last executing test programs: 2m40.778154296s ago: executing program 0 (id=86): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) 2m39.692354768s ago: executing program 0 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="b800008ed0660f3a21d90f0f794ff267f2abba4200b0b0dc66893e0fc7ad0000b87274ef67652e660fc7360fc71af464660f383e1b", 0x35}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) mq_open(0x0, 0x80, 0xde, &(0x7f0000000200)={0x401, 0x4, 0x3ff, 0x6}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000000000000000000000000000aaff0200000000000000000000000000013a00000005"], 0x7e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.48096532s ago: executing program 0 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="201c0000", @ANYRES16=r1, @ANYBLOB="020028bd7000010000000200000008000b01fc0c00000400d100"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x14, 0x20000, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m39.419470218s ago: executing program 0 (id=93): lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)=""/82, 0x52) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000200), 0xe, 0x400000) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002300)=[0xee00, 0xffffffffffffffff, 0xee00]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002340)={0xa8, 0x0, r2, [{{0x2, 0x0, 0x99c6, 0x0, 0x7, 0x9, {0x4, 0x3, 0x3, 0x6, 0x5, 0x4, 0x2, 0x9, 0xa676, 0xa000, 0x200, r3, r4, 0xffff}}, {0x2, 0x3a3c2021, 0x0, 0x6}}]}, 0xa8) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m37.961449132s ago: executing program 0 (id=96): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) (async) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) (async) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x807, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pim6reg1\x00'}) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) (async) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000002b) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x1, 0x40}, 0x8) 2m37.716216645s ago: executing program 0 (id=98): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000740)=""/220, 0xdc}], 0x4, &(0x7f0000000880)=""/107, 0x6b}, 0x100) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x200, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000180)=0xfffffffffffffee5) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x4880) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000700"/24], 0x18}}], 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800080000000800000014007a01456f00b0006600004011490000000000000014124e204e20004d907801000000040000003115004cd5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221bb54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be99ff00153aaf97bbf0ae2db25cd7bcd4dc8e1acb0a78f4793cfd119c90d88391b9b72bcda27d3d42c1d705a1785e51245755a1a6228ef6ef6c1be93302860159cb597518e5d479e6ba"], 0xbe) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x9}, 0x10) connect$netlink(r4, &(0x7f0000000100)=@unspec, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) 2m37.560215933s ago: executing program 2 (id=100): mkdir(&(0x7f0000002740)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$IMCLEAR_L2(r8, 0x80044946, &(0x7f0000000200)=0x1) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2m34.312404298s ago: executing program 2 (id=111): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x86042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x802) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x9, 0x2, 0x7e, 0x80080}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x1421ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691458d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770200174f000000000000000010e20062d200", [0x0, 0x400]}}) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r4 = socket$nl_generic(0x11, 0x3, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x80002, 0x2) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x3, r6, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="4bbf2c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x8000) 2m33.920465411s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000c00078008000600000000030500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendto$packet(r3, &(0x7f0000000300)="0300f198aaae5a98ca00008586dd", 0x5ea, 0x44000, &(0x7f0000000200)={0x11, 0xf6, r4, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2b, 0x35dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc1d}]}]}]}]}, 0x40}}, 0x0) 2m33.868191681s ago: executing program 2 (id=115): syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000f6935e2eb4040210886d0102030109021b2000090443000163caf100090502030000000000"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000100)=0xffffff29) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, &(0x7f0000000000)) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x7, r3, 0x80002}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x4, 0x2001) tgkill(r1, r1, 0x33) 2m30.815524761s ago: executing program 2 (id=128): syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x100, 0x7ffff, 0x200}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x3}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000051400"], 0xe8}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB='\x00\x00']) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) read(r3, &(0x7f0000000740)=""/377, 0x179) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 2m22.690888474s ago: executing program 32 (id=98): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000740)=""/220, 0xdc}], 0x4, &(0x7f0000000880)=""/107, 0x6b}, 0x100) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x200, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000180)=0xfffffffffffffee5) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x4880) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, 0x0) sendmmsg$inet(r7, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000700"/24], 0x18}}], 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800080000000800000014007a01456f00b0006600004011490000000000000014124e204e20004d907801000000040000003115004cd5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221bb54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be99ff00153aaf97bbf0ae2db25cd7bcd4dc8e1acb0a78f4793cfd119c90d88391b9b72bcda27d3d42c1d705a1785e51245755a1a6228ef6ef6c1be93302860159cb597518e5d479e6ba"], 0xbe) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x9}, 0x10) connect$netlink(r4, &(0x7f0000000100)=@unspec, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) 2m15.740380854s ago: executing program 33 (id=128): syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x100, 0x7ffff, 0x200}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x3}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000051400"], 0xe8}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB='\x00\x00']) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) read(r3, &(0x7f0000000740)=""/377, 0x179) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 8.451281011s ago: executing program 3 (id=724): mount(0x0, 0x0, &(0x7f0000000240)='romfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 7) 6.257774554s ago: executing program 3 (id=734): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x86801, 0x19) faccessat(r1, &(0x7f0000000300)='./file0\x00', 0x182) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4002, 0x0, 0x31}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)=0x0) r3 = socket(0x15, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x3, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000001c0), &(0x7f00000004c0)=0x4) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) getsockopt(r3, 0x80000001, 0x10, &(0x7f0000000340)=""/250, &(0x7f0000000440)=0xfa) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {r4, r5+60000000}}, 0x0) 5.316922597s ago: executing program 3 (id=737): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) setuid(0xee00) ioctl$TIOCCONS(r0, 0x541d) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x28) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, 0x11, 0xf720b6c5c733ef9d, 0x70bd29, 0x25dfdbfc, {0x2}, [@nested={0xc9, 0x28, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="1e108813e26f5e64b8dde63e7e568233732f65d65ea9d6861078446939505f72e565658ac621b3c382d690b12728b56905152170f3d39b7dfe82e0392316ad499bb51601a6dd0fa575ff02b507f689ef878cd209223dc3d58fcce4197cdd86e6e0bc07f0951503dcdecfc14904276753ba952bf37d77da106bfa6789ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec909b9fbd2e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd935e50200f2f4c96b8f33c7aa"]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4044010) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904", @ANYRESDEC=r2], 0x0) 4.896393214s ago: executing program 5 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00002800ff000000000060fc03000f982c00fe8000000000000000000000000000aaff020000000800000000000000000001", @ANYBLOB="e8a7e521"], 0xfce) 4.714853387s ago: executing program 3 (id=740): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x6, 0x1, 0x7}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) (async) chdir(&(0x7f0000000240)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r1, 0x0, 0x58) ioctl$TCXONC(r0, 0x540a, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x185082, 0x0) fallocate(r2, 0x3, 0x0, 0x140000804000004) (async) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.624817899s ago: executing program 5 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 4.516498068s ago: executing program 3 (id=742): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x220181, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040)) 4.408598335s ago: executing program 3 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x800, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) r4 = socket$kcm(0x29, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000406161154d000e0000000109022400010000200409040000010300000009210000000122050009058103000039d97ee9ae8af19a848548db30e5ec000004e9fdcf05311faf4e92c5dd61d651ab7ddf6c51bc5a9a73e425b46a687f7c0ee31c2f2a31319b070c2a9b959be9b8e3083a6fadeaceb807c16c66728a7cf4d2ab4ce4d1eb841dfacceed0248c1c9eb2d6c3f5cededa4de75ff9e8dc999ec7a6e520b9f79640f887e68e43a9f15068aad77be500d3492159de2b339263dd7d6392ba72"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c1010"], 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f00200001000010028bd7000fdfbdf25ac14142f000000000000000000000000e00000010000001a00000000000000004e2288244e2400000200208004000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x2f0}}, 0x0) syz_usb_connect$uac1(0x2, 0xd4, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902c20003010820090904000000010100000a24010700080201020904010000010200000907000101010200000e2402020900090002c48e002a090d24020210000104069bb6725d08240201040207030d24020102020780411cbe43eb072401860604001024020201000400402077b10422b2ae090501091000040602072501020504000904020000010200000904020101010200000f2402020002ff07004edd788d8c010d2402011202100a3ca2434dff09058209ff03dcae0b07250180010a00"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0x8, 0x8, 0x20}, 0x3a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1, [{0xab, &(0x7f00000009c0)=ANY=[@ANYBLOB="ab263646089f0258c150149f3ca87bf0ba74839ccde6cc4d2e7e78ab482075cef6d20e17ac719a4563fcd4902a83b07bdce2e3ea9fbb7895da40e830924027c7091cb7b2b30f76f9243aa19facc32a3300120313ad4e5736d51bb14cb4d407767aff179d21ccd2863c90545366c5298ad65d059fe38ba6511ed0d35391d702bc64f033ed37dd8d2f1b22f043b600eb1e6fb55d2ec3f014945d15c1cdf6be1187ce0a123537fe06e081b38a20dcdac76656b91b"]}]}) 3.180363679s ago: executing program 4 (id=745): r0 = socket(0x2a, 0x2, 0x0) accept$packet(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0xdfd2279d48719fe, r2, 0x0, &(0x7f0000000000)="ee", 0x1, 0x20000800}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.156385685s ago: executing program 5 (id=746): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r6, 0x0) (async) write$UHID_INPUT(r6, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x8000000, 0x1000, &(0x7f0000ff0000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="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", 0x1000) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.893458141s ago: executing program 5 (id=747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000042}, 0x2810) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x801) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008011) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x5, 0x0, 0x3f17, 0x907a, 0x5, 0x5, 0x51, 0x8, 0x0, 0x9, 0x2, 0x6, 0x7, 0x80000001, 0xfffffffffffffffc, 0x2], 0x8180001, 0x8000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0xc004) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "989dcac958ca441e8ec795231e91ae0f47e92925a7dc258f2555cfe25d9fdd30"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "19604684bd16f274ff27c2bc6e043bae"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48001}, 0x80) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000880)={0xc7, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r5, 0x20, 0x70bd2b, 0x3, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000c80)={0x0, 'team_slave_0\x00', 0x1}, 0x18) r8 = epoll_create1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000cc0)={0x0, 0x4, 0x7fffffffffffffff}) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000e80)={0xb, 0xff, 0x0, 0x800}) r11 = fsmount(r3, 0x0, 0x84) ioctl$VIDIOC_G_SLICED_VBI_CAP(r11, 0xc0745645, &(0x7f0000000ec0)={0x5, [0x8, 0xfff9, 0x3, 0x77a, 0xc, 0x7, 0x65e, 0xaa0, 0x9, 0x8, 0x8, 0x0, 0x200, 0x6, 0xb, 0x1ff, 0x5, 0x8, 0x8, 0x5, 0x7, 0xe36, 0x7, 0x7ff, 0x3, 0x1, 0x9, 0x6, 0x5, 0x7, 0x7, 0x4, 0xff, 0x8, 0x2, 0xbe2, 0xf, 0x8, 0x6966, 0xfffa, 0x6, 0x0, 0x0, 0x2, 0xff, 0x0, 0x1, 0xfa], 0x5}) 2.833887464s ago: executing program 4 (id=748): mount(0x0, 0x0, &(0x7f0000000240)='romfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 2.648263441s ago: executing program 5 (id=749): timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248", @ANYBLOB=',roo']) (async) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248", @ANYBLOB=',roo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r7}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.58533229s ago: executing program 4 (id=750): ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0x7fff}, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x4001}, 0xc) connect$qrtr(r0, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0xffffc001}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002300)=0x0) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r7 = getuid() r8 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002980)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000002a80)=0xe8) fstat(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002b40)={0x7, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x3}) fstat(r1, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002c00)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000002d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000002e40)=0xe8) r15 = getgid() r16 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002e80)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000002f80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) r19 = geteuid() fstat(r0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003600)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f0000003700)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003740)={0x0, 0x0, 0x0}, &(0x7f0000003780)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000038c0)={0x0, 0x0, 0x0}, &(0x7f0000003900)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000180)="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", 0x2000, &(0x7f0000003a80)={&(0x7f0000002180)={0x50, 0x0, 0x1000, {0x7, 0x2b, 0x8, 0x110200, 0x5, 0x0, 0x2ef0, 0x81, 0x0, 0x0, 0x80, 0x8}}, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, 0xffffffffffffffff, {0xfffffffffffffff8}}, &(0x7f0000002240)={0x18, 0x0, 0x6, {0x9}}, &(0x7f0000002280)={0x18, 0xfffffffffffffff5, 0x5c26, {0xc}}, &(0x7f00000022c0)={0x18, 0x0, 0x2, {0x6}}, &(0x7f0000002340)={0x28, 0x0, 0x1, {{0xfffffffffffffffc, 0x6, 0x1, r2}}}, &(0x7f0000002380)={0x60, 0x0, 0x6, {{0x755d, 0x9, 0xc860, 0xffffffffffffffff, 0x0, 0x7, 0x9, 0x7ff}}}, &(0x7f0000002400)={0x18, 0x0, 0x5, {0x7fffffff}}, &(0x7f0000002440)={0x12, 0xfffffffffffffff5, 0x10000, {']\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0x2000000000000000, {0x0, 0xa}}, &(0x7f0000002640)={0x78, 0xfffffffffffffffe, 0x9, {0x0, 0x0, 0x0, {0x6, 0x8000000, 0x5, 0x80, 0x2, 0x6, 0x57af, 0x5, 0xfffffff7, 0xc000, 0xb, r3, r4, 0x3, 0x6}}}, &(0x7f0000002840)={0x90, 0x0, 0x3, {0x3, 0x3, 0x5, 0xcdb2, 0x4, 0x4, {0x0, 0x1731b294, 0x4, 0x2, 0x101, 0x1000, 0x7fffffff, 0x7, 0x9, 0xa000, 0x8, r5, r6, 0xffffff7f, 0x2}}}, &(0x7f0000002900)={0x68, 0xfffffffffffffff5, 0x8, [{0x1, 0x2, 0x2, 0x7, '(^'}, {0x0, 0x5, 0x3, 0x0, ']\a)'}, {0x1, 0x41, 0x0, 0x81}]}, &(0x7f00000030c0)={0x510, 0x0, 0x3, [{{0x2, 0x1, 0x2, 0x8, 0x9, 0x1, {0x2, 0x7fffffffffffffff, 0x22b, 0x40000000, 0x5997, 0x9, 0xf, 0xb2, 0x0, 0xc000, 0x6, r7, r8, 0x7, 0x80000001}}, {0x2, 0x3, 0x9, 0xff, '\'f@\xd2@\xdf[\\['}}, {{0x2, 0x1, 0x1000, 0x80, 0x5, 0xe19, {0x3, 0x200, 0x7fffffffffffffff, 0x9, 0x9, 0x7fffffffffffffff, 0x1, 0x1, 0xffffb33e, 0xa000, 0x2a, r9, r10, 0xd8d6, 0x5}}, {0x1, 0x6, 0x4, 0x3, '+#*\\'}}, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x6, 0x5, 0x618, 0x6, 0x2, 0x9, 0x2, 0xad2c, 0x7ff, 0x1000, 0xfab, r11, r12, 0x7f, 0xbd}}, {0x2, 0xa, 0x1, 0x8, '\\'}}, {{0x1, 0x3, 0x10, 0x45, 0xa, 0x6d, {0x2, 0x8, 0x1, 0x0, 0x5, 0xc0, 0x1e0, 0x563, 0xa, 0x6000, 0x8, r13, 0xee01, 0x2, 0x2}}, {0x4, 0x9, 0x6, 0x3, '$(&!\xfd%'}}, {{0x1, 0x2, 0x7fff, 0x9, 0x8001, 0x6, {0x0, 0x7fff, 0xd, 0x8000, 0x5, 0x8, 0x6e36, 0x5, 0x2, 0x4000, 0xc6e, r14, r15, 0x5}}, {0x6, 0x4, 0x0, 0x8}}, {{0x5, 0x2, 0xd77e, 0x2e26, 0x7, 0x80, {0x5, 0x0, 0xdd0, 0x0, 0x1ff, 0xffffffffde53c244, 0x8001, 0x5, 0x3b9a495, 0x4000, 0x0, r16, 0xee00, 0x6, 0x800}}, {0x6, 0x0, 0x4, 0x10, '*\\!\\'}}, {{0x4, 0x1, 0xf, 0x6, 0x8, 0x10000, {0x5, 0x3d, 0x200, 0x3, 0x6, 0xa, 0x5, 0x6, 0x3fc3, 0x2000, 0xffffde2d, r17, r18, 0x2, 0x4}}, {0x5, 0x48, 0x1, 0x3, '$'}}, {{0x4, 0x2, 0x401, 0x4, 0x4, 0x8, {0x5, 0x6, 0x6, 0x20000000000, 0xb36, 0x7, 0x8, 0xc2d, 0x3, 0xc000, 0x1, r19, r20, 0x9, 0x6}}, {0x0, 0x9, 0x2, 0xffffef6a, '[\xb6'}}]}, &(0x7f00000037c0)={0xa0, 0x0, 0x3, {{0x1, 0x0, 0x7, 0x63, 0x7, 0x10000, {0x5, 0x8, 0x5, 0x90a2, 0xb41c, 0x8000, 0x5800000, 0xf84, 0x1, 0x2000, 0x7, r21, r22, 0xa, 0x1ff}}, {0x0, 0xa}}}, &(0x7f0000003880)={0x20, 0x0, 0x0, {0x10000, 0x4, 0x7, 0x5}}, &(0x7f0000003940)={0x130, 0x0, 0x1, {0x7, 0x0, 0x0, '\x00', {0x4000, 0xc804, 0x3, 0x5, 0xee01, r23, 0xd000, '\x00', 0x8, 0x2, 0x8, 0x6, {0x6, 0x7b}, {0x6, 0x4}, {0x100000001, 0x5}, {0x8, 0x1}, 0x1ff, 0xeae5, 0x7, 0x401}}}}) 2.48207018s ago: executing program 4 (id=751): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x3}, 0xe) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0x2, 0x8d, 0x20, 0xbfd, 0x104, 0x6a1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x1, 0xf7, 0xcc, 0x9d, 0x0, [], [{{0x9, 0x5, 0x7, 0x8, 0x200, 0x0, 0x60, 0x9d}}]}}]}}]}}, 0x0) 2.344157339s ago: executing program 5 (id=752): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000016c0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x98, 0x0, 0x1, [@nested={0x10, 0xd0, 0x0, 0x1, [@nested={0xc, 0xd3, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r1}]}]}]}]}, 0x24}], 0x1}, 0x20000000) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file5\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file5\x00', 0x2) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)={0x40, 0xf, 0x4, "237c1a73"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000080)=0x21) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018b"], 0xfdef) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000e40)=0x1, 0x4) r9 = accept4(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000080)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r9) sendmsg$alg(r9, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003600)=ANY=[], 0x3734}}, 0x840) 2.193909721s ago: executing program 1 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x40) copy_file_range(r1, &(0x7f0000000100)=0xfffffffffffffc00, r1, 0x0, 0x3, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc75}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x35d}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ff}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1043}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x20008094) ioctl$EVIOCGBITSND(r9, 0x40044591, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket(0x1d, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xc8, 0x81}, &(0x7f0000000000)=0x90) socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r11, &(0x7f00000001c0)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) read(r11, &(0x7f0000001400)=""/4046, 0xffd8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f30f09b8010000000f01d9b9800000c00f3235000800000f30c4e101dbbb0b000000b9800000c00f3235000100000f303e6636660fc7b0b4000000c4c2253bf82e0fc79d00600000f30fc7771a0f01c9", 0x50}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.227278104s ago: executing program 1 (id=755): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/125, 0x7d}], 0x4) getpeername$qrtr(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1) close_range(r0, 0xffffffffffffffff, 0x2) write$usbip_server(0xffffffffffffffff, &(0x7f0000002e00)=@ret_submit={{0x3, 0x401, 0x0, 0x1, 0x1}, 0x7, 0xf7, 0x80, 0x13c, 0xfffffffa, 0x0, "74638b2008e3d86c5f47ce9947a96dc1186d7ae7af6c863687600befc7b55fefe7e040adb2a2fcc46d593d92e326d37d9dc47baef038b0c0f5313b5d3d1f99e4a52fbd0e36e807be58fb0f0405bfc05e92863f69be56053c0f85f05ad92cda941f5bdd913763a15dd0ec9e96cbc434bdad481d628a4b9c7813133c7fe8c6aa915f356080581330d06eddf86147c664367d27c030fc152cba91858e1e688e468cad1e17eaa9534def9984323454274803b006d20fc3926773c388aee56c9bf3ada59c609e11be03cf40e32bd6b56c5d4b2126b97a87aa13773cf68f79f0a27e110d268f66c8e7b75f2e1f473c7d96b5621788090ea3852f", [{0x3, 0x401, 0x4, 0x100}, {0xfffffffc, 0x1ff, 0x0, 0x7}, {0x5, 0xa, 0x8, 0xac70}, {0x4, 0x400, 0x1, 0xfffff49f}, {0x1, 0x7fff, 0x2, 0x6}, {0xfb4, 0x800, 0x4, 0x7}, {0x1, 0x3, 0x4, 0x5}, {0x3ff, 0xb, 0x8, 0x7}, {0x8e, 0x81, 0x1, 0x5}, {0xc4, 0x0, 0xcee2}, {0x25, 0x5, 0x4, 0x4}, {0x711, 0x8, 0x3, 0x8ed}, {0x2, 0x7, 0x114, 0x8}, {0x7, 0x3, 0xd59, 0xab6}, {0xb, 0x7, 0x4, 0xc}, {0x9, 0x4160, 0x6, 0x3ff}, {0x8, 0x5, 0xfffffff9, 0x80}, {0x6, 0xda, 0x1, 0x6}, {0x4, 0xa61f, 0xfc, 0x7}, {0x8, 0x3, 0x9}, {0x5, 0x7, 0x2, 0x78bd1e7b}, {0x7, 0x3ff, 0xbab9}, {0x1, 0xb0, 0x101, 0x7}, {0xffffff18, 0x8, 0x6, 0x80000001}, {0x8, 0x4, 0x0, 0x7}, {0x8, 0x7, 0x6, 0xd}, {0x7fff, 0x3, 0x463, 0x401}, {0x7, 0x1, 0x8000, 0x6}, {0x5, 0x8, 0x4, 0x3}, {0x2cc, 0xfffffff9, 0xffff0000, 0x7}, {0xc52, 0x5, 0x4, 0x3}, {0x4, 0x101, 0x7fffffff, 0x6}, {0x1e8, 0x6, 0x6, 0x4b75}, {0x8f5, 0x6, 0x7}, {0x2, 0x1, 0x8, 0x312}, {0x6, 0x6e7, 0x3, 0xffffffff}, {0x5e45, 0x8, 0xc41, 0x7}, {0x1000, 0xf, 0x6, 0x13fc}, {0x515, 0xfffffffb, 0x3, 0x8}, {0x3, 0x3, 0x0, 0x6}, {0x6, 0x7, 0x1a08, 0xa42}, {0xf4e, 0x9, 0x1, 0x4}, {0x1, 0x200, 0x0, 0x81c0}, {0x8001, 0x9, 0x80000000, 0x9}, {0xc618, 0xfffffff0, 0xdb0d}, {0x1, 0x9, 0x3, 0x3}, {0x1, 0x6, 0x0, 0x9}, {0x9, 0x6, 0x5, 0x101}, {0x5, 0x4, 0x719, 0x5}, {0x7fffffff, 0x7, 0x9, 0x35}, {0x9, 0x8ca, 0x4, 0x8000}, {0x55c2d1b5, 0xf, 0x9, 0x80000001}, {0x3, 0x7fffffff, 0x3, 0x7ff}, {0x3, 0x10, 0x9, 0x7}, {0x7, 0x1, 0x7, 0x921e}, {0x27c, 0xe0, 0x81, 0x3}, {0x7, 0x3ff, 0x8, 0x255}, {0x3, 0x0, 0x7f, 0x1}, {0x49a5a7e0, 0x7e, 0x8, 0x8}, {0x9, 0x0, 0x1, 0x200}, {0x2, 0x0, 0x1, 0x6}, {0x1, 0x2, 0x9, 0x6}, {0x8, 0x66, 0x5, 0x8}, {0x0, 0x8, 0x7, 0x1}, {0x2, 0x79, 0xac07, 0xffff}, {0x2, 0xd, 0x4, 0xdd}, {0x8000, 0x8001, 0x9, 0x310}, {0xeebc, 0x7, 0x5, 0x800}, {0x4, 0x9, 0x4, 0x5}, {0x7, 0x3, 0x6, 0x7fff}, {0x1ff, 0x7, 0x9, 0xffffbe23}, {0x6, 0x1, 0x7, 0x6a3b}, {0xfffffffb, 0x2, 0x288, 0x5}, {0xfff, 0x8, 0x2, 0x8}, {0x7, 0xffffffff, 0x3, 0xdedb}, {0x0, 0x8, 0x2, 0x7}, {0x0, 0xd, 0x1, 0x8}, {0xcc, 0x1, 0x0, 0xfffffff5}, {0x5, 0x0, 0x0, 0x1}, {0x0, 0xffffffff, 0x7, 0xffff}, {0x8a, 0x9, 0x5, 0x202485fd}, {0x101, 0x8, 0xf067, 0x5}, {0x19a, 0x5, 0x665b, 0x9}, {0x4, 0x6, 0xb23, 0x4}, {0x3, 0x9, 0x8, 0x9}, {0x8, 0x7, 0xffff, 0x4}, {0x8, 0x4c2, 0x5, 0x2}, {0x5, 0x7, 0x6, 0x2}, {0x4, 0x4, 0x8, 0xffffffe0}, {0xd, 0x400, 0x0, 0x101}, {0x200, 0x0, 0x7, 0x54eb}, {0x2, 0x6, 0x8, 0xb0}, {0x2, 0x7, 0x0, 0x9}, {0x200, 0x1, 0xfff, 0x1}, {0x6, 0xb, 0x3ff, 0x401}, {0x2, 0xe41, 0x7, 0x1}, {0xd, 0x0, 0x80, 0x2}, {0x6, 0xff, 0x7, 0x400}, {0xab6, 0x6, 0x3, 0x702}, {0x6, 0x54, 0xcd4d, 0x4}, {0xfd200, 0xa9b, 0x7, 0x1}, {0x8, 0x6, 0x7f, 0x5}, {0x3, 0x200, 0x7, 0x6}, {0x11, 0x0, 0xef, 0xffffffff}, {0x5, 0x400, 0x7}, {0x2e75, 0x6, 0x6, 0x33}, {0x6, 0x0, 0x6, 0x3}, {0x9, 0x8, 0x61a6, 0x1}, {0xfffffffc, 0x9, 0x5, 0x9}, {0x9, 0x2, 0x2, 0x5}, {0xffffffff, 0x9, 0x6, 0x7}, {0x81, 0x51c, 0x2, 0x7ff}, {0x200, 0x46, 0x7ff, 0x7}, {0x6, 0x30e, 0x5, 0x5}, {0x6, 0x8, 0x6, 0x7ff}, {0x1, 0x7, 0x0, 0xd}, {0x80000000, 0x3, 0xb, 0x2}, {0x7ff, 0x0, 0x8, 0x8}, {0x0, 0x2, 0xffffffff, 0x6}, {0x6cb4f5c, 0x7, 0xb, 0x80000001}, {0x2, 0x2, 0x2, 0x29c}, {0x3ff, 0x5, 0xd357, 0xe}, {0xfffffffe, 0x0, 0x0, 0x7}, {0x101, 0x7, 0x2, 0xffffffff}, {0x4, 0x7, 0xc02, 0x101}, {0x9, 0x10001, 0x4, 0x3}, {0x9, 0x3e, 0x0, 0x7}, {0x1, 0x6, 0x5, 0x5}, {0x6, 0x6, 0x3, 0x2}, {0x55, 0x7fff, 0x3, 0x4}, {0x8000, 0x44c, 0x3ef, 0x44}, {0x8, 0x636b6829, 0x0, 0xb}, {0x0, 0xe783, 0xa50051c, 0x9}, {0xdb5c, 0x3, 0x7, 0x3ff}, {0x1cc, 0x3, 0x8, 0x4}, {0x54, 0xae96, 0xad, 0xfffffa0e}, {0x6fa, 0x8, 0x200, 0x1}, {0xff, 0x81, 0xdfdd, 0x62}, {0x1, 0x8, 0x2, 0x2}, {0x3, 0xfff, 0xd5, 0x4}, {0xffffffff, 0x7, 0x1, 0xc8a}, {0x7, 0x0, 0xb660, 0x3}, {0x10001, 0x2, 0xf895, 0xffffffff}, {0x7ff, 0xfffffff7, 0x604, 0x9}, {0x75b, 0x9, 0x8, 0x6}, {0x2, 0xfffffff8, 0x0, 0x7ff}, {0x6, 0x3, 0x6}, {0x1, 0x2, 0x28ff, 0x400}, {0x1, 0x6, 0x8af, 0xfffffff9}, {0x721c58d2, 0x5, 0xffffff01, 0x6}, {0xff, 0x2, 0xa3d9, 0x1}, {0xffff, 0xc14, 0xffff, 0x6}, {0x9, 0x8000, 0x5, 0x1}, {0x1ff, 0x1, 0x3, 0x8001}, {0x8001, 0x0, 0x6, 0x3}, {0x5, 0x0, 0x8, 0x23c32ff}, {0x6, 0x469, 0xef, 0x8}, {0x1, 0x10, 0x40, 0x6}, {0x7, 0x9, 0x60, 0xffff}, {0x2, 0x1, 0x2, 0x5}, {0x9, 0x6, 0x5, 0x6}, {0x10, 0x2c34, 0x4, 0x4af8c6c4}, {0x3, 0x3a, 0xe5e, 0xe9b}, {0x3, 0x9, 0x800, 0x4}, {0x5, 0x80000000, 0x7, 0x3}, {0xd, 0x871, 0x9, 0x7}, {0x1000, 0x8c3, 0x6, 0x5}, {0x0, 0x0, 0x3, 0xffffffff}, {0xfe86, 0x9d2c, 0x1, 0x8}, {0x1, 0x1, 0xf}, {0x6, 0x9, 0x7, 0x4}, {0x2, 0x0, 0x0, 0x7c0}, {0xb, 0x0, 0x4, 0x8001}, {0x548c, 0x7, 0x9, 0x3}, {0x314, 0xffff046d, 0x0, 0x9}, {0x0, 0x1, 0x7, 0xb}, {0xb9b4, 0x8, 0x28000}, {0x7, 0x1, 0x7fffffff, 0x3}, {0x8, 0x401, 0x0, 0xfffffffc}, {0x6, 0x3, 0x10000}, {0x4, 0x1, 0x673, 0x1}, {0xfffffffa, 0x7ff, 0x1ff, 0x8}, {0x7fff, 0x1, 0x80, 0x3}, {0x2, 0x1ff, 0x2, 0xfffffffc}, {0x8, 0x9, 0x283f8, 0x1}, {0x5, 0x6, 0x0, 0x9}, {0x9, 0xd, 0x3, 0xfffffff9}, {0x0, 0x7, 0x1, 0x7}, {0x0, 0x8, 0x8001, 0xffff}, {0x0, 0x1, 0x7, 0xc}, {0x6ab3b5d1, 0x3ec6, 0xbce7, 0x6}, {0x2, 0x8, 0x0, 0x48}, {0x1, 0x7, 0x101, 0xa}, {0xa42f, 0x7, 0x80000001, 0x3}, {0x3, 0x20000, 0x3, 0x7}, {0x7f, 0xfffffffa, 0x800, 0x120}, {0xfffffe00, 0x7, 0x3ff, 0x2}, {0x7000, 0xc, 0xaf, 0x7fffffff}, {0x3, 0x8, 0x8, 0x7}, {0x6, 0x6b, 0xfffffffa, 0x5}, {0x8, 0x6, 0x6}, {0xffff, 0x99, 0x800}, {0xc22, 0x101, 0x5, 0xb}, {0x2, 0x1, 0x6, 0x4}, {0xffffff81, 0x2, 0x759d, 0x7}, {0x778c, 0x0, 0x80, 0x5}, {0x7, 0x94, 0x9, 0x2}, {0x10, 0x5, 0xffffffff, 0x8}, {0x10000, 0x7, 0x7, 0x2000000}, {0x5, 0x3ff, 0x0, 0x6}, {0x3, 0xe, 0x5}, {0x9, 0x61f, 0xd1e4, 0x3ff}, {0x5, 0xdd, 0x2, 0x7}, {0x2, 0xd2, 0x0, 0x9}, {0x1, 0x1, 0xb7c0, 0xa}, {0x2, 0x792, 0x7, 0x10001}, {0x7, 0x90e, 0x8, 0xfffffffe}, {0x6, 0x81, 0x4, 0x9}, {0x0, 0x10000, 0x8, 0x3}, {0x16aa4397, 0x3, 0xfffffc01, 0x10}, {0x1, 0x100, 0xf, 0x59}, {0x3, 0x3ff, 0x9, 0xf}, {0x8, 0x6, 0x9, 0x35}, {0x1ff, 0x0, 0x3415, 0x4c}, {0x7, 0x7, 0xa2, 0xf8}, {0x9, 0x6, 0x5, 0xd}, {0x7fff, 0xb5e, 0x5, 0x6}, {0x1, 0x4, 0x6, 0xc9a6}, {0xe, 0x5, 0x5, 0x17}, {0xffff, 0x5, 0x4000000, 0xf}, {0x1, 0xff, 0x3, 0xd18}, {0xffffcf92, 0x714c, 0x4, 0x3}, {0xb7f, 0x80000001, 0x0, 0x101}, {0x6, 0x5f, 0x8, 0x40000}, {0x6, 0x0, 0x6, 0xf}, {0x5, 0x1, 0x8, 0x514c}, {0x80, 0x6dd0, 0x3, 0x7f}, {0xd, 0x400, 0xed5, 0x8}, {0x5, 0x274, 0x5, 0x8}, {0x5, 0xa7, 0x7, 0x5}, {0x5, 0xffffffff, 0x4, 0xc}, {0x4, 0x5, 0x1, 0xfffffff1}, {0x6, 0xe11, 0x6, 0x5}, {0xc, 0x7ff, 0x81, 0x4}, {0x4, 0x9, 0x401, 0x6}, {0x6, 0x5, 0x0, 0x1}, {0xb0, 0x4a, 0xffffffff, 0x2}, {0x0, 0x5, 0xb9, 0x5}, {0x41a, 0x4fbf, 0x6}, {0x9, 0x4, 0x5, 0x1bd}, {0x6, 0x6, 0x2}, {0x6, 0x4, 0x0, 0x75c}, {0xf6d, 0x0, 0x1, 0x3ff}, {0xfffffff7, 0xffff8001, 0x5, 0x7fffffff}, {0x2, 0x8, 0x8001, 0x8}, {0x272, 0x800, 0x8, 0x7fff}, {0x93, 0x1, 0xfa, 0x10001}, {0x20, 0xd8f, 0x6695, 0x7}, {0x8, 0x5, 0x6, 0x80}, {0x0, 0x3, 0x4, 0x5}, {0x342, 0x4, 0x6, 0x9}, {0x3, 0x3f4c898d, 0x2, 0x8}, {0x10001, 0x4, 0x4, 0x1}, {0x8, 0x10000, 0xae}, {0x4, 0x74b2, 0x400, 0x3ff}, {0x9, 0x2, 0x9, 0x7fffffff}, {0xffff0001, 0x7, 0x1, 0xfffffffd}, {0x400, 0x0, 0x8, 0x2}, {0xe9f, 0x3, 0x1ff, 0x8}, {0xe, 0x7f, 0x6, 0x80000001}, {0xf9b4, 0x3, 0xec1d, 0x3}, {0x9, 0x6, 0x13b, 0x1}, {0x3, 0x8, 0x10, 0x80000001}, {0x1, 0x7, 0x5, 0x5}, {0x7, 0x80, 0x800, 0x3}, {0x800, 0x2, 0xffffff00, 0x5}, {0x3, 0x8, 0x0, 0x10001}, {0xff, 0x0, 0x2, 0x100}, {0x1, 0x68b, 0x7, 0x101}, {0x10, 0xcc, 0x3, 0x4}, {0x6, 0x3, 0x1, 0x7fff}, {0x8, 0x32, 0x5, 0x1000}, {0xeffa, 0x5, 0x8, 0xfe61}, {0x93fb, 0x3, 0x9, 0x2a59}, {0xff, 0x1, 0x40, 0x1}, {0x3, 0x8, 0xffff, 0x200}, {0x8, 0x9, 0x6, 0x80000000}, {0x6, 0xa, 0xf0, 0x5}, {0x4, 0x7, 0x4, 0x3}, {0x7, 0xd9b, 0xb, 0x5}, {0x7, 0x100, 0x8db6, 0x4}, {0x8001, 0x2, 0x401, 0x9}, {0x0, 0x7, 0x1, 0x3}, {0x27c, 0x90a7, 0x401, 0x1}, {0xffff8000, 0xab4b, 0x100, 0x8}, {0xb, 0x5421, 0x3, 0x4196}, {0xbc0, 0x6, 0xbbe, 0x8d}, {0x5, 0x5, 0x3, 0xfffffffe}, {0xffff, 0x53, 0x8, 0x8001}, {0x6b9d, 0x6, 0x1, 0x4}, {0x9, 0x61, 0x2, 0x80000001}, {0x2, 0x2, 0x401, 0x2}, {0x12ae, 0x6, 0xff, 0x3}, {0x10000, 0x0, 0x7, 0x8}, {0x3ff, 0x401, 0x3, 0x7}, {0x779, 0x9, 0x4, 0x6}, {0x277, 0x10000, 0x20000, 0x5b6}, {0x4, 0x0, 0x5}, {0x1, 0x32, 0x5, 0x64d}, {0x1, 0x4, 0x8, 0x4}, {0xffff, 0xeb24, 0xffffffff, 0x4}, {0xfffffffe, 0x7fffffff, 0x8, 0x3}, {0xcec7, 0x200, 0x5, 0x7}, {0x6, 0x0, 0x3, 0x3}, {0x3, 0x300000, 0x0, 0x2}, {0x5, 0x3, 0x8, 0xd405}]}, 0x14e7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004640)={'gretap0\x00', &(0x7f00000045c0)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x10000, 0x2, {{0xf, 0x4, 0x3, 0x6, 0x3c, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @remote, {[@generic={0x82, 0x12, "9cb07d662808ce331a087cfef9a09660"}, @cipso={0x86, 0x14, 0x3, [{0x7, 0xa, "4c837c098985e9cd"}, {0x7, 0x4, "8678"}]}]}}}}}) 1.060465921s ago: executing program 4 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0xc0205647, &(0x7f0000000000)=0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') r4 = epoll_create(0x3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f00000001c0)={r4, r5, 0x1}) 832.542074ms ago: executing program 4 (id=757): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x22, "ad69bcfd7dc8d77acad40a2c92f6ceff94d6dfbbe7242be6bd9b1ce5ab9389429744"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6455}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x1a, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x9f, {0x9f, 0x23, "115a2fda773b635b2fdc9f9a01bbf5ea81eb5b72770b4216a2bb349880c4800701bc5c4943f0216a71e967b2d9851c398a3f63b179f988559807f0cacb3e22fe7cef772c1486690a0218fc7290faacccde6729286308de70b77e9a570e00c9fd2bf09ee146c70f9d94128e4ce2a68d06b7057a9571d469d79d6baffaface88b06f36c447fe7900dbf0d7db1510aed15443b189634c0008be2a7050c1b4"}}, &(0x7f0000000a80)={0x0, 0x3, 0x102, @string={0x102, 0x3, "a77ef5b1d57351c60a768fc35c54f78efda7bdcd681c36d75649ad9e46f2780c1344bcd2fd53b959c30cbcfcf7ff62a22e82ad148e8c92ceb060dc2042c8d1e230cfebc0242be429d90e6ed86cc1085071a7567e8b6afdc1c0eeaa4d0a292212423c18ac48a370de9f489719de88b4099719f2ac26080062c1bb1132f1cae788746e0027521602da559046a8397ac35d13c5e064448b000d4fcd3251a96be97545c6c3920a4cd7f3074ce4ad85bbc8d5080956ed8fd16db9422ebb5219f5749137d096253d1032e727d73c8bfe4eae48dbb2ddb6e515a2c784e78fd9aefdb539a1c25ee151edf6db88fd26e3f2d207e7a531c9519812a8000000000000000000"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x96, "0911d273c6da63690bb19c7c86471ea575c1daae1d5b6b1a1b60c8e8c8cea93f68826765b4ae1b47734ccddea96486e20cf0c5ad655278ef19b9dd61abdfa64e0f1e19ee1eea1fba891cca84f2568acf159f7b1f59dbf495fef796a9ce4540084c0d78371889ecc151fe8e7e7459c4e5e076fc1e0072ec77129e8e555e42e5c948d9e837b4815485ade0f3a126c8cf7007edd909553a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x16}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x35}, &(0x7f0000000680)={0x20, 0x81, 0x3, "a1e31d"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "62ce"}, &(0x7f0000000140)={0x20, 0x83, 0x3, "eb9fef"}, &(0x7f0000000400)={0x20, 0x84, 0x4, "80b530ad"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "201504"}}) 616.640351ms ago: executing program 1 (id=758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffffffffef5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 468.502263ms ago: executing program 1 (id=759): mount(0x0, 0x0, &(0x7f0000000240)='romfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0xff00) 201.843457ms ago: executing program 1 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x1c, r3, 0x401, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000380)=@attr_other={0x0, 0x4, 0x8, &(0x7f0000000100)=0x8b}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000806010800000000000000400000000005000100070000001bd6be6875ebd0d2c92c8ecbb712e3a897a664afd7e6051f09008950bf273c86ef6f377548578208f825d65a6bb192d8e7e3370d8d0ca84dcd8ae2ae6a9717"], 0x1c}}, 0x0) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x38, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d4a69d20"}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x22, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000780)=""/170, 0xaa}], 0x3, &(0x7f0000000840)=""/232, 0xe8}, 0x4}, {{&(0x7f0000000580)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000a00)=""/108, 0x6c}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/99, 0x63}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x7, &(0x7f0000000dc0)=""/201, 0xc9}, 0xc4e}, {{&(0x7f0000000c40)=@phonet, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ec0)=""/108, 0x6c}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000f40)=""/110, 0x6e}, {&(0x7f0000000fc0)=""/78, 0x4e}, {&(0x7f0000001040)=""/254, 0xfe}], 0x6, &(0x7f00000011c0)=""/70, 0x46}, 0x6}], 0x3, 0x12162, &(0x7f0000000cc0)) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001300)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) (async) sendmmsg$inet(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="0c15bd4288", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000740)="c43eee", 0x3}], 0x1}}], 0x2, 0x4048840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, 0x0, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000740020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x20004804) kernel console output (not intermixed with test programs): device number 44 using dummy_hcd [ 192.829567][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 192.843598][ T5883] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 192.844609][ T10] asix 6-1:0.0: probe with driver asix failed with error -32 [ 192.871843][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.883114][ T5883] usb 2-1: config 0 descriptor?? [ 192.907605][ T24] usb 6-1: USB disconnect, device number 28 [ 192.916174][ T5883] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 193.093608][ T5883] gp8psk: usb in 128 operation failed. [ 193.102683][ T5883] gp8psk: usb in 137 operation failed. [ 193.108217][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.133315][ T5883] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 193.153485][ T5883] usb 2-1: media controller created [ 193.235094][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.292077][ T5883] gp8psk_fe: Frontend attached [ 193.297522][ T5883] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 193.335654][ T5883] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 193.443074][ T5883] gp8psk: usb in 138 operation failed. [ 193.449096][ T5883] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 193.465615][ T5883] gp8psk: found Genpix USB device pID = 203 (hex) [ 193.486995][ T5883] usb 2-1: USB disconnect, device number 44 [ 193.763538][ T5883] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 194.201815][ T5883] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 194.231822][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 194.363597][ T5883] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 194.387205][ T5883] usb 5-1: config 0 has no interface number 0 [ 194.407447][ T5883] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 194.407616][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.430009][ T5883] usb 5-1: config 0 interface 214 has no altsetting 0 [ 194.437253][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.451393][ T44] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 194.461033][ T5883] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 194.481921][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.489973][ T5883] usb 5-1: Product: syz [ 194.502962][ T5883] usb 5-1: Manufacturer: syz [ 194.507621][ T5883] usb 5-1: SerialNumber: syz [ 194.512992][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.535374][ T44] usb 2-1: config 0 descriptor?? [ 194.553722][ T5883] usb 5-1: config 0 descriptor?? [ 194.568357][ T7462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.779198][ T7462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.781890][ T799] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 194.951120][ T7477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.455'. [ 194.963654][ T799] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.981797][ T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.002096][ T44] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 195.023585][ T799] usb 6-1: config 0 descriptor?? [ 195.043370][ T799] cp210x 6-1:0.0: cp210x converter detected [ 195.186239][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.202372][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.308071][ T44] usb 2-1: USB disconnect, device number 45 [ 195.649470][ T799] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 195.659532][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.668233][ T799] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 195.675314][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.687453][ T799] usb 6-1: cp210x converter now attached to ttyUSB0 [ 195.914290][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 195.941638][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 195.962242][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 196.214900][ T5833] block nbd0: Receive control failed (result -32) [ 196.428820][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.442581][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.661802][ T24] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 196.824477][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 196.838910][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 196.852383][ T24] usb 2-1: config 106 has an invalid interface number: 8 but max is 0 [ 196.860995][ T24] usb 2-1: config 106 has no interface number 0 [ 196.870154][ T24] usb 2-1: config 106 interface 8 has no altsetting 0 [ 196.882039][ T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 196.891478][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.900217][ T24] usb 2-1: Product: syz [ 196.904990][ T24] usb 2-1: Manufacturer: syz [ 196.909726][ T24] usb 2-1: SerialNumber: syz [ 197.147284][ T24] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 197.168272][ T24] kalmia 2-1:106.8: probe with driver kalmia failed with error -22 [ 197.192142][ T24] usb 2-1: USB disconnect, device number 46 [ 197.580873][ T24] usb 6-1: USB disconnect, device number 29 [ 197.616494][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.670866][ T24] cp210x 6-1:0.0: device disconnected [ 197.808957][ T7462] ALSA: mixer_oss: invalid index 100000 [ 197.824058][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 197.837358][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 197.868094][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 197.900739][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 197.931977][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 197.953503][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.962243][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 197.963376][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.991994][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 198.023271][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 198.046365][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 198.073251][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 198.087680][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 198.102958][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 198.115475][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 198.128022][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 198.142319][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 198.154254][ T5883] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 198.177988][ T5883] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 32:c7:a1:6f:29:f3 [ 198.199408][ T5883] usb 5-1: USB disconnect, device number 38 [ 198.211017][ T5883] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 198.226397][ T5915] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 198.292070][ T799] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 198.383910][ T5915] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 198.394310][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.408531][ T5915] usb 2-1: config 0 descriptor?? [ 198.423595][ T5915] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 198.454956][ T5915] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 198.477956][ T799] usb 6-1: Using ep0 maxpacket: 8 [ 198.501252][ T799] usb 6-1: config 5 has an invalid interface number: 17 but max is 0 [ 198.538588][ T799] usb 6-1: config 5 has no interface number 0 [ 198.563428][ T799] usb 6-1: config 5 interface 17 has no altsetting 0 [ 198.595316][ T799] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=53.7a [ 198.611781][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.626184][ T44] usb 2-1: USB disconnect, device number 47 [ 198.633721][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 198.644120][ T799] usb 6-1: Product: syz [ 198.663655][ T799] usb 6-1: Manufacturer: syz [ 198.668318][ T799] usb 6-1: SerialNumber: syz [ 199.041255][ T799] dm9601 6-1:5.17: probe with driver dm9601 failed with error -22 [ 199.078144][ T799] sr9700 6-1:5.17: probe with driver sr9700 failed with error -22 [ 199.116754][ T799] usb 6-1: USB disconnect, device number 30 [ 199.594277][ T799] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 199.732481][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.738854][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.784790][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 199.806684][ T799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.831932][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.853174][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.882331][ T799] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.898679][ T799] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.910547][ T7535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.923340][ T799] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.935148][ T799] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.961975][ T799] usb 2-1: Manufacturer: syz [ 199.985903][ T799] usb 2-1: config 0 descriptor?? [ 200.346231][ T799] rc_core: IR keymap rc-hauppauge not found [ 200.353604][ T799] Registered IR keymap rc-empty [ 200.358646][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.401863][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.430799][ T799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 200.494161][ T799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 200.536959][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.572361][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.601919][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.630830][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.651870][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.672917][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.691964][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.721942][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.750818][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.771962][ T799] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 200.798210][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.806588][ T799] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 200.806622][ T799] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.825402][ T5915] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 200.863116][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.877903][ T44] usb 2-1: USB disconnect, device number 48 [ 201.016969][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 201.051828][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.078281][ T5915] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 201.101753][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.123181][ T5915] usb 5-1: config 0 descriptor?? [ 201.588359][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 201.602158][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 201.633223][ T5915] usb 5-1: USB disconnect, device number 39 [ 201.711955][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.719576][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.853524][ T10] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 201.926009][ T7564] 9p: Unknown access argument Š: -22 [ 202.023581][ T7567] capability: warning: `syz.5.482' uses deprecated v2 capabilities in a way that may be insecure [ 202.035370][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 202.046614][ T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.077073][ T10] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.108165][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.129308][ T10] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 202.181806][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.236052][ T10] usb 2-1: config 0 descriptor?? [ 202.329487][ T7572] fuse: Unknown parameter 'rÐ’Š‹séùgÕE(—7×ootmode' [ 202.718000][ T10] hid-alps 0003:044E:120C.000F: item fetching failed at offset 4/8 [ 202.744784][ T10] hid-alps 0003:044E:120C.000F: parse failed [ 202.763302][ T10] hid-alps 0003:044E:120C.000F: probe with driver hid-alps failed with error -22 [ 202.995436][ T10] usb 2-1: USB disconnect, device number 49 [ 203.301923][ T5915] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 203.478122][ T5915] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 203.491798][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.531574][ T5915] usb 6-1: config 0 descriptor?? [ 203.540903][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 203.996757][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.069083][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.153439][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.223680][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.263342][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 204.285951][ T5915] gspca_sunplus: reg_w_riv err -71 [ 204.291211][ T5915] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 204.361903][ T5915] usb 6-1: USB disconnect, device number 31 [ 204.561847][ T10] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 204.743942][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.781867][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 204.805195][ T10] usb 5-1: config 11 has an invalid interface number: 229 but max is 0 [ 204.821779][ T10] usb 5-1: config 11 has no interface number 0 [ 204.828097][ T10] usb 5-1: config 11 interface 229 has no altsetting 0 [ 204.858699][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 204.878179][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.891813][ T10] usb 5-1: Product: syz [ 204.896022][ T10] usb 5-1: Manufacturer: syz [ 204.900657][ T10] usb 5-1: SerialNumber: syz [ 205.025394][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 205.076457][ T7612] netlink: 5 bytes leftover after parsing attributes in process `syz.5.504'. [ 205.093749][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.504'. [ 205.126304][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.504'. [ 205.156427][ T7604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 205.163313][ T7604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.192603][ T7604] vhci_hcd vhci_hcd.0: Device attached [ 205.240190][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.251938][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.284100][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.292935][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.298293][ T7613] vhci_hcd: connection closed [ 205.312091][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.322642][ T13] vhci_hcd vhci_hcd.4: stop threads [ 205.329793][ T13] vhci_hcd vhci_hcd.4: release socket [ 205.356866][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 205.436483][ T10] usb 5-1: USB disconnect, device number 40 [ 205.487588][ T6979] udevd[6979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.841322][ T7617] chnl_net:caif_netlink_parms(): no params data found [ 205.912912][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 205.978052][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.985368][ T5915] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 206.001466][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.008927][ T7617] bridge_slave_0: entered allmulticast mode [ 206.017131][ T7617] bridge_slave_0: entered promiscuous mode [ 206.028955][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.037719][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.045052][ T7617] bridge_slave_1: entered allmulticast mode [ 206.053654][ T7617] bridge_slave_1: entered promiscuous mode [ 206.071777][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 206.078985][ T10] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 206.087473][ T10] usb 5-1: config 0 has no interface number 0 [ 206.094553][ T10] usb 5-1: config 0 interface 119 has no altsetting 0 [ 206.104694][ T10] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=34.5b [ 206.121791][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.131193][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.140091][ T10] usb 5-1: Product: syz [ 206.141884][ T5915] usb 6-1: device descriptor read/64, error -71 [ 206.144617][ T10] usb 5-1: Manufacturer: syz [ 206.159924][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.171775][ T10] usb 5-1: SerialNumber: syz [ 206.180331][ T10] usb 5-1: config 0 descriptor?? [ 206.212007][ T10] usbserial_generic 5-1:0.119: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 206.223550][ T10] usbserial_generic 5-1:0.119: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 206.235430][ T10] usbserial_generic 5-1:0.119: generic converter detected [ 206.241235][ T7617] team0: Port device team_slave_0 added [ 206.252266][ T10] usb 5-1: generic converter now attached to ttyUSB0 [ 206.257485][ T7617] team0: Port device team_slave_1 added [ 206.332584][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.339736][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.375373][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.389275][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.396439][ T5915] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 206.404602][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.436248][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.450102][ T10] usb 5-1: USB disconnect, device number 41 [ 206.465714][ T10] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 206.494306][ T10] usbserial_generic 5-1:0.119: device disconnected [ 206.538729][ T7617] hsr_slave_0: entered promiscuous mode [ 206.547623][ T7617] hsr_slave_1: entered promiscuous mode [ 206.555970][ T7617] debugfs: 'hsr0' already exists in 'hsr' [ 206.562029][ T7617] Cannot create hsr debugfs directory [ 206.571827][ T5915] usb 6-1: device descriptor read/64, error -71 [ 206.683161][ T5915] usb usb6-port1: attempt power cycle [ 206.782939][ T7617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.880698][ T7617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.974925][ T7617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.023090][ T5915] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 207.062641][ T5915] usb 6-1: device descriptor read/8, error -71 [ 207.107929][ T7617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.272832][ T5883] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 207.291117][ T7617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.307413][ T7617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.318109][ T5915] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 207.335135][ T7617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.348015][ T7617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.357860][ T5915] usb 6-1: device descriptor read/8, error -71 [ 207.392199][ T52] Bluetooth: hci1: command tx timeout [ 207.446341][ T5883] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 207.463905][ T5883] usb 5-1: config 0 has no interface number 0 [ 207.472766][ T5915] usb usb6-port1: unable to enumerate USB device [ 207.492331][ T5883] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 207.510255][ T5883] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.537797][ T5883] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 207.548679][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.557599][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.576120][ T5883] usb 5-1: Product: syz [ 207.586045][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.592973][ T5883] usb 5-1: Manufacturer: syz [ 207.597601][ T5883] usb 5-1: SerialNumber: syz [ 207.612979][ T5883] usb 5-1: config 0 descriptor?? [ 207.614485][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.626229][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.634520][ T7632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 207.660945][ T5883] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 207.667057][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.677085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.686073][ T5883] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 207.854785][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 208.055658][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.064855][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.141498][ T5870] usb 5-1: USB disconnect, device number 42 [ 208.172609][ T5870] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 208.207755][ T5870] cyberjack 5-1:0.69: device disconnected [ 208.248805][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.320189][ T7654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.320666][ T7655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.384477][ T7617] veth0_vlan: entered promiscuous mode [ 208.427698][ T7617] veth1_vlan: entered promiscuous mode [ 208.564652][ T7617] veth0_macvtap: entered promiscuous mode [ 208.586367][ T7617] veth1_macvtap: entered promiscuous mode [ 208.646189][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.687585][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.703257][ T7665] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 208.762417][ T7665] 9pnet_fd: Insufficient options for proto=fd [ 208.771370][ T7666] 9pnet_fd: Insufficient options for proto=fd [ 208.807599][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.840766][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.886220][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.905776][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.148440][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.180737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.278575][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.302072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.478556][ T52] Bluetooth: hci1: command tx timeout [ 209.665888][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 209.681900][ T5915] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 209.874211][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.907992][ T5915] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.931913][ T5915] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 209.949949][ T5915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.005649][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.021860][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.041850][ T5915] usb 6-1: Product: syz [ 210.046073][ T5915] usb 6-1: Manufacturer: syz [ 210.071057][ T5915] usb 6-1: SerialNumber: syz [ 210.182198][ T799] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 210.323098][ T5915] usb 6-1: 0:2 : does not exist [ 210.356002][ T799] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 210.368894][ T5915] usb 6-1: USB disconnect, device number 36 [ 210.372696][ T799] usb 5-1: config 0 has no interface number 0 [ 210.412007][ T799] usb 5-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 210.433340][ T799] usb 5-1: config 0 interface 214 has no altsetting 0 [ 210.454249][ T799] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 210.470555][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.489003][ T799] usb 5-1: Product: syz [ 210.497808][ T6979] udevd[6979]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.499151][ T799] usb 5-1: Manufacturer: syz [ 210.555882][ T799] usb 5-1: SerialNumber: syz [ 210.585674][ T799] usb 5-1: config 0 descriptor?? [ 210.603267][ T7697] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 210.820437][ T7697] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 210.833800][ T5870] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 211.034604][ T5870] usb 2-1: not running at top speed; connect to a high speed hub [ 211.065588][ T5870] usb 2-1: config 0 has an invalid interface number: 164 but max is 1 [ 211.074129][ T5870] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 211.088480][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.097762][ T5870] usb 2-1: config 0 has no interface number 0 [ 211.107574][ T5870] usb 2-1: config 0 interface 164 altsetting 5 endpoint 0xA has invalid maxpacket 1479, setting to 64 [ 211.118943][ T5870] usb 2-1: config 0 interface 164 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 211.132670][ T5870] usb 2-1: config 0 interface 164 has no altsetting 0 [ 211.150980][ T5870] usb 2-1: New USB device found, idVendor=0c26, idProduct=000c, bcdDevice=71.cb [ 211.163977][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.182117][ T5870] usb 2-1: Product: syz [ 211.188288][ T5870] usb 2-1: Manufacturer: 莔곗셕䋉狄袞簿ﺳê¸é¸°á†’æ° é½· [ 211.221862][ T5870] usb 2-1: SerialNumber: syz [ 211.227818][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.528'. [ 211.240950][ T5870] usb 2-1: config 0 descriptor?? [ 211.542907][ T7715] syzkaller0: entered allmulticast mode [ 211.550845][ T7715] syzkaller0: entered promiscuous mode [ 211.561727][ T52] Bluetooth: hci1: command tx timeout [ 211.615545][ T7715] syzkaller0 (unregistering): left allmulticast mode [ 211.642329][ T7715] syzkaller0 (unregistering): left promiscuous mode [ 211.766540][ T5870] ftdi_sio 2-1:0.164: FTDI USB Serial Device converter detected [ 211.784519][ T5870] ftdi_sio ttyUSB0: unknown device type: 0x71cb [ 211.815117][ T5870] usb 2-1: USB disconnect, device number 50 [ 211.844986][ T5870] ftdi_sio 2-1:0.164: device disconnected [ 211.951146][ T7727] sctp: [Deprecated]: syz.5.532 (pid 7727) Use of int in maxseg socket option. [ 211.951146][ T7727] Use struct sctp_assoc_value instead [ 211.993025][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 212.014837][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 212.040869][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 212.462200][ T44] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 212.633539][ T44] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 212.644624][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.661905][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 212.689596][ T44] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 212.718188][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.744609][ T44] usb 6-1: config 0 descriptor?? [ 213.027227][ T5915] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 213.168333][ T44] usb 6-1: string descriptor 0 read error: -71 [ 213.183306][ T44] usbhid 6-1:0.0: can't add hid device: -71 [ 213.189518][ T44] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 213.201762][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 213.221125][ T44] usb 6-1: USB disconnect, device number 37 [ 213.228124][ T5915] usb 2-1: config 0 has no interfaces? [ 213.247112][ T5915] usb 2-1: language id specifier not provided by device, defaulting to English [ 213.274015][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 213.299926][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.308709][ T5915] usb 2-1: Product: 鱽᱊芴î¢ê¿‰Êˆî²ï½ŒÇ‹éž­î…¯â°é“³á´“挦긄舓꬈⊩䬜﮷奈è˜î £î¥šå‰‡â£œå„°ë–¼æ‚¿à½â¯®é„²ã°™ã¾—䚛狻ᛴ⛬䠬蚲䘽阯ࣶ鵬斩è­ëµ¹ì³¹ë²¦ì¹°ëƒ¯â·³î¿¿â²ì”€ï¶ä¶¥ç°ªë¸—㋺ [ 213.333749][ T7746] tmpfs: Invalid gid '0x00000000ffffffff' [ 213.345406][ T5915] usb 2-1: Manufacturer: 䊷车éªêšˆìƒƒç˜ì“¿ïžžë¤˜ä¢·à¿„ὤᓓê˜ãºŽä·µæ¯ƒä¾±ä¡¿ã—€é¯˜ê˜™ìŽ»åœ©èª±ì…€ìƒå„–緉뵉䫾ﶯá§ä´· [ 213.359703][ T5915] usb 2-1: SerialNumber: Ðœ [ 213.372421][ T5915] usb 2-1: config 0 descriptor?? [ 213.638003][ T52] Bluetooth: hci1: command tx timeout [ 213.717861][ T5870] usb 2-1: USB disconnect, device number 51 [ 213.881984][ T52] Bluetooth: unknown link type 98 [ 213.887260][ T52] Bluetooth: hci1: connection err: -111 [ 214.019561][ T7766] program syz.3.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.071277][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 214.094143][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 214.116521][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 214.133139][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 214.153527][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 214.166985][ T5819] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 214.176498][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 214.193764][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 214.215082][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 214.226966][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 214.237932][ T5870] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 214.262240][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 214.291552][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 214.313028][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 214.343689][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.362069][ T5819] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 214.371848][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 214.391931][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.400561][ T799] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.411580][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 214.418694][ T5870] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 214.427208][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.443282][ T5819] usb 6-1: config 0 descriptor?? [ 214.460701][ T5870] usb 2-1: config 0 has no interface number 0 [ 214.470582][ T799] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 42:77:0f:54:dc:63 [ 214.489446][ T5870] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 214.510329][ T5870] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 214.524108][ T799] usb 5-1: USB disconnect, device number 43 [ 214.535888][ T5870] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 214.548271][ T799] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 214.562777][ T5870] usb 2-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 214.635595][ T5870] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 214.658060][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.724351][ T5870] usb 2-1: config 0 descriptor?? [ 214.758701][ T7763] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 214.775262][ T5870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.866139][ T5819] usbhid 6-1:0.0: can't add hid device: -71 [ 214.910381][ T5819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 214.953904][ T5819] usb 6-1: USB disconnect, device number 38 [ 215.035578][ T5870] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 215.392154][ T5915] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 215.552444][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 215.563744][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.581907][ T5915] usb 5-1: config 0 has no interfaces? [ 215.592995][ T5915] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 215.603229][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.615511][ T5915] usb 5-1: config 0 descriptor?? [ 215.761896][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 215.828840][ T7780] netlink: 'syz.4.548': attribute type 3 has an invalid length. [ 215.837217][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 215.863517][ T5915] usb 5-1: USB disconnect, device number 44 [ 215.912334][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 215.924297][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.965658][ T24] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 215.983021][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.991085][ T24] usb 6-1: Product: syz [ 216.011802][ T24] usb 6-1: Manufacturer: syz [ 216.016515][ T24] usb 6-1: SerialNumber: syz [ 216.034808][ T24] usb 6-1: config 0 descriptor?? [ 216.053579][ T24] usb 6-1: bad CDC descriptors [ 216.059455][ T24] usb 6-1: unsupported MDLM descriptors [ 216.252218][ T24] usb 6-1: USB disconnect, device number 39 [ 216.881811][ T44] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 216.914093][ T24] usb 2-1: USB disconnect, device number 52 [ 217.075564][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.085748][ T44] usb 5-1: not running at top speed; connect to a high speed hub [ 217.095730][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 217.107234][ T5915] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 217.118491][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.131076][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.139649][ T44] usb 5-1: Product: syz [ 217.145027][ T44] usb 5-1: Manufacturer: syz [ 217.149858][ T44] usb 5-1: SerialNumber: syz [ 217.265603][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.276848][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 217.288544][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 217.305241][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 217.319680][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.339765][ T5915] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 217.349339][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.357449][ T5915] usb 6-1: Product: syz [ 217.364475][ T5915] usb 6-1: Manufacturer: syz [ 217.369392][ T5915] usb 6-1: SerialNumber: syz [ 217.382115][ T44] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 217.399726][ T5915] usb 6-1: config 0 descriptor?? [ 217.414866][ T7813] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 217.453230][ T44] usb 5-1: USB disconnect, device number 45 [ 217.481969][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 217.494095][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.517215][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 217.527782][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.540045][ T6979] udevd[6979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.563428][ T5915] rc_core: IR keymap rc-imon-rsc not found [ 217.572037][ T24] usb 2-1: Product: syz [ 217.576254][ T24] usb 2-1: Manufacturer: syz [ 217.584496][ T5915] Registered IR keymap rc-empty [ 217.591532][ T5915] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 217.602152][ T24] usb 2-1: SerialNumber: syz [ 217.617798][ T24] usb 2-1: config 0 descriptor?? [ 217.650248][ T5915] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 217.865434][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 217.979755][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.004288][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.295356][ T24] usb 2-1: USB disconnect, device number 53 [ 218.855775][ T24] IPVS: starting estimator thread 0... [ 218.972200][ T7833] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.044193][ T7839] can0: slcan on ptm0. [ 219.143006][ T7838] can0 (unregistered): slcan off ptm0. [ 219.352380][ T7849] loop7: detected capacity change from 0 to 16384 [ 219.743054][ T7852] loop7: detected capacity change from 16384 to 0 [ 219.750743][ C0] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 219.832099][ T44] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 219.946371][ T24] usb 6-1: USB disconnect, device number 40 [ 220.035548][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.057200][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 220.091528][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 220.119648][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.164704][ T44] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 220.165247][ T7868] overlayfs: conflicting lowerdir path [ 220.183075][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.191360][ T44] usb 5-1: Product: syz [ 220.218799][ T44] usb 5-1: Manufacturer: syz [ 220.228275][ T44] usb 5-1: SerialNumber: syz [ 220.248414][ T44] usb 5-1: config 0 descriptor?? [ 220.279795][ T44] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 220.340643][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 220.411771][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 220.516210][ T44] usb 5-1: USB disconnect, device number 46 [ 220.516296][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 220.581753][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 220.611318][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.641520][ T24] usb 6-1: config 0 has no interface number 0 [ 220.659270][ T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 220.670579][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.686330][ T24] usb 6-1: Product: syz [ 220.706616][ T24] usb 6-1: Manufacturer: syz [ 220.714773][ T24] usb 6-1: SerialNumber: syz [ 220.730497][ T24] usb 6-1: config 0 descriptor?? [ 220.747372][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 220.951857][ T7884] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 220.983340][ T7884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.569'. [ 221.279095][ T24] gspca_spca1528: reg_w err -110 [ 221.309164][ T24] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 221.539572][ T7897] netlink: 256 bytes leftover after parsing attributes in process `syz.3.571'. [ 221.643947][ T7900] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 221.996146][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.027632][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.057927][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.084183][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.116462][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.131957][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.149780][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.168477][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.182430][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.200270][ T5819] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 222.223517][ T5819] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.03 Device [syz1] on syz1 [ 222.241932][ T799] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 222.404655][ T799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 222.412652][ T799] usb 5-1: can't read configurations, error -61 [ 222.552700][ T799] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 222.706918][ T799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 222.718340][ T799] usb 5-1: can't read configurations, error -61 [ 222.732267][ T799] usb usb5-port1: attempt power cycle [ 223.081822][ T799] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 223.124881][ T799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 223.149397][ T5819] usb 6-1: USB disconnect, device number 41 [ 223.166615][ T799] usb 5-1: can't read configurations, error -61 [ 223.323204][ T799] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 223.354914][ T799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 223.373570][ T799] usb 5-1: can't read configurations, error -61 [ 223.380349][ T799] usb usb5-port1: unable to enumerate USB device [ 223.561842][ T5819] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 223.723162][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 223.734886][ T5819] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 223.744183][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.752497][ T5819] usb 6-1: Product: syz [ 223.756689][ T5819] usb 6-1: Manufacturer: syz [ 223.761296][ T5819] usb 6-1: SerialNumber: syz [ 223.772835][ T5819] usb 6-1: config 0 descriptor?? [ 223.886731][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.897912][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.908208][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 223.921261][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.941389][ T24] usb 2-1: config 0 descriptor?? [ 224.176462][ T52] Bluetooth: hci1: Malformed LE Event: 0x1b [ 224.404430][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.416215][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.426839][ T5819] usb 6-1: f81604_write: reg: 105 data: f0 failed: -EPROTO [ 224.437209][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 224.441789][ T5819] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 224.450891][ T5819] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 224.454853][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.480823][ T24] usb 2-1: USB disconnect, device number 54 [ 224.486167][ T5819] usb 6-1: USB disconnect, device number 42 [ 225.146265][ T7933] netlink: 108 bytes leftover after parsing attributes in process `syz.1.582'. [ 225.172960][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 225.342422][ T44] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 225.385438][ T7937] netlink: 172 bytes leftover after parsing attributes in process `syz.4.586'. [ 225.539639][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.561755][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.571603][ T44] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 225.608460][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.621095][ T44] usb 6-1: config 0 descriptor?? [ 225.751825][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 225.841852][ T799] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 225.942290][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 225.963158][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.977307][ T24] usb 2-1: config 0 descriptor?? [ 225.987726][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 226.020330][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.048374][ T44] cp2112 0003:10C4:EA90.0011: collection stack underflow [ 226.059117][ T799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 226.076140][ T44] cp2112 0003:10C4:EA90.0011: item 0 2 0 12 parsing failed [ 226.084804][ T44] cp2112 0003:10C4:EA90.0011: parse failed [ 226.091003][ T44] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 226.092488][ T799] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 226.122632][ T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.143019][ T799] usb 5-1: config 0 descriptor?? [ 226.260050][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.278852][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.317062][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.328730][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.347386][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.364336][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.398926][ T5819] usb 6-1: USB disconnect, device number 43 [ 226.428087][ T7941] overlayfs: overlapping lowerdir path [ 226.515930][ T24] gspca_spca508: reg_read err -71 [ 226.529854][ T24] gspca_spca508: reg_read err -71 [ 226.538642][ T24] gspca_spca508: reg_read err -71 [ 226.545567][ T24] gspca_spca508: reg_read err -71 [ 226.562146][ T24] gspca_spca508: reg write: error -71 [ 226.567647][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 226.584755][ T24] usb 2-1: USB disconnect, device number 55 [ 226.604967][ T799] cypress 0003:04B4:0001.0012: hidraw0: USB HID vf.ff Device [HID 04b4:0001] on usb-dummy_hcd.4-1/input0 [ 226.782504][ T7943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.589'. [ 226.792931][ T24] usb 5-1: USB disconnect, device number 51 [ 227.046679][ T7949] : renamed from bridge_slave_0 (while UP) [ 227.069041][ T7948] raw_sendmsg: syz.5.591 forgot to set AF_INET. Fix it! [ 228.290339][ T7954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.297005][ T7954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.304448][ T7954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.310741][ T7954] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.317335][ T7954] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.329331][ T7954] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 228.341182][ T7954] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 228.348447][ T7954] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 228.361157][ T7954] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 228.372176][ T7954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.378241][ T7954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.395063][ T7954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.406774][ T7954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.811877][ T799] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 228.853232][ T5943] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 228.973217][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 228.987627][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 229.007606][ T5943] usb 5-1: device descriptor read/64, error -71 [ 229.016918][ T799] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 229.028418][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.043492][ T799] usb 2-1: config 0 descriptor?? [ 229.251828][ T5943] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 229.392283][ T5943] usb 5-1: device descriptor read/64, error -71 [ 229.513214][ T5943] usb usb5-port1: attempt power cycle [ 229.543105][ T799] ryos 0003:1E7D:31CE.0013: collection stack underflow [ 229.550130][ T799] ryos 0003:1E7D:31CE.0013: item 0 4 0 12 parsing failed [ 229.557819][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.599489][ T799] ryos 0003:1E7D:31CE.0013: parse failed [ 229.607836][ T799] ryos 0003:1E7D:31CE.0013: probe with driver ryos failed with error -22 [ 229.727398][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.745520][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.812256][ T799] usb 2-1: USB disconnect, device number 56 [ 229.862088][ T5943] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 229.882686][ T5943] usb 5-1: device descriptor read/8, error -71 [ 229.941823][ T5915] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 230.116358][ T5915] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 230.125594][ T5943] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 230.145499][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.164772][ T5943] usb 5-1: device descriptor read/8, error -71 [ 230.181314][ T5915] usb 6-1: config 0 descriptor?? [ 230.282260][ T5943] usb usb5-port1: unable to enumerate USB device [ 230.362196][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 230.362340][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.369532][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.374703][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.401952][ T44] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 230.439161][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.540565][ T5915] usb 6-1: Cannot read MAC address [ 230.557873][ T44] usb 2-1: device descriptor read/64, error -71 [ 230.565999][ T5915] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 230.609643][ T5915] usb 6-1: USB disconnect, device number 44 [ 230.635351][ T8012] netlink: 'syz.5.608': attribute type 21 has an invalid length. [ 230.652468][ T8012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.832060][ T44] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 230.971825][ T5915] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 230.979556][ T44] usb 2-1: device descriptor read/64, error -71 [ 231.101840][ T44] usb usb2-port1: attempt power cycle [ 231.111910][ T5915] usb 6-1: device descriptor read/64, error -71 [ 231.361798][ T5915] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 231.441792][ T44] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 231.463562][ T44] usb 2-1: device descriptor read/8, error -71 [ 231.501787][ T5915] usb 6-1: device descriptor read/64, error -71 [ 231.612075][ T5915] usb usb6-port1: attempt power cycle [ 231.702081][ T44] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 231.722717][ T44] usb 2-1: device descriptor read/8, error -71 [ 231.842452][ T44] usb usb2-port1: unable to enumerate USB device [ 231.961847][ T5915] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 231.992470][ T5915] usb 6-1: device descriptor read/8, error -71 [ 232.231838][ T5915] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 232.276180][ T5915] usb 6-1: device descriptor read/8, error -71 [ 232.353037][ T5870] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 232.392252][ T5915] usb usb6-port1: unable to enumerate USB device [ 232.432009][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.432017][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 232.441942][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.511954][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.543730][ T5870] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 232.553063][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.572790][ T5870] usb 5-1: config 0 descriptor?? [ 232.584874][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 232.987204][ T5870] gspca_cpia1: usb_control_msg 03, error -32 [ 232.994920][ T5870] cpia1 5-1:0.0: unexpected state after lo power cmd: 1a [ 233.416039][ T8025] netlink: 212 bytes leftover after parsing attributes in process `syz.4.613'. [ 233.462326][ T799] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 233.495942][ T5870] gspca_cpia1: usb_control_msg 02, error -71 [ 233.504962][ T5870] cpia1 5-1:0.0: only firmware version 1 is supported (got: 26) [ 233.518963][ T5870] usb 5-1: USB disconnect, device number 56 [ 233.634119][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 233.657461][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.671524][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.725888][ T799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.738253][ T799] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 233.746476][ T799] usb 2-1: can't read configurations, error -71 [ 233.855895][ T8037] program syz.5.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.187458][ T8042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.351817][ T5896] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 234.512242][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 234.514758][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.547135][ T5896] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.562932][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.569782][ T5896] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 234.579416][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.591003][ T5896] usb 5-1: config 0 descriptor?? [ 234.596852][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.701834][ T5819] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 234.861812][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 234.876414][ T5819] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 234.898260][ T5819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.921580][ T5819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.934859][ T5819] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.953124][ T5819] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.962781][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.193784][ T5819] usb 6-1: GET_CAPABILITIES returned 0 [ 235.200357][ T5819] usbtmc 6-1:16.0: can't read capabilities [ 235.236505][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 235.261841][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 235.282490][ T5896] usb 5-1: USB disconnect, device number 57 [ 235.412826][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.424329][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.436196][ T24] usb 6-1: USB disconnect, device number 49 [ 235.561392][ T800] usb 4-1: Failed to load image "edgeport/boot.fw" err -110 [ 235.576337][ T800] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 235.591452][ T800] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 235.609769][ T800] usb 4-1: USB disconnect, device number 10 [ 235.629733][ T800] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 235.654719][ T800] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 235.659980][ T5971] udevd[5971]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 235.672858][ T800] io_edgeport 4-1:162.209: device disconnected [ 235.971872][ T800] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 236.061957][ T5896] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 236.152822][ T800] usb 4-1: Using ep0 maxpacket: 32 [ 236.177025][ T800] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 236.196934][ T800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.211934][ T5896] usb 5-1: device descriptor read/64, error -71 [ 236.243834][ T800] usb 4-1: config 0 descriptor?? [ 236.264436][ T800] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 236.292087][ T800] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 236.413368][ T799] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 236.456145][ T5819] usb 4-1: USB disconnect, device number 11 [ 236.481883][ T5896] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 236.581847][ T799] usb 6-1: Using ep0 maxpacket: 32 [ 236.589897][ T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.601215][ T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.611481][ T799] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 236.621001][ T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.629416][ T5896] usb 5-1: device descriptor read/64, error -71 [ 236.640053][ T799] usb 6-1: config 0 descriptor?? [ 236.743874][ T5896] usb usb5-port1: attempt power cycle [ 237.087036][ T799] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 237.111916][ T5896] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 237.163143][ T5896] usb 5-1: device descriptor read/8, error -71 [ 237.403886][ T5896] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 237.442989][ T5896] usb 5-1: device descriptor read/8, error -71 [ 237.558147][ T5896] usb usb5-port1: unable to enumerate USB device [ 237.622185][ T8096] dlm: no local IP address has been set [ 237.636001][ T8096] dlm: cannot start dlm midcomms -107 [ 237.661816][ T5819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.834034][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.851819][ T5819] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.872614][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.897050][ T5819] usb 4-1: config 0 descriptor?? [ 237.924450][ T5819] pwc: Askey VC010 type 2 USB webcam detected. [ 237.952077][ T5896] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 238.101859][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 238.117665][ T5896] usb 2-1: config 148 has an invalid interface number: 46 but max is 0 [ 238.126260][ T5896] usb 2-1: config 148 has no interface number 0 [ 238.137164][ T5819] pwc: recv_control_msg error -32 req 02 val 2b00 [ 238.157287][ T5896] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 238.187272][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.215753][ T5819] pwc: recv_control_msg error -71 req 02 val 2700 [ 238.244773][ T5819] pwc: recv_control_msg error -71 req 02 val 2c00 [ 238.261661][ T5819] pwc: recv_control_msg error -71 req 04 val 1000 [ 238.284480][ T5819] pwc: recv_control_msg error -71 req 04 val 1300 [ 238.299171][ T5819] pwc: recv_control_msg error -71 req 04 val 1400 [ 238.309225][ T5819] pwc: recv_control_msg error -71 req 02 val 2000 [ 238.326827][ T5819] pwc: recv_control_msg error -71 req 02 val 2100 [ 238.340062][ T8103] trusted_key: syz.3.641 sent an empty control message without MSG_MORE. [ 238.342361][ T5819] pwc: recv_control_msg error -71 req 04 val 1500 [ 238.372405][ T5819] pwc: recv_control_msg error -71 req 02 val 2500 [ 238.386748][ T5819] pwc: recv_control_msg error -71 req 02 val 2400 [ 238.401914][ T5819] pwc: recv_control_msg error -71 req 02 val 2600 [ 238.418076][ T5819] pwc: recv_control_msg error -71 req 02 val 2900 [ 238.432765][ T5896] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 238.449837][ T5819] pwc: recv_control_msg error -71 req 02 val 2800 [ 238.456935][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.475205][ T5819] pwc: recv_control_msg error -71 req 04 val 1100 [ 238.486576][ T5896] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 238.502379][ T5819] pwc: recv_control_msg error -71 req 04 val 1200 [ 238.511353][ T5896] usb 2-1: media controller created [ 238.520765][ T5819] pwc: Registered as video103. [ 238.543888][ T5819] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 238.589587][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.608535][ T5819] usb 4-1: USB disconnect, device number 12 [ 238.802836][ T5896] DVB: Unable to find symbol dib7000p_attach() [ 238.815818][ T5896] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 238.981876][ T5819] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 238.989739][ T5896] rc_core: IR keymap rc-dib0700-rc5 not found [ 239.007053][ T5896] Registered IR keymap rc-empty [ 239.026202][ T5896] dvb-usb: could not initialize remote control. [ 239.049656][ T5896] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 239.088790][ T5896] usb 2-1: USB disconnect, device number 63 [ 239.153939][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.177159][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.232833][ T799] usb 6-1: USB disconnect, device number 50 [ 239.243710][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 239.289726][ T5819] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 239.309775][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.318652][ T5896] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 239.339613][ T5819] usb 4-1: Product: syz [ 239.360022][ T5819] usb 4-1: Manufacturer: syz [ 239.369709][ T5819] usb 4-1: SerialNumber: syz [ 239.404626][ T5819] usb 4-1: config 0 descriptor?? [ 239.410495][ T8103] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 239.420111][ T5819] hub 4-1:0.0: USB hub found [ 239.500855][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 239.625344][ T5819] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 239.658035][ T5819] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.805469][ T5819] usb 4-1: USB disconnect, device number 13 [ 239.832115][ T799] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 239.881827][ T5896] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 240.011810][ T799] usb 6-1: Using ep0 maxpacket: 16 [ 240.040900][ T799] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.053392][ T5896] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 240.086936][ T799] usb 6-1: config 0 has no interface number 0 [ 240.103243][ T5896] usb 2-1: config 0 has no interface number 0 [ 240.115525][ T799] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 240.132175][ T5896] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 240.146138][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.162018][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.175921][ T799] usb 6-1: Product: syz [ 240.180142][ T799] usb 6-1: Manufacturer: syz [ 240.202867][ T5896] usb 2-1: config 0 descriptor?? [ 240.208080][ T799] usb 6-1: SerialNumber: syz [ 240.276301][ T799] usb 6-1: config 0 descriptor?? [ 240.296145][ T799] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 240.608526][ T799] gspca_spca1528: reg_w err -71 [ 240.648884][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 240.662040][ T799] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 240.694397][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.714900][ T799] usb 6-1: USB disconnect, device number 51 [ 240.759018][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.932014][ T5896] usb 2-1: USB disconnect, device number 64 [ 241.421400][ T799] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.601765][ T799] usb 4-1: Using ep0 maxpacket: 16 [ 241.619142][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.632771][ T5915] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 241.650901][ T799] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 241.671284][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.695102][ T799] usb 4-1: config 0 descriptor?? [ 241.804843][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.826067][ T5915] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.845946][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.858595][ T5915] usb 5-1: config 0 descriptor?? [ 241.875860][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 242.018599][ T5896] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 242.131044][ T799] lua 0003:1E7D:2C2E.0015: unbalanced collection at end of report description [ 242.152612][ T799] lua 0003:1E7D:2C2E.0015: parse failed [ 242.162789][ T5896] usb 6-1: device descriptor read/64, error -71 [ 242.171667][ T799] lua 0003:1E7D:2C2E.0015: probe with driver lua failed with error -22 [ 242.267930][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.288822][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.315813][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.323857][ T799] usb 4-1: USB disconnect, device number 14 [ 242.339178][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.412176][ T5896] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 242.420900][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 242.427744][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 242.431960][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 242.452967][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 242.494234][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 242.531473][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 242.550360][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.558734][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.572526][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.588329][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.602474][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.619291][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.632015][ T5896] usb 6-1: device descriptor read/64, error -71 [ 242.648881][ T5915] pwc: Registered as video103. [ 242.684132][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 242.722204][ T5915] usb 5-1: USB disconnect, device number 62 [ 242.745333][ T5896] usb usb6-port1: attempt power cycle [ 242.758010][ T8205] netlink: 'syz.1.663': attribute type 21 has an invalid length. [ 242.798758][ T8205] netlink: 100 bytes leftover after parsing attributes in process `syz.1.663'. [ 242.853723][ T8205] overlayfs: missing 'lowerdir' [ 243.112030][ T5896] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 243.143547][ T5896] usb 6-1: device descriptor read/8, error -71 [ 243.176048][ T8212] netlink: 830 bytes leftover after parsing attributes in process `syz.1.666'. [ 243.345196][ T8217] netlink: 'syz.1.667': attribute type 3 has an invalid length. [ 243.392979][ T5896] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 243.411167][ T8217] netlink: 766 bytes leftover after parsing attributes in process `syz.1.667'. [ 243.445091][ T5896] usb 6-1: device descriptor read/8, error -71 [ 243.554751][ T5896] usb usb6-port1: unable to enumerate USB device [ 243.651765][ T5915] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 243.741862][ T5896] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 243.854740][ T5915] usb 2-1: config 10 has an invalid interface number: 38 but max is 0 [ 243.863296][ T5915] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 243.884089][ T5915] usb 2-1: config 10 has no interface number 0 [ 243.890353][ T5915] usb 2-1: config 10 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 243.916999][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 243.926295][ T5915] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=a4.a6 [ 243.936738][ T5896] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 243.947434][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.961949][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.965270][ T5915] usb 2-1: Product: syz [ 243.970023][ T5896] usb 5-1: Product: syz [ 243.970045][ T5896] usb 5-1: Manufacturer: syz [ 243.995006][ T5915] usb 2-1: Manufacturer: syz [ 244.010021][ T5915] usb 2-1: SerialNumber: syz [ 244.011774][ T5896] usb 5-1: SerialNumber: syz [ 244.026176][ T5896] usb 5-1: config 0 descriptor?? [ 244.067231][ T5896] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 244.105919][ T5896] usb 5-1: Detected FT232H [ 244.235046][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.245419][ T8221] netlink: 'syz.1.667': attribute type 3 has an invalid length. [ 244.273335][ T8221] netlink: 766 bytes leftover after parsing attributes in process `syz.1.667'. [ 244.292553][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.313719][ T5915] legousbtower 2-1:10.38: interrupt endpoints not found [ 244.340545][ T5915] usb 2-1: USB disconnect, device number 65 [ 244.468828][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 244.501075][ T5896] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 244.523720][ T5896] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 244.564911][ T5896] usb 5-1: USB disconnect, device number 63 [ 244.612982][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 244.663556][ T5896] ftdi_sio 5-1:0.0: device disconnected [ 245.013730][ T8244] fuse: Bad value for 'group_id' [ 245.018749][ T8244] fuse: Bad value for 'group_id' [ 245.180692][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 245.201890][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 245.401767][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 245.492310][ T5915] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 245.595614][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 245.606441][ T8256] FAULT_INJECTION: forcing a failure. [ 245.606441][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 245.612903][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 245.633683][ T8256] CPU: 0 UID: 0 PID: 8256 Comm: syz.4.678 Not tainted syzkaller #0 PREEMPT(full) [ 245.633713][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.633732][ T8256] Call Trace: [ 245.633741][ T8256] [ 245.633750][ T8256] dump_stack_lvl+0x189/0x250 [ 245.633786][ T8256] ? __pfx____ratelimit+0x10/0x10 [ 245.633810][ T8256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.633833][ T8256] ? __pfx__printk+0x10/0x10 [ 245.633863][ T8256] ? __pfx___might_resched+0x10/0x10 [ 245.633881][ T8256] ? fs_reclaim_acquire+0x7d/0x100 [ 245.633916][ T8256] should_fail_ex+0x414/0x560 [ 245.633945][ T8256] should_failslab+0xa8/0x100 [ 245.633978][ T8256] __kmalloc_noprof+0xdf/0x800 [ 245.634005][ T8256] ? tomoyo_encode+0x28b/0x550 [ 245.634033][ T8256] tomoyo_encode+0x28b/0x550 [ 245.634062][ T8256] tomoyo_realpath_from_path+0x58d/0x5d0 [ 245.634087][ T8256] ? tomoyo_domain+0xd9/0x130 [ 245.634116][ T8256] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 245.634147][ T8256] tomoyo_path_number_perm+0x1e8/0x5a0 [ 245.634182][ T8256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.634255][ T8256] ? __fget_files+0x2a/0x420 [ 245.634284][ T8256] ? __fget_files+0x3a0/0x420 [ 245.634306][ T8256] ? __fget_files+0x2a/0x420 [ 245.634334][ T8256] security_file_ioctl+0xcb/0x2d0 [ 245.634366][ T8256] __se_sys_ioctl+0x47/0x170 [ 245.634399][ T8256] do_syscall_64+0xfa/0xfa0 [ 245.634423][ T8256] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.634446][ T8256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.634466][ T8256] ? clear_bhb_loop+0x60/0xb0 [ 245.634492][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.634511][ T8256] RIP: 0033:0x7f8d56b8efc9 [ 245.634530][ T8256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.634547][ T8256] RSP: 002b:00007f8d57a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.634569][ T8256] RAX: ffffffffffffffda RBX: 00007f8d56de5fa0 RCX: 00007f8d56b8efc9 [ 245.634584][ T8256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 245.634596][ T8256] RBP: 00007f8d57a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.634609][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.634620][ T8256] R13: 00007f8d56de6038 R14: 00007f8d56de5fa0 R15: 00007fff3698ee48 [ 245.634655][ T8256] [ 245.634676][ T8256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.672000][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.901771][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 245.919513][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.930161][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.947673][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.957283][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.967665][ T24] usb 6-1: config 0 descriptor?? [ 245.972919][ T5915] usb 2-1: Product: syz [ 245.980400][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 245.990799][ T5915] usb 2-1: Manufacturer: syz [ 245.995714][ T5915] usb 2-1: SerialNumber: syz [ 246.179311][ T24] gspca_nw80x: reg_w err -71 [ 246.187831][ T24] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 246.268165][ T24] usb 6-1: USB disconnect, device number 56 [ 246.381948][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 246.398062][ T5915] usb 2-1: 0:2 : does not exist [ 246.454017][ T5915] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 246.525224][ T5915] usb 2-1: USB disconnect, device number 66 [ 246.551897][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 246.560077][ T10] usb 5-1: config 0 has no interfaces? [ 246.569006][ T6979] udevd[6979]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.593198][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.637261][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.700189][ T10] usb 5-1: config 0 descriptor?? [ 246.903264][ T8265] batadv_slave_0: entered promiscuous mode [ 246.950650][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.982225][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.997722][ T10] usb 5-1: string descriptor 0 read error: -71 [ 247.033403][ T10] usb 5-1: USB disconnect, device number 64 [ 247.092744][ T8264] batadv_slave_0: left promiscuous mode [ 247.452374][ T5915] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 247.515571][ T8285] option changes via remount are deprecated (pid=8283 comm=syz.1.685) [ 247.521880][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 247.616584][ T5915] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 247.625969][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.641806][ T5915] usb 6-1: Product: syz [ 247.646028][ T5915] usb 6-1: Manufacturer: syz [ 247.661206][ T5915] usb 6-1: SerialNumber: syz [ 247.683183][ T5915] usb 6-1: config 0 descriptor?? [ 247.693619][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.698187][ T5915] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 247.711129][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.735731][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.748741][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 247.760253][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.774636][ T10] usb 5-1: config 0 descriptor?? [ 247.795997][ T10] yurex 5-1:0.0: Could not submitting URB [ 247.821792][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 247.828106][ T10] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 247.898416][ T5915] pwc: Failed to set LED on/off time (-71) [ 247.906117][ T5915] pwc: send_video_command error -71 [ 247.911363][ T5915] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 247.948339][ T5915] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 247.969219][ T5915] usb 6-1: USB disconnect, device number 57 [ 247.984854][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.033139][ T8260] XFS (nbd4): SB validate failed with error -5. [ 248.042161][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.085215][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.099413][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 248.121969][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 248.152740][ T24] usb 4-1: config 0 descriptor?? [ 248.169120][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 248.176285][ T10] usb 5-1: USB disconnect, device number 65 [ 248.563839][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 248.580665][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.599087][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 248.824159][ T8284] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.686' resets device [ 248.861932][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 248.882496][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 248.893549][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 248.900575][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 248.908767][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 248.918924][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 248.926444][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 248.933756][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.941305][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.962186][ T8299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.968339][ T8299] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.971876][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 249.003007][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.017761][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.027047][ T8299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.034811][ T8299] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 249.042853][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.056120][ T24] pwc: Registered as video103. [ 249.061330][ T8299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.083014][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 249.092830][ T8299] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 249.115807][ T8299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.129781][ T24] usb 4-1: USB disconnect, device number 15 [ 249.137233][ T8299] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 249.142161][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 249.153519][ T8299] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 249.159583][ T8299] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 249.191219][ T8299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.216577][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 249.227448][ T8299] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 249.246653][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.267503][ T10] usb 5-1: Product: syz [ 249.272316][ T10] usb 5-1: Manufacturer: syz [ 249.286887][ T10] usb 5-1: SerialNumber: syz [ 249.319615][ T10] usb 5-1: config 0 descriptor?? [ 249.567285][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.578411][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.597561][ T10] usb 5-1: USB disconnect, device number 66 [ 251.311833][ T5833] Bluetooth: hci6: command 0x1003 tx timeout [ 251.312029][ T5838] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 252.040011][ T8355] FAULT_INJECTION: forcing a failure. [ 252.040011][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 252.071947][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.4.702 Not tainted syzkaller #0 PREEMPT(full) [ 252.071977][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.071990][ T8355] Call Trace: [ 252.071999][ T8355] [ 252.072007][ T8355] dump_stack_lvl+0x189/0x250 [ 252.072038][ T8355] ? __pfx____ratelimit+0x10/0x10 [ 252.072061][ T8355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.072086][ T8355] ? __pfx__printk+0x10/0x10 [ 252.072115][ T8355] ? __pfx___might_resched+0x10/0x10 [ 252.072134][ T8355] ? fs_reclaim_acquire+0x7d/0x100 [ 252.072177][ T8355] should_fail_ex+0x414/0x560 [ 252.072207][ T8355] should_failslab+0xa8/0x100 [ 252.072241][ T8355] __kmalloc_noprof+0xdf/0x800 [ 252.072268][ T8355] ? security_task_alloc+0x4d/0x360 [ 252.072297][ T8355] ? perf_event_init_task+0x12d/0x4b0 [ 252.072323][ T8355] security_task_alloc+0x4d/0x360 [ 252.072357][ T8355] copy_process+0x1530/0x3c00 [ 252.072396][ T8355] ? copy_process+0x97f/0x3c00 [ 252.072427][ T8355] ? __pfx_copy_process+0x10/0x10 [ 252.072463][ T8355] vhost_task_create+0x1ce/0x320 [ 252.072488][ T8355] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 252.072513][ T8355] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 252.072538][ T8355] ? __pfx_vhost_task_create+0x10/0x10 [ 252.072572][ T8355] ? __pfx_vhost_task_fn+0x10/0x10 [ 252.072618][ T8355] kvm_mmu_post_init_vm+0x14c/0x300 [ 252.072650][ T8355] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 252.072685][ T8355] ? __mutex_trylock_common+0x153/0x260 [ 252.072712][ T8355] ? __pfx___mutex_trylock_common+0x10/0x10 [ 252.072735][ T8355] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 252.072766][ T8355] ? rcu_is_watching+0x15/0xb0 [ 252.072787][ T8355] ? trace_contention_end+0x39/0x120 [ 252.072809][ T8355] ? look_up_lock_class+0x74/0x170 [ 252.072836][ T8355] ? register_lock_class+0x51/0x320 [ 252.072873][ T8355] ? __lock_acquire+0xab9/0xd20 [ 252.072946][ T8355] kvm_vcpu_ioctl+0x95c/0xe90 [ 252.072983][ T8355] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.073034][ T8355] ? __fget_files+0x2a/0x420 [ 252.073063][ T8355] ? __fget_files+0x3a0/0x420 [ 252.073086][ T8355] ? __fget_files+0x2a/0x420 [ 252.073113][ T8355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 252.073133][ T8355] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 252.073164][ T8355] __se_sys_ioctl+0xfc/0x170 [ 252.073198][ T8355] do_syscall_64+0xfa/0xfa0 [ 252.073221][ T8355] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.073244][ T8355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.073264][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 252.073289][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.073309][ T8355] RIP: 0033:0x7f8d56b8efc9 [ 252.073327][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.073346][ T8355] RSP: 002b:00007f8d57a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.073368][ T8355] RAX: ffffffffffffffda RBX: 00007f8d56de5fa0 RCX: 00007f8d56b8efc9 [ 252.073384][ T8355] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 252.073396][ T8355] RBP: 00007f8d57a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.073409][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.073421][ T8355] R13: 00007f8d56de6038 R14: 00007f8d56de5fa0 R15: 00007fff3698ee48 [ 252.073456][ T8355] [ 252.831926][ T799] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 252.936641][ T8363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.705'. [ 252.992195][ T799] usb 2-1: Using ep0 maxpacket: 8 [ 253.013064][ T799] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 253.027689][ T799] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 253.059745][ T799] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 253.081183][ T799] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 253.102607][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 253.131947][ T799] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 253.162353][ T799] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 253.181832][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.200193][ T799] usb 2-1: Product: syz [ 253.227965][ T799] usb 2-1: Manufacturer: syz [ 253.241779][ T799] usb 2-1: SerialNumber: syz [ 253.270377][ T799] usb 2-1: config 0 descriptor?? [ 253.303940][ T799] hub 2-1:0.0: bad descriptor, ignoring hub [ 253.309927][ T799] hub 2-1:0.0: probe with driver hub failed with error -5 [ 253.322279][ T30] audit: type=1326 audit(1761156504.294:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.5.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f806a78efc9 code=0x0 [ 253.433164][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 253.564277][ T8343] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.621800][ T799] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 253.665638][ T8343] kvm: pic: level sensitive irq not supported [ 253.666015][ T8343] kvm: pic: non byte read [ 253.742303][ T8386] FAULT_INJECTION: forcing a failure. [ 253.742303][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 253.758214][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT(full) [ 253.758243][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.758256][ T8386] Call Trace: [ 253.758265][ T8386] [ 253.758273][ T8386] dump_stack_lvl+0x189/0x250 [ 253.758317][ T8386] ? __pfx____ratelimit+0x10/0x10 [ 253.758341][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.758364][ T8386] ? __pfx__printk+0x10/0x10 [ 253.758391][ T8386] ? __pfx___might_resched+0x10/0x10 [ 253.758411][ T8386] ? fs_reclaim_acquire+0x7d/0x100 [ 253.758446][ T8386] should_fail_ex+0x414/0x560 [ 253.758476][ T8386] should_failslab+0xa8/0x100 [ 253.758510][ T8386] kmem_cache_alloc_noprof+0x88/0x700 [ 253.758537][ T8386] ? alloc_pid+0x9f/0xab0 [ 253.758557][ T8386] ? copy_thread+0x4c6/0x9a0 [ 253.758592][ T8386] alloc_pid+0x9f/0xab0 [ 253.758626][ T8386] copy_process+0x198e/0x3c00 [ 253.758665][ T8386] ? copy_process+0x97f/0x3c00 [ 253.758695][ T8386] ? __pfx_copy_process+0x10/0x10 [ 253.758729][ T8386] vhost_task_create+0x1ce/0x320 [ 253.758753][ T8386] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 253.758779][ T8386] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 253.758805][ T8386] ? __pfx_vhost_task_create+0x10/0x10 [ 253.758838][ T8386] ? __pfx_vhost_task_fn+0x10/0x10 [ 253.758882][ T8386] kvm_mmu_post_init_vm+0x14c/0x300 [ 253.758913][ T8386] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 253.758948][ T8386] ? __mutex_trylock_common+0x153/0x260 [ 253.758975][ T8386] ? __pfx___mutex_trylock_common+0x10/0x10 [ 253.759000][ T8386] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 253.759029][ T8386] ? rcu_is_watching+0x15/0xb0 [ 253.759050][ T8386] ? trace_contention_end+0x39/0x120 [ 253.759072][ T8386] ? look_up_lock_class+0x74/0x170 [ 253.759099][ T8386] ? register_lock_class+0x51/0x320 [ 253.759134][ T8386] ? __lock_acquire+0xab9/0xd20 [ 253.759196][ T8386] kvm_vcpu_ioctl+0x95c/0xe90 [ 253.759227][ T8386] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.759286][ T8386] ? __fget_files+0x2a/0x420 [ 253.759315][ T8386] ? __fget_files+0x3a0/0x420 [ 253.759337][ T8386] ? __fget_files+0x2a/0x420 [ 253.759364][ T8386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.759386][ T8386] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.759411][ T8386] __se_sys_ioctl+0xfc/0x170 [ 253.759445][ T8386] do_syscall_64+0xfa/0xfa0 [ 253.759467][ T8386] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.759491][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.759511][ T8386] ? clear_bhb_loop+0x60/0xb0 [ 253.759536][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.759556][ T8386] RIP: 0033:0x7f8d56b8efc9 [ 253.759576][ T8386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.759593][ T8386] RSP: 002b:00007f8d57a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.759615][ T8386] RAX: ffffffffffffffda RBX: 00007f8d56de5fa0 RCX: 00007f8d56b8efc9 [ 253.759631][ T8386] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 253.759643][ T8386] RBP: 00007f8d57a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.759655][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.759667][ T8386] R13: 00007f8d56de6038 R14: 00007f8d56de5fa0 R15: 00007fff3698ee48 [ 253.759702][ T8386] [ 253.785674][ T799] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 254.120107][ T799] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.133048][ T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.145711][ T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.157082][ T799] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.170095][ T799] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.218914][ T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.255425][ T799] usb 6-1: config 0 descriptor?? [ 254.284063][ T8376] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 254.346131][ T5915] usb 2-1: USB disconnect, device number 67 [ 254.512051][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.690533][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 254.703913][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 254.746385][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.768948][ T799] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 254.799923][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.832026][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.850407][ T10] usb 4-1: Product: syz [ 254.854974][ T10] usb 4-1: Manufacturer: syz [ 254.859601][ T10] usb 4-1: SerialNumber: syz [ 254.882886][ T10] usb 4-1: config 0 descriptor?? [ 254.920448][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.945074][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 255.121428][ T8409] overlayfs: missing 'workdir' [ 255.511642][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 255.511806][ T799] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 255.512181][ T800] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 255.548445][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 255.696009][ T800] usb 2-1: Using ep0 maxpacket: 8 [ 255.707233][ T800] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.724965][ T799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.730970][ T800] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.746183][ T800] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.752967][ T799] usb 5-1: not running at top speed; connect to a high speed hub [ 255.759182][ T800] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.778629][ T800] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 255.783301][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 255.802883][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.814373][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 255.827578][ T800] usb 2-1: config 0 descriptor?? [ 255.833131][ T799] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.833158][ T799] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.838645][ T799] usb 5-1: string descriptor 0 read error: -22 [ 255.872304][ T10] usb 4-1: USB disconnect, device number 16 [ 255.880115][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 255.891633][ T799] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.901206][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.913394][ T10] em28xx 4-1:0.0: Freeing device [ 255.939117][ T799] usb 5-1: 0:2 : does not exist [ 256.283207][ T800] uclogic 0003:5543:0042.0017: hidraw1: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 256.333849][ T800] usb 6-1: USB disconnect, device number 58 [ 256.489159][ T8412] netlink: 'syz.1.721': attribute type 8 has an invalid length. [ 256.522421][ T10] usb 2-1: USB disconnect, device number 68 [ 256.569836][ T8426] FAULT_INJECTION: forcing a failure. [ 256.569836][ T8426] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 256.569949][ T799] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 256.583633][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.723'. [ 256.611551][ T8426] CPU: 0 UID: 0 PID: 8426 Comm: syz.3.724 Not tainted syzkaller #0 PREEMPT(full) [ 256.611579][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.611597][ T8426] Call Trace: [ 256.611605][ T8426] [ 256.611614][ T8426] dump_stack_lvl+0x189/0x250 [ 256.611644][ T8426] ? __pfx____ratelimit+0x10/0x10 [ 256.611667][ T8426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.611690][ T8426] ? __pfx__printk+0x10/0x10 [ 256.611714][ T8426] ? fs_reclaim_acquire+0x7d/0x100 [ 256.611753][ T8426] should_fail_ex+0x414/0x560 [ 256.611783][ T8426] prepare_alloc_pages+0x22b/0x650 [ 256.611822][ T8426] __alloc_frozen_pages_noprof+0x123/0x370 [ 256.611859][ T8426] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.611910][ T8426] ? policy_nodemask+0x27c/0x720 [ 256.611938][ T8426] ? __lock_acquire+0xab9/0xd20 [ 256.611973][ T8426] alloc_pages_bulk_noprof+0x560/0x710 [ 256.612012][ T8426] ? alloc_pages_noprof+0xbe/0x190 [ 256.612048][ T8426] __kasan_populate_vmalloc+0xc1/0x1d0 [ 256.612082][ T8426] alloc_vmap_area+0xdf0/0x1520 [ 256.612129][ T8426] ? __pfx_alloc_vmap_area+0x10/0x10 [ 256.612152][ T8426] ? __kasan_kmalloc+0x93/0xb0 [ 256.612186][ T8426] ? __get_vm_area_node+0x13f/0x300 [ 256.612212][ T8426] ? copy_process+0x54b/0x3c00 [ 256.612233][ T8426] __get_vm_area_node+0x1f8/0x300 [ 256.612266][ T8426] __vmalloc_node_range_noprof+0x32d/0x1470 [ 256.612294][ T8426] ? copy_process+0x54b/0x3c00 [ 256.612319][ T8426] ? percpu_ref_get_many+0x19/0x140 [ 256.612353][ T8426] ? percpu_ref_get_many+0x19/0x140 [ 256.612383][ T8426] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 256.612407][ T8426] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.612442][ T8426] ? memcpy_and_pad+0x48/0x80 [ 256.612471][ T8426] __vmalloc_node_noprof+0xc2/0x110 [ 256.612498][ T8426] ? copy_process+0x54b/0x3c00 [ 256.612515][ T8426] ? copy_process+0x54b/0x3c00 [ 256.612537][ T8426] dup_task_struct+0x3d4/0x830 [ 256.612558][ T8426] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.612585][ T8426] copy_process+0x54b/0x3c00 [ 256.612637][ T8426] ? __pfx_copy_process+0x10/0x10 [ 256.612673][ T8426] vhost_task_create+0x1ce/0x320 [ 256.612698][ T8426] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 256.612724][ T8426] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 256.612749][ T8426] ? __pfx_vhost_task_create+0x10/0x10 [ 256.612782][ T8426] ? __pfx_vhost_task_fn+0x10/0x10 [ 256.612825][ T8426] kvm_mmu_post_init_vm+0x14c/0x300 [ 256.612857][ T8426] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 256.612901][ T8426] ? __mutex_trylock_common+0x153/0x260 [ 256.612928][ T8426] ? __pfx___mutex_trylock_common+0x10/0x10 [ 256.612954][ T8426] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 256.612985][ T8426] ? rcu_is_watching+0x15/0xb0 [ 256.613006][ T8426] ? trace_contention_end+0x39/0x120 [ 256.613028][ T8426] ? look_up_lock_class+0x74/0x170 [ 256.613055][ T8426] ? register_lock_class+0x51/0x320 [ 256.613091][ T8426] ? __lock_acquire+0xab9/0xd20 [ 256.613151][ T8426] kvm_vcpu_ioctl+0x95c/0xe90 [ 256.613183][ T8426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.613231][ T8426] ? __fget_files+0x2a/0x420 [ 256.613260][ T8426] ? __fget_files+0x3a0/0x420 [ 256.613282][ T8426] ? __fget_files+0x2a/0x420 [ 256.613309][ T8426] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.613330][ T8426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.613355][ T8426] __se_sys_ioctl+0xfc/0x170 [ 256.613389][ T8426] do_syscall_64+0xfa/0xfa0 [ 256.613412][ T8426] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.613435][ T8426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.613456][ T8426] ? clear_bhb_loop+0x60/0xb0 [ 256.613481][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.613501][ T8426] RIP: 0033:0x7f043078efc9 [ 256.613519][ T8426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.613536][ T8426] RSP: 002b:00007f04315f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.613558][ T8426] RAX: ffffffffffffffda RBX: 00007f04309e5fa0 RCX: 00007f043078efc9 [ 256.613573][ T8426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 256.613585][ T8426] RBP: 00007f04315f0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.613598][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.613610][ T8426] R13: 00007f04309e6038 R14: 00007f04309e5fa0 R15: 00007fff19337218 [ 256.613645][ T8426] [ 257.070804][ T8426] syz.3.724: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/ [ 257.074979][ T799] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 257.100780][ T8426] ,mems_allowed=0-1 [ 257.101920][ T799] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 257.116249][ T8426] CPU: 1 UID: 0 PID: 8426 Comm: syz.3.724 Not tainted syzkaller #0 PREEMPT(full) [ 257.116279][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.116292][ T8426] Call Trace: [ 257.116300][ T8426] [ 257.116309][ T8426] dump_stack_lvl+0x189/0x250 [ 257.116339][ T8426] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 257.116371][ T8426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.116395][ T8426] ? __pfx__printk+0x10/0x10 [ 257.116418][ T8426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.116445][ T8426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.116479][ T8426] warn_alloc+0x214/0x310 [ 257.116508][ T8426] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.116537][ T8426] ? __pfx_warn_alloc+0x10/0x10 [ 257.116568][ T8426] ? __get_vm_area_node+0x13f/0x300 [ 257.116596][ T8426] ? copy_process+0x54b/0x3c00 [ 257.116617][ T8426] ? __get_vm_area_node+0x211/0x300 [ 257.116651][ T8426] __vmalloc_node_range_noprof+0x352/0x1470 [ 257.116687][ T8426] ? percpu_ref_get_many+0x19/0x140 [ 257.116724][ T8426] ? percpu_ref_get_many+0x19/0x140 [ 257.116756][ T8426] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 257.116781][ T8426] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.116816][ T8426] ? memcpy_and_pad+0x48/0x80 [ 257.116845][ T8426] __vmalloc_node_noprof+0xc2/0x110 [ 257.116872][ T8426] ? copy_process+0x54b/0x3c00 [ 257.116890][ T8426] ? copy_process+0x54b/0x3c00 [ 257.116912][ T8426] dup_task_struct+0x3d4/0x830 [ 257.116932][ T8426] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.116959][ T8426] copy_process+0x54b/0x3c00 [ 257.117011][ T8426] ? __pfx_copy_process+0x10/0x10 [ 257.117048][ T8426] vhost_task_create+0x1ce/0x320 [ 257.117081][ T8426] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 257.117107][ T8426] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 257.117133][ T8426] ? __pfx_vhost_task_create+0x10/0x10 [ 257.117167][ T8426] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.117213][ T8426] kvm_mmu_post_init_vm+0x14c/0x300 [ 257.117244][ T8426] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 257.117277][ T8426] ? __mutex_trylock_common+0x153/0x260 [ 257.117302][ T8426] ? __pfx___mutex_trylock_common+0x10/0x10 [ 257.117326][ T8426] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 257.117357][ T8426] ? rcu_is_watching+0x15/0xb0 [ 257.117378][ T8426] ? trace_contention_end+0x39/0x120 [ 257.117401][ T8426] ? look_up_lock_class+0x74/0x170 [ 257.117427][ T8426] ? register_lock_class+0x51/0x320 [ 257.117463][ T8426] ? __lock_acquire+0xab9/0xd20 [ 257.117525][ T8426] kvm_vcpu_ioctl+0x95c/0xe90 [ 257.117558][ T8426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.117607][ T8426] ? __fget_files+0x2a/0x420 [ 257.117636][ T8426] ? __fget_files+0x3a0/0x420 [ 257.117658][ T8426] ? __fget_files+0x2a/0x420 [ 257.117684][ T8426] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.117706][ T8426] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.117730][ T8426] __se_sys_ioctl+0xfc/0x170 [ 257.117763][ T8426] do_syscall_64+0xfa/0xfa0 [ 257.117784][ T8426] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.117807][ T8426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.117828][ T8426] ? clear_bhb_loop+0x60/0xb0 [ 257.117853][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.117870][ T8426] RIP: 0033:0x7f043078efc9 [ 257.117885][ T8426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.117899][ T8426] RSP: 002b:00007f04315f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.117918][ T8426] RAX: ffffffffffffffda RBX: 00007f04309e5fa0 RCX: 00007f043078efc9 [ 257.117931][ T8426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 257.117941][ T8426] RBP: 00007f04315f0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.117952][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.117963][ T8426] R13: 00007f04309e6038 R14: 00007f04309e5fa0 R15: 00007fff19337218 [ 257.117996][ T8426] [ 257.118019][ T8426] Mem-Info: [ 257.225770][ T799] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 257.312095][ T8426] active_anon:8809 inactive_anon:0 isolated_anon:0 [ 257.312095][ T8426] active_file:15367 inactive_file:39971 isolated_file:0 [ 257.312095][ T8426] unevictable:768 dirty:40 writeback:0 [ 257.312095][ T8426] slab_reclaimable:9822 slab_unreclaimable:103448 [ 257.312095][ T8426] mapped:37493 shmem:1595 pagetables:1392 [ 257.312095][ T8426] sec_pagetables:0 bounce:0 [ 257.312095][ T8426] kernel_misc_reclaimable:0 [ 257.312095][ T8426] free:1292624 free_pcp:13311 free_cma:0 [ 257.326933][ T799] usb 5-1: USB disconnect, device number 67 [ 257.433669][ T8426] Node 0 active_anon:35164kB inactive_anon:0kB active_file:61468kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149956kB dirty:156kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13020kB pagetables:5484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.611917][ T8426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.684684][ T8426] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.813258][ T8435] vivid-000: disconnect [ 257.822881][ T8426] lowmem_reserve[]: 0 2494 2496 2496 2496 [ 257.828757][ T8426] Node 0 DMA32 free:1260732kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35064kB inactive_anon:0kB active_file:61468kB inactive_file:159684kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2554796kB mlocked:0kB bounce:0kB free_pcp:36148kB local_pcp:21840kB free_cma:0kB [ 257.841047][ T8434] vivid-000: reconnect [ 257.924939][ T8426] lowmem_reserve[]: 0 0 1 1 1 [ 257.929744][ T8426] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.972790][ T8426] lowmem_reserve[]: 0 0 0 0 0 [ 257.980064][ T8426] Node 1 Normal free:3895148kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17344kB local_pcp:7136kB free_cma:0kB [ 258.048082][ T8426] lowmem_reserve[]: 0 0 0 0 0 [ 258.061836][ T8426] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 258.096684][ T800] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 258.125727][ T8426] Node 0 DMA32: 1510*4kB (UME) 491*8kB (UM) 203*16kB (UME) 375*32kB (UME) 258*64kB (UME) 118*128kB (UME) 93*256kB (UME) 43*512kB (UM) 15*1024kB (UME) 5*2048kB (UME) 277*4096kB (UM) = 1262848kB [ 258.146391][ T8426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 258.159149][ T8426] Node 1 Normal: 181*4kB (UME) 53*8kB (UME) 35*16kB (UME) 122*32kB (UME) 34*64kB (UME) 6*128kB (UME) 4*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895148kB [ 258.188541][ T8426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.199927][ T8426] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 258.251845][ T8426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.282454][ T800] usb 2-1: Using ep0 maxpacket: 32 [ 258.284957][ T8426] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 258.291918][ T800] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 258.318338][ T8426] 56925 total pagecache pages [ 258.334181][ T8426] 0 pages in swap cache [ 258.340906][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.341941][ T8426] Free swap = 124996kB [ 258.368562][ T8426] Total swap = 124996kB [ 258.378688][ T8426] 2097051 pages RAM [ 258.393508][ T800] usb 2-1: config 0 descriptor?? [ 258.405625][ T8426] 0 pages HighMem/MovableOnly [ 258.422085][ T8426] 426454 pages reserved [ 258.434129][ T8426] 0 pages cma reserved [ 258.460244][ T800] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 258.701977][ T799] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 258.854528][ T799] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 258.864171][ T799] usb 6-1: config 0 has no interface number 0 [ 258.870688][ T799] usb 6-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 258.895562][ T799] usb 6-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 258.915873][ T799] usb 6-1: config 0 interface 49 has no altsetting 0 [ 258.934800][ T799] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 258.944040][ T799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.953025][ T799] usb 6-1: Product: syz [ 258.957386][ T799] usb 6-1: Manufacturer: syz [ 258.962121][ T799] usb 6-1: SerialNumber: syz [ 258.980458][ T799] usb 6-1: config 0 descriptor?? [ 259.101847][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 259.207426][ T799] usb 6-1: USB disconnect, device number 59 [ 259.261828][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 259.269972][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 259.279072][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.289452][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.303031][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.315555][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.329760][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.339619][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.861907][ T8433] netlink: 'syz.1.727': attribute type 29 has an invalid length. [ 259.877324][ T8433] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.727'. [ 259.908601][ T800] gspca_vc032x: reg_w err -71 [ 259.918284][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.938622][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.947194][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.954742][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.960787][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.967324][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.974145][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.985444][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.991087][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 259.998792][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.004727][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.010308][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.016803][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.022622][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.028060][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.035535][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.040879][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.047009][ T800] gspca_vc032x: I2c Bus Busy Wait 00 [ 260.052780][ T800] gspca_vc032x: Unknown sensor... [ 260.058144][ T800] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 260.079608][ T800] usb 2-1: USB disconnect, device number 69 [ 260.137436][ T8466] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 260.154031][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.736'. [ 260.531927][ T5896] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 260.701968][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 260.716785][ T5896] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 260.725272][ T5896] usb 6-1: config 0 has no interface number 0 [ 260.731413][ T5896] usb 6-1: config 0 interface 12 has no altsetting 0 [ 260.750698][ T5896] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 260.794201][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.813698][ T5896] usb 6-1: Product: syz [ 260.817978][ T5896] usb 6-1: Manufacturer: syz [ 260.841757][ T5896] usb 6-1: SerialNumber: syz [ 260.852760][ T5896] usb 6-1: config 0 descriptor?? [ 260.862051][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 261.014758][ T24] usb 5-1: USB disconnect, device number 68 [ 261.023845][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 261.051836][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.072180][ T800] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 261.075174][ T5896] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 261.089053][ T10] usb 2-1: config 0 descriptor?? [ 261.108612][ T5896] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 261.116471][ T5896] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 261.128510][ T5896] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 261.147356][ T5896] usb 6-1: USB disconnect, device number 60 [ 261.173099][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.179480][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.251784][ T800] usb 4-1: device descriptor read/64, error -71 [ 261.307157][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 261.511767][ T800] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 261.545752][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 261.564854][ T10] [drm] Initialized udl on minor 2 [ 261.651767][ T800] usb 4-1: device descriptor read/64, error -71 [ 261.773002][ T800] usb usb4-port1: attempt power cycle [ 261.881265][ T8491] netlink: 'syz.4.745': attribute type 6 has an invalid length. [ 261.898580][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.920285][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 261.948090][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 261.969693][ T5819] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.996499][ T10] usb 2-1: USB disconnect, device number 70 [ 262.012290][ T5819] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 262.131876][ T800] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.165178][ T800] usb 4-1: device descriptor read/8, error -71 [ 262.421802][ T800] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 262.452490][ T800] usb 4-1: device descriptor read/8, error -71 [ 262.563220][ T800] usb usb4-port1: unable to enumerate USB device [ 262.651784][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 262.737913][ T8514] can: request_module (can-proto-0) failed. [ 262.772220][ T5819] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 262.821751][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 262.828696][ T10] usb 5-1: config 1 has an invalid interface number: 194 but max is 0 [ 262.837663][ T10] usb 5-1: config 1 has no interface number 0 [ 262.848368][ T10] usb 5-1: config 1 interface 194 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 262.864838][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=6a.1e [ 262.874238][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.882646][ T10] usb 5-1: Product: syz [ 262.886900][ T10] usb 5-1: Manufacturer: syz [ 262.891567][ T10] usb 5-1: SerialNumber: syz [ 262.923230][ T10] kvaser_usb 5-1:1.194: error -ENODEV: Cannot get usb endpoint(s) [ 262.934967][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.954801][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.964970][ T5819] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 262.975202][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.986416][ T5819] usb 6-1: config 0 descriptor?? [ 263.130276][ T800] usb 5-1: USB disconnect, device number 69 [ 263.412627][ T5819] hid_parser_main: 78 callbacks suppressed [ 263.412652][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.428637][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.435868][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.443213][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.450210][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.460977][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.468317][ T5819] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 263.480104][ T5819] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 263.846390][ T8528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.391759][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 264.563697][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 264.575856][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.610913][ T24] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 264.639858][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.656303][ T24] usb 5-1: Product: syz [ 264.665291][ T24] usb 5-1: Manufacturer: syz [ 264.675469][ T24] usb 5-1: SerialNumber: syz [ 264.719335][ T24] usb 5-1: config 0 descriptor?? [ 264.727804][ T8531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.735726][ T8531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.965593][ T8531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.986999][ T8531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.004221][ T31] INFO: task syz.2.128:6348 blocked for more than 143 seconds. [ 265.012230][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 265.042005][ T31] Blocked by coredump. [ 265.048448][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.071717][ T31] task:syz.2.128 state:D stack:24840 pid:6348 tgid:6347 ppid:5829 task_flags:0x400548 flags:0x00080000 [ 265.131839][ T31] Call Trace: [ 265.135321][ T31] [ 265.169586][ T31] __schedule+0x17c4/0x4d60 [ 265.180355][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.197333][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.221812][ T31] ? __pfx___schedule+0x10/0x10 [ 265.226793][ T31] ? schedule+0x91/0x360 [ 265.231102][ T31] schedule+0x165/0x360 [ 265.291991][ T31] schedule_preempt_disabled+0x13/0x30 [ 265.297564][ T31] __mutex_lock+0x7e6/0x1350 [ 265.328342][ T31] ? __mutex_lock+0x5bb/0x1350 [ 265.351121][ T31] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 265.368120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 265.381816][ T5915] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 265.387577][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 265.414544][ T31] ? _raw_spin_unlock+0x28/0x50 [ 265.419502][ T31] ? xa_erase+0xd5/0xf0 [ 265.427767][ T31] io_uring_del_tctx_node+0xf0/0x2c0 [ 265.433414][ T31] io_uring_clean_tctx+0xd4/0x1a0 [ 265.438497][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.443782][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 265.449499][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.460523][ T31] ? io_uring_drop_tctx_refs+0x108/0x1c0 [ 265.466651][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 265.474792][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 265.480845][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.487362][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.492991][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 265.498537][ T31] do_exit+0x345/0x2300 [ 265.505449][ T31] ? do_raw_spin_lock+0x121/0x290 [ 265.510548][ T31] ? __pfx_do_exit+0x10/0x10 [ 265.515499][ T31] do_group_exit+0x21c/0x2d0 [ 265.520201][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.525753][ T31] get_signal+0x1285/0x1340 [ 265.530379][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 265.538407][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 265.544957][ T31] ? __se_sys_futex+0x36f/0x400 [ 265.549934][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 265.556835][ T31] exit_to_user_mode_loop+0x72/0x130 [ 265.568289][ T31] do_syscall_64+0x2bd/0xfa0 [ 265.573187][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.578444][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.587258][ T31] ? clear_bhb_loop+0x60/0xb0 [ 265.592269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.598222][ T31] RIP: 0033:0x7fa1b198efc9 [ 265.603374][ T31] RSP: 002b:00007fa1afbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.614490][ T31] RAX: fffffffffffffe00 RBX: 00007fa1b1be5fa8 RCX: 00007fa1b198efc9 [ 265.622932][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1b1be5fa8 [ 265.630961][ T31] RBP: 00007fa1b1be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 265.640628][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.650958][ T31] R13: 00007fa1b1be6038 R14: 00007ffc23d2ea20 R15: 00007ffc23d2eb08 [ 265.659394][ T31] [ 265.688955][ T31] [ 265.688955][ T31] Showing all locks held in the system: [ 265.741806][ T31] 5 locks held by kworker/1:0/24: [ 265.746937][ T31] #0: ffff88801da9b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 265.781723][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 265.812253][ T31] #2: ffff888027f45198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 265.821298][ T31] #3: ffff88806f7b1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 265.861789][ T31] #4: ffff88807f0b2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 265.883238][ T31] 1 lock held by khungtaskd/31: [ 265.888301][ T31] #0: ffffffff8e13d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 265.921813][ T31] 3 locks held by kworker/u8:8/1168: [ 265.927183][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 265.957179][ T31] #1: ffffc90003c5fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 266.013981][ T31] #2: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 266.062120][ T31] 2 locks held by getty/5589: [ 266.066906][ T31] #0: ffff8880304c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 266.111710][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 266.161793][ T31] 6 locks held by kworker/0:3/5819: [ 266.167079][ T31] #0: ffff88801da9b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 266.228983][ T31] #1: ffffc900041cfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 266.244986][ T31] #2: ffff888145314198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 266.254201][ T31] #3: ffff88805e9bb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 266.263605][ T31] #4: ffff8880273b7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 266.279617][ T31] #5: ffff888054ce5a20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 266.289233][ T31] 2 locks held by kworker/0:5/5896: [ 266.321869][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 266.341731][ T31] #1: ffffc9000460fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 266.368075][ T31] 1 lock held by syz.2.128/6348: [ 266.380421][ T31] #0: ffff88805cd340a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0xf0/0x2c0 [ 266.401055][ T31] 3 locks held by syz.2.128/6350: [ 266.407962][ T31] 4 locks held by udevd/6979: [ 266.416164][ T31] #0: ffff888051966d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 266.428356][ T31] #1: ffff888051c3ac88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 266.441573][ T31] #2: ffff888051fe0788 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 266.451257][ T31] #3: ffff88806f7b1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 266.462960][ T31] 1 lock held by syz.3.411/7330: [ 266.467992][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 266.477173][ T31] 2 locks held by syz.3.743/8481: [ 266.485798][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 266.494980][ T31] #1: ffffffff8e143178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 266.506169][ T31] 1 lock held by syz.5.752/8506: [ 266.511158][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 266.520535][ T31] 1 lock held by syz.5.752/8520: [ 266.528967][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 266.539485][ T31] 1 lock held by syz.1.753/8511: [ 266.544522][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 266.553618][ T31] 1 lock held by syz.4.757/8530: [ 266.558593][ T31] #0: ffffffff8f4eb188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 266.598455][ T31] [ 266.600870][ T31] ============================================= [ 266.600870][ T31] [ 266.625915][ T31] NMI backtrace for cpu 0 [ 266.625936][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 266.625959][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.625976][ T31] Call Trace: [ 266.625984][ T31] [ 266.626011][ T31] dump_stack_lvl+0x189/0x250 [ 266.626044][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.626068][ T31] ? __pfx__printk+0x10/0x10 [ 266.626102][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 266.626136][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 266.626169][ T31] ? __pfx__printk+0x10/0x10 [ 266.626194][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 266.626225][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 266.626260][ T31] watchdog+0xfa9/0xff0 [ 266.626295][ T31] ? watchdog+0x1f4/0xff0 [ 266.626333][ T31] kthread+0x711/0x8a0 [ 266.626371][ T31] ? __pfx_watchdog+0x10/0x10 [ 266.626400][ T31] ? __pfx_kthread+0x10/0x10 [ 266.626426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.626447][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.626468][ T31] ? __pfx_kthread+0x10/0x10 [ 266.626492][ T31] ret_from_fork+0x4bc/0x870 [ 266.626525][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 266.626563][ T31] ? __switch_to_asm+0x39/0x70 [ 266.626587][ T31] ? __switch_to_asm+0x33/0x70 [ 266.626611][ T31] ? __pfx_kthread+0x10/0x10 [ 266.626637][ T31] ret_from_fork_asm+0x1a/0x30 [ 266.626681][ T31] [ 266.626711][ T31] Sending NMI from CPU 0 to CPUs 1: [ 266.775118][ C1] NMI backtrace for cpu 1 [ 266.775145][ C1] CPU: 1 UID: 0 PID: 6350 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT(full) [ 266.775165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.775176][ C1] RIP: 0010:io_uring_show_fdinfo+0x2e7/0x1840 [ 266.775202][ C1] Code: 00 00 00 48 89 44 24 78 48 c1 e8 03 48 89 44 24 70 89 6c 24 10 4c 89 74 24 60 48 8b 44 24 38 8a 04 18 84 c0 0f 85 6d 04 00 00 <48> 8b 44 24 08 44 8b 20 44 89 e6 81 e6 00 00 01 00 31 ff e8 f1 3d [ 266.775220][ C1] RSP: 0018:ffffc9001817f928 EFLAGS: 00000246 [ 266.775237][ C1] RAX: 1ffff1100b9a6800 RBX: dffffc0000000000 RCX: 0000000000080000 [ 266.775250][ C1] RDX: ffffc9000e392000 RSI: 000000000007ffff RDI: 0000000000080000 [ 266.775262][ C1] RBP: 00000000000083f2 R08: ffff88802f1280aa R09: 1ffff11005e25015 [ 266.775274][ C1] R10: dffffc0000000000 R11: ffffed1005e25016 R12: 0000000000000100 [ 266.775286][ C1] R13: 00000000000083f0 R14: ffff88805cd340d0 R15: ffff88802951e250 [ 266.775298][ C1] FS: 00007fa1af7726c0(0000) GS:ffff888125de4000(0000) knlGS:0000000000000000 [ 266.775313][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.775324][ C1] CR2: 000055cd8dd54000 CR3: 000000007cb42000 CR4: 00000000003526f0 [ 266.775340][ C1] Call Trace: [ 266.775348][ C1] [ 266.775365][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 266.775388][ C1] ? __pfx_io_uring_show_fdinfo+0x10/0x10 [ 266.775408][ C1] seq_show+0x5bc/0x730 [ 266.775434][ C1] seq_read_iter+0x4ef/0xe20 [ 266.775470][ C1] seq_read+0x369/0x480 [ 266.775500][ C1] ? __pfx_seq_read+0x10/0x10 [ 266.775532][ C1] ? rw_verify_area+0x2a6/0x4d0 [ 266.775547][ C1] ? __lock_acquire+0xab9/0xd20 [ 266.775570][ C1] ? __pfx_seq_read+0x10/0x10 [ 266.775595][ C1] vfs_read+0x200/0xa30 [ 266.775610][ C1] ? fdget_pos+0x247/0x320 [ 266.775633][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 266.775656][ C1] ? __pfx_vfs_read+0x10/0x10 [ 266.775672][ C1] ? __fget_files+0x2a/0x420 [ 266.775693][ C1] ? __fget_files+0x3a0/0x420 [ 266.775711][ C1] ? __fget_files+0x2a/0x420 [ 266.775734][ C1] ksys_read+0x145/0x250 [ 266.775751][ C1] ? __pfx_ksys_read+0x10/0x10 [ 266.775770][ C1] ? do_syscall_64+0xbe/0xfa0 [ 266.775794][ C1] do_syscall_64+0xfa/0xfa0 [ 266.775813][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.775832][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.775849][ C1] ? clear_bhb_loop+0x60/0xb0 [ 266.775868][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.775884][ C1] RIP: 0033:0x7fa1b198efc9 [ 266.775899][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.775916][ C1] RSP: 002b:00007fa1af772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.775933][ C1] RAX: ffffffffffffffda RBX: 00007fa1b1be6180 RCX: 00007fa1b198efc9 [ 266.775946][ C1] RDX: 0000000000002020 RSI: 0000200000000400 RDI: 0000000000000005 [ 266.775957][ C1] RBP: 00007fa1b1a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.775967][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.775978][ C1] R13: 00007fa1b1be6218 R14: 00007fa1b1be6180 R15: 00007ffc23d2eb08 [ 266.776000][ C1] [ 268.512242][ T5819] arvo 0003:1E7D:30D4.0018: couldn't init struct arvo_device [ 268.522064][ T5819] arvo 0003:1E7D:30D4.0018: couldn't install keyboard [ 268.563208][ T5819] arvo 0003:1E7D:30D4.0018: probe with driver arvo failed with error -110 [ 268.628004][ T24] Error reading MAC address [ 268.772131][ T24] usb 5-1: USB disconnect, device number 70 [ 268.839069][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.965712][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.055587][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.114372][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.274650][ T5819] usb 6-1: USB disconnect, device number 61 [ 269.281585][ T13] bridge_slave_1: left allmulticast mode [ 269.302541][ T13] bridge_slave_1: left promiscuous mode [ 269.311042][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.333466][ T13] bridge_slave_0: left promiscuous mode [ 269.339584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.788334][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.801937][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.814286][ T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 269.825279][ T13] bond0 (unregistering): Released all slaves [ 269.924432][ T13] tipc: Left network mode [ 270.285574][ T13] hsr_slave_0: left promiscuous mode [ 270.306112][ T13] hsr_slave_1: left promiscuous mode [ 270.322912][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.330393][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.353450][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.360894][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.426163][ T13] veth1_macvtap: left promiscuous mode [ 270.441992][ T13] veth0_macvtap: left promiscuous mode [ 270.447703][ T13] veth1_vlan: left promiscuous mode [ 270.462130][ T13] veth0_vlan: left promiscuous mode [ 271.118150][ T13] team0 (unregistering): Port device team_slave_1 removed [ 271.163335][ T13] team0 (unregistering): Port device team_slave_0 removed [ 272.456529][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.574872][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.705254][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.815360][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.126286][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.233994][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.351636][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.447740][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.663509][ T13] bridge_slave_1: left allmulticast mode [ 273.669214][ T13] bridge_slave_1: left promiscuous mode [ 273.678969][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.689681][ T13] : left allmulticast mode [ 273.699105][ T13] : left promiscuous mode [ 273.706174][ T13] bridge0: port 1() entered disabled state [ 273.720531][ T13] bridge_slave_1: left allmulticast mode [ 273.742914][ T13] bridge_slave_1: left promiscuous mode [ 273.748764][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.784361][ T13] bridge_slave_0: left allmulticast mode [ 273.790068][ T13] bridge_slave_0: left promiscuous mode [ 273.808284][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.450497][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.462550][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.476106][ T13] bond0 (unregistering): Released all slaves [ 274.846780][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.860008][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.873832][ T13] bond0 (unregistering): Released all slaves