non byte write [ 308.683758][ T5695] usb 3-1: SerialNumber: syz [ 308.711823][ T808] cdc_ncm 5-1:1.0: bind() failure [ 308.752542][ T808] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 308.763390][ T808] cdc_ncm 5-1:1.1: bind() failure [ 308.780411][ T808] usb 5-1: USB disconnect, device number 58 [ 308.898814][ T5639] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 309.090485][ T5639] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.103334][ T5694] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 309.110611][ T5694] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 309.111821][ T5696] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 309.119452][ T5639] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.143727][ T5694] usb 2-1: USB disconnect, device number 61 [ 309.153975][ T5639] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.165095][ T5639] usb 6-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 309.179844][ T5694] xr_serial 2-1:150.204: device disconnected [ 309.200891][ T5639] usb 6-1: config 1 interface 1 has no altsetting 0 [ 309.214100][ T5639] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.223937][ T5639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.234041][ T5639] usb 6-1: Product: syz [ 309.240947][ T5639] usb 6-1: Manufacturer: syz [ 309.246635][ T5639] usb 6-1: SerialNumber: syz [ 309.260271][ T5639] usb 6-1: selecting invalid altsetting 0 [ 309.266982][ T5639] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 309.278450][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 309.283315][ T5639] usb 6-1: selecting invalid altsetting 0 [ 309.285772][ T5696] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 309.290928][ T5639] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 309.320687][ T5696] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 309.331021][ T5696] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 309.340838][ T5696] usb 4-1: Product: syz [ 309.345266][ T5696] usb 4-1: Manufacturer: syz [ 309.355536][ T5696] r8152-cfgselector 4-1: Unknown version 0x0000 [ 309.361971][ T5696] r8152-cfgselector 4-1: config 0 descriptor?? [ 309.483170][ T9689] input: syz0 as /devices/virtual/input/input41 [ 309.566111][ T9689] bond1: (slave gre0): Device is not bonding slave [ 309.572796][ T9689] bond1: option active_slave: invalid value (gre0) [ 309.583452][ T5696] r8152-cfgselector 4-1: USB disconnect, device number 67 [ 309.601734][ T9689] bond1 (unregistering): Released all slaves [ 310.017844][ T9704] netlink: 36 bytes leftover after parsing attributes in process `syz.4.913'. [ 310.174588][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 310.174604][ T30] audit: type=1326 audit(1780597312.931:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9706 comm="syz.4.914" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f725139ce59 code=0x0 [ 310.478376][ T5696] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 310.555036][ T9717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 310.638403][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 310.656730][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.682265][ T5696] usb 4-1: config 4 has an invalid interface number: 133 but max is 0 [ 310.700246][ T5696] usb 4-1: config 4 has no interface number 0 [ 310.716502][ T5696] usb 4-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 310.733310][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.750807][ T5696] usb 4-1: Product: syz [ 310.760128][ T5696] usb 4-1: Manufacturer: syz [ 310.771906][ T5696] usb 4-1: SerialNumber: syz [ 310.999882][ T5695] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.037916][ T5696] huawei_cdc_ncm 4-1:4.133: CDC Union missing and no IAD found [ 311.059038][ T5696] huawei_cdc_ncm 4-1:4.133: bind() failure [ 311.076287][ T5695] usb 3-1: MIDIStreaming interface descriptor not found [ 311.094644][ T5696] usb 4-1: USB disconnect, device number 68 [ 311.257837][ T5695] usb 3-1: USB disconnect, device number 45 [ 311.325810][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 311.492310][ T24] usb 6-1: USB disconnect, device number 60 [ 311.707769][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.804882][ T9740] netlink: 'syz.3.921': attribute type 62 has an invalid length. [ 312.409476][ T5695] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 312.418355][ T5694] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 312.558485][ T5694] usb 3-1: device descriptor read/64, error -71 [ 312.564874][ T5695] usb 2-1: device descriptor read/64, error -71 [ 312.838553][ T5695] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 312.846217][ T5694] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 312.931630][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 312.998397][ T5694] usb 3-1: device descriptor read/64, error -71 [ 313.004767][ T5695] usb 2-1: device descriptor read/64, error -71 [ 313.131739][ T5694] usb usb3-port1: attempt power cycle [ 313.137385][ T5695] usb usb2-port1: attempt power cycle [ 313.478274][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 313.488751][ T5695] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 313.496357][ T5694] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 313.505638][ T9768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.929'. [ 313.519084][ T5695] usb 2-1: device descriptor read/8, error -71 [ 313.526348][ T5694] usb 3-1: device descriptor read/8, error -71 [ 313.538468][ T24] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 313.668426][ T24] usb 6-1: device descriptor read/64, error -71 [ 313.752733][ T6601] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 313.757868][ T9770] macvtap1: left promiscuous mode [ 313.767186][ T9770] macvtap1: left allmulticast mode [ 313.772972][ T9770] veth1_vlan: left allmulticast mode [ 313.790963][ T5695] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 313.799159][ T5694] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 313.829688][ T5694] usb 3-1: device descriptor read/8, error -71 [ 313.837107][ T5695] usb 2-1: device descriptor read/8, error -71 [ 313.908374][ T6601] usb 4-1: Using ep0 maxpacket: 32 [ 313.913569][ T24] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 313.922889][ T6601] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.933940][ T6601] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.945519][ T6601] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.955471][ T6601] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 313.958971][ T5694] usb usb3-port1: unable to enumerate USB device [ 313.963874][ T6601] usb 4-1: Product: syz [ 313.972332][ T5695] usb usb2-port1: unable to enumerate USB device [ 313.974579][ T6601] usb 4-1: Manufacturer: syz [ 313.991724][ T6601] hub 4-1:4.0: USB hub found [ 314.048328][ T24] usb 6-1: device descriptor read/64, error -71 [ 314.078360][ T5696] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 314.158711][ T24] usb usb6-port1: attempt power cycle [ 314.191938][ T6601] hub 4-1:4.0: 2 ports detected [ 314.231801][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.240735][ T5696] usb 5-1: config 247 has an invalid interface number: 20 but max is 0 [ 314.249763][ T5696] usb 5-1: config 247 has no interface number 0 [ 314.256052][ T5696] usb 5-1: config 247 interface 20 has no altsetting 0 [ 314.265835][ T5696] usb 5-1: string descriptor 0 read error: -22 [ 314.272119][ T5696] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 314.281207][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.296290][ T5696] go7007 5-1:247.20: probe with driver go7007 failed with error -12 [ 314.497830][ T5695] usb 5-1: USB disconnect, device number 59 [ 314.498364][ T24] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 314.528975][ T24] usb 6-1: device descriptor read/8, error -71 [ 314.768390][ T24] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 314.789100][ T24] usb 6-1: device descriptor read/8, error -71 [ 314.898730][ T24] usb usb6-port1: unable to enumerate USB device [ 315.247691][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.288425][ T6601] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 315.409817][ T24] hub 4-1:4.0: activate --> -90 [ 315.443007][ T6601] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.461648][ T6601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.475290][ T6601] usb 5-1: Product: syz [ 315.480968][ T6601] usb 5-1: Manufacturer: syz [ 315.488542][ T6601] usb 5-1: SerialNumber: syz [ 315.578528][ T825] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 315.728341][ T825] usb 2-1: Using ep0 maxpacket: 8 [ 315.737555][ T825] usb 2-1: config index 0 descriptor too short (expected 81, got 47) [ 315.746313][ T825] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 315.754593][ T825] usb 2-1: config 4 has no interface number 0 [ 315.760927][ T825] usb 2-1: config 4 interface 86 has no altsetting 0 [ 315.770248][ T825] usb 2-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=8a.56 [ 315.781697][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.789865][ T825] usb 2-1: Product: syz [ 315.794441][ T825] usb 2-1: Manufacturer: syz [ 315.799377][ T825] usb 2-1: SerialNumber: syz [ 315.820963][ T5695] usb 4-1: USB disconnect, device number 69 [ 316.018719][ T825] uvcvideo 2-1:4.86: Found Unit with invalid ID 0 [ 316.027795][ T825] uvcvideo 2-1:4.86: Found UVC 0.00 device syz (18ec:3188) [ 316.040487][ T825] uvcvideo 2-1:4.86: No valid video chain found. [ 316.056641][ T825] usb 2-1: USB disconnect, device number 66 [ 316.245008][ T9785] binder: 9784:9785 ioctl c018620c 200000000900 returned -1 [ 316.365836][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 316.498472][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 316.523102][ T6601] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 316.524671][ T9794] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 316.683186][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.716231][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.728537][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.744525][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 316.754741][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 316.764955][ T24] usb 3-1: Product: syz [ 316.772862][ T24] usb 3-1: Manufacturer: syz [ 316.777878][ T24] usb 3-1: SerialNumber: syz [ 316.962138][ T6601] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 317.017268][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 317.137902][ T24] usb 5-1: USB disconnect, device number 60 [ 317.161230][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 317.174512][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 317.213159][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 317.240496][ T808] usb 3-1: USB disconnect, device number 50 [ 317.262979][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271423][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298156][ T9828] 8021q: VLANs not supported on ip6_vti0 [ 317.307229][ T808] usblp0: removed [ 317.583524][ T9845] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.949'. [ 317.609490][ T9845] openvswitch: netlink: EtherType 0 is less than min 600 [ 317.892689][ T9860] netlink: 9 bytes leftover after parsing attributes in process `syz.3.951'. [ 317.892848][ T9860] 0: renamed from hsr0 (while UP) [ 317.931585][ T9860] 0: entered allmulticast mode [ 317.931605][ T9860] hsr_slave_0: entered allmulticast mode [ 317.931620][ T9860] hsr_slave_1: entered allmulticast mode [ 317.932045][ T9860] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 318.015747][ T30] audit: type=1326 audit(1780597320.771:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015792][ T30] audit: type=1326 audit(1780597320.771:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015829][ T30] audit: type=1326 audit(1780597320.771:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015866][ T30] audit: type=1326 audit(1780597320.771:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015899][ T30] audit: type=1326 audit(1780597320.771:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015933][ T30] audit: type=1326 audit(1780597320.771:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.015967][ T30] audit: type=1326 audit(1780597320.771:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.018831][ T30] audit: type=1326 audit(1780597320.771:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.018874][ T30] audit: type=1326 audit(1780597320.771:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.018908][ T30] audit: type=1326 audit(1780597320.781:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9867 comm="syz.2.954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f40b299ce59 code=0x7ffc0000 [ 318.098968][ T6601] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 318.337312][ T6601] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 318.337340][ T6601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.364097][ T6601] usb 5-1: config 0 descriptor?? [ 318.370248][ T6601] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 318.768430][ T825] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 318.928341][ T825] usb 3-1: Using ep0 maxpacket: 32 [ 318.949311][ T825] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 318.970649][ T825] usb 3-1: config 0 has no interface number 0 [ 318.993429][ T825] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.022403][ T825] usb 3-1: config 0 interface 89 has no altsetting 0 [ 319.046750][ T825] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 319.072618][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.095233][ T825] usb 3-1: Product: syz [ 319.112809][ T825] usb 3-1: Manufacturer: syz [ 319.142284][ T825] usb 3-1: SerialNumber: syz [ 319.156215][ T825] usb 3-1: config 0 descriptor?? [ 319.176488][ T825] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 319.193408][ T6601] gspca_sunplus: reg_w_riv err -71 [ 319.203887][ T6601] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 319.217922][ T825] em28xx 3-1:0.89: Video interface 89 found: [ 319.234259][ T6601] usb 5-1: USB disconnect, device number 61 [ 319.342786][ T9917] netlink: 128 bytes leftover after parsing attributes in process `syz.5.962'. [ 319.365502][ T9918] netlink: 128 bytes leftover after parsing attributes in process `syz.5.962'. [ 319.580179][ T825] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 319.684925][ T825] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 319.712641][ T825] em28xx 3-1:0.89: board has no eeprom [ 319.790086][ T825] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 319.803487][ T9935] netlink: 'syz.1.966': attribute type 5 has an invalid length. [ 319.824190][ T825] em28xx 3-1:0.89: analog set to bulk mode. [ 319.838350][ T6601] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 319.857686][ T5709] em28xx 3-1:0.89: Registering V4L2 extension [ 319.867981][ T825] usb 3-1: USB disconnect, device number 51 [ 319.891550][ T825] em28xx 3-1:0.89: Disconnecting em28xx [ 319.956444][ T5709] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 319.982467][ T5709] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 320.017023][ T5709] em28xx 3-1:0.89: No AC97 audio processor [ 320.023414][ T6601] usb 6-1: Using ep0 maxpacket: 32 [ 320.041535][ T6601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.056231][ T5709] usb 3-1: Decoder not found [ 320.072937][ T5709] em28xx 3-1:0.89: failed to create media graph [ 320.092582][ T6601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.105613][ T5709] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 320.126793][ T6601] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 320.151179][ T5709] em28xx 3-1:0.89: Registering snapshot button... [ 320.175816][ T5709] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input42 [ 320.191840][ T6601] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 320.229468][ T5709] em28xx 3-1:0.89: Remote control support is not available for this card. [ 320.241374][ T6601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.260248][ T825] em28xx 3-1:0.89: Closing input extension [ 320.274000][ T825] em28xx 3-1:0.89: Deregistering snapshot button [ 320.291989][ T6601] usb 6-1: config 0 descriptor?? [ 320.372516][ T825] em28xx 3-1:0.89: Freeing device [ 320.468082][ T9957] Cannot find add_set index 0 as target [ 320.756945][ T825] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 320.773920][ T9961] netlink: 164 bytes leftover after parsing attributes in process `syz.3.972'. [ 320.989963][ T825] usb 3-1: Using ep0 maxpacket: 16 [ 321.023935][ T825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.044760][ T825] usb 3-1: config 9 has an invalid interface number: 7 but max is 0 [ 321.062954][ T825] usb 3-1: config 9 has no interface number 0 [ 321.082687][ T825] usb 3-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 321.126758][ T825] usb 3-1: config 9 interface 7 has no altsetting 0 [ 321.157866][ T825] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 321.185883][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.216324][ T825] usb 3-1: Product: syz [ 321.234765][ T825] usb 3-1: Manufacturer: syz [ 321.248034][ T825] usb 3-1: SerialNumber: syz [ 321.492867][ T825] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 321.520425][ T825] usb 3-1: USB disconnect, device number 52 [ 321.570606][ T9966] QAT: Device 198 not found [ 321.583393][ T9967] QAT: Device 198 not found [ 321.711375][ T6601] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001B/input/input43 [ 321.826444][ T6601] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001B/input/input44 [ 322.025147][ T6601] kye 0003:0458:5011.001B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 322.286437][ T9972] netlink: 'syz.4.976': attribute type 2 has an invalid length. [ 322.389910][ T9972] netlink: 'syz.4.976': attribute type 2 has an invalid length. [ 322.542751][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.572392][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.658276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.791154][ C1] kye 0003:0458:5011.001B: usb_submit_urb(ctrl) failed: -1 [ 322.928364][ T6601] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 323.082428][ T6601] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.143163][ T6601] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.209747][ T6601] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.287313][ T6601] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.352722][ T6601] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.428838][ T6601] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.476289][ T6601] usb 3-1: Product: syz [ 323.497942][ T6601] usb 3-1: Manufacturer: syz [ 323.562765][ T6601] cdc_wdm 3-1:1.0: skipping garbage [ 323.570716][ T5695] usb 6-1: USB disconnect, device number 65 [ 323.614577][ T6601] cdc_wdm 3-1:1.0: skipping garbage [ 323.677058][ T6601] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 324.418422][ T825] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 324.527078][T10021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'. [ 324.588560][ T825] usb 6-1: Using ep0 maxpacket: 16 [ 324.597770][ T825] usb 6-1: config 1 interface 0 altsetting 57 bulk endpoint 0x1 has invalid maxpacket 32 [ 324.610577][ T825] usb 6-1: config 1 interface 0 altsetting 57 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.688139][ T825] usb 6-1: config 1 interface 0 has no altsetting 0 [ 324.738436][ T825] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 324.749039][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.764539][ T825] usb 6-1: Product: 㠁 [ 324.773654][ T825] usb 6-1: Manufacturer: ꖆ澘薠í붼픓䤠딥᭖皯昘ᩐ뙧霖밥㽐䓭熽￮酎蘂ຊຢ엵 [ 324.789475][ T825] usb 6-1: SerialNumber: ት桅❍ɴዑ䬽ᠲ憽䟳ᥝ㐢촲잖堉顭篧嵖讙̀敉鲙饰悊帒祩䎎ꡀꚆ̱漛黧픠ﶳ⌉䑋㌿雵땳惇涔 [ 324.822020][T10013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 324.831621][T10013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 324.959213][T10028] fuse: Bad value for 'fd' [ 325.248122][ T6601] usb 6-1: USB disconnect, device number 66 [ 325.285939][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 325.298162][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 325.395782][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 325.405127][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 325.467602][ T5709] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 325.640091][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.651271][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.662101][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.678109][ T5695] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 325.696222][ T5709] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.711442][ T808] usb 3-1: USB disconnect, device number 53 [ 325.715612][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.759240][ T5709] usb 5-1: config 0 descriptor?? [ 325.848902][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 325.855799][ T5695] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 325.866869][ T5695] usb 2-1: config 242 has no interface number 0 [ 325.874154][ T5695] usb 2-1: config 242 interface 195 has no altsetting 0 [ 325.883507][ T5695] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 325.899531][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.917787][ T5695] usb 2-1: Product: syz [ 325.922398][ T5695] usb 2-1: Manufacturer: syz [ 325.927899][ T5695] usb 2-1: SerialNumber: syz [ 326.007529][T10050] tipc: Failed to remove unknown binding: 66,1,1/0:360109933/360109935 [ 326.078323][ T5639] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 326.157706][ T5695] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 326.174675][ T5695] usb 2-1: selecting invalid altsetting 0 [ 326.201361][ T2365] pvrusb2: Invalid write control endpoint [ 326.210649][ T5695] usb 2-1: USB disconnect, device number 67 [ 326.245509][ T5639] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.276770][ T5639] usb 6-1: config 0 interface 0 has no altsetting 0 [ 326.299764][ T5639] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 326.320471][ T5709] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 326.325647][ T5639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.371592][ T5639] usb 6-1: config 0 descriptor?? [ 326.510043][ T2365] pvrusb2: Invalid write control endpoint [ 326.531114][ T2365] pvrusb2: Invalid write control endpoint [ 326.546810][ T2365] pvrusb2: Invalid write control endpoint [ 326.561796][ T2365] pvrusb2: Invalid write control endpoint [ 326.581826][ T2365] pvrusb2: Invalid write control endpoint [ 326.598367][ T2365] pvrusb2: Invalid write control endpoint [ 326.614243][ T2365] pvrusb2: Invalid write control endpoint [ 326.633787][ T2365] pvrusb2: Invalid write control endpoint [ 326.649964][ T2365] pvrusb2: Invalid write control endpoint [ 326.660900][ T2365] pvrusb2: Invalid write control endpoint [ 326.676418][ T2365] pvrusb2: Invalid write control endpoint [ 326.692097][ T2365] pvrusb2: Invalid write control endpoint [ 326.705052][ T2365] pvrusb2: Invalid write control endpoint [ 326.716904][ T2365] pvrusb2: Invalid write control endpoint [ 326.734296][ T2365] pvrusb2: Invalid write control endpoint [ 326.745986][ T2365] pvrusb2: Invalid write control endpoint [ 326.758404][ T2365] pvrusb2: Invalid write control endpoint [ 326.770188][ T2365] pvrusb2: Invalid write control endpoint [ 326.788361][ T2365] pvrusb2: Invalid write control endpoint [ 326.791712][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.794885][ T2365] pvrusb2: Invalid write control endpoint [ 326.812904][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.821182][ T2365] pvrusb2: Invalid write control endpoint [ 326.843108][ T2365] pvrusb2: Invalid write control endpoint [ 326.855543][ T2365] pvrusb2: Invalid write control endpoint [ 326.873263][T10049] tipc: Failed to remove unknown binding: 66,1,1/0:360109933/360109935 [ 326.882611][ T2365] pvrusb2: Invalid write control endpoint [ 326.892210][T10049] tipc: Failed to remove unknown binding: 66,1,1/0:360109933/360109935 [ 326.903496][ T2365] pvrusb2: Invalid write control endpoint [ 326.918505][ T2365] pvrusb2: Invalid write control endpoint [ 326.928508][ T2365] pvrusb2: Invalid write control endpoint [ 326.940571][ T2365] pvrusb2: Invalid write control endpoint [ 326.952961][ T2365] pvrusb2: Invalid write control endpoint [ 326.965438][ T2365] pvrusb2: Invalid write control endpoint [ 326.984724][ T2365] pvrusb2: Invalid write control endpoint [ 326.996793][ T2365] pvrusb2: Invalid write control endpoint [ 327.038885][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.069549][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.083464][ T2365] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 327.127113][ T5639] usbhid 6-1:0.0: can't add hid device: -71 [ 327.146644][ T5639] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 327.197951][ T5639] usb 6-1: USB disconnect, device number 67 [ 327.243593][ T2365] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 327.275626][ T2365] pvrusb2: Invalid write control endpoint [ 327.299138][ T2365] pvrusb2: Invalid write control endpoint [ 327.305771][ T2365] pvrusb2: Invalid write control endpoint [ 327.315503][ T2365] pvrusb2: Invalid write control endpoint [ 327.321928][ T2365] pvrusb2: Invalid write control endpoint [ 327.328059][ T2365] pvrusb2: Invalid write control endpoint [ 327.334295][ T2365] pvrusb2: Invalid write control endpoint [ 327.353144][ T2365] pvrusb2: Invalid write control endpoint [ 327.366941][ T2365] pvrusb2: Invalid write control endpoint [ 327.373075][ T825] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 327.382296][ T2365] pvrusb2: Invalid write control endpoint [ 327.388100][ T2365] pvrusb2: Invalid write control endpoint [ 327.394527][ T2365] pvrusb2: Invalid write control endpoint [ 327.400541][ T2365] pvrusb2: Invalid write control endpoint [ 327.406480][ T2365] pvrusb2: Invalid write control endpoint [ 327.413280][ T2365] pvrusb2: Invalid write control endpoint [ 327.419457][ T2365] pvrusb2: Invalid write control endpoint [ 327.425302][ T2365] pvrusb2: Invalid write control endpoint [ 327.431738][ T2365] pvrusb2: Invalid write control endpoint [ 327.437570][ T2365] pvrusb2: Invalid write control endpoint [ 327.443832][ T2365] pvrusb2: Invalid write control endpoint [ 327.450361][ T2365] pvrusb2: Invalid write control endpoint [ 327.475281][ T2365] pvrusb2: Attached sub-driver cs53l32a [ 327.530019][ T825] usb 3-1: config 213 has an invalid interface number: 27 but max is 0 [ 327.538624][ T825] usb 3-1: config 213 has no interface number 0 [ 327.550270][ T825] usb 3-1: config 213 interface 27 has no altsetting 0 [ 327.570498][ T825] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=d6.6b [ 327.584559][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.606234][ T825] usb 3-1: Product: syz [ 327.610903][ T2365] pvrusb2: Invalid write control endpoint [ 327.624045][ T825] usb 3-1: Manufacturer: syz [ 327.640809][ T2365] pvrusb2: Invalid write control endpoint [ 327.646616][ T825] usb 3-1: SerialNumber: syz [ 327.665322][ T2365] pvrusb2: Invalid write control endpoint [ 327.707861][ T2365] pvrusb2: Invalid write control endpoint [ 327.709053][ T5709] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 327.716361][ T2365] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 327.788368][ T2365] pvrusb2: Device being rendered inoperable [ 327.804388][ T2365] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 327.860226][ T2365] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 327.878288][ T825] belkin_sa 3-1:213.27: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 327.947340][ T825] usb 3-1: bcdDevice: d66b, bfc: 0 [ 327.987563][ T825] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 328.018814][ T825] usb 3-1: USB disconnect, device number 54 [ 328.060655][ T825] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 328.112427][ T825] belkin_sa 3-1:213.27: device disconnected [ 328.429762][ T5695] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 328.579862][ T5695] usb 2-1: device descriptor read/64, error -71 [ 328.609699][T10075] mmap: syz.5.1002 (10075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 328.727801][T10080] netlink: 'syz.4.1004': attribute type 29 has an invalid length. [ 328.746927][T10080] netlink: 'syz.4.1004': attribute type 5 has an invalid length. [ 328.759863][T10072] tipc: Started in network mode [ 328.790310][T10072] tipc: Node identity fa8305bfad81, cluster identity 4711 [ 328.807778][T10072] tipc: Enabled bearer , priority 0 [ 328.818555][ T5695] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 328.842543][T10082] syzkaller0: entered promiscuous mode [ 328.848102][T10082] syzkaller0: entered allmulticast mode [ 328.971951][T10072] tipc: Resetting bearer [ 328.978361][ T5695] usb 2-1: device descriptor read/64, error -71 [ 329.024735][T10072] tipc: Disabling bearer [ 329.088887][ T5695] usb usb2-port1: attempt power cycle [ 329.217570][T10093] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1007'. [ 329.229635][ T24] usb 5-1: USB disconnect, device number 62 [ 329.322740][T10097] netlink: 'syz.5.1009': attribute type 21 has an invalid length. [ 329.428608][ T5695] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 329.459057][ T5695] usb 2-1: device descriptor read/8, error -71 [ 329.698346][ T5695] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 329.739788][ T5695] usb 2-1: device descriptor read/8, error -71 [ 329.768460][ T24] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 329.863641][ T5695] usb usb2-port1: unable to enumerate USB device [ 329.882071][T10107] netlink: 'syz.2.1012': attribute type 13 has an invalid length. [ 329.918376][ T24] usb 5-1: device descriptor read/64, error -71 [ 330.008935][ T9998] Set syz1 is full, maxelem 65536 reached [ 330.188456][ T24] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 330.368465][ T24] usb 5-1: device descriptor read/64, error -71 [ 330.542206][ T24] usb usb5-port1: attempt power cycle [ 330.550234][T10100] syz.5.1010 (10100): drop_caches: 2 [ 331.148706][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 331.200385][ T24] usb 5-1: device descriptor read/8, error -71 [ 331.479929][ T24] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 331.541216][ T24] usb 5-1: device descriptor read/8, error -71 [ 331.668702][ T24] usb usb5-port1: unable to enumerate USB device [ 332.221183][ T24] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 332.398393][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 332.404744][T10139] xt_addrtype: ipv6 does not support BROADCAST matching [ 332.429161][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 332.444348][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.482852][ T24] usb 6-1: Product: syz [ 332.487459][ T24] usb 6-1: Manufacturer: syz [ 332.502507][ T24] usb 6-1: SerialNumber: syz [ 332.515144][ T24] usb 6-1: config 0 descriptor?? [ 332.535332][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 332.563958][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 332.563958][ T24] [ 332.565479][T10146] FAULT_INJECTION: forcing a failure. [ 332.565479][T10146] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.608072][ T24] usb 6-1: selecting invalid altsetting 3 [ 332.608986][T10146] CPU: 0 UID: 0 PID: 10146 Comm: syz.1.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.609010][T10146] Tainted: [L]=SOFTLOCKUP [ 332.609016][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.609035][T10146] Call Trace: [ 332.609041][T10146] [ 332.609052][T10146] dump_stack_lvl+0xe8/0x150 [ 332.609083][T10146] should_fail_ex+0x412/0x560 [ 332.609182][T10146] _copy_to_user+0x31/0xb0 [ 332.609235][T10146] simple_read_from_buffer+0xe1/0x170 [ 332.609259][T10146] proc_fail_nth_read+0x1bb/0x230 [ 332.609282][T10146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.609304][T10146] ? rw_verify_area+0x2a6/0x4d0 [ 332.609322][T10146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.609342][T10146] vfs_read+0x20c/0xa70 [ 332.609367][T10146] ? __pfx___mutex_lock+0x10/0x10 [ 332.609422][T10146] ? __pfx_vfs_read+0x10/0x10 [ 332.609444][T10146] ? __fget_files+0x2a/0x420 [ 332.609465][T10146] ? __fget_files+0x3a0/0x420 [ 332.609481][T10146] ? __fget_files+0x2a/0x420 [ 332.609506][T10146] ksys_read+0x150/0x270 [ 332.609528][T10146] ? __pfx_ksys_read+0x10/0x10 [ 332.609555][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.609572][T10146] do_syscall_64+0x174/0x580 [ 332.609612][T10146] ? trace_irq_disable+0x3b/0x140 [ 332.609634][T10146] ? clear_bhb_loop+0x40/0x90 [ 332.609653][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.609667][T10146] RIP: 0033:0x7fd4fb55d68e [ 332.609690][T10146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.609702][T10146] RSP: 002b:00007fd4fc464fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.609718][T10146] RAX: ffffffffffffffda RBX: 00007fd4fc4656c0 RCX: 00007fd4fb55d68e [ 332.609730][T10146] RDX: 000000000000000f RSI: 00007fd4fc4650a0 RDI: 0000000000000004 [ 332.609746][T10146] RBP: 00007fd4fc465090 R08: 0000000000000000 R09: 0000000000000000 [ 332.609755][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.609764][T10146] R13: 00007fd4fb816038 R14: 00007fd4fb815fa0 R15: 00007fd4fb93fa48 [ 332.609790][T10146] [ 332.831958][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 332.831958][ T24] [ 332.832905][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.842462][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 332.874504][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.933075][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 332.973927][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.007398][ T24] usb 6-1: media controller created [ 333.022390][ T5639] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 333.082442][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 333.117382][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 333.169575][ T24] dvb-usb: MAC address reading failed. [ 333.178946][ T5639] usb 4-1: device descriptor read/64, error -71 [ 333.193131][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 333.239491][T10163] bond1 (unregistering): Released all slaves [ 333.252702][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.346485][ T24] DVB: Unable to find symbol stb0899_attach() [ 333.364859][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 333.438370][ T24] rc_core: IR keymap rc-tt-1500 not found [ 333.444315][ T24] Registered IR keymap rc-empty [ 333.449329][ T5639] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 333.462462][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 333.480822][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input45 [ 333.502381][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 333.512781][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 333.512781][ T24] [ 333.527600][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 333.593207][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.608174][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.634331][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 333.638408][ T5639] usb 4-1: device descriptor read/64, error -71 [ 333.667284][ T24] dvb-usb: error -22 while querying for an remote control event. [ 333.769240][ T5639] usb usb4-port1: attempt power cycle [ 333.778380][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 333.788210][ T24] dvb-usb: error -22 while querying for an remote control event. [ 333.928387][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 333.934819][ T24] dvb-usb: error -22 while querying for an remote control event. [ 334.044227][T10170] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1028'. [ 334.068482][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.081833][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.130437][ T5639] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 334.169246][ T5639] usb 4-1: device descriptor read/8, error -71 [ 334.208688][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.214714][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.285572][T10175] netlink: 'syz.2.1030': attribute type 11 has an invalid length. [ 334.300787][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 334.328738][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.336837][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.409695][ T5639] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 334.438859][ T5639] usb 4-1: device descriptor read/8, error -71 [ 334.470299][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.479523][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.491831][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 334.502466][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.514210][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 334.525738][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.544159][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.550932][ T5639] usb usb4-port1: unable to enumerate USB device [ 334.553837][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.578427][ T5695] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 334.578509][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.594716][ T24] usb 5-1: invalid MIDI out EP 0 [ 334.621968][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.641574][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.739821][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.763652][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.763752][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 334.782928][ T5695] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.782982][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.803297][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.807854][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.815722][ T24] usb 5-1: USB disconnect, device number 67 [ 334.855398][ T5695] usb 3-1: config 0 descriptor?? [ 334.928340][ T825] dvb-usb: bulk message failed: -22 (4/0) [ 334.934366][ T825] dvb-usb: error -22 while querying for an remote control event. [ 334.990587][ T5639] usb 6-1: USB disconnect, device number 68 [ 335.094427][ T5639] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 335.231169][T10183] netlink: 'syz.5.1032': attribute type 1 has an invalid length. [ 335.301693][T10186] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1032'. [ 335.468331][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 335.477790][ T5695] usbhid 3-1:0.0: can't add hid device: -71 [ 335.488386][ T5695] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 335.510953][ T5695] usb 3-1: USB disconnect, device number 55 [ 335.568817][ T825] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 335.632840][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.642090][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.657549][ T24] usb 2-1: config 0 descriptor?? [ 335.671149][ T24] cp210x 2-1:0.0: cp210x converter detected [ 335.708801][ T825] usb 6-1: device descriptor read/64, error -71 [ 335.958505][ T825] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 335.987538][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 335.987551][ T30] audit: type=1326 audit(1780597338.741:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.049090][ T30] audit: type=1326 audit(1780597338.741:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.074051][ T24] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 336.089261][ T5695] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 336.108333][ T825] usb 6-1: device descriptor read/64, error -71 [ 336.108651][ T30] audit: type=1326 audit(1780597338.751:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.145823][ T30] audit: type=1326 audit(1780597338.751:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.173655][ T30] audit: type=1326 audit(1780597338.751:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.201257][ T30] audit: type=1326 audit(1780597338.751:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.219258][ T825] usb usb6-port1: attempt power cycle [ 336.226695][ T30] audit: type=1326 audit(1780597338.751:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.255472][ T30] audit: type=1326 audit(1780597338.751:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.280798][ T30] audit: type=1326 audit(1780597338.751:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.288700][ T5695] usb 4-1: device descriptor read/64, error -71 [ 336.305833][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 336.322511][ T30] audit: type=1326 audit(1780597338.751:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725139ce59 code=0x7ffc0000 [ 336.346889][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 336.356227][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 336.370385][ T24] usb 2-1: USB disconnect, device number 72 [ 336.385268][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.399405][ T24] cp210x 2-1:0.0: device disconnected [ 336.568383][ T5695] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 336.588336][ T825] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 336.619018][ T825] usb 6-1: device descriptor read/8, error -71 [ 336.718514][ T5695] usb 4-1: device descriptor read/64, error -71 [ 336.840528][ T5695] usb usb4-port1: attempt power cycle [ 336.858363][ T825] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 336.878115][T10219] IPv6: Can't replace route, no match found [ 336.888901][ T825] usb 6-1: device descriptor read/8, error -71 [ 336.948538][T10222] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 337.010664][ T825] usb usb6-port1: unable to enumerate USB device [ 337.021004][T10226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.128788][ T5639] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 337.188631][ T5695] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 337.213407][ T5695] usb 4-1: device descriptor read/8, error -71 [ 337.280347][ T5639] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.291404][ T5639] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.301558][ T5639] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.310869][ T5639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.323467][T10219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 337.335291][ T5639] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.388339][ T5694] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 337.458470][ T5695] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 337.478889][ T5695] usb 4-1: device descriptor read/8, error -71 [ 337.538873][ T5639] usb 2-1: USB disconnect, device number 73 [ 337.551676][ T5694] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.563088][ T5694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.580995][ T5694] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.597739][ T5695] usb usb4-port1: unable to enumerate USB device [ 337.607534][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.618892][ T5694] usb 3-1: SerialNumber: syz [ 337.841103][ T5694] usb 3-1: 0:2 : does not exist [ 337.866152][ T5694] usb 3-1: USB disconnect, device number 56 [ 338.788899][ T5694] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 338.962609][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 338.971697][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 338.988525][ T5694] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 338.998467][ T5694] usb 3-1: config 0 has no interface number 0 [ 339.028939][ T5694] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.043849][ T5694] usb 3-1: config 0 interface 89 has no altsetting 0 [ 339.060453][ T5694] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 339.070072][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.090986][ T5694] usb 3-1: Product: syz [ 339.098383][ T5694] usb 3-1: Manufacturer: syz [ 339.108589][ T5694] usb 3-1: SerialNumber: syz [ 339.121491][ T5694] usb 3-1: config 0 descriptor?? [ 339.136371][ T5694] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 339.156950][ T5694] em28xx 3-1:0.89: Video interface 89 found: [ 339.335306][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.353993][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.371037][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.381404][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.508652][ T5695] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 339.533196][T10271] bond1: option lacp_active: invalid value (5) [ 339.541607][T10271] bond1 (unregistering): Released all slaves [ 339.661933][ T5695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 339.679104][ T5695] usb 4-1: not running at top speed; connect to a high speed hub [ 339.695790][ T5695] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 339.700075][T10274] fuse: Bad value for 'fd' [ 339.706045][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.709411][ T825] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 339.730108][ T5695] usb 4-1: Product: syz [ 339.734312][ T5695] usb 4-1: Manufacturer: syz [ 339.740100][ T5695] usb 4-1: SerialNumber: syz [ 339.792818][ T5694] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 339.818977][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 339.858477][ T825] usb 6-1: Using ep0 maxpacket: 32 [ 339.869429][ T825] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 339.878671][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.886657][ T825] usb 6-1: Product: syz [ 339.891416][ T825] usb 6-1: Manufacturer: syz [ 339.896073][ T825] usb 6-1: SerialNumber: syz [ 339.904563][ T825] usb 6-1: config 0 descriptor?? [ 339.913481][ T825] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 339.948350][ T24] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 339.953042][ T5695] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 340.120592][ T24] usb 2-1: config 2 has an invalid interface number: 12 but max is 0 [ 340.128909][ T24] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 340.137636][ T24] usb 2-1: config 2 has an invalid descriptor of length 64, skipping remainder of the config [ 340.152325][ T24] usb 2-1: config 2 has no interface number 0 [ 340.159128][ T24] usb 2-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.170537][ T24] usb 2-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 340.182337][ T24] usb 2-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0 [ 340.193593][ T24] usb 2-1: config 2 interface 12 has no altsetting 0 [ 340.203245][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 340.212561][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.220932][ T24] usb 2-1: Product: syz [ 340.225405][ T24] usb 2-1: Manufacturer: syz [ 340.230464][ T24] usb 2-1: SerialNumber: syz [ 340.429993][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.445257][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.445423][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.463641][ T24] em28xx 2-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12) [ 340.475702][T10280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.475729][ T24] em28xx 2-1:2.12: Device initialization failed. [ 340.485890][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.493224][ T24] em28xx 2-1:2.12: Device must be connected to a high-speed USB 2.0 port. [ 340.509524][T10280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.524422][ T24] usb 2-1: USB disconnect, device number 74 [ 340.574791][ T5695] gp8psk: usb out operation failed. [ 340.584555][ T5695] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 340.599574][ T5694] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 340.620899][ T5695] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 340.638556][ T5694] em28xx 3-1:0.89: board has no eeprom [ 340.658865][ T5695] usb 4-1: USB disconnect, device number 78 [ 340.710524][ T5694] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 340.717958][ T5694] em28xx 3-1:0.89: analog set to bulk mode. [ 340.726697][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 340.745052][ T5694] usb 3-1: USB disconnect, device number 57 [ 340.762098][ T5694] em28xx 3-1:0.89: Disconnecting em28xx [ 340.787013][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 340.795523][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 340.803691][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 340.810927][ T9] usb 3-1: Decoder not found [ 340.815571][ T9] em28xx 3-1:0.89: failed to create media graph [ 340.827275][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 340.846185][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 340.870732][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input46 [ 340.885617][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 340.896560][ T5694] em28xx 3-1:0.89: Closing input extension [ 340.904203][ T5694] em28xx 3-1:0.89: Deregistering snapshot button [ 340.940896][ T5694] em28xx 3-1:0.89: Freeing device [ 341.425441][T10314] fuse: Unknown parameter '0xffffffffffffffff' [ 341.508578][ T5709] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 341.533923][ T825] gspca_ov534_9: reg_r err -71 [ 341.567982][T10311] fuse: Unknown parameter '' [ 341.687562][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.731201][ T5709] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 341.750853][ T5709] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 341.778199][ T5709] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 341.805876][ T5709] usb 2-1: config 129 has no interface number 0 [ 341.824421][ T5709] usb 2-1: config 129 has no interface number 1 [ 341.831294][ T825] gspca_ov534_9: Unknown sensor 0000 [ 341.831377][ T825] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 341.859500][ T5709] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 341.882806][ T825] usb 6-1: USB disconnect, device number 73 [ 341.919760][ T5709] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 341.939110][ T5709] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 341.966417][ T5709] usb 2-1: config 129 interface 135 has no altsetting 0 [ 341.974909][ T5709] usb 2-1: config 129 interface 5 has no altsetting 0 [ 341.990027][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 341.998082][ T5709] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 342.013735][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.018579][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 342.054348][ T5709] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.062116][ T5709] usb 2-1: MIDIStreaming interface descriptor not found [ 342.198481][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 342.219125][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 342.255757][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.298538][ T9] usb 3-1: Product: syz [ 342.312250][ T9] usb 3-1: Manufacturer: syz [ 342.333548][ T9] usb 3-1: SerialNumber: syz [ 342.356686][ T9] usb 3-1: config 0 descriptor?? [ 342.368964][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 342.391010][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.395229][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 342.409306][ T24] usb 4-1: config 0 has no interface number 0 [ 342.428053][ T24] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.450357][ T24] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 342.462130][T10326] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 342.491359][ T5709] usb 2-1: USB disconnect, device number 75 [ 342.505058][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.523473][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.559382][ T24] usb 4-1: Product: syz [ 342.574005][ T24] usb 4-1: Manufacturer: syz [ 342.585159][ T24] usb 4-1: SerialNumber: syz [ 342.607360][ T24] usb 4-1: config 0 descriptor?? [ 342.631324][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.788481][ T5694] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 342.836379][ T24] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 342.857888][ T24] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 342.959666][ T5694] usb 6-1: Using ep0 maxpacket: 8 [ 342.967164][ T5694] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 342.978221][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.009892][ T5694] pvrusb2: Hardware description: Terratec Grabster AV400 [ 343.017117][ T5694] pvrusb2: ********** [ 343.029013][ T5694] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 343.053210][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.071247][ T5694] pvrusb2: Important functionality might not be entirely working. [ 343.091547][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.101674][ T5694] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 343.129719][ T5695] usb 4-1: USB disconnect, device number 79 [ 343.138199][ T5694] pvrusb2: ********** [ 343.204680][ T2365] pvrusb2: Invalid write control endpoint [ 343.277960][ T2365] pvrusb2: Invalid write control endpoint [ 343.295813][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 343.314997][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 343.328851][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 343.351574][ T2365] pvrusb2: Device being rendered inoperable [ 343.361185][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 343.369789][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 343.373445][T10338] netlink: 'syz.1.1078': attribute type 12 has an invalid length. [ 343.381179][ T2365] pvrusb2: Attached sub-driver cx25840 [ 343.392509][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 343.427004][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 343.522711][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.539616][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.562661][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.573771][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.585661][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.596267][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.666284][ T9] gspca_sunplus: reg_w_riv err -71 [ 343.673359][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 343.685139][ T9] usb 3-1: USB disconnect, device number 58 [ 343.759842][ T6601] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 343.789602][ T24] usb 6-1: USB disconnect, device number 74 [ 343.938562][ T6601] usb 2-1: Using ep0 maxpacket: 32 [ 343.949503][ T6601] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.971149][ T6601] usb 2-1: config 0 has no interface number 0 [ 343.992595][ T6601] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 344.016274][ T6601] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 344.031367][ T6601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.050898][ T6601] usb 2-1: Product: syz [ 344.058883][ T6601] usb 2-1: Manufacturer: syz [ 344.073679][ T6601] usb 2-1: SerialNumber: syz [ 344.087912][ T6601] usb 2-1: config 0 descriptor?? [ 344.100367][T10344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 344.109031][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 344.320007][T10344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 344.369783][ T9] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 344.480010][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 344.489722][T10360] syzkaller0: entered promiscuous mode [ 344.515708][T10360] syzkaller0: entered allmulticast mode [ 344.560714][ T9] usb 4-1: config 14 has an invalid interface number: 128 but max is 0 [ 344.569241][ T9] usb 4-1: config 14 has no interface number 0 [ 344.598861][ T9] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=fb.9d [ 344.609260][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.626828][ T9] usb 4-1: Product: syz [ 344.636650][ T9] usb 4-1: Manufacturer: syz [ 344.646548][ T9] usb 4-1: SerialNumber: syz [ 344.876386][ T9] usb-storage 4-1:14.128: USB Mass Storage device detected [ 344.910797][ T9] usb-storage 4-1:14.128: device ignored [ 344.997926][ T9] usb 4-1: USB disconnect, device number 80 [ 345.109914][T10376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 345.113307][T10379] input: syz1 as /devices/virtual/input/input47 [ 345.116444][T10376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.130576][T10379] input: failed to attach handler leds to device input47, error: -6 [ 345.141594][T10376] vhci_hcd vhci_hcd.0: Device attached [ 345.159198][T10379] netlink: 'syz.2.1089': attribute type 5 has an invalid length. [ 345.172104][T10378] vhci_hcd: cannot find a urb of seqnum 13832 max seqnum 0 [ 345.187888][ T79] vhci_hcd vhci_hcd.5: stop threads [ 345.200578][ T79] vhci_hcd vhci_hcd.5: release socket [ 345.216369][ T79] vhci_hcd vhci_hcd.5: disconnect device [ 345.251613][T10379] veth3: entered allmulticast mode [ 345.426201][T10385] netlink: 'syz.5.1090': attribute type 1 has an invalid length. [ 345.513108][T10391] bond1: entered promiscuous mode [ 345.528424][T10391] bond1: entered allmulticast mode [ 345.540514][T10391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.828338][ T825] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 346.008431][ T6601] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 346.028427][ T6601] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 346.048031][ T825] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 346.059901][ T6601] asix 2-1:0.188: probe with driver asix failed with error -71 [ 346.067497][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.085070][ T825] usb 6-1: Product: syz [ 346.096074][ T825] usb 6-1: Manufacturer: syz [ 346.105122][ T6601] usb 2-1: USB disconnect, device number 76 [ 346.128718][ T825] usb 6-1: SerialNumber: syz [ 346.149444][ T825] usb 6-1: config 0 descriptor?? [ 346.341041][T10407] loop6: detected capacity change from 0 to 2640 [ 346.396596][T10407] buffer_io_error: 11 callbacks suppressed [ 346.396611][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.457721][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.477750][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.505867][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.530556][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.578772][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.621698][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.629674][T10385] bridge2: entered promiscuous mode [ 346.636972][T10385] bridge2: entered allmulticast mode [ 346.645907][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.673800][T10385] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 346.686119][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.694058][ T6601] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 346.735321][T10407] ldm_validate_partition_table(): Disk read failed. [ 346.745397][ T825] usb 6-1: Firmware version (0.0) predates our first public release. [ 346.768388][ T825] usb 6-1: Please update to version 0.2 or newer [ 346.796331][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.798655][ T57] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.838733][T10407] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.868757][ T6601] usb 3-1: Using ep0 maxpacket: 8 [ 346.878868][T10407] Dev loop6: unable to read RDB block 0 [ 346.892247][ T6601] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 346.908174][T10407] loop6: unable to read partition table [ 346.908180][ T6601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.925207][ T825] usb 6-1: USB disconnect, device number 75 [ 346.937552][ T6601] usb 3-1: Product: syz [ 346.944625][T10407] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 346.962903][ T6601] usb 3-1: Manufacturer: syz [ 346.973855][ T6601] usb 3-1: SerialNumber: syz [ 346.980258][ T6601] usb 3-1: config 0 descriptor?? [ 347.191939][ T6601] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 347.564429][T10433] Set syz0 is full, maxelem 0 reached [ 347.637187][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.669368][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.220708][ T6601] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 348.265577][ T6601] usb 3-1: USB disconnect, device number 59 [ 348.576664][T10461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.138592][ T5695] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 349.278599][ T5695] usb 3-1: device descriptor read/64, error -71 [ 349.498445][ T825] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 349.539788][ T5695] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 349.681523][ T825] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 349.691381][ T825] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 349.699523][ T5695] usb 3-1: device descriptor read/64, error -71 [ 349.702376][ T825] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 349.716942][ T825] usb 4-1: config 220 has no interface number 2 [ 349.718576][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 349.723723][ T825] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 349.744980][ T825] usb 4-1: config 220 interface 0 has no altsetting 0 [ 349.751783][ T825] usb 4-1: config 220 interface 76 has no altsetting 0 [ 349.758836][ T825] usb 4-1: config 220 interface 1 has no altsetting 0 [ 349.767778][ T825] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 349.776855][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.784881][ T825] usb 4-1: Product: syz [ 349.789075][ T825] usb 4-1: Manufacturer: syz [ 349.793666][ T825] usb 4-1: SerialNumber: syz [ 349.809526][ T5695] usb usb3-port1: attempt power cycle [ 349.828513][ T5694] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 349.878501][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 349.885643][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 349.894025][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.905390][ T808] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 349.913123][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.924062][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.934189][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.947908][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.956993][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.983008][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 349.991847][ T5694] usb 6-1: config 211 has an invalid interface number: 123 but max is 0 [ 350.000475][ T5694] usb 6-1: config 211 has no interface number 0 [ 350.006848][ T5694] usb 6-1: config 211 interface 123 has no altsetting 0 [ 350.013768][ T825] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 350.013795][ T825] uvcvideo 4-1:220.0: No valid video chain found. [ 350.013859][ T825] usb 4-1: selecting invalid altsetting 0 [ 350.042256][ T5694] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 350.042586][ T825] usb 4-1: selecting invalid altsetting 0 [ 350.051822][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.051870][ T5694] usb 6-1: Product: syz [ 350.051883][ T5694] usb 6-1: Manufacturer: syz [ 350.051895][ T5694] usb 6-1: SerialNumber: syz [ 350.080821][ T825] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 350.093537][ T825] usb 4-1: USB disconnect, device number 81 [ 350.098422][ T808] usb 5-1: device descriptor read/64, error -71 [ 350.158581][ T5695] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 350.171088][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.180296][ T5695] usb 3-1: device descriptor read/8, error -71 [ 350.186510][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.195400][ T9] usb 2-1: usb_control_msg returned -32 [ 350.201406][ T9] usbtmc 2-1:16.0: can't read capabilities [ 350.348354][ T808] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 350.401878][ T825] usb 2-1: USB disconnect, device number 77 [ 350.458327][ T5695] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 350.488692][ T808] usb 5-1: device descriptor read/64, error -71 [ 350.496008][ T5695] usb 3-1: device descriptor read/8, error -71 [ 350.524789][ T5694] usb-storage 6-1:211.123: USB Mass Storage device detected [ 350.546310][ T5694] usb-storage 6-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 350.599415][ T808] usb usb5-port1: attempt power cycle [ 350.619296][ T5694] usb 6-1: USB disconnect, device number 76 [ 350.625882][ T5695] usb usb3-port1: unable to enumerate USB device [ 350.982206][ T808] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 351.029828][ T808] usb 5-1: device descriptor read/8, error -71 [ 351.150908][ T825] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 351.309728][ T808] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 351.311113][ T825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.327468][ T825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.337331][ T825] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.339086][ T808] usb 5-1: device descriptor read/8, error -71 [ 351.346607][ T825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.360948][ T825] usb 6-1: SerialNumber: syz [ 351.460486][ T808] usb usb5-port1: unable to enumerate USB device [ 351.668505][ T5694] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 351.818507][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 351.829506][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.845704][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.855871][ T5694] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 351.866166][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.877191][ T5694] usb 4-1: config 0 descriptor?? [ 352.168562][ T5695] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 352.278366][ T5709] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 352.291456][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.302286][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.314141][ T5694] usbhid 4-1:0.0: can't add hid device: -71 [ 352.322089][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 352.328056][ T5694] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.338358][ T5695] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 352.349235][ T5694] usb 4-1: USB disconnect, device number 82 [ 352.355567][ T5695] usb 3-1: config 127 has no interface number 0 [ 352.367862][ T5695] usb 3-1: config 127 interface 124 has no altsetting 0 [ 352.377342][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 352.386651][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.394946][ T5695] usb 3-1: Product: syz [ 352.400284][ T5695] usb 3-1: Manufacturer: syz [ 352.404912][ T5695] usb 3-1: SerialNumber: syz [ 352.438399][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 352.445225][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 352.457281][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 352.469625][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.480265][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.492692][ T5709] usb 2-1: config 0 descriptor?? [ 352.503538][T10516] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.514934][ T5709] hub 2-1:0.0: USB hub found [ 352.714625][ T5709] hub 2-1:0.0: 1 port detected [ 352.886015][T10520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.190103][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 353.215296][T10526] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1131'. [ 353.249112][ T5695] usb 3-1: reset high-speed USB device number 64 using dummy_hcd [ 353.424316][ T5695] usb 3-1: device firmware changed [ 353.437566][ T5695] usb 3-1: USB disconnect, device number 64 [ 353.449822][ T5709] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 353.578379][ T5695] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 353.610420][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.620765][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.629757][ T5709] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.639818][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.651041][ T5709] usb 4-1: config 0 descriptor?? [ 353.661313][ T5709] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.668117][ T5709] dvb-usb: bulk message failed: -22 (3/0) [ 353.677694][ T5709] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.688012][ T5709] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 353.695200][ T5709] usb 4-1: media controller created [ 353.703043][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.722281][ T5709] dvb-usb: bulk message failed: -22 (6/0) [ 353.729249][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 353.732072][ T5709] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 353.737710][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.754464][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 353.765895][ T5695] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 353.768596][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 353.775525][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.794149][ T5695] usb 3-1: config 127 has no interface number 0 [ 353.800943][ T5695] usb 3-1: config 127 interface 124 has no altsetting 0 [ 353.812568][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 353.822253][ T5709] dvb-usb: schedule remote query interval to 150 msecs. [ 353.834130][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.836731][ T5709] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 353.857105][ T5695] usb 3-1: Product: 膃锱᪚웷ꭺ最櫃⴫쐢阧嗫页घ汒樎靡޼랐Ⴇ쎡じꐍ푶入囁ퟏ뫗쪞댊즫벍ڞ腱䪶㮴㲾龎඀ȍ沭ﻑ폤㪗⬈뉎怇许烛칖س锣ై蚑ཱི拊閰⚥ [ 353.880465][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.882159][ T5694] usb 2-1: USB disconnect, device number 78 [ 353.895682][ T5695] usb 3-1: Manufacturer: ᜾廕姅寭ʔ辞ꖂᢋϟதฬ釄ﹻ럺ꌜ貧寃㚟Ử鮊룂ꡃ餐嗯籁 [ 353.908374][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.912475][ T5695] usb 3-1: SerialNumber: syz [ 353.924351][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.934073][ T9] usb 5-1: config 211 has an invalid interface number: 123 but max is 0 [ 353.942739][ T9] usb 5-1: config 211 has no interface number 0 [ 353.951576][ T9] usb 5-1: config 211 interface 123 has no altsetting 0 [ 353.963797][ T9] usb 5-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 353.973582][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.973578][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.984297][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.991558][ T9] usb 5-1: Product: syz [ 354.002666][ T9] usb 5-1: Manufacturer: syz [ 354.007342][ T9] usb 5-1: SerialNumber: syz [ 354.012496][ T5709] dvb-usb: bulk message failed: -22 (1/0) [ 354.021772][ T5709] dvb-usb: error while querying for an remote control event. [ 354.101739][ T5709] usb 4-1: USB disconnect, device number 83 [ 354.162094][ T825] usb 6-1: 0:2 : does not exist [ 354.167753][ T5709] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 354.169000][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.187926][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.281575][ T825] usb 6-1: USB disconnect, device number 77 [ 354.327290][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.536162][T10547] bond1: option lp_interval: invalid value (18446744071562067969) [ 354.544196][T10547] bond1: option lp_interval: allowed values 1 - 2147483647 [ 354.562418][T10547] bond1 (unregistering): Released all slaves [ 354.604356][T10549] xt_l2tp: invalid flags combination: 4 [ 354.991892][ T5695] usb 3-1: USB disconnect, device number 65 [ 355.055733][ T9] usb-storage 5-1:211.123: USB Mass Storage device detected [ 355.068342][ T825] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 355.100256][ T9] usb-storage 5-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 355.184561][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 355.228063][ T9] usb 5-1: USB disconnect, device number 72 [ 355.238592][ T825] usb 4-1: device descriptor read/64, error -71 [ 355.488361][ T825] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 355.488566][ T5695] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 355.610880][ T808] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 355.632649][ T825] usb 4-1: device descriptor read/64, error -71 [ 355.662898][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 355.683084][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.702702][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 355.721314][ T5695] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 355.733911][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.747505][ T5695] usb 3-1: config 0 descriptor?? [ 355.760810][ T825] usb usb4-port1: attempt power cycle [ 355.798510][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 355.805675][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.827044][ T808] usb 2-1: config 6 has an invalid interface number: 120 but max is 1 [ 355.852019][ T808] usb 2-1: config 6 has an invalid interface number: 205 but max is 1 [ 355.879968][ T808] usb 2-1: config 6 has no interface number 0 [ 355.909370][ T808] usb 2-1: config 6 has no interface number 1 [ 355.917271][ T808] usb 2-1: config 6 interface 205 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 355.927570][ T808] usb 2-1: config 6 interface 120 has no altsetting 0 [ 355.934915][ T808] usb 2-1: config 6 interface 205 has no altsetting 0 [ 355.945912][ T808] usb 2-1: New USB device found, idVendor=07a6, idProduct=0986, bcdDevice=6d.bf [ 355.962552][ T5709] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 355.966115][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.988664][ T808] usb 2-1: Product: syz [ 356.002896][ T808] usb 2-1: Manufacturer: syz [ 356.027826][ T808] usb 2-1: SerialNumber: syz [ 356.091724][ T5695] usbhid 3-1:0.0: can't add hid device: -71 [ 356.102620][ T5695] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.121221][ T825] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 356.153858][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 356.162820][ T5695] usb 3-1: USB disconnect, device number 66 [ 356.168221][ T5709] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 356.188635][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.197086][ T825] usb 4-1: device descriptor read/8, error -71 [ 356.217479][ T5709] usb 6-1: config 0 descriptor?? [ 356.257809][ T808] pegasus 2-1:6.120: Missing or invalid endpoints [ 356.261448][ T5709] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 356.307527][ T808] pegasus 2-1:6.205: Missing or invalid endpoints [ 356.337522][ T808] usbhid 2-1:6.205: couldn't find an input interrupt endpoint [ 356.367201][ T808] usb 2-1: USB disconnect, device number 79 [ 356.474851][ T825] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 356.501965][ T825] usb 4-1: device descriptor read/8, error -71 [ 356.528354][T10584] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1143'. [ 356.630429][ T825] usb usb4-port1: unable to enumerate USB device [ 356.661428][ T5709] gspca_vc032x: reg_w err -71 [ 356.674974][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.681909][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.701455][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.733973][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.737686][ T5695] IPVS: starting estimator thread 0... [ 356.745117][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.752445][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.764818][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.771812][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.782404][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.791124][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.800870][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.810160][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.819620][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.837497][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.848290][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.848588][T10589] IPVS: using max 55 ests per chain, 132000 per kthread [ 356.858304][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.866170][ T808] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 356.874379][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.879823][ T5709] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.889932][ T5709] gspca_vc032x: Unknown sensor... [ 356.900110][ T5709] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 356.929302][ T5709] usb 6-1: USB disconnect, device number 78 [ 357.040759][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.056419][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.073413][ T808] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 357.089594][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.112235][ T808] usb 3-1: config 0 descriptor?? [ 357.241067][ T5695] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 357.400465][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.423789][ T5695] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 357.440553][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.460397][ T5695] usb 2-1: config 0 descriptor?? [ 357.541528][ T808] hid_parser_main: 28 callbacks suppressed [ 357.541541][ T808] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 357.559943][ T808] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 357.595927][ T808] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001D/input/input49 [ 357.655028][ T808] cm6533_jd 0003:0D8C:0022.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 357.710924][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 357.717921][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.746057][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.761893][ T5695] usb 2-1: USB disconnect, device number 80 [ 357.792378][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.836660][ T808] usb 3-1: USB disconnect, device number 67 [ 357.874431][T10599] fido_id[10599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 358.208479][ T5709] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 358.258367][ T5695] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 358.368358][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 358.383142][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.399788][ T5709] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 358.413417][ T5695] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 358.418650][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.432920][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.455294][ T5709] usb 2-1: config 0 descriptor?? [ 358.455896][ T5695] usb 4-1: config 0 descriptor?? [ 358.488454][ T6601] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 358.489399][ T5695] cp210x 4-1:0.0: cp210x converter detected [ 358.680436][ T5709] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 358.694540][ T6601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.710791][ T5709] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 358.729977][ T6601] usb 5-1: config 211 has an invalid interface number: 123 but max is 0 [ 358.748384][ T6601] usb 5-1: config 211 has no interface number 0 [ 358.761064][ T6601] usb 5-1: config 211 interface 123 has no altsetting 0 [ 358.788022][ T6601] usb 5-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 358.805718][ T6601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.825956][ T6601] usb 5-1: Product: syz [ 358.838891][ T6601] usb 5-1: Manufacturer: syz [ 358.849297][ T6601] usb 5-1: SerialNumber: syz [ 358.919903][ C1] [ 358.922272][ C1] ======================================================== [ 358.929464][ C1] WARNING: possible irq lock inversion dependency detected [ 358.936670][ C1] syzkaller #0 Tainted: G L [ 358.942646][ C1] -------------------------------------------------------- [ 358.943200][ T5695] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 358.949829][ C1] syz.5.1149/10598 just changed the state of lock: [ 358.949844][ C1] ffff888053f32230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x71/0xc0 [ 358.950010][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 358.950023][ C1] (tasklist_lock){.+.+}-{3:3} [ 358.950044][ C1] [ 358.950044][ C1] [ 358.950044][ C1] and interrupts could create inverse lock ordering between them. [ 358.950044][ C1] [ 358.950056][ C1] [ 358.950056][ C1] other info that might help us debug this: [ 358.950063][ C1] Chain exists of: [ 358.950063][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 358.950063][ C1] [ 358.950107][ C1] Possible interrupt unsafe locking scenario: [ 358.950107][ C1] [ 359.029876][ C1] CPU0 CPU1 [ 359.035234][ C1] ---- ---- [ 359.040606][ C1] lock(tasklist_lock); [ 359.044846][ C1] local_irq_disable(); [ 359.051593][ C1] lock(&dev->event_lock#2); [ 359.058782][ C1] lock(&client->buffer_lock); [ 359.066151][ C1] [ 359.069602][ C1] lock(&dev->event_lock#2); [ 359.074443][ C1] [ 359.074443][ C1] *** DEADLOCK *** [ 359.074443][ C1] [ 359.082573][ C1] 1 lock held by syz.5.1149/10598: [ 359.087678][ C1] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 359.097329][ C1] [ 359.097329][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 359.106693][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 359.112157][ C1] HARDIRQ-ON-R at: [ 359.116468][ C1] lock_acquire+0x106/0x350 [ 359.123309][ C1] _raw_read_lock+0x36/0x50 [ 359.130152][ C1] __do_wait+0xde/0x740 [ 359.136647][ C1] do_wait+0x1e7/0x510 [ 359.143048][ C1] kernel_wait+0xd6/0x1c0 [ 359.149732][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 359.158344][ C1] process_scheduled_works+0xb5d/0x1860 [ 359.166223][ C1] worker_thread+0xa53/0xfc0 [ 359.173140][ C1] kthread+0x389/0x470 [ 359.179547][ C1] ret_from_fork+0x514/0xb70 [ 359.186483][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.193594][ C1] SOFTIRQ-ON-R at: [ 359.197913][ C1] lock_acquire+0x106/0x350 [ 359.204747][ C1] _raw_read_lock+0x36/0x50 [ 359.211595][ C1] __do_wait+0xde/0x740 [ 359.218102][ C1] do_wait+0x1e7/0x510 [ 359.224518][ C1] kernel_wait+0xd6/0x1c0 [ 359.231195][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 359.239427][ C1] process_scheduled_works+0xb5d/0x1860 [ 359.247302][ C1] worker_thread+0xa53/0xfc0 [ 359.254230][ C1] kthread+0x389/0x470 [ 359.260636][ C1] ret_from_fork+0x514/0xb70 [ 359.267569][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.274673][ C1] INITIAL USE at: [ 359.278902][ C1] lock_acquire+0x106/0x350 [ 359.285648][ C1] _raw_write_lock_irq+0x3d/0x50 [ 359.292839][ C1] copy_process+0x2b4c/0x4440 [ 359.299770][ C1] kernel_clone+0x2d7/0x940 [ 359.306519][ C1] user_mode_thread+0x110/0x180 [ 359.313613][ C1] rest_init+0x23/0x300 [ 359.320092][ C1] start_kernel+0x38a/0x3e0 [ 359.326845][ C1] x86_64_start_reservations+0x24/0x30 [ 359.334556][ C1] x86_64_start_kernel+0x143/0x1c0 [ 359.341943][ C1] common_startup_64+0x13e/0x147 [ 359.349133][ C1] INITIAL READ USE at: [ 359.353802][ C1] lock_acquire+0x106/0x350 [ 359.360993][ C1] _raw_read_lock+0x36/0x50 [ 359.368181][ C1] __do_wait+0xde/0x740 [ 359.375017][ C1] do_wait+0x1e7/0x510 [ 359.381773][ C1] kernel_wait+0xd6/0x1c0 [ 359.388783][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 359.397370][ C1] process_scheduled_works+0xb5d/0x1860 [ 359.405634][ C1] worker_thread+0xa53/0xfc0 [ 359.412909][ C1] kthread+0x389/0x470 [ 359.419678][ C1] ret_from_fork+0x514/0xb70 [ 359.426956][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.434405][ C1] } [ 359.437236][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 359.445287][ C1] ... acquired at: [ 359.449419][ C1] _raw_read_lock+0x36/0x50 [ 359.454089][ C1] send_sigio+0x101/0x370 [ 359.458585][ C1] dnotify_handle_event+0x169/0x440 [ 359.463943][ C1] fsnotify+0x1831/0x1ae0 [ 359.468437][ C1] path_openat+0x15c2/0x3860 [ 359.473200][ C1] do_file_open+0x23e/0x4a0 [ 359.477873][ C1] do_sys_openat2+0x113/0x200 [ 359.482707][ C1] __x64_sys_openat+0x138/0x170 [ 359.487714][ C1] do_syscall_64+0x174/0x580 [ 359.492464][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.498520][ C1] [ 359.500839][ C1] -> (&f_owner->lock){....}-{3:3} { [ 359.506301][ C1] INITIAL USE at: [ 359.510492][ C1] lock_acquire+0x106/0x350 [ 359.517071][ C1] _raw_write_lock_irq+0x3d/0x50 [ 359.524084][ C1] __f_setown+0x67/0x370 [ 359.530399][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 359.537228][ C1] do_fcntl+0x77e/0x1a20 [ 359.543547][ C1] __se_sys_fcntl+0xc8/0x150 [ 359.550230][ C1] do_syscall_64+0x174/0x580 [ 359.556887][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.564847][ C1] INITIAL READ USE at: [ 359.569417][ C1] lock_acquire+0x106/0x350 [ 359.576424][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 359.584130][ C1] send_sigio+0x38/0x370 [ 359.590879][ C1] kill_fasync+0x24d/0x4d0 [ 359.597799][ C1] lease_break_callback+0x26/0x30 [ 359.605333][ C1] __break_lease+0x81f/0x1ea0 [ 359.612517][ C1] try_break_deleg+0xfc/0x180 [ 359.619699][ C1] notify_change+0xb5a/0xf40 [ 359.626805][ C1] chmod_common+0x273/0x4a0 [ 359.633812][ C1] do_fchmodat+0x12d/0x230 [ 359.640733][ C1] __x64_sys_fchmodat+0x7d/0x90 [ 359.648083][ C1] do_syscall_64+0x174/0x580 [ 359.655183][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.663589][ C1] } [ 359.666338][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 359.675436][ C1] ... acquired at: [ 359.679488][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 359.684864][ C1] send_sigio+0x38/0x370 [ 359.689267][ C1] kill_fasync+0x24d/0x4d0 [ 359.693864][ C1] lease_break_callback+0x26/0x30 [ 359.699052][ C1] __break_lease+0x81f/0x1ea0 [ 359.703898][ C1] try_break_deleg+0xfc/0x180 [ 359.708737][ C1] notify_change+0xb5a/0xf40 [ 359.713480][ C1] chmod_common+0x273/0x4a0 [ 359.718140][ C1] do_fchmodat+0x12d/0x230 [ 359.722717][ C1] __x64_sys_fchmodat+0x7d/0x90 [ 359.727723][ C1] do_syscall_64+0x174/0x580 [ 359.732490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.738543][ C1] [ 359.740850][ C1] -> (&new->fa_lock){....}-{3:3} { [ 359.746172][ C1] INITIAL USE at: [ 359.750230][ C1] lock_acquire+0x106/0x350 [ 359.756629][ C1] _raw_write_lock_irq+0x3d/0x50 [ 359.763466][ C1] fasync_remove_entry+0xf1/0x1c0 [ 359.770389][ C1] lease_modify+0x4f7/0x6c0 [ 359.776797][ C1] locks_remove_file+0x5f0/0xf70 [ 359.783649][ C1] __fput+0x3ae/0xa60 [ 359.789533][ C1] task_work_run+0x1d9/0x270 [ 359.796020][ C1] do_exit+0x70f/0x22c0 [ 359.802093][ C1] do_group_exit+0x21b/0x2d0 [ 359.808580][ C1] get_signal+0x1284/0x1330 [ 359.814973][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 359.822422][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 359.829607][ C1] do_syscall_64+0x353/0x580 [ 359.836089][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.843872][ C1] INITIAL READ USE at: [ 359.848371][ C1] lock_acquire+0x106/0x350 [ 359.855223][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 359.862764][ C1] kill_fasync+0x199/0x4d0 [ 359.869526][ C1] lease_break_callback+0x26/0x30 [ 359.876890][ C1] __break_lease+0x81f/0x1ea0 [ 359.883905][ C1] try_break_deleg+0xfc/0x180 [ 359.890916][ C1] notify_change+0xb5a/0xf40 [ 359.897833][ C1] chmod_common+0x273/0x4a0 [ 359.904664][ C1] do_fchmodat+0x12d/0x230 [ 359.911410][ C1] __x64_sys_fchmodat+0x7d/0x90 [ 359.918589][ C1] do_syscall_64+0x174/0x580 [ 359.925518][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.933737][ C1] } [ 359.936390][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 359.945230][ C1] ... acquired at: [ 359.949191][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 359.954551][ C1] kill_fasync+0x199/0x4d0 [ 359.959129][ C1] evdev_pass_values+0x627/0xbd0 [ 359.964308][ C1] evdev_events+0x1e6/0x340 [ 359.968975][ C1] input_pass_values+0x288/0x890 [ 359.974076][ C1] input_event_dispose+0x330/0x6b0 [ 359.979350][ C1] input_inject_event+0x1dc/0x330 [ 359.984535][ C1] evdev_write+0x325/0x4c0 [ 359.989107][ C1] vfs_write+0x29a/0xb90 [ 359.993515][ C1] ksys_write+0x150/0x270 [ 359.998003][ C1] do_syscall_64+0x174/0x580 [ 360.002758][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.008823][ C1] [ 360.011127][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 360.016942][ C1] INITIAL USE at: [ 360.020901][ C1] lock_acquire+0x106/0x350 [ 360.027143][ C1] _raw_spin_lock+0x2e/0x40 [ 360.033375][ C1] evdev_pass_values+0xb9/0xbd0 [ 360.039947][ C1] evdev_events+0x1e6/0x340 [ 360.046167][ C1] input_pass_values+0x288/0x890 [ 360.052822][ C1] input_event_dispose+0x330/0x6b0 [ 360.059668][ C1] input_inject_event+0x1dc/0x330 [ 360.066422][ C1] evdev_write+0x325/0x4c0 [ 360.072556][ C1] vfs_write+0x29a/0xb90 [ 360.078528][ C1] ksys_write+0x150/0x270 [ 360.084582][ C1] do_syscall_64+0x174/0x580 [ 360.090899][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.098511][ C1] } [ 360.101084][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 360.109322][ C1] ... acquired at: [ 360.113196][ C1] _raw_spin_lock+0x2e/0x40 [ 360.117865][ C1] evdev_pass_values+0xb9/0xbd0 [ 360.122872][ C1] evdev_events+0x1e6/0x340 [ 360.127552][ C1] input_pass_values+0x288/0x890 [ 360.132643][ C1] input_event_dispose+0x330/0x6b0 [ 360.137914][ C1] input_inject_event+0x1dc/0x330 [ 360.143100][ C1] evdev_write+0x325/0x4c0 [ 360.147672][ C1] vfs_write+0x29a/0xb90 [ 360.152075][ C1] ksys_write+0x150/0x270 [ 360.156567][ C1] do_syscall_64+0x174/0x580 [ 360.161314][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.167363][ C1] [ 360.169666][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 360.175217][ C1] IN-SOFTIRQ-W at: [ 360.179180][ C1] lock_acquire+0x106/0x350 [ 360.185340][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 360.192176][ C1] input_event+0x71/0xc0 [ 360.198055][ C1] powermate_irq+0x156/0x3f0 [ 360.204363][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 360.211403][ C1] dummy_timer+0xbc0/0x4650 [ 360.217601][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 360.224443][ C1] hrtimer_run_softirq+0x17a/0x240 [ 360.231196][ C1] handle_softirqs+0x22a/0x840 [ 360.237621][ C1] __irq_exit_rcu+0xca/0x220 [ 360.243845][ C1] irq_exit_rcu+0x9/0x30 [ 360.249729][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.257374][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.265032][ C1] rcu_is_watching+0x5a/0xb0 [ 360.271259][ C1] unwind_next_frame+0xd5/0x2550 [ 360.277847][ C1] arch_stack_walk+0x11b/0x150 [ 360.284268][ C1] stack_trace_save+0xa9/0x100 [ 360.290671][ C1] save_stack+0x122/0x230 [ 360.296637][ C1] __reset_page_owner+0x71/0x1f0 [ 360.303214][ C1] free_unref_folios+0xd9f/0x14c0 [ 360.309877][ C1] folios_put_refs+0x9ff/0xb40 [ 360.316281][ C1] shmem_undo_range+0x52c/0x1660 [ 360.322860][ C1] shmem_evict_inode+0x289/0xae0 [ 360.329448][ C1] evict+0x61e/0xb10 [ 360.334983][ C1] __dentry_kill+0x1a2/0x690 [ 360.341207][ C1] finish_dput+0xc9/0x480 [ 360.347191][ C1] __fput+0x691/0xa60 [ 360.352820][ C1] task_work_run+0x1d9/0x270 [ 360.359081][ C1] do_exit+0x70f/0x22c0 [ 360.364881][ C1] do_group_exit+0x21b/0x2d0 [ 360.371119][ C1] get_signal+0x1284/0x1330 [ 360.377258][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 360.384440][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 360.391357][ C1] do_syscall_64+0x353/0x580 [ 360.397581][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.405105][ C1] INITIAL USE at: [ 360.408993][ C1] lock_acquire+0x106/0x350 [ 360.415057][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 360.421808][ C1] input_inject_event+0xa4/0x330 [ 360.428301][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 360.435405][ C1] led_trigger_set+0x535/0x960 [ 360.441788][ C1] led_trigger_set_default+0x260/0x2a0 [ 360.448815][ C1] led_classdev_register_ext+0x787/0x9c0 [ 360.456014][ C1] input_leds_connect+0x517/0x790 [ 360.462594][ C1] input_register_device+0xce0/0x1140 [ 360.469525][ C1] atkbd_connect+0x71e/0xa10 [ 360.475673][ C1] serio_driver_probe+0x82/0xb0 [ 360.482078][ C1] really_probe+0x267/0xaf0 [ 360.488195][ C1] __driver_probe_device+0x1ef/0x380 [ 360.495054][ C1] driver_probe_device+0x4f/0x240 [ 360.501655][ C1] __driver_attach+0x34c/0x640 [ 360.507974][ C1] bus_for_each_dev+0x23b/0x2c0 [ 360.514427][ C1] serio_handle_event+0x1af/0xf80 [ 360.521001][ C1] process_scheduled_works+0xb5d/0x1860 [ 360.528102][ C1] worker_thread+0xa53/0xfc0 [ 360.534247][ C1] kthread+0x389/0x470 [ 360.539871][ C1] ret_from_fork+0x514/0xb70 [ 360.546012][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.552324][ C1] } [ 360.554804][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 360.563823][ C1] ... acquired at: [ 360.567617][ C1] mark_lock+0x115/0x190 [ 360.572034][ C1] __lock_acquire+0x689/0x2cf0 [ 360.576967][ C1] lock_acquire+0x106/0x350 [ 360.581636][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 360.587001][ C1] input_event+0x71/0xc0 [ 360.591414][ C1] powermate_irq+0x156/0x3f0 [ 360.596168][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 360.601697][ C1] dummy_timer+0xbc0/0x4650 [ 360.606384][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 360.611745][ C1] hrtimer_run_softirq+0x17a/0x240 [ 360.617029][ C1] handle_softirqs+0x22a/0x840 [ 360.621964][ C1] __irq_exit_rcu+0xca/0x220 [ 360.626711][ C1] irq_exit_rcu+0x9/0x30 [ 360.631107][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.636910][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.643046][ C1] rcu_is_watching+0x5a/0xb0 [ 360.647793][ C1] unwind_next_frame+0xd5/0x2550 [ 360.652890][ C1] arch_stack_walk+0x11b/0x150 [ 360.657813][ C1] stack_trace_save+0xa9/0x100 [ 360.662741][ C1] save_stack+0x122/0x230 [ 360.667240][ C1] __reset_page_owner+0x71/0x1f0 [ 360.672339][ C1] free_unref_folios+0xd9f/0x14c0 [ 360.677538][ C1] folios_put_refs+0x9ff/0xb40 [ 360.682462][ C1] shmem_undo_range+0x52c/0x1660 [ 360.687556][ C1] shmem_evict_inode+0x289/0xae0 [ 360.692658][ C1] evict+0x61e/0xb10 [ 360.696719][ C1] __dentry_kill+0x1a2/0x690 [ 360.701475][ C1] finish_dput+0xc9/0x480 [ 360.705969][ C1] __fput+0x691/0xa60 [ 360.710131][ C1] task_work_run+0x1d9/0x270 [ 360.714899][ C1] do_exit+0x70f/0x22c0 [ 360.719242][ C1] do_group_exit+0x21b/0x2d0 [ 360.724004][ C1] get_signal+0x1284/0x1330 [ 360.728660][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 360.734368][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 360.739826][ C1] do_syscall_64+0x353/0x580 [ 360.744582][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.750633][ C1] [ 360.752946][ C1] [ 360.752946][ C1] stack backtrace: [ 360.758850][ C1] CPU: 1 UID: 0 PID: 10598 Comm: syz.5.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.758877][ C1] Tainted: [L]=SOFTLOCKUP [ 360.758882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.758892][ C1] Call Trace: [ 360.758901][ C1] [ 360.758908][ C1] dump_stack_lvl+0xe8/0x150 [ 360.758929][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 360.758949][ C1] mark_lock_irq+0x3d2/0x420 [ 360.758974][ C1] mark_lock+0x115/0x190 [ 360.758991][ C1] __lock_acquire+0x689/0x2cf0 [ 360.759007][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 360.759024][ C1] ? led_trigger_blink_setup+0xa8/0x300 [ 360.759047][ C1] ? lock_acquire+0x106/0x350 [ 360.759063][ C1] ? input_event+0x71/0xc0 [ 360.759082][ C1] lock_acquire+0x106/0x350 [ 360.759096][ C1] ? input_event+0x71/0xc0 [ 360.759116][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.759139][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 360.759161][ C1] ? input_event+0x71/0xc0 [ 360.759179][ C1] input_event+0x71/0xc0 [ 360.759198][ C1] powermate_irq+0x156/0x3f0 [ 360.759216][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 360.759235][ C1] dummy_timer+0xbc0/0x4650 [ 360.759274][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 360.759295][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 360.759317][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 360.759340][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 360.759361][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 360.759385][ C1] hrtimer_run_softirq+0x17a/0x240 [ 360.759406][ C1] handle_softirqs+0x22a/0x840 [ 360.759422][ C1] ? __irq_exit_rcu+0xca/0x220 [ 360.759439][ C1] __irq_exit_rcu+0xca/0x220 [ 360.759453][ C1] irq_exit_rcu+0x9/0x30 [ 360.759468][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.759492][ C1] [ 360.759498][ C1] [ 360.759503][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.759520][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 360.759540][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ec 41 86 00 48 c7 c3 d8 79 39 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 72 8d 11 74 11 83 e0 04 c1 e8 02 5b [ 360.759554][ C1] RSP: 0018:ffffc90005886d38 EFLAGS: 00000a02 [ 360.759569][ C1] RAX: 0000000000000000 RBX: ffff8880b87339d8 RCX: 0000000080000001 [ 360.759586][ C1] RDX: 000000005a44979c RSI: ffffffff8c28b8c0 RDI: ffffffff8c28b880 [ 360.759597][ C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 360.759609][ C1] R10: ffffc90005886e78 R11: ffffffff81b0e0e0 R12: ffffc90005886e60 [ 360.759621][ C1] R13: 1ffff92000b10dc5 R14: ffffffff8e262798 R15: dffffc0000000000 [ 360.759634][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.759657][ C1] ? unwind_next_frame+0xa6/0x2550 [ 360.759678][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.759694][ C1] ? finish_dput+0xc9/0x480 [ 360.759711][ C1] ? unwind_next_frame+0xa6/0x2550 [ 360.759727][ C1] unwind_next_frame+0xd5/0x2550 [ 360.759746][ C1] ? unwind_next_frame+0xa6/0x2550 [ 360.759763][ C1] ? __dentry_kill+0x1a2/0x690 [ 360.759776][ C1] ? finish_dput+0xc9/0x480 [ 360.759794][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.759815][ C1] arch_stack_walk+0x11b/0x150 [ 360.759835][ C1] ? finish_dput+0xc9/0x480 [ 360.759853][ C1] stack_trace_save+0xa9/0x100 [ 360.759875][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 360.759897][ C1] ? stack_depot_save_flags+0x33/0x810 [ 360.759983][ C1] save_stack+0x122/0x230 [ 360.760004][ C1] ? __pfx_save_stack+0x10/0x10 [ 360.760024][ C1] ? free_unref_folios+0xd9f/0x14c0 [ 360.760044][ C1] ? folios_put_refs+0x9ff/0xb40 [ 360.760057][ C1] ? shmem_undo_range+0x52c/0x1660 [ 360.760073][ C1] ? shmem_evict_inode+0x289/0xae0 [ 360.760094][ C1] ? evict+0x61e/0xb10 [ 360.760105][ C1] ? __dentry_kill+0x1a2/0x690 [ 360.760118][ C1] ? finish_dput+0xc9/0x480 [ 360.760137][ C1] ? page_ext_put+0x97/0xc0 [ 360.760159][ C1] __reset_page_owner+0x71/0x1f0 [ 360.760180][ C1] free_unref_folios+0xd9f/0x14c0 [ 360.760205][ C1] folios_put_refs+0x9ff/0xb40 [ 360.760222][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 360.760235][ C1] ? filemap_remove_folio+0x312/0x3a0 [ 360.760252][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 360.760269][ C1] shmem_undo_range+0x52c/0x1660 [ 360.760289][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 360.760320][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 360.760336][ C1] ? percpu_counter_add_batch+0xea/0x1d0 [ 360.760352][ C1] shmem_evict_inode+0x289/0xae0 [ 360.760375][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 360.760399][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.760420][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 360.760442][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.760466][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 360.760487][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 360.760508][ C1] evict+0x61e/0xb10 [ 360.760523][ C1] ? __pfx_evict+0x10/0x10 [ 360.760534][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 360.760556][ C1] ? _raw_spin_unlock+0x28/0x50 [ 360.760576][ C1] ? iput+0xb25/0xe80 [ 360.760595][ C1] __dentry_kill+0x1a2/0x690 [ 360.760610][ C1] ? finish_dput+0xad/0x480 [ 360.760627][ C1] finish_dput+0xc9/0x480 [ 360.760645][ C1] __fput+0x691/0xa60 [ 360.760665][ C1] task_work_run+0x1d9/0x270 [ 360.760687][ C1] ? __pfx_task_work_run+0x10/0x10 [ 360.760706][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 360.760729][ C1] do_exit+0x70f/0x22c0 [ 360.760750][ C1] ? __pfx_do_exit+0x10/0x10 [ 360.760769][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.760792][ C1] do_group_exit+0x21b/0x2d0 [ 360.760812][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.760834][ C1] get_signal+0x1284/0x1330 [ 360.760854][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 360.760877][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 360.760904][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 360.760918][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.760935][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.760950][ C1] do_syscall_64+0x353/0x580 [ 360.760969][ C1] ? trace_irq_disable+0x3b/0x140 [ 360.760991][ C1] ? clear_bhb_loop+0x40/0x90 [ 360.761008][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.761023][ C1] RIP: 0033:0x7fe91d79ce59 [ 360.761036][ C1] Code: Unable to access opcode bytes at 0x7fe91d79ce2f. [ 360.761044][ C1] RSP: 002b:00007fe91e6780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.761060][ C1] RAX: fffffffffffffe00 RBX: 00007fe91da16188 RCX: 00007fe91d79ce59 [ 360.761071][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe91da16188 [ 360.761081][ C1] RBP: 00007fe91da16180 R08: 0000000000000000 R09: 0000000000000000 [ 360.761091][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.761100][ C1] R13: 00007fe91da16218 R14: 00007fe91db3f960 R15: 00007fe91db3fa48 [ 360.761115][ C1] [ 361.436471][ C1] powermate: config urb returned -71 [ 361.442043][ C1] powermate: config urb returned -71 [ 361.447937][ C1] powermate: config urb returned -71 [ 361.453515][ C1] powermate: config urb returned -71 [ 361.476165][ T6601] usb-storage 5-1:211.123: USB Mass Storage device detected [ 361.490224][ T5696] usb 2-1: USB disconnect, device number 81 [ 361.490268][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 361.494337][ T5695] usb 4-1: cp210x converter now attached to ttyUSB0 [ 361.541114][ T5695] usb 4-1: USB disconnect, device number 88 [ 361.551345][ T6601] usb-storage 5-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 361.561225][ T5695] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 361.584878][ T808] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 361.604070][ T6601] usb 5-1: USB disconnect, device number 73 [ 361.618035][ T5695] cp210x 4-1:0.0: device disconnected [ 361.758325][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 361.764781][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.773495][ T808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.783618][ T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 361.792647][ T808] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.807414][ T808] usb 3-1: New USB device found, idVendor=05b8, idProduct=a4a1, bcdDevice= 0.40 [ 361.816798][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.832791][ T808] usb 3-1: Product: syz [ 361.836972][ T808] usb 3-1: Manufacturer: syz [ 361.841623][ T808] usb 3-1: SerialNumber: syz [ 361.850766][ T808] usb 3-1: can't set config #1, error -71 [ 361.860031][ T808] usb 3-1: USB disconnect, device number 68