last executing test programs: 9.463055509s ago: executing program 3 (id=530): r0 = socket(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x6, 0x80000000, 0x10000004, 0x10000, 0xffffffffffffffff, 0x10000, 0x87a, 0x8000000000000, 0x9, 0x40000000000, 0x8, 0x0, 0x80000000100004, 0x8, 0x400008008], 0x200000, 0x110c00}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=ANY=[@ANYBLOB="58010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x44084) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000025c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0, @ANYRES64=r4, @ANYRES16=r1, @ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="a35857bfe27e23b1654023b8edfbdbc4785d0d879fdf2b4751839012116441bcca594693f153812e"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000002640)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r3, 0x81, 0x4, &(0x7f0000000300)="b556a200") ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x6bb5, &(0x7f0000000100)={0x0, 0x54a1, 0x5, 0x1, 0x37e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xffbffffc, 0x0, 0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') read$FUSE(r11, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r11, &(0x7f0000005dc0)={0x2020}, 0x2020) r12 = syz_io_uring_setup(0x6316, &(0x7f0000002680)={0x0, 0x11a8, 0x10000, 0x1, 0x100002cf, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r13, 0x0, &(0x7f0000002580)=@IORING_OP_MADVISE={0x19, 0x46, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x1, {0x0, r14}}) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x42, 0x0, r11, &(0x7f00000000c0)={0x1000000a}, r1, 0x3, 0x0, 0x0, {0x0, r14}}) 8.771733096s ago: executing program 2 (id=535): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x5475b000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x6, 0xfca2, 0x42, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x43, 0x10001}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x400}}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x30]}}, &(0x7f00000002c0)=""/198, 0x47, 0xc6, 0x1, 0x1000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8001, 0x0}, 0x8) r4 = syz_open_dev$vcsn(&(0x7f0000000480), 0x691, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x1f, 0x54d0, 0xff, 0xbd7af08da4748873, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x6000}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x9, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x1, 0x6, 0x7, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0xa3f, 0x0, 0x0, 0x41000, 0x18, '\x00', r1, @cgroup_sysctl=0x12, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x5, 0x343e}, 0x10, r3, r4, 0x1, &(0x7f0000000800)=[r5, r6, r7, 0xffffffffffffffff, r8, r9, r10, r11, r12], &(0x7f0000000840)=[{0x4, 0x2, 0x1, 0x1}], 0x10, 0x2800000}, 0x94) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 8.228788707s ago: executing program 2 (id=538): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4d8802, 0x1b0) 8.154576768s ago: executing program 1 (id=539): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @remote}}) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3e) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109029e000301be90020904000000010100000a2401ff0727000201020924050501ff46f452082404016c9b6ada0cb6a71b240201050404020900040509040100000102000009040101010102000010240202040001000cf8913c76711515c77a195155297d54c49056a7e0f173154625d99e9a781ce7f2af6b706d25279adb4a3f95a9b0602baa807296c7239250102fcfbf25281eeff270d8ec85b412264677777caeab412ebe3af6f669459c0e2c7a413590abf589f9896251b43d450d1466d9c7493486a716ce3c3762670896"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf, 0x5, 0x45, 0x8, 0xfa}, 0x6e, &(0x7f0000000140)=ANY=[], 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x423}}, {0x13, &(0x7f00000000c0)=@string={0x13, 0x3, "1b0f0b667e5119496e994d42644d66a792"}}]}) 7.959424746s ago: executing program 2 (id=540): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @loopback, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) close(r0) 7.899021655s ago: executing program 2 (id=541): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2d1}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r5 = syz_usb_connect$uac3(0x5, 0xf2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x1, 0xe1, 0x6, 0x6ada836f990ca1d2, 0x9}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1d, "189d6749317806a4c7dbfbd7ed30576a"}]}, 0x3, [{0xaf, &(0x7f0000000380)=@string={0xaf, 0x3, "5330f1de16a5eb5d262a8615608054042d016c110afbcecdcc7c3e160d62863c55aec4777cf03b1bc9dc023007f117f84c78f08315074399bbbacda31e104afc3285d40c00fea26dc519cf804561385dc2da453d4614690f437d1631ddac311c72809112b7625fa5759dfdd1414255bf17e4466c419d5898a48249105e3d6dc14e7d1890a4490084bd92beaea669f38fa8718a6630f97eea0306240ea3797cb5f5a73f1053c59b965e26ef877c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4e, &(0x7f00000004c0)=@string={0x4e, 0x3, "6eda992af59d9f901c69c862b3057b19bc4ac65aa2e738d05a0634844674c2e5ca8acf6b7d3a36641d149119f13377a71364315cc161f638d42489aa119c77771b1289928ea6cc83bf866ceb"}}]}) syz_usb_disconnect(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r7, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6.347564521s ago: executing program 3 (id=544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x53, 0xd3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5b, 0x0, 0x9, 0x40, 0xe7}, 0x14, &(0x7f0000000100)={0x5, 0xf, 0x14, 0x1, [@generic={0xf, 0x10, 0x4, "06bc4e325e2895fc406c312a"}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0x78, &(0x7f0000000180)=@string={0x78, 0x3, "6b9c95d7d74e57014ce2470a0fec161193d1b689cb69a0a1cde2984659765b7422c65264c31aa5109f5eb7d8e6375c350f7dddcf97d3828135ef96a00ba670d3d9850500baac6d7a376a0d486fce087dbf67e0c9fc8ee9031d3b2ba599990c259d0a035ecf4667fead5ed23ccea5036b70e208412c64"}}, {0xf2, &(0x7f0000000200)=@string={0xf2, 0x3, "2d1cfcc4041b2f0527465f31a9d0d8c64e61ab5eb6702a18d94f41257d694d432e251ec256e7246a6a2cffa387209aae7bd8bc9ee7c15a826682edd728ec2f866711a52924c899f34314e043f9960ae09e00290a16bf57bc5803ea54e1a57e391ff55cb3e6e63ae00a844424d9c531d0a26762067204076681433e702682ced753b1304c7b921cc9a4f4a4efc3420b4841aefd159f49ad7c29b3070ef74d25bde4120e620fa3303415e2cc7a0c5b86c3750c01694164cebbd80467e08cc26927ba820f5e40f6fb67da046b50ec1c3d8916b648b0f553fef9cf1a6f64612a445c302ff2e94b475fa9d8f6139b4db2deeb"}}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0xe, {0xe, 0xe, "8424d961449fd8d8c0f0688d"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.914023532s ago: executing program 4 (id=545): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x18, 0x4) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = epoll_create(0x7fffffff) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8101, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x484, 0x0, 0x6}]}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="200111000000def90deeaaed04b4ba4c2bbdc7d0f2eaee"], 0x0, 0x0, 0x0, 0x0}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sync_file_range(r1, 0xfffffffffffffff7, 0x7, 0x1) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x40000004}) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) 5.235629441s ago: executing program 1 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa8, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "15a92016d892fccf4bee9e95df3ddb013b139e1e"}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x67f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_deladdr={0x60, 0x15, 0x900, 0x70bd25, 0x25dfdbfe, {0x2, 0x8, 0x20, 0xfe, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x753c, 0x8, 0xffc, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000700)=@ll={0x11, 0x1c, 0x0, 0x1, 0x4, 0x6, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)="4e9b25e687bd58666ad81013a6f25ea2", 0x10}], 0x1, &(0x7f0000000800)=[{0x50, 0x16, 0x81, "d5ae6a83f5ad14c1694545cf8db41e989d9db18503b420fcba82dd16309fdf612211609143051d2485a829cae184e91b968aee45ad01ab0dd2d587be01c9"}], 0x50}}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)="428a6255eee0aa7e", 0x8}, {&(0x7f0000000940)="013fa0cf3a0e69dcba7557d27a09410cba51686b09ddcb67aae5fd4dda20e7cbcf247e30e93321e46a35d457317f675dae9b27aa582bbfc07911998f6f3d644ed6fc5e15d232eb9c6adada40498ad5dfb1e77c07e208f4675ae3eb990c57eee265ebe35b7273be218203b2ed9919e3691abacfaf5cb37e24aa499e47f6da2aa5dc255bf0f3616009a0f3d114ecb877e32447f5fac6ca8ef2ac45a5334b07cf73ef83dfddeed81fe7d5954d624896c84d11f0982f3ee6a401135216", 0xbb}, {&(0x7f0000000a00)="591f88d3fdf63e5fceead4123aaeb958275d67b0cf8b8383847cec8d288c6a00728b2fc8acc0a03bc898797a1d9652b2caccb21e48a17c6569beac2e888fbfec489115bf116093750bfaff5a16eb4f00337535426f9f630c8b6879f0b2f18160d942a6e26da7161610138787c162b24dee13f26a194ed3c841acfb4d5d211f999a29cfb39205188b04390b169cfa872d121d11273d817ce10313f8244e515cbe581f", 0xa2}, {&(0x7f0000000ac0)="8a8fd1f4f58f8b510ae47be23c7b5695b436e333959c0f3e8e0398ce8930f427b2e79713ff285e6ae35eb533f466fd422fe3ee48d78076e55f4cf993491400794e1f38eb0c75f5fe6af6443b017fffb647b7fb2361b7cd87b6610934c5b9045c7b6a7e81adf906a98385cb960eb07a0aa96de48673bfee9cacd4da998afc78fe6ab0690a41d552f7019c7da665e9d23c32886f0f9e88f856e69983bb1d3adae088d2baa43e6c17b17d3dd3aeb1d75a8f9e15b20da897b1e019a070fcedf713589f3e426ead7ad981f6f69e855eead0ad4e2c0031a79d75cc6e64", 0xda}, {&(0x7f0000000bc0)="e979281a1885f110d3c20e80a4036f709fe5a79b47a2ed5928ebc11b606ce8135cb2f7788fe6bdbe894ff7c95a9ecb127110fbe4685b399fda8cd92b2bcc47b160fa867ee858c79eca7066700d6bf67c24579f80dea6588c10c1edd920c20409f1c4131562ce8bb2b15bb62fea22d8443191075b57149f46f0618e0ac1e526a0ec625b28ba751ca66469ba21d045734f7f89b3b82fe9a22bf6974da05daf7072340c6bfe0aceed2767900288644cbebed1f272c4343f5bb6877a8643086cf095e9", 0xc1}, {&(0x7f0000000cc0)="0ba857e433d65b9e7c62d0cc0dd30a1f6f77bbb791826db22096f33684d450cdfee49ce1bad2609a72c7", 0x2a}, {&(0x7f0000000d00)="c69edb22c3bf5a3aa266ecf66929b52697904d8af498ab21bb0c1f202e2a0ddf311ba58081439e3e5b52ce6dec948430b0463b10529dedb43fd7101b94e11e55cb515a851a4e36ae3b41782a34e072f5deb811fa786fc0279bef8b7919e0391b794959472a04c2eb28918509a794c530b75db70be2e063a3adbc740632df16312e458ff665e283d700ad13ed434280d40b1b972d4b092ed1416b7386a3", 0x9d}, {&(0x7f0000000dc0)="8217920cee0bb8b5a2f8beb99fcea443a73c9a5042e8ca89617aab5690a4d770763b4eec53a56e9d4cf04f82f796d2be4b4092fc204bd0ab85e57c87436e70959f0f67252e090eb2bb8cbda8b1288ad06a4f749df024b4bd3b06f37eb7a5a4b18f7dbeb184575cd0567e34750c51cadd9c314f452c0495ad32a303699dcf138863c918bd9a9221a477a1a6a2dc4c65e7c0baee5f24c0b0b5f0d990a21c9e6cdfbf4f5bed1dfb349f955977811881d931ad6a909df3c8c91030323716b092cb42a22de4122c1f0d36f30a53e9d4dac9b2449461df393ad785faa93688791833abd752a45af93c094f64c81ce1ef453bc928a7d575b3246b", 0xf7}], 0x8, &(0x7f0000000f40)=[{0x108, 0x88, 0x0, "66ebe4bbaa6d9740ce55829d7e0000ead48cd6281c130629af1cf3fce2281a41a8cff98c773a9b6e5b9a959c838b9d1d780657ca547bdb725b3cc763c6a697a69b673c313a8fa661aee45bd2f0c8c9dd42d56d786ddc5d021c00a71384227e5d3f1c1b4c0bdb63a3ef2ad9b01c8d888c9fabbeecd2dfe38133ca23bc4f60668ea0e38b103375ac6f5a33b9dc388ed5c0147fc6f700161e0873a85939f2df29651bdc513323a2fa2795522340308c4d3f8affb607ff2fcb3e4e7d1fa0d0898d535d4d036b761c28a14065b962d3f0b8d9aad841c842132b8214e1bafbcde914e222d77833d8c816221dfe49e4f11362f7f7e7f1"}], 0x108}}], 0x2, 0x4000) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000036c0)={0x9, 0x3, {0xffffffffffffffff}, {}, 0x8, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) openat$dsp1(0xffffffffffffff9c, &(0x7f0000007c40), 0x20400, 0x0) socket$l2tp(0x2, 0x2, 0x73) statx(0xffffffffffffffff, &(0x7f0000007c80)='\x00', 0x4000, 0x2, &(0x7f0000007cc0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000009440)) getgroups(0x3, &(0x7f00000095c0)=[0xee01, 0xee00, 0xee01]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000009600)={'\x00', 0xff80, 0x7, 0x400, 0x8000, 0xf, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000097c0), 0x4) 5.159036983s ago: executing program 1 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) r1 = socket$inet6(0xa, 0x1, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = fsopen(&(0x7f00000029c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @local, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0x4) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), 0x0}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000040)='pim6reg\x00', 0x430d00, &(0x7f0000000080)={@_ha_fsid={[0x80, 0x101]}, {0x0, 0x4, 0x0, 0x9e53}}, 0x80000000, &(0x7f0000000140), &(0x7f0000000180)=0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) 4.802167661s ago: executing program 1 (id=549): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) symlink(&(0x7f0000000180)='./file1/file2\x00', &(0x7f0000000040)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x2, 0x1, 0x5) file_getattr(0xffffffffffffffff, &(0x7f0000000140)='./file1/file2\x00', &(0x7f00000007c0), 0x18, 0x1000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="8982af", 0x3}, {&(0x7f0000000500)='n', 0x1}], 0x2, 0x0, 0x0, 0x8800}], 0x1, 0x24004014) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x2, 0x6, 0x2, 0x81, 0x6, 0x3}}, {0xa, 0x2, [0x3, 0x3, 0x2]}}, {{0x1c, 0x1, {0x67, 0x2, 0x8, 0x7, 0x0, 0xcc7, 0xc9, 0x2}}, {0x8, 0x2, [0x4, 0x319f]}}, {{0x1c, 0x1, {0x9, 0xfd, 0xff, 0x6, 0x0, 0xffff, 0x2, 0x5}}, {0xe, 0x2, [0x4, 0x7c06, 0x40, 0x0, 0x8]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x5, 0x200, 0x7ff, 0xdec, 0x400]}}, {{0x1c, 0x1, {0x7, 0x0, 0x1, 0x27, 0x1, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x8, 0x8000, 0xff80, 0x1, 0x1, 0x43]}}, {{0x1c, 0x1, {0x7, 0xfd, 0x9, 0x4, 0x1, 0x6, 0xdec, 0x1}}, {0x6, 0x2, [0xe]}}]}]}, 0x11c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001580)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xa83}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0x5, 0x99}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x9e, 0x5, 0xfb, 0xff, 0x6}, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x3, 0x3, 0x5, 0xd}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}, {0x37, &(0x7f00000002c0)=@string={0x37, 0x3, "315b23649ab94aef83a7183fbdf088045d9c8af3be98f305e14aee7287ee94727178d31d7d7222a017f1eb967d9a389f6138280dfa"}}, {0x8a, &(0x7f0000000500)=@string={0x8a, 0x3, "31b97f2c17c94e65bbb498240cbeb2dfad0b6e72368c03814c67bc9b32420d7328867725494a323ee03beb1c1b99d3d6c8cffb7057d9428a6fc3d6a4b08ba81565ab19f795865aaed39fb5742abfcedb3082917ff962bdcb4709a61605238fcafe1ceea8b002787e1f5b689c0ab32979f834d6a9c119f3ed7ee35f78140d496835ce51db90500df8"}}, {0xc7, &(0x7f00000005c0)=ANY=[@ANYBLOB="c703595d89810fa5ad87101c75211cb5ed0ecf4d6608ce98cc96c19c30cf2fa02f8c9b29c8aa3646731bb3fe86ec3094f22b814084ada1d6f7a4189953655a5b465022d749b8fe58438f52c1453efd8f975d0500557027df40addd2449f8f46987a740e3a318f6534e219fb87304aed5b0e9f746c32f34e2dbbf5cf1559767296cb6402cb61d14f54af4344014bbd791b60b8220313c78fece0fcacec7eac4d6c1f84ddcea6982b8b9ca18f47b6053e9e807550b7aaa0efb0b20e0228b8584d692e52a24df8440"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x407}}]}) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f00000000c0)) getdents(r0, &(0x7f0000000000)=""/168, 0xa8) 3.847565659s ago: executing program 2 (id=552): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000080408205820540000102030109028e000301018005080b0001010130040904000000010130000a2401062a00060000000d240a04030000000002000000132403060703058404", @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES8=0x0], 0x0) r0 = userfaultfd(0x0) syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0xb, 0x70, 0xf9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x9a71, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x14}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x19}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x6, 0xc, 0x7, 0x0, 0x9}, 0x6e, &(0x7f0000000280)={0x5, 0xf, 0x6e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "008a6576c1ac1b4706fd67c8afcb6f1e"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5417122bbb07d65e8a23a9dd93bca39b"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "db573d0128d8352e087d343649ccf027"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x0, 0xf, 0x101, [0x180, 0x0, 0x3f00, 0xff0000, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x9, 0xfffb}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x420}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "7e048ce60d7249126c35370cd37f8e2a3f0e6dd01519703500e0d3378004fc5f9072b574a4268a59cf1d38293eb475f390c8221f2fcf91bcc278910dbbde879ca2c53b05f67ad132890821bf305eea67d967559b6c4280769c57da575ba397047f8d5932b277637b28470f14785ba99a614d50e9a13cfee5e6b5d1e071b19a7ddb292ad314827a93ed1100f51e5c3dfe982064d3d43180255653746ac521571cf36aa47ebf8ff88ee4d2f0d22b86839d4af20c47f97c5d6aea416b17b63baf4fa5fc2be68a57c37f540734514f223b8ffaa4b960"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x99, &(0x7f0000000480)=@string={0x99, 0x3, "2d8ebea66d3b935b6eabf59a63003d7bf633c5fc7e86ea1e0dfc94b50607c99cf7dd844e9b0adcd68b5495d83cf7b01404c370de8bda2108a13dfca5fa8023cf57ea5ec52ac2f1614289a98b970feb72b78766fd93c3fc15bd89b4a90eaac9daa90e22ca305c3e39fef387aa78480347229d49aaa767af68e2475c8b669e9bf7d8e7aff941ed287d2714a7fa57cad8898514f5cfca1898"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x7, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "0f54"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xff, 0x10}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0x4, [0x2, 0x6, 0x6, 0x3ff, 0xc000]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x70, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x7, 0xb8}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x9, 0x0, 0x6, 0x40, 0x3}, 0x27, &(0x7f00000006c0)={0x5, 0xf, 0x27, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x5, 0x4ab}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8497b491e8265981, 0x6, 0xc}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xe2d4445588608619}}, {0x19, &(0x7f00000007c0)=@string={0x19, 0x3, "32462dd1f92e4a1cf490dde1129ec50eea2f8aacefdbaa"}}, {0x27, &(0x7f0000000800)=@string={0x27, 0x3, "f51c30639da14174c9cd7b1dd6e142c079d13bd88db1afa92e50560f7305f834f2b7a61c7e"}}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000080)='-^B)\x00', 0x240000, &(0x7f00000000c0)={@_ha_fsid={[0xfffffffb, 0x10]}, {0x101, 0x3, 0x80, 0xffffffff80000001}}, 0x719, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) 3.782110963s ago: executing program 4 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xf4, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "761190ef8de8da0f176b4fa7c3868274e2a26e6a7d0aa78f1aff42d0a1cb35ca12bc7ccd79a94bf7b0296ea8ed68e33677ca7df222b5824b0151eb194a05b8ae3dd53241154598f601acf4023d7d9a158c78803c15e9770693eb3207ce712bd6a430365b7b9e365562625e53cbdaffda642c7363cd0827cc52b167ecb1e950ed333c59e4ce680be2e59dce92baa0e6c9c0adda4e782f88cd04e699a4b32c96219ff37672a47d3f8828a73656fb0252744d9775a8fed9fb49586378c0"}]}]}, 0xf4}}, 0x4000) 3.735879516s ago: executing program 3 (id=554): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x5000aea5, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connlimit={{0x40}, {[], 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x8, 0x64, 0x9}) mbind(&(0x7f0000616000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x3, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') fchmod(r0, 0xd8) lseek(r7, 0x1000000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) write$tcp_mem(r7, &(0x7f00000010c0)={0x800, 0x20, 0x16, 0x20, 0x7}, 0x48) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f00001d2000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r8, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f0000005c80)=[{{&(0x7f0000001140)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001240)=""/131, 0x83}, {&(0x7f00000011c0)=""/17, 0x11}, {&(0x7f0000001300)=""/158, 0x9e}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000001400)=""/6, 0x6}, {&(0x7f0000001440)=""/162, 0xa2}], 0x6, &(0x7f0000001580)=""/88, 0x58}, 0x6953}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)}, 0xa}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002680)=""/129, 0x81}, {&(0x7f0000002740)=""/118, 0x76}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/102, 0x66}, {&(0x7f0000002900)=""/221, 0xdd}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/233, 0xe9}], 0x7, &(0x7f0000003b80)=""/35, 0x23}, 0x3}, {{&(0x7f0000003bc0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/28, 0x1c}], 0x1, &(0x7f0000003cc0)=""/233, 0xe9}, 0x59}, {{&(0x7f0000003dc0)=@nl=@unspec, 0x80, &(0x7f0000004500), 0xa}}, {{&(0x7f00000045c0)=@hci, 0x80, &(0x7f0000005800)=[{&(0x7f0000004640)=""/205, 0xcd}, {&(0x7f0000004740)=""/83, 0x53}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/12, 0xc}], 0x4}, 0x1}, {{&(0x7f0000005840)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005bc0)=[{&(0x7f00000058c0)=""/201, 0xc9}, {&(0x7f00000059c0)=""/150, 0x88}, {&(0x7f0000005a80)=""/190, 0xbe}, {&(0x7f0000005b40)=""/125, 0x7d}], 0x4, &(0x7f0000005c00)=""/92, 0x5c}, 0x7639}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0), &(0x7f0000000080)) 3.675557605s ago: executing program 4 (id=555): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) r2 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x3, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000180)=0x80000004, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r0, 0x0) r7 = dup3(r6, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000000c0)={0x4, 0x4, 0x6, 0x3, 0x0, "3e533005a5b152308435c559a2e30053a727c9"}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x40000000006, 0x440) ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) sendmsg$inet(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet_sctp(0x2, 0x4, 0x84) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x4e23, @loopback}, 0x4, 0x0, 0x2, 0x1}}, 0x2e) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.98211623s ago: executing program 4 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa8, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "15a92016d892fccf4bee9e95df3ddb013b139e1e"}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x67f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_deladdr={0x60, 0x15, 0x900, 0x70bd25, 0x25dfdbfe, {0x2, 0x8, 0x20, 0xfe, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x753c, 0x8, 0xffc, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000700)=@ll={0x11, 0x1c, 0x0, 0x1, 0x4, 0x6, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)="4e9b25e687bd58666ad81013a6f25ea2", 0x10}], 0x1, &(0x7f0000000800)=[{0x50, 0x16, 0x81, "d5ae6a83f5ad14c1694545cf8db41e989d9db18503b420fcba82dd16309fdf612211609143051d2485a829cae184e91b968aee45ad01ab0dd2d587be01c9"}], 0x50}}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)="428a6255eee0aa7e", 0x8}, {&(0x7f0000000940)="013fa0cf3a0e69dcba7557d27a09410cba51686b09ddcb67aae5fd4dda20e7cbcf247e30e93321e46a35d457317f675dae9b27aa582bbfc07911998f6f3d644ed6fc5e15d232eb9c6adada40498ad5dfb1e77c07e208f4675ae3eb990c57eee265ebe35b7273be218203b2ed9919e3691abacfaf5cb37e24aa499e47f6da2aa5dc255bf0f3616009a0f3d114ecb877e32447f5fac6ca8ef2ac45a5334b07cf73ef83dfddeed81fe7d5954d624896c84d11f0982f3ee6a401135216", 0xbb}, {&(0x7f0000000a00)="591f88d3fdf63e5fceead4123aaeb958275d67b0cf8b8383847cec8d288c6a00728b2fc8acc0a03bc898797a1d9652b2caccb21e48a17c6569beac2e888fbfec489115bf116093750bfaff5a16eb4f00337535426f9f630c8b6879f0b2f18160d942a6e26da7161610138787c162b24dee13f26a194ed3c841acfb4d5d211f999a29cfb39205188b04390b169cfa872d121d11273d817ce10313f8244e515cbe581f", 0xa2}, {&(0x7f0000000ac0)="8a8fd1f4f58f8b510ae47be23c7b5695b436e333959c0f3e8e0398ce8930f427b2e79713ff285e6ae35eb533f466fd422fe3ee48d78076e55f4cf993491400794e1f38eb0c75f5fe6af6443b017fffb647b7fb2361b7cd87b6610934c5b9045c7b6a7e81adf906a98385cb960eb07a0aa96de48673bfee9cacd4da998afc78fe6ab0690a41d552f7019c7da665e9d23c32886f0f9e88f856e69983bb1d3adae088d2baa43e6c17b17d3dd3aeb1d75a8f9e15b20da897b1e019a070fcedf713589f3e426ead7ad981f6f69e855eead0ad4e2c0031a79d75cc6e64", 0xda}, {&(0x7f0000000bc0)="e979281a1885f110d3c20e80a4036f709fe5a79b47a2ed5928ebc11b606ce8135cb2f7788fe6bdbe894ff7c95a9ecb127110fbe4685b399fda8cd92b2bcc47b160fa867ee858c79eca7066700d6bf67c24579f80dea6588c10c1edd920c20409f1c4131562ce8bb2b15bb62fea22d8443191075b57149f46f0618e0ac1e526a0ec625b28ba751ca66469ba21d045734f7f89b3b82fe9a22bf6974da05daf7072340c6bfe0aceed2767900288644cbebed1f272c4343f5bb6877a8643086cf095e9", 0xc1}, {&(0x7f0000000cc0)="0ba857e433d65b9e7c62d0cc0dd30a1f6f77bbb791826db22096f33684d450cdfee49ce1bad2609a72c7", 0x2a}, {&(0x7f0000000d00)="c69edb22c3bf5a3aa266ecf66929b52697904d8af498ab21bb0c1f202e2a0ddf311ba58081439e3e5b52ce6dec948430b0463b10529dedb43fd7101b94e11e55cb515a851a4e36ae3b41782a34e072f5deb811fa786fc0279bef8b7919e0391b794959472a04c2eb28918509a794c530b75db70be2e063a3adbc740632df16312e458ff665e283d700ad13ed434280d40b1b972d4b092ed1416b7386a3", 0x9d}, {&(0x7f0000000dc0)="8217920cee0bb8b5a2f8beb99fcea443a73c9a5042e8ca89617aab5690a4d770763b4eec53a56e9d4cf04f82f796d2be4b4092fc204bd0ab85e57c87436e70959f0f67252e090eb2bb8cbda8b1288ad06a4f749df024b4bd3b06f37eb7a5a4b18f7dbeb184575cd0567e34750c51cadd9c314f452c0495ad32a303699dcf138863c918bd9a9221a477a1a6a2dc4c65e7c0baee5f24c0b0b5f0d990a21c9e6cdfbf4f5bed1dfb349f955977811881d931ad6a909df3c8c91030323716b092cb42a22de4122c1f0d36f30a53e9d4dac9b2449461df393ad785faa93688791833abd752a45af93c094f64c81ce1ef453bc928a7d575b3246b", 0xf7}], 0x8, &(0x7f0000000f40)=[{0x108, 0x88, 0x0, "66ebe4bbaa6d9740ce55829d7e0000ead48cd6281c130629af1cf3fce2281a41a8cff98c773a9b6e5b9a959c838b9d1d780657ca547bdb725b3cc763c6a697a69b673c313a8fa661aee45bd2f0c8c9dd42d56d786ddc5d021c00a71384227e5d3f1c1b4c0bdb63a3ef2ad9b01c8d888c9fabbeecd2dfe38133ca23bc4f60668ea0e38b103375ac6f5a33b9dc388ed5c0147fc6f700161e0873a85939f2df29651bdc513323a2fa2795522340308c4d3f8affb607ff2fcb3e4e7d1fa0d0898d535d4d036b761c28a14065b962d3f0b8d9aad841c842132b8214e1bafbcde914e222d77833d8c816221dfe49e4f11362f7f7e7f1"}], 0x108}}], 0x2, 0x4000) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000036c0)={0x9, 0x3, {0xffffffffffffffff}, {}, 0x8, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) openat$dsp1(0xffffffffffffff9c, &(0x7f0000007c40), 0x20400, 0x0) socket$l2tp(0x2, 0x2, 0x73) statx(0xffffffffffffffff, &(0x7f0000007c80)='\x00', 0x4000, 0x2, &(0x7f0000007cc0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000009440)) getgroups(0x3, &(0x7f00000095c0)=[0xee01, 0xee00, 0xee01]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000009600)={'\x00', 0xff80, 0x7, 0x400, 0x8000, 0xf, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000097c0), 0x4) 2.779465766s ago: executing program 4 (id=559): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70e}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000800)="e67a72", 0x3, 0x4c}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0xd, 0x280000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003fb000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') mlock(&(0x7f000011c000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f000052b000/0x2000)=nil, 0x2000, 0x0, 0xd82, 0x0) 2.615563414s ago: executing program 4 (id=560): request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) write(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r2) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x7, 0x2, 0x10, "11df004f866f1352780000800000000000004400008000", 0x41414270}) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x801) syz_usb_connect(0x6, 0x1b, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x4b, 0x55, 0x94, 0x40, 0x1b3d, 0x9316, 0x7b50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x17, 0x40}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0x9, 0x5, 0x24, 0x10, 0x2}, 0x5, &(0x7f0000000f80)={0x5, 0xf, 0x5}}) 2.440284677s ago: executing program 3 (id=561): unshare(0x6a040000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd, 0x10, 0xffffffffffffffff, 0xf573c000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socket(0x1a, 0x80805, 0x1fe) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000000c0)="0a294eff", 0x4}], 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xdef19dff2bccd0be, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) 1.773288917s ago: executing program 1 (id=562): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000dc82e8a335558a35623f113752e54d583bdf90f0d51e2be1ac138b8538a4115ff0e22578e69b79882cb0d1cbaaaae75b92a9d20e8e8a5d97edcbaeaf935d480fa68e7f31f2bcc1e1e646e25fac68582cafa946096d5877fba416a9252be3a788e0e80058154c3c74df70d274c8d1f74226f9d75e3e57156b7668aac0bfa325342bea20512e26e377663580658ac580c166d10f65fb0fd1c7b4ebf27e3a4bcde0d507733c6674a112194e5f61337f3cadd3da9675598807b6e979a5a9eb9d935b9bc48610b4118cd858d75889a269f3d4eb46f16969", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}, 0x5880) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0x6, 0x10, [0x5, 0x6, 0x7f, 0x7], &(0x7f0000000080)=[0x0, 0x0]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.506367884s ago: executing program 3 (id=563): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445", 0x76}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)}], 0x9, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffff0046}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.198987605s ago: executing program 3 (id=564): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030313030303210fdb3b89aea6b643d00000069103d5c90385e77", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x6000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x2e, 0xd}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x1, 0x3, 0x1}, {0xdddd1000, 0x200000, 0x9, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe, 0x3}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0x3, 0x5, 0x0, 0x1, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x2d}, {0x10000, 0x86}, 0xa0000031, 0x0, 0x8000000, 0x42024, 0xa, 0x0, 0x3000, [0x6840000000000000, 0xd, 0x5e, 0xff]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086a050e0100000000000109022400010000c00509040021c1030004000921d811280122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002207000000a0b057"], 0x0}, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000009c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = memfd_secret(0x80000) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/110, &(0x7f00000001c0)=""/70, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000037ebff0181000000000000000100000000000000884c252b", @ANYRES32=r4, @ANYBLOB='\r\x00/dev/net/tun\x00'], 0x2b) write$vga_arbiter(r3, &(0x7f0000000100)=@unlock_all, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) setpgid(r4, r7) 1.093168012s ago: executing program 0 (id=565): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00050014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$dsp(r2, &(0x7f0000000080)="be1646a99300b3b3686c9d78e86d3b27fcfc8175206d36e7404c2b6d3fac32c2daf74434ef90158172bdebb5a3884d3426ef91ef884cf8bc0c5c28afc81349391fe823bc0d23ef280edac043d8ea7587bb8b5c517bbdceb47cf32377448033ece7ee1aca3b03939e3a1ff38e882f5a1c828249eeab3d4512e2620ab14f8facababc7afc343fb3cba5ccdb08ac4", 0x8d) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x2) syz_emit_ethernet(0x9d, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @local, @void, {@ipv4={0x800, @tipc={{0x1b, 0x4, 0x3, 0x7, 0x8f, 0x64, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0x4, [{@multicast2}]}, @timestamp_addr={0x44, 0x34, 0xd3, 0x1, 0xb, [{@loopback, 0x3}, {@multicast2, 0xd}, {@loopback}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x10000}, {@broadcast, 0x72}, {@remote, 0x8f3a}]}, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x3, [{@multicast2, 0x1}, {@loopback, 0x6}]}]}}, @payload_direct={{{{0x23, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5, 0x5, 0x3, 0x9, 0x1, 0x2, 0x4e21, 0x4e20}, 0x1, 0x1}}, [0x0, 0x0, 0x0]}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xc2d, 0x1c0, 0xad, 0x18d]}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) 993.448474ms ago: executing program 0 (id=566): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000040)={0x3, 0x0, [{0xa, 0x6, 0x2, 0x37, 0x2, 0x6, 0x7}, {0x80000008, 0x5, 0x5, 0xde3, 0x8, 0x5a2, 0x80000000}, {0x40000000, 0xb28, 0x3, 0x1, 0x10, 0x0, 0x7fffffff}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, &(0x7f0000000100)=""/1, 0x1, 0x6180) (async) pread64(r2, &(0x7f0000000100)=""/1, 0x1, 0x6180) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000140)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0x3}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0x3}, 0x1c) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x7c, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x1, 0x90, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x5, 0xe2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa1, 0xf, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x40, 0x2, 0x4, 0x40, 0x20}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xef3f79539b4d6035, 0x1, 0x5, 0x8, 0x5}]}, 0x7, [{0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "610781b857561e928719dd9133d069be0a6e2910900b37e412750929af4584375fe52d5545b6ec24e5ef4b2ac78a75b20dedb77601fbdb5390e1da3e6f0aac4c5307c81a0f83477602fcf6152ec5913adb390617e3aaa5793327ee457287cf2b31588f0af1f024dca20b98f3be15d9070eba6f73bdcf32740945b17c9155281ae35856ff26ad0ec66de825e080f72fa146ccdd09907e69e50a3f34380c6845f7387ac0563b4b9df2803e5af05c19c0b37590082510561c51209dcaad2256157aa4d2f824a52869dcab80ec13301b9ccd54da668dd1be12ca2226372c7946"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "6e507f133976e201fc17ea1267e2df418f485742e618a7cbf8c96d29fd0351a8d6bdb5b24fdf45586c96f23a9cc8ec8a1f247b82544c1d5eafb74b1366a6c5684735611bcfa5d14e736afb59400d1fbfd879a379a6e43a87a5bf82cca0d39ebad7e64e348258d109ec82792489992da62b505a62e6bd47f521049ef846468ee685293413a5c4cc927cffa522"}}, {0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "8dfc460d0e93d851207a3bc21472192861a43feca8f93112ae5d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x51, &(0x7f0000000500)=@string={0x51, 0x3, "b88933bbeb1de258073c884dd328c4e07cc90572c85edcf73bf2d93d66d720da40df2b14b147c6c6b3f0f9de85ba0a3a9587b6338f28f48ef7dc5255745790186401df24192f7e52c08584e5a3d0ea"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44b}}]}) (async) r4 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x7c, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x1, 0x90, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x5, 0xe2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa1, 0xf, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x40, 0x2, 0x4, 0x40, 0x20}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xef3f79539b4d6035, 0x1, 0x5, 0x8, 0x5}]}, 0x7, [{0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "610781b857561e928719dd9133d069be0a6e2910900b37e412750929af4584375fe52d5545b6ec24e5ef4b2ac78a75b20dedb77601fbdb5390e1da3e6f0aac4c5307c81a0f83477602fcf6152ec5913adb390617e3aaa5793327ee457287cf2b31588f0af1f024dca20b98f3be15d9070eba6f73bdcf32740945b17c9155281ae35856ff26ad0ec66de825e080f72fa146ccdd09907e69e50a3f34380c6845f7387ac0563b4b9df2803e5af05c19c0b37590082510561c51209dcaad2256157aa4d2f824a52869dcab80ec13301b9ccd54da668dd1be12ca2226372c7946"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41c}}, {0x8e, &(0x7f00000003c0)=@string={0x8e, 0x3, "6e507f133976e201fc17ea1267e2df418f485742e618a7cbf8c96d29fd0351a8d6bdb5b24fdf45586c96f23a9cc8ec8a1f247b82544c1d5eafb74b1366a6c5684735611bcfa5d14e736afb59400d1fbfd879a379a6e43a87a5bf82cca0d39ebad7e64e348258d109ec82792489992da62b505a62e6bd47f521049ef846468ee685293413a5c4cc927cffa522"}}, {0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "8dfc460d0e93d851207a3bc21472192861a43feca8f93112ae5d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x51, &(0x7f0000000500)=@string={0x51, 0x3, "b88933bbeb1de258073c884dd328c4e07cc90572c85edcf73bf2d93d66d720da40df2b14b147c6c6b3f0f9de85ba0a3a9587b6338f28f48ef7dc5255745790186401df24192f7e52c08584e5a3d0ea"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$printer(r4, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x0, 0x2, 0x3, {0x3, 0x11, '+'}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x20, 0x1, 0xe2, "40fd0f5e2e1c36e657fae25b0d3df214c2466f6cd32ecd0fa60e36560dc1b64709e382a051637dbf81c1cc802681a24ae91e728ef06ddd55238991df94a92086dbf8ca1ba03ba100c6f1dc6af403317cdfb8bf2e442eec96b7260600902eae88517d72f8fb335ec3ea4904f1622dfa67f77f9a587c4870d598098b5f0d32b2c30f4e6db9437e7d5bb3a57d66b626d2cf0664939c3bdbe9e74ec5f5c657e96febe62ec7064fb225ef50d49efab76b022de2fd1908e2b9cefef5051bbf02353970bf2b528fffbcb726dcde4d72804a8d1e89601be13fb5f9e4f80ec55ffb5b5b5103ee"}, &(0x7f0000000800)={0x0, 0xa, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x21, {0x1f, "9545776717b3cc2c55334e7c1a53fccd0f337ce421599027d45ed04753aad9"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xfd}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x49}}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000a80)) syz_usb_connect$uac2(0x1, 0xca, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1029, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x7, 0x90, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb366ceefbbc6e259, 0x20, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xd, 0x12, 0x5}, [@extension_unit={0x9, 0x24, 0x9, 0x6, 0xe, 0x10, "fb5d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdc, 0x4, 0x7f, 0x7, "ede8", "e2fda4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x48, 0x3, 0x5, 0x8, "", "39d0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x2, 0x40, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2c, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @as_header={0x10, 0x24, 0x1, 0x10, 0xb, 0x2, 0x1002, 0xe8, 0x7fff, 0x10}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x80, 0x3d, 0x10, 0x7}, @as_header={0x10, 0x24, 0x1, 0x9, 0xb, 0x1, 0x1, 0x73, 0x91a}]}, {{0x9, 0x5, 0x82, 0x9, 0x208, 0x6, 0x8, 0x7, {0x8, 0x25, 0x1, 0x1, 0x33, 0x10, 0x2}}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0x6, 0x5, 0x2, 0x20, 0x7}, 0x43, &(0x7f0000000c00)={0x5, 0xf, 0x43, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x22, 0x8f, 0xa18d, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "a2f48f1abd69263df9941fc5269cbc7a"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "aafd4e14d5801aad880d9b34eb24204a"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7, 0xff, 0x0, 0x2}]}, 0x6, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x81d}}, {0x36, &(0x7f0000000cc0)=@string={0x36, 0x3, "84c212d803cbffa3fff8286f21879f114f439def26e822b95f3a60f9c7f949f9322239c9e7d25501b342036ccce0d7659dc5f59d"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xff, &(0x7f0000000d80)=@string={0xff, 0x3, "b98034ac4f0537a4d171215d9381fad2049265740435e3fa55f889e9a8d7cbba8dde4dc6382afc1f7941c11b7ba7983412a8c8fea6e039d8d14e6a52fc1af745071deb3cd47a6adcc9f4490339e982481f134b59bd52fba6e562912bd1f7074b98cfa7b5fb73bf66d4fa847591055ca2f79810a0f79bab611d33d31d52788ecac1a0b3d2844961f3777f5ea08b6e49b31909e6d953c03fea7cfa6dd94677108fcb5c75c69daf1712451750b923ac44115511767bb1f2dcd2f6f0e5bfd0a8abcf624f8c22ff65fb4d0e0802f6324c6cd3fa6ed0194b3f40c5f6dce3e34c5472fff6a8fe96fe1aeeeb5da4cc8a5911b8dc4eb0bc4368bd3c4b247563c0c4"}}, {0xa1, &(0x7f0000000e80)=@string={0xa1, 0x3, "2b82c7eec41da4cd3c34a41f21155be98df76c199d490af573f0a17e457d8badd486402c4a014bcf162bcff1d3092db29468294b70fe94f2b44ebce5a646caa8ed4bcf385b7db156eb86ae50326972abc83541619a5b7870bb90db6e261343c0d5632e2c8dd0ea451470a6e30e409d013a5e24b8a1a6117161af542959542d9b138d4ac313b2e36358f0f567a8109f75cd2fa65493645473cb5f3bb2a77b00"}}]}) (async) syz_usb_connect$uac2(0x1, 0xca, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1029, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x3, 0x1, 0x7, 0x90, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb366ceefbbc6e259, 0x20, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xd, 0x12, 0x5}, [@extension_unit={0x9, 0x24, 0x9, 0x6, 0xe, 0x10, "fb5d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xdc, 0x4, 0x7f, 0x7, "ede8", "e2fda4"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x48, 0x3, 0x5, 0x8, "", "39d0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x2, 0x40, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2c, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @as_header={0x10, 0x24, 0x1, 0x10, 0xb, 0x2, 0x1002, 0xe8, 0x7fff, 0x10}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x80, 0x3d, 0x10, 0x7}, @as_header={0x10, 0x24, 0x1, 0x9, 0xb, 0x1, 0x1, 0x73, 0x91a}]}, {{0x9, 0x5, 0x82, 0x9, 0x208, 0x6, 0x8, 0x7, {0x8, 0x25, 0x1, 0x1, 0x33, 0x10, 0x2}}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0x6, 0x5, 0x2, 0x20, 0x7}, 0x43, &(0x7f0000000c00)={0x5, 0xf, 0x43, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x22, 0x8f, 0xa18d, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "a2f48f1abd69263df9941fc5269cbc7a"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "aafd4e14d5801aad880d9b34eb24204a"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x80, 0x7, 0xff, 0x0, 0x2}]}, 0x6, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x81d}}, {0x36, &(0x7f0000000cc0)=@string={0x36, 0x3, "84c212d803cbffa3fff8286f21879f114f439def26e822b95f3a60f9c7f949f9322239c9e7d25501b342036ccce0d7659dc5f59d"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xff, &(0x7f0000000d80)=@string={0xff, 0x3, "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"}}, {0xa1, &(0x7f0000000e80)=@string={0xa1, 0x3, "2b82c7eec41da4cd3c34a41f21155be98df76c199d490af573f0a17e457d8badd486402c4a014bcf162bcff1d3092db29468294b70fe94f2b44ebce5a646caa8ed4bcf385b7db156eb86ae50326972abc83541619a5b7870bb90db6e261343c0d5632e2c8dd0ea451470a6e30e409d013a5e24b8a1a6117161af542959542d9b138d4ac313b2e36358f0f567a8109f75cd2fa65493645473cb5f3bb2a77b00"}}]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000fc0)) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001040)={0x2, 0x3d, 0xfc6, 0xffffffff, 0x1, 0x1d}) timerfd_create(0x1, 0x80000) (async) timerfd_create(0x1, 0x80000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000001080)=0xfffffffff697b5f2, 0xfffffffffffffff8, 0x1) syz_usb_connect$cdc_ecm(0x5, 0x89, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x6, 0x20, 0x84, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xab, {{0x9, 0x24, 0x6, 0x0, 0x0, "08f44446"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x7a59, 0x5, 0x7}, [@obex={0x5}, @country_functional={0x10, 0x24, 0x7, 0xb, 0x7ff, [0x4, 0x9, 0x400, 0x8, 0x54e]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8e, 0x90, 0x8000}, @dmm={0x7, 0x24, 0x14, 0xb, 0x2}, @country_functional={0x6, 0x24, 0x7, 0x81, 0x26}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x5, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x10, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf4, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x250, 0x2, 0x2, 0x7f, 0x8, 0x2}, 0x2a, &(0x7f00000011c0)={0x5, 0xf, 0x2a, 0x4, [@generic={0x9, 0x10, 0x4, "ce94a8e13cc6"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x2, 0xff}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0xc0, 0xb, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xfd, 0x8, 0x101e}]}, 0x1, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x448}}]}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x5, 0xaf, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x2, 0x1, 0x7, 0x20, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2fe387376d"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffff8000, 0x7fff, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x2c62, 0x400, 0x6, 0x9, 0x9b80, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x2, 0x0, 0x4, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff7, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x3f, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xc6, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0xf2, 0xc3, 0x5}}}}}}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x250, 0x6, 0x3, 0x0, 0x10}, 0x20, &(0x7f0000001380)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x4, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0xe, 0x3, 0x136c, 0xdd}]}, 0x7, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1035}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x1442}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x412}}, {0x80, &(0x7f0000001540)=@string={0x80, 0x3, "b48693ea3256390e3e8645414b40f0306174f1c21f439dfe7629380419900f5a92ecf0b1ebd34c0e75860f62200dae19f86c821f676812113021f3d5ea9231efe49ebbe9ef1024d7b6bb7d2f801cfefcb764793dd52e181279cd0a30977b8072f31832452b7c45746623d80777b99d119b7a8d441487d8504527b3a43e24"}}]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, r1, &(0x7f0000001640)='./file0\x00') ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001680)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001680)={0xc}) r6 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x5, 0x1d1, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1bf, 0x2, 0x1, 0x8, 0x80, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "3af8"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6d, 0x8, 0x10, 0xfa}, {0x6, 0x24, 0x1a, 0x5, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x80}, @obex={0x5, 0x24, 0x15, 0x7f}, @mbim={0xc, 0x24, 0x1b, 0x10, 0xec, 0x3, 0x0, 0x7, 0x5f}, @mdlm_detail={0x84, 0x24, 0x13, 0x0, "cf5ee398ad536e0354975abab4231aa9d2d943b971e50ba41c6e92577c2ee03f51dbfd287e276f8e3a9498c6263a141a5f7e3fef5b8d554ac91b8a4f00cb17124a1a3f176d4f0080f5ba0036c628bb21bbe4f12b066717f4789ef3328a5e0657cf45a53f767754e24555abf3f2b06d101753197978714ddff43b444d3f3275e2"}, @mdlm_detail={0xb7, 0x24, 0x13, 0x5, "26b47a18ac5d7381319a87de24baab7a9474883a132692deebee6c1ef0016e5e83b065f8851a6ecf2fe3f9c2ad76f76f09eca393edbac5d53ab57fd54901570e6f92267c6fee59f17157db5badbd1838986ea3d38636978de31afd3e7e90660f1151050fc9e958e6c4f2bf75202f4f7fba795b6bd0bac4061db2859570ac9bedf4ec53afff88ea73b4dd9c69deef9eaff384f9ceab76425e47d14f6df175fe9cb376017e482e1ab48c60518437e1487c3d538d"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xd, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x52, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x4, 0x8}}}}}}}]}}, &(0x7f0000001c40)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x250, 0xf, 0x9, 0x4, 0x8, 0x6e}, 0x24, &(0x7f0000001900)={0x5, 0xf, 0x24, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x0, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x8, 0x9, 0x0, 0xed}]}, 0x5, [{0xb2, &(0x7f0000001940)=@string={0xb2, 0x3, "4e070d9b69b23b35beddb12850addb4b0fb32e34462958ec3eb1d7f1e2e395fa72e90b5d0a09ab7b88329b721a0b7d26da078aa4b98b2ac0a0ef0a4393f4e305ab2fca86a5259ee027658a851aba7e4e039f23b4d9ac2688cbadd0c37d86d0a341db1b0107420e3a450fda5d9a6b2aef870c28a2171d1760965023732857f5cd8268798e528e4aa4ce2a5decf6106fef56130fe1c6df34cf21e7240321ec4416e5581270783c4afcddef0195a49181ff"}}, {0xe3, &(0x7f0000001a00)=@string={0xe3, 0x3, "cf0fac6b3a076cfbb7f39b6daa284ba5a584f1232ac2edc96aeb870c4627fb9745d41a246e8dfd0691d4e15dd6f81ae2c6bdc2f83151f65bd31ea772f3126fd5434d8d048a1a8b93f291b7736b5afb559ce5a1e5043c93d17742ffed5c779fc2e621298eaf4f0904ab5b9863484c9dd71aaf8f84cb94f1ee2162256082fa5d621ad294d46ef78e318f2cad765ac20400255be585a60dbcc9296490a19823b7d9542426cb9a19682284986eedb393a7ada7579dca29f4a212ea7845a2de8f9203868a3c54fa9c3aae1ea30b38044a7c301c665d02137c9422893a26456ae4328e7b"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x180c}}, {0xa2, &(0x7f0000001b40)=@string={0xa2, 0x3, "739302532b9038cd0b21f161df237b1678cdfe0284a11985608c45406caaffee98631f22b3514570602370053be4104ae07267957d5c9d04f4e2bcf068bf7ea1330cd0693dac9983439e4e3bb55f387b2e5b02da809d55f54830a301e4081f2a4fd6ee8cd141777d1d6c5805bd115cec82ccb240144a2d77bee39bc70dd6fd00347aa4c77f980e85f22e02b92a5db7fd09a2d846738002f58cbb491f9426f7b5"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x439}}]}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r7, 0x4010e501, &(0x7f0000001d40)={r8}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001d80)={0x1000, 0x1c8c, {0x0}, {r1}, 0x80000000, 0x3}) fcntl$lock(r6, 0x6, &(0x7f0000001dc0)={0x2, 0x4, 0x7f, 0xffffffffffffffff, r9}) (async) fcntl$lock(r6, 0x6, &(0x7f0000001dc0)={0x2, 0x4, 0x7f, 0xffffffffffffffff, r9}) 771.705802ms ago: executing program 0 (id=567): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004000000000000000eb0f000085000000690000009500"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xb, &(0x7f0000000200)=""/11, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8001, 0x3, 0xfffffe0000000000, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8001, 0x3, 0xfffffe0000000000, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) (async) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x800) 771.017311ms ago: executing program 2 (id=568): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3a, 0x0, 0xfffffffffffffffc}]}) syz_usb_connect$uac3(0x2, 0x8c, &(0x7f0000000540)=ANY=[@ANYBLOB="1201500200004e150e5040000102030109027a00030114cc03080b0201012230090904000000010130000a24010e1600072300000c240b030200ffffff0600000904010000010940000505050a252506000000040000090402000001023000090402010101e230000905820920001005070a252504000000080500"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000540)="06c22098cf46c77800ce014b45a1cb773037173b641a603a0df586235684c35d8227598c8fccf83aa002392327e8d9d55c0e41a3a41ffd7ebde8ce1a1ea79d5f9a206c237d4b6a50007fc4caffa1", 0x4e}, {&(0x7f0000000600)="e76747c1d77dc8297990bc82b596aa63a9122314fc8e39a5f657f4bd755287e2ad9ce2e7cbda92e1f810bc934c44d1600159b48808f493cceb75365c614f87f42a7d173224a66331d8383ce00b1158b1638aa0c42e9f3b8da38d030426eee73b264708d986aeb38ea4aa5861179c6bad888bbd1ef5933c0d1b0b6b5c28508e8e6dea54ae5a2285052c4b0657f0aafd46", 0x90}, {&(0x7f00000061c0)="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", 0x723}], 0x3) syz_usb_connect(0x6, 0xda6, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x60, 0x56, 0xc1, 0xff, 0x4e6, 0x2, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd94, 0x4, 0x6, 0x4, 0x20, 0x75, "", [{{0x9, 0x4, 0xd6, 0x9, 0x8, 0xe2, 0xa8, 0xa5, 0x62, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "40057bc456"}, {0x5, 0x24, 0x0, 0x15}, {0xd, 0x24, 0xf, 0x1, 0xcdf9, 0x3, 0x5, 0xfa}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x5, 0x20}, @mdlm_detail={0x9f, 0x24, 0x13, 0x8, "ac6660fa3a9de051a2cecf452d33e9f5ec7e99143be8848e0eba51dea86ba3354bc9a1709269bbe2e1e3c142fbbdd1ba2ac17d559225105bed4607dfbae6349814621b7650b9de37f4300532d6999d862a73c20ab018c094b4571bc302ba1513930a39f6c1fdf54dc323da2b88b0f995917dd49bf20042eea2fad6ad8c36a9c835eb27648388a49108e705da95b61efb3d3d8d15b9bdf940508a52"}, @obex={0x5, 0x24, 0x15, 0x3}]}], [{{0x9, 0x5, 0x2, 0x10, 0x3af, 0xc, 0x1, 0x7, [@generic={0xe8, 0x9, "efd0db8d4bf25c69eca9f3bb96a0b45972b0eba4995b98a3e76d4e115a52825fcdff604d6b7d101bba31af915a834a6fc4ab1f1a4230393c08602d2e8a285ceb0d90422db0fc55b5fb7c773579b0f859b7b261c7ee1be078b125d3015723d74642f494439571ebdd4ad09367aac1c845f5cd69e0267d6dd567e1643bc8e113844efc19f3540945dd4fa2b9f86bd74012242b1031b355bd1dff84c6effb24df64c737076923716f83081e11bc42b8532b7d175464650d0f3c13455ff3ba762702112a2ee332e25e84bccaf41db50110eca54aec65293bee0d991bb2c078ac03101692354b5846"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x4, 0x1, [@generic={0x51, 0x24, "531aabfe0e623bb836d39fc31b6c1de14973f5eaa4b961459a1b3e517bb4de76c03f6220c6708553dc0ed74f94c985a8100033a1cbb26ce985980454d03e227c0edbf185413283f1eba0b9d7fe0c90"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}, @generic={0xf9, 0xa, "a9ba1feb05346589a2b912b99d9572cd8219e94ce5b46a41dad83b7ebf0de5518d7241aa6cecc92247de7456d5ec77bcef6223133714341e59511f91780bc00565dea1bd45fef0c8af2e45cbb1a3c40d0bdff86e327185b3d09bc4e92123d3c6ce1eabcd52947caa3d2989d63dfba631d6f847ce4fc49efb2d4e57e88b241bf9b177232a15a73c54e6454f4606a24722f6b90c3c4d64799cd06b7211191bba04b642b4d21667651cc3a7cdf879d48ab75f31a0de50dd2d0da7dbeb1faa312254cc78ecac3367f9390475e09d688dc5ff25dd0badd68162984673217dc6028e0af66ea8db14b35aa5408b4978d486cc557c392c12eb8688"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3b7, 0x7f, 0xfb}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0xa, 0x5, 0x40, [@generic={0x84, 0x1d, "69ddb67aa3c58cdd7d3c4da0eb1a3283b9dc8ea7c20930e4fffd3f0cd15fba2a292dd48069f04b0458f878c965e517a15f1923415806a7befc4a16b8da574111523a513b7fd03cb8faf3dfa7ea0e89be9ac38afbc770aebd641b2207f1f6467b89e795ec802752d9fa81e6e959286c3c0718514842acf95f8557c9d35f1b642e8761"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7c, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x3, 0x60, 0x2, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x70, 0x7f, [@generic={0xa9, 0x4, "3582972be0eb9f2ea158c7001de3ed15fec0e81e48f8547c000b9c8b219e2e5d5cdcf0a5a6b1eea07e86b9ec74fbfc3382cd613e61f3daba0fdc7c63b97d2e4487d4e65d0aebf0864c726f9f0e24c4b950af44c4bf050b1a9525da1dc6a67509ba57112e3f3538f0f985fa60c253dee93d15cb4d86911acf7e3b651e9cdf9bd14c9752af55a52f88fc4065279eecc91928a07cebdb52c98e4abaad03a7510badcda0d5a40ab51f"}, @generic={0x8b, 0x21, "828e5fdeda7e1baa7288e33c108dd6d34e6bca6763bde0ef7919248ad26dbebfbbac5b8609198fbbbb7405aeb586a56f684b9bddfb565194847342a01fd047de5cc9af0a69c73bba3e5dcf22e51c97e0c7bf49bdb3c5bbb00b80d43822887ce2494f704e15126c48433fd7e8abd88446b3c559f8aa1c83cd96fffd52a18ed4589cf71bf433f8513871"}]}}]}}, {{0x9, 0x4, 0x60, 0xf, 0x3, 0x8e, 0x1e, 0xa6, 0xf8, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x9, 0x7f, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x7, 0x7f, 0x30}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x2, 0x6, 0xe}}]}}, {{0x9, 0x4, 0x98, 0x4, 0xb, 0x28, 0xd8, 0x3, 0xfc, [@generic={0x8a, 0x23, "efa6ee15fe184774c7ff42fc4c826423fae7ff3f8a73e2b8ac008de9d89e7b54a5cdda24e934bc3b023d67644f5cf2fb0bf1be3d2688407757c2f708b1876de08e21355feac600186c5ed87ed03c3ba4ebf216fefbbb0e659ec9f4372ec57df6bc661d90f8d727458a59becf2bf3ce8425d228067d0d55a4fe15ad976298024404b171f4bbda5a6d"}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0xc0, 0x7}]}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x6, 0x58}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xe, 0xb, 0xfe, [@generic={0xda, 0x6, "885909ba60e134f848b69899a0a43294bb6f3f9ad23174b72b22617433219b19ed7d97a395d8c22053ca384a1ccd8f2c2bca66ce05e2cec037b1a0010296b84bd6dc22375edb88892a3ec61a406fe602c4661f978dcccbb11ffc5f9a4c179f8cddfb2c4b2d76d56a75576f22d85da4c4bfc8a17f3317d161610d4cc97bbe4182c9631fcc468e430e5bb998ebb57c21caeb7ee041d4461533d4daa9542a943a74a25b08abf6929920d902b7d28be20e3ba4c64422a9d5686d9fb9fc234070596aab4378f0ae4e4a281e2d5e737871b59c3a9584bd9c7c3eee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x38, 0xb, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x9}, @generic={0x98, 0x30, "663ca3a4daddef4f486b7dfe9dc96cca8d4a1f26f4c9288c211d6da5d4429719d505a5ddd065a2936e6a34bd8648a1976b8e8803c84a2bf7875113e50ab1cf81b5baa792847a117d9f3446f1b0d213f6cc890b2cacac0bf4415ccc1c5444a542fd205fc8c773a3dd073c697e75131de3c63047b07afdcbf5ab1bccccd3781cacd70d3db88fa00bfea8bae37e3cab648fc7d5b446e8d2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x6, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0xfc, 0x7, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x100}]}}, {{0x9, 0x5, 0x3, 0x9584fc777fb82e49, 0x10, 0x81, 0x3, 0x8, [@generic={0xb9, 0x31, "114ea5a5fc6e3147913325fdcd3a0ea306cb173813fedd68188bf1d259ea9e4a15d2840041b2f41902fa851a4f5b4cc4193581bd3a06786668fe355741bc2cc8c599898be4f1a5df7497707b483d2d57f39e6d43d5424b4c364bce84c732dd69c6d4a818e379a7555ca25a73f14eac9f9265721e3f48af4aeeca61ee6122cbe575af5d282e00d6435810a21868bba2998601c1a32411c852e2b546f6a3d9a657d938b84586efa5fdb1e1328687d996fb60ee2c54a3af56"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9a, 0x7, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x3, 0x1, [@generic={0xf2, 0x24, "f4635647aaa6c7e41d78213abe316337966a2e923d49c755b629f868312314c80aad415753ec570280f05db28baf7c4aa1ecd97a68e1aa27657b8d66feb161c1bdf33629b4687eec3a39a442d2328b7f7667b1f6f052bba6f88ac5e8768d6d7520260d93fa870dd87793c994eeceb75d0dcbfa2894bd5bfa2bc8845924de58151a83d326b11005a66431f8815ee496eafa8ece78f169f1b9f54b541ae89a0ec3783183163c6309fe0ca387db6fc67c763e5454a423cee4d41252c31d1a5db840c3406936075f96e63722ec01911de8193f5c67affd593b575b01797cefd078717492875fe6075ce8d73511f5dd53d4e3"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x2, 0xf7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1545}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0xe}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x81, 0xbd, 0xe}}]}}, {{0x9, 0x4, 0x0, 0x6, 0xa, 0x20, 0x6c, 0x4f, 0x3b, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x8, 0x8, 0x4, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0xde, 0x5, "a7"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x95, 0x3, 0xfe, 0xc, 'K'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0xa0, "d5"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xc, 0x3, 0x0, 0xa0, "61a7ab81f9"}]}], [{{0x9, 0x5, 0xd, 0x8, 0x20, 0x5, 0xe, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x757d96fdfaad1377, 0x8, 0x5, 0xc, [@generic={0xd9, 0x5, "c3950f4bbb2f786a9fa22fbf38b3fe0362d924cf75a828cf8acc488457058d575262386ce9dc0b68bea063efc72dad156d84d63d120b3207be14da0d0bebaee00e93037a306595e8f2861e01b6154011340888919d2a43fc21257df2a54023183a87df37b66cb79aa690fd55da1f0778511f69940c13b33f591d46e7cd21ed5f7082a0551fce367d0e3983fec2831e7209edde8dde9a580fa44452d8d4c61291d213ccff188aec2d6197900ba01fe2062769cbbf62dd06d809833346501377b5ac4c2d6c9b566012b12d69706ba5b824817af7ba279a88"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0xd, 0x6, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x3d7, 0xa, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd6, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x31, 0xf, 0x6, [@generic={0x52, 0x9, "df84371732c79e3de1597f6547239896bee359736eea0dbe2eeee20425b53e6b9671733372586877f8bffb52764ef3c3d9e0ccbf9e88e95ffc39842d2e9e95ae3b26bd12df75fe8782f257069c28e214"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x1, 0xfc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x7}, @generic={0xf3, 0xe, "2768341d4f6107f3ef59f752f1edd6c2ba4f426395ad975c9f7686fff7ade39f5f7454fda1e32087ecc3282e347cd12f9c51e5b4b432d7664d545e30069b9f0d75a23d949f70d4130e0d76f8cb3e7bf7d03456ab8364af3900e1505de59afd900320ad0bfb1bebd6e6eb11371a78d9b0904ab32b3017592392b0b6e05773928dd9d7669ae24963b1614ab7296dc78d6545ab3542cea2764271ec66244eabfef58e7cf67baae971ea0329a2a7e4abba89adba528f1fe3af5aa2e374a3cde2e0581ddf081cf572b079dd4a758562d028862e9480cb1d55b96f663f2026a49734bceffdf2cd80cf5e7ae8e8dc047ce0c38afb"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xb, 0x8, 0x51, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xa53}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9, 0x45, 0x9, [@generic={0xab, 0xc, "145b905e19b4f4cca44362d25391c270065fb6ba654901fdfe57b84d945a434689a6b9ca2278fac5b3d29bebd851b764c2446e408d9ae3a2cb554910069eb20783b4a44298bebbd75dc1b75d7bd46822c22272d492c70cee6035b11327d52caba5736a799e03b6630f994c23db4b467eca02693fb14591b3b6ed15f23ceaa2046c018ddedab7c0ad9273ba88454e33e97aaf454c9f15e556faac5164e60740b8f533bdac77d51eb789"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}, @generic={0x88, 0x8, "a441c42e1a0fa0c8721d23aafcc9b6cdffd67d077db60e83d77b03f674daed9a77de002afb4fda9caa90e493aa225742d0e21ec2c45c746b57564752b940540f5b8de8def8b92ba424af18c159385af45049a52356159288ed3c66617e18704cb2ca48cf78b02bb8bfe552601587a7cbf989c6e1353b04ec3769d71aff0b0f368dc753fc894a"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x1, 0x7, 0x10, 0x2}, 0x12, &(0x7f0000000040)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x7, 0x4}, @ptm_cap={0x3}]}, 0x8, [{0x21, &(0x7f0000000080)=@string={0x21, 0x3, "b58c42450bf3567701b150e3c97636b870d2b99eb041201a55bb61abac2578"}}, {0x40, &(0x7f00000000c0)=@string={0x40, 0x3, "0612ecb448a421938f73dc1a6308d6f3a46eb2c46db40150584b61705dc2ca9ff4bec3b5f691f62b486380625711f2a8b14e3a7dcb2ac736fc2f041f6250"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x82c}}, {0xae, &(0x7f0000000180)=@string={0xae, 0x3, "5b0de14b1e9a4bd986786c9cc4ece7349ce39c6a5a85d473ecb3441dacfc183eb0066ebfcd954f5f7c95838b0fcbb052995f1be5bff9516a1611272ba9a3d4701ca6954ad1642f07bb1a1947229eb66a50585737d7d012ac99168b1f0f2bf6d10efe0e2c7ef5fea25cdaca63f2d4a6321bd0460383f5ea2cc1ea2457bc3fd764bf3641ef1ef8f25e58b1a063d91d56a469d101ad2bfc4a278c9567e0ff0d6c7a583748def97c6db3dec1a32e"}}, {0xe2, &(0x7f0000000240)=@string={0xe2, 0x3, "26f5905303d06aa7f84c3b5dae35e2c332ed1a2c6d3ed7de400648fbd1ece08cd92c5f5bf047bfb24cc6fdc40ffbea113be211bab34a3b8ab2a6316fa752f351e8728616d75be17affda8cef1aaaf5295c9204f53f13a0df688752a492cb54f4d9155e012d1e2255896ee177b2865e129c0e97b934227f03d047ee3f033ee920cfc9331c4100a6b6c4e83ccc63da0cdf813e149feb9e751a2fd38164049724bac2c9ec5f64ed1d43227b975f93ea69349927cfe70289d292eb76a0a6b7f6f05bd5e0436883e2360c33f5c96f020b34fa6ecdcf4d8e5541eea492ca2dd5a43066"}}, {0xf8, &(0x7f0000000340)=@string={0xf8, 0x3, "fa435528d9786771d1c22250f16efc9227202411c1ef0b7bd25a82e6033559e73505e484f9a07767c97510a241c7b85d53e6fb36a89db28cbc58fddd243a67185b76d93f63c09006ef9a07eebdaade80129d754dba20b2505240f505915a126c042e0500e95ea14261f0a393098cdbd139068da07733c7268c78fb3c49474d9960a7305344a2b5ad68bff8628cdaccb52e6e7ba0ebdf3e3a7c2653d160c48e4a2b4ec86751a94550f6e79a6e0a47ff460937a2e5c9079f1c4b7370c967dd5fcdade3526f0aaf80ba22f3329b0de886aa3d7395b0be408447c7864dd1038155bc767585d608229dbef5a7f7ca95aed8b7e25fcc8fbf04"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c01}}]}) 556.746712ms ago: executing program 0 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0xa8, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "15a92016d892fccf4bee9e95df3ddb013b139e1e"}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x67f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_deladdr={0x60, 0x15, 0x900, 0x70bd25, 0x25dfdbfe, {0x2, 0x8, 0x20, 0xfe, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x753c, 0x8, 0xffc, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000700)=@ll={0x11, 0x1c, 0x0, 0x1, 0x4, 0x6, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)="4e9b25e687bd58666ad81013a6f25ea2", 0x10}], 0x1, &(0x7f0000000800)=[{0x50, 0x16, 0x81, "d5ae6a83f5ad14c1694545cf8db41e989d9db18503b420fcba82dd16309fdf612211609143051d2485a829cae184e91b968aee45ad01ab0dd2d587be01c9"}], 0x50}}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000900)="428a6255eee0aa7e", 0x8}, {&(0x7f0000000940)="013fa0cf3a0e69dcba7557d27a09410cba51686b09ddcb67aae5fd4dda20e7cbcf247e30e93321e46a35d457317f675dae9b27aa582bbfc07911998f6f3d644ed6fc5e15d232eb9c6adada40498ad5dfb1e77c07e208f4675ae3eb990c57eee265ebe35b7273be218203b2ed9919e3691abacfaf5cb37e24aa499e47f6da2aa5dc255bf0f3616009a0f3d114ecb877e32447f5fac6ca8ef2ac45a5334b07cf73ef83dfddeed81fe7d5954d624896c84d11f0982f3ee6a401135216", 0xbb}, {&(0x7f0000000a00)="591f88d3fdf63e5fceead4123aaeb958275d67b0cf8b8383847cec8d288c6a00728b2fc8acc0a03bc898797a1d9652b2caccb21e48a17c6569beac2e888fbfec489115bf116093750bfaff5a16eb4f00337535426f9f630c8b6879f0b2f18160d942a6e26da7161610138787c162b24dee13f26a194ed3c841acfb4d5d211f999a29cfb39205188b04390b169cfa872d121d11273d817ce10313f8244e515cbe581f", 0xa2}, {&(0x7f0000000ac0)="8a8fd1f4f58f8b510ae47be23c7b5695b436e333959c0f3e8e0398ce8930f427b2e79713ff285e6ae35eb533f466fd422fe3ee48d78076e55f4cf993491400794e1f38eb0c75f5fe6af6443b017fffb647b7fb2361b7cd87b6610934c5b9045c7b6a7e81adf906a98385cb960eb07a0aa96de48673bfee9cacd4da998afc78fe6ab0690a41d552f7019c7da665e9d23c32886f0f9e88f856e69983bb1d3adae088d2baa43e6c17b17d3dd3aeb1d75a8f9e15b20da897b1e019a070fcedf713589f3e426ead7ad981f6f69e855eead0ad4e2c0031a79d75cc6e64", 0xda}, {&(0x7f0000000bc0)="e979281a1885f110d3c20e80a4036f709fe5a79b47a2ed5928ebc11b606ce8135cb2f7788fe6bdbe894ff7c95a9ecb127110fbe4685b399fda8cd92b2bcc47b160fa867ee858c79eca7066700d6bf67c24579f80dea6588c10c1edd920c20409f1c4131562ce8bb2b15bb62fea22d8443191075b57149f46f0618e0ac1e526a0ec625b28ba751ca66469ba21d045734f7f89b3b82fe9a22bf6974da05daf7072340c6bfe0aceed2767900288644cbebed1f272c4343f5bb6877a8643086cf095e9", 0xc1}, {&(0x7f0000000cc0)="0ba857e433d65b9e7c62d0cc0dd30a1f6f77bbb791826db22096f33684d450cdfee49ce1bad2609a72c7", 0x2a}, {&(0x7f0000000d00)="c69edb22c3bf5a3aa266ecf66929b52697904d8af498ab21bb0c1f202e2a0ddf311ba58081439e3e5b52ce6dec948430b0463b10529dedb43fd7101b94e11e55cb515a851a4e36ae3b41782a34e072f5deb811fa786fc0279bef8b7919e0391b794959472a04c2eb28918509a794c530b75db70be2e063a3adbc740632df16312e458ff665e283d700ad13ed434280d40b1b972d4b092ed1416b7386a3", 0x9d}, {&(0x7f0000000dc0)="8217920cee0bb8b5a2f8beb99fcea443a73c9a5042e8ca89617aab5690a4d770763b4eec53a56e9d4cf04f82f796d2be4b4092fc204bd0ab85e57c87436e70959f0f67252e090eb2bb8cbda8b1288ad06a4f749df024b4bd3b06f37eb7a5a4b18f7dbeb184575cd0567e34750c51cadd9c314f452c0495ad32a303699dcf138863c918bd9a9221a477a1a6a2dc4c65e7c0baee5f24c0b0b5f0d990a21c9e6cdfbf4f5bed1dfb349f955977811881d931ad6a909df3c8c91030323716b092cb42a22de4122c1f0d36f30a53e9d4dac9b2449461df393ad785faa93688791833abd752a45af93c094f64c81ce1ef453bc928a7d575b3246b", 0xf7}], 0x8, &(0x7f0000000f40)=[{0x108, 0x88, 0x0, "66ebe4bbaa6d9740ce55829d7e0000ead48cd6281c130629af1cf3fce2281a41a8cff98c773a9b6e5b9a959c838b9d1d780657ca547bdb725b3cc763c6a697a69b673c313a8fa661aee45bd2f0c8c9dd42d56d786ddc5d021c00a71384227e5d3f1c1b4c0bdb63a3ef2ad9b01c8d888c9fabbeecd2dfe38133ca23bc4f60668ea0e38b103375ac6f5a33b9dc388ed5c0147fc6f700161e0873a85939f2df29651bdc513323a2fa2795522340308c4d3f8affb607ff2fcb3e4e7d1fa0d0898d535d4d036b761c28a14065b962d3f0b8d9aad841c842132b8214e1bafbcde914e222d77833d8c816221dfe49e4f11362f7f7e7f1"}], 0x108}}], 0x2, 0x4000) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000036c0)={0x9, 0x3, {0xffffffffffffffff}, {}, 0x8, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000003700)={0x2020}, 0x2020) openat$dsp1(0xffffffffffffff9c, &(0x7f0000007c40), 0x20400, 0x0) socket$l2tp(0x2, 0x2, 0x73) statx(0xffffffffffffffff, &(0x7f0000007c80)='\x00', 0x4000, 0x2, &(0x7f0000007cc0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000009440)) getgroups(0x3, &(0x7f00000095c0)=[0xee01, 0xee00, 0xee01]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000009600)={'\x00', 0xff80, 0x7, 0x400, 0x8000, 0xf, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000097c0), 0x4) 461.12022ms ago: executing program 0 (id=570): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="c7", 0x1}], 0x2, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) 212.168761ms ago: executing program 0 (id=571): socket(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x6, 0x80000000, 0x10000004, 0x10000, 0x2, 0x10000, 0x87a, 0x8000000000000, 0x9, 0x0, 0x8, 0x0, 0x100004, 0x8, 0x400008008], 0x200000, 0x100c02}) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffbffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 0s ago: executing program 1 (id=572): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) (async) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0xa}, 0x94) r4 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x9b7, 0x800, 0x6, 0x199}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc00864d2, &(0x7f0000000300)={r7}) kernel console output (not intermixed with test programs): roduct=23, SerialNumber=3 [ 141.904774][ T6421] usb 5-1: Product: syz [ 141.909449][ T6421] usb 5-1: Manufacturer: syz [ 141.915128][ T6421] usb 5-1: SerialNumber: syz [ 141.930188][ T6424] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 141.938559][ T6421] usb 5-1: config 0 descriptor?? [ 142.090376][ T6424] usb 3-1: Using ep0 maxpacket: 32 [ 142.115191][ T6424] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.133582][ T6424] usb 3-1: config 0 has no interfaces? [ 142.139142][ T6424] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 142.160882][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.175222][ T6424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.184397][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.207870][ T6424] usb 3-1: config 0 descriptor?? [ 142.349440][ T6421] usb 5-1: USB disconnect, device number 19 [ 142.395837][ T5821] udevd[5821]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 142.780234][ T5903] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.870248][ T6407] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 142.880230][ T5874] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 142.932272][ T5903] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 142.941187][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.952321][ T5903] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.961538][ T5903] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.969609][ T5903] usb 2-1: Manufacturer: syz [ 142.977279][ T5903] usb 2-1: config 0 descriptor?? [ 143.010516][ T5874] usb 5-1: device descriptor read/64, error -71 [ 143.022279][ T6407] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.032918][ T6407] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.042097][ T6407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.052335][ T5903] rc_core: IR keymap rc-hauppauge not found [ 143.059175][ T5903] Registered IR keymap rc-empty [ 143.065517][ T6407] usb 1-1: config 0 descriptor?? [ 143.072072][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 143.097770][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 143.261528][ T5874] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 143.277544][ T5903] usb 1-1: USB disconnect, device number 23 [ 143.412866][ T5874] usb 5-1: device descriptor read/64, error -71 [ 143.486373][ T6931] netlink: 'syz.0.242': attribute type 4 has an invalid length. [ 143.519710][ T5903] usb 2-1: USB disconnect, device number 18 [ 143.526267][ T5874] usb usb5-port1: attempt power cycle [ 143.740283][ T6407] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 143.880211][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 143.890199][ T6407] usb 1-1: Using ep0 maxpacket: 32 [ 143.900034][ T6407] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 143.901548][ T5874] usb 5-1: device descriptor read/8, error -71 [ 143.909607][ T6407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.923642][ T6407] usb 1-1: Product: syz [ 143.927860][ T6407] usb 1-1: Manufacturer: syz [ 143.932587][ T6407] usb 1-1: SerialNumber: syz [ 143.942089][ T6407] usb 1-1: config 0 descriptor?? [ 143.951197][ T6407] asix 1-1:0.0: probe with driver asix failed with error -22 [ 144.150262][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 144.182956][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.195800][ T5874] usb 5-1: device descriptor read/8, error -71 [ 144.202459][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.222132][ T6421] usb 1-1: USB disconnect, device number 24 [ 144.321021][ T5874] usb usb5-port1: unable to enumerate USB device [ 144.532066][ T6421] usb 3-1: USB disconnect, device number 25 [ 144.541192][ T6909] veth1_to_bond: left allmulticast mode [ 144.580331][ T6407] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 144.690804][ T6424] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.782761][ T6407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.824259][ T6947] netlink: 'syz.0.246': attribute type 5 has an invalid length. [ 144.834103][ T6407] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.852781][ T6947] ip6erspan0: entered promiscuous mode [ 144.858387][ T6424] usb 4-1: Using ep0 maxpacket: 16 [ 144.873380][ T6407] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 144.886556][ T6424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.901299][ T6407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.950231][ T6421] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 144.958780][ T6424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.974985][ T6407] usb 2-1: Product: syz [ 144.979180][ T6407] usb 2-1: Manufacturer: syz [ 144.993904][ T6407] usb 2-1: SerialNumber: syz [ 145.001639][ T6424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.037400][ T6407] usb 2-1: config 0 descriptor?? [ 145.050308][ T6424] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 145.074635][ T6424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.110842][ T6424] usb 4-1: config 0 descriptor?? [ 145.152930][ T6421] usb 3-1: config 9 has an invalid interface number: 164 but max is 1 [ 145.178262][ T6421] usb 3-1: config 9 has an invalid interface number: 82 but max is 1 [ 145.269565][ T6421] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 145.355686][ T6421] usb 3-1: config 9 has no interface number 0 [ 145.397361][ T6421] usb 3-1: config 9 has no interface number 1 [ 145.507766][ T6421] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 145.530021][ T6421] usb 3-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 145.571817][ T6421] usb 3-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 145.648439][ T6421] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0x5 has invalid maxpacket 1648, setting to 64 [ 145.720470][ T6421] usb 3-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 145.802751][ T6421] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 145.840257][ T6421] usb 3-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 145.859993][ T6424] usbhid 4-1:0.0: can't add hid device: -71 [ 145.866132][ T6424] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.874118][ T6421] usb 3-1: config 9 interface 164 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 145.920236][ T6424] usb 4-1: USB disconnect, device number 17 [ 145.936190][ T6421] usb 3-1: config 9 interface 82 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.956032][ T6421] usb 3-1: config 9 interface 82 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 146.020226][ T6421] usb 3-1: config 9 interface 164 has no altsetting 0 [ 146.035063][ T6421] usb 3-1: config 9 interface 82 has no altsetting 0 [ 146.058622][ T6421] usb 3-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=56.9b [ 146.080879][ T6421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.115726][ T6421] usb 3-1: Product: syz [ 146.132364][ T6421] usb 3-1: Manufacturer: syz [ 146.138858][ T6421] usb 3-1: SerialNumber: syz [ 146.156642][ T6945] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 146.397166][ T6421] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.448271][ T6421] snd-usb-audio 3-1:9.164: probe with driver snd-usb-audio failed with error -2 [ 146.522240][ T6421] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.765854][ T6421] usb 3-1: USB disconnect, device number 26 [ 146.872181][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.090333][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.240315][ T5874] usb 4-1: device descriptor read/64, error -71 [ 147.512982][ T5874] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 147.660969][ T5874] usb 4-1: device descriptor read/64, error -71 [ 147.745843][ T7006] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 147.781554][ T5874] usb usb4-port1: attempt power cycle [ 147.889140][ T24] usb 2-1: USB disconnect, device number 19 [ 147.920240][ T6421] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 147.943023][ T30] audit: type=1326 audit(1773969137.255:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 147.984808][ T30] audit: type=1326 audit(1773969137.255:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.047054][ T30] audit: type=1326 audit(1773969137.255:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.090821][ T6421] usb 3-1: Using ep0 maxpacket: 16 [ 148.130567][ T6421] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 148.140899][ T5874] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 148.172630][ T5874] usb 4-1: device descriptor read/8, error -71 [ 148.178878][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.203244][ T30] audit: type=1326 audit(1773969137.255:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.239200][ T6421] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.282238][ T6421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.321516][ T30] audit: type=1326 audit(1773969137.255:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.345869][ T6424] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 148.355019][ T6421] usb 3-1: Product: syz [ 148.366327][ T6421] usb 3-1: Manufacturer: syz [ 148.386435][ T6421] usb 3-1: SerialNumber: syz [ 148.418438][ T6421] usb 3-1: config 0 descriptor?? [ 148.430361][ T5874] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 148.438065][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 148.465256][ T30] audit: type=1326 audit(1773969137.275:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.505770][ T6421] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.518309][ T5874] usb 4-1: device descriptor read/8, error -71 [ 148.538793][ T6421] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 148.551379][ T6424] usb 5-1: Using ep0 maxpacket: 8 [ 148.560257][ T6424] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.568546][ T30] audit: type=1326 audit(1773969137.275:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.636840][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.650836][ T5874] usb usb4-port1: unable to enumerate USB device [ 148.659782][ T6424] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.672170][ T24] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.684811][ T24] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.702650][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 148.713785][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.723807][ T6424] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.742174][ T24] usb 2-1: Product: syz [ 148.753829][ T24] usb 2-1: Manufacturer: syz [ 148.758727][ T24] usb 2-1: SerialNumber: syz [ 148.780768][ T30] audit: type=1326 audit(1773969137.275:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.0.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 148.815695][ T6424] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.818689][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 148.895882][ T6424] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.969116][ T6424] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.031415][ T6424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.049262][ T24] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 149.192172][ T6421] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 149.212129][ T6421] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 149.418155][ T6424] usb 5-1: usb_control_msg returned -32 [ 149.491340][ T6424] usbtmc 5-1:16.0: can't read capabilities [ 149.925618][ T24] usb 2-1: USB disconnect, device number 20 [ 149.967745][ T24] usblp0: removed [ 150.072791][ T6421] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 150.080362][ T6421] em28xx 3-1:0.0: No AC97 audio processor [ 150.149380][ T6421] usb 3-1: USB disconnect, device number 27 [ 150.185693][ T6421] em28xx 3-1:0.0: Disconnecting em28xx [ 150.228817][ T7038] tipc: Started in network mode [ 150.234207][ T7038] tipc: Node identity 3e, cluster identity 4711 [ 150.240676][ T7038] tipc: Node number set to 62 [ 150.246587][ T7038] tipc: Cannot configure node identity twice [ 150.255591][ T6421] em28xx 3-1:0.0: Freeing device [ 150.273616][ T796] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 150.471736][ T796] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.491732][ T796] usb 4-1: config 0 has no interface number 0 [ 150.513804][ T796] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.526154][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 150.540870][ T796] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.558321][ T7043] kernel read not supported for file /file1 (pid: 7043 comm: syz.1.270) [ 150.570776][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 150.585505][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 150.598497][ T796] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.612724][ T30] audit: type=1800 audit(1773969139.915:185): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="file1" dev="mqueue" ino=15360 res=0 errno=0 [ 150.633544][ T796] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.645467][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.667476][ T7043] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.683042][ T796] usb 4-1: config 0 descriptor?? [ 150.696316][ T7035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 150.705883][ T7043] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.731573][ T796] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.911245][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 150.974892][ T7035] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 151.082409][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 151.104237][ T796] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.136147][ T796] usb 1-1: config 0 has no interface number 0 [ 151.160662][ T796] usb 1-1: config 0 interface 184 has no altsetting 0 [ 151.189418][ T796] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.226560][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.252775][ T796] usb 1-1: Product: syz [ 151.268550][ T796] usb 1-1: Manufacturer: syz [ 151.283375][ T796] usb 1-1: SerialNumber: syz [ 151.306947][ T796] usb 1-1: config 0 descriptor?? [ 151.380618][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.414520][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.488909][ T6407] usb 5-1: USB disconnect, device number 24 [ 151.669880][ T7059] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 151.734389][ T796] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 151.777168][ T796] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 151.834267][ T796] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 151.871212][ T796] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 152.958704][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 153.016072][ T7093] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 153.101349][ T6421] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 153.233410][ T7072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.277'. [ 153.242546][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 153.282572][ T6421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.283628][ T7098] kvm: pic: non byte write [ 153.292809][ T6421] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.307653][ T6421] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.325979][ T6421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.337902][ T6421] usb 3-1: SerialNumber: syz [ 153.452916][ T6424] usb 4-1: USB disconnect, device number 22 [ 153.469249][ T6424] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 153.568732][ T6421] usb 3-1: 0:2 : does not exist [ 153.592545][ T6421] usb 3-1: unit 5 not found! [ 153.605083][ T6407] usb 1-1: USB disconnect, device number 25 [ 153.669639][ T6421] usb 3-1: USB disconnect, device number 28 [ 153.757126][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.884425][ T5874] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 154.158884][ T7121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.290'. [ 154.653864][ T7130] fuse: Unknown parameter 'group_Od' [ 154.916612][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 155.220205][ T7133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.254766][ T7133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.400235][ T7133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.415386][ T7133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.422996][ T7133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.433658][ T7133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.443188][ T7133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.449194][ T7133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.472234][ T7133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.480671][ T7133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.488575][ T7133] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.500692][ T7133] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.512788][ T7133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.521890][ T7133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.539398][ T7133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.870842][ T5874] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 156.060189][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 156.079558][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.094300][ T5874] usb 2-1: config 5 has an invalid interface number: 21 but max is 0 [ 156.110183][ T5874] usb 2-1: config 5 has no interface number 0 [ 156.128948][ T5874] usb 2-1: config 5 interface 21 has no altsetting 0 [ 156.163093][ T5874] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=93.d3 [ 156.191141][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.209269][ T5874] usb 2-1: Product: syz [ 156.228548][ T5874] usb 2-1: Manufacturer: syz [ 156.254713][ T5874] usb 2-1: SerialNumber: syz [ 156.493685][ T6407] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 156.518003][ T5874] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 156.610524][ T5874] usb 2-1: USB disconnect, device number 22 [ 156.700726][ T6407] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.760230][ T6407] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.810056][ T6407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.855482][ T6407] usb 4-1: config 0 descriptor?? [ 156.896989][ T6407] pwc: Askey VC010 type 2 USB webcam detected. [ 157.221383][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.297788][ T6407] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.321373][ T6407] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.342588][ T7166] tipc: Started in network mode [ 157.347458][ T7166] tipc: Node identity 3e, cluster identity 4711 [ 157.371345][ T6407] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.393356][ T7166] tipc: Node number set to 62 [ 157.398481][ T7166] tipc: Cannot configure node identity twice [ 157.404661][ T6407] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.421855][ T6407] pwc: recv_control_msg error -32 req 04 val 1300 [ 157.460550][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.460560][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.500318][ T6407] pwc: recv_control_msg error -32 req 04 val 1400 [ 157.507554][ T6407] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.540240][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.541480][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.786656][ T7173] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 157.960592][ T30] audit: type=1326 audit(1773969147.275:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.036320][ T30] audit: type=1326 audit(1773969147.325:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.117966][ T30] audit: type=1326 audit(1773969147.335:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.170548][ T30] audit: type=1326 audit(1773969147.335:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.231913][ T30] audit: type=1326 audit(1773969147.335:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.259525][ T30] audit: type=1326 audit(1773969147.345:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.341141][ T30] audit: type=1326 audit(1773969147.345:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.370527][ T7189] fuse: Bad value for 'user_id' [ 158.395479][ T30] audit: type=1326 audit(1773969147.345:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.423599][ T30] audit: type=1326 audit(1773969147.345:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.448994][ T7189] fuse: Bad value for 'user_id' [ 158.480222][ T5903] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 158.513079][ T30] audit: type=1326 audit(1773969147.345:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 158.620212][ T796] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 158.642052][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 158.666296][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 158.716133][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 158.735846][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.749650][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 158.759718][ T796] usb 2-1: device descriptor read/64, error -71 [ 158.773055][ T5903] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.782542][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.800219][ T5903] usb 1-1: Product: syz [ 158.807635][ T5903] usb 1-1: Manufacturer: syz [ 158.813860][ T5903] usb 1-1: SerialNumber: syz [ 158.832954][ T5903] usb 1-1: config 0 descriptor?? [ 158.842325][ T7186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.851365][ T5903] usb 1-1: ucan: probing device on interface #0 [ 158.857681][ T5903] usb 1-1: ucan: invalid endpoint configuration [ 158.866645][ T5903] usb 1-1: ucan: probe failed; try to update the device firmware [ 159.000295][ T796] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 159.069087][ T5903] usb 1-1: USB disconnect, device number 26 [ 159.119498][ T6407] pwc: recv_control_msg error -71 req 02 val 2100 [ 159.131294][ T796] usb 2-1: device descriptor read/64, error -71 [ 159.159442][ T6407] pwc: recv_control_msg error -71 req 04 val 1500 [ 159.177441][ T6407] pwc: recv_control_msg error -71 req 02 val 2500 [ 159.207209][ T6407] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.228064][ T6407] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.249573][ T6407] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.258610][ T796] usb usb2-port1: attempt power cycle [ 159.279347][ T6407] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.292451][ T6407] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.304998][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.311088][ T6407] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.320053][ T6407] pwc: Registered as video103. [ 159.370944][ T6407] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 159.459055][ T6407] usb 4-1: USB disconnect, device number 23 [ 159.540396][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.544973][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.600460][ T796] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 159.620362][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.620796][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.633371][ T796] usb 2-1: device descriptor read/8, error -71 [ 159.736034][ T7209] tipc: Started in network mode [ 159.742401][ T7209] tipc: Node identity 3e, cluster identity 4711 [ 159.748983][ T7209] tipc: Node number set to 62 [ 159.754785][ T7209] tipc: Cannot configure node identity twice [ 159.830220][ T5903] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 159.870237][ T796] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 159.881529][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 159.890911][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 159.911756][ T796] usb 2-1: device descriptor read/8, error -71 [ 160.016200][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.031523][ T796] usb usb2-port1: unable to enumerate USB device [ 160.041063][ T5903] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 160.051508][ T5903] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 160.062361][ T5903] usb 3-1: config 63 has no interface number 0 [ 160.068881][ T5903] usb 3-1: config 63 interface 66 has no altsetting 0 [ 160.079449][ T5903] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 160.089023][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.097149][ T5903] usb 3-1: Product: syz [ 160.101957][ T5903] usb 3-1: Manufacturer: syz [ 160.106661][ T5903] usb 3-1: SerialNumber: syz [ 160.395830][ T5903] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 160.415243][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 160.442683][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 160.464516][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 160.477830][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 160.489164][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.505877][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.509836][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 160.536162][ T5903] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 160.563821][ T5903] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 160.602393][ T5903] usb 3-1: USB disconnect, device number 29 [ 160.721289][ T6407] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 160.873508][ T6407] usb 5-1: Using ep0 maxpacket: 16 [ 160.894237][ T6407] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 160.927916][ T6407] usb 5-1: config 0 has no interface number 0 [ 160.951689][ T5903] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 160.960095][ T6407] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.989995][ T6407] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.014265][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 161.030908][ T6407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.044781][ T6407] usb 5-1: config 0 descriptor?? [ 161.139324][ T7230] netlink: 56 bytes leftover after parsing attributes in process `syz.3.319'. [ 161.159358][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.178554][ T5903] usb 3-1: not running at top speed; connect to a high speed hub [ 161.199223][ T5903] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 161.213924][ T5903] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 161.237249][ T5903] usb 3-1: config 63 has no interface number 0 [ 161.260278][ T6421] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 161.269952][ T5903] usb 3-1: config 63 interface 66 has no altsetting 0 [ 161.314785][ T5903] usb 3-1: string descriptor 0 read error: -22 [ 161.327026][ T5903] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 161.371432][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.380463][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.436701][ T5903] uvcvideo 3-1:63.66: Found UVC 0.07 device (174f:8acf) [ 161.453439][ T6421] usb 1-1: Using ep0 maxpacket: 32 [ 161.477849][ T6421] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 161.502076][ T6407] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2 [ 161.526208][ T6421] usb 1-1: config 0 has no interface number 0 [ 161.547080][ T6421] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.609380][ T6421] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 161.620417][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.626661][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.651049][ T6421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.698014][ T6421] usb 1-1: Product: syz [ 161.703453][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.710341][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.785823][ T6421] usb 1-1: Manufacturer: syz [ 161.806082][ T6421] usb 1-1: SerialNumber: syz [ 161.833806][ T6421] usb 1-1: config 0 descriptor?? [ 161.841292][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 161.855918][ T7231] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 161.878706][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 161.916610][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 161.946774][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 161.970074][ T7218] netlink: 'syz.4.317': attribute type 34 has an invalid length. [ 161.982005][ T5903] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 162.018887][ T5903] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 162.031354][ T6407] usb 5-1: USB disconnect, device number 25 [ 162.093716][ T5903] usb 3-1: USB disconnect, device number 30 [ 162.184625][ T6421] asix 1-1:0.188: probe with driver asix failed with error -71 [ 162.277398][ T6421] usb 1-1: USB disconnect, device number 27 [ 162.591074][ T5903] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 162.771570][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 162.783650][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 162.797976][ T5903] usb 2-1: can't read configurations, error -61 [ 162.890206][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 162.950269][ T5903] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 162.990197][ T6421] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 163.054078][ T24] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 163.064694][ T24] usb 1-1: config 0 has no interface number 0 [ 163.083115][ T24] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 163.092411][ T6407] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 163.115123][ T24] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 163.128836][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 163.140768][ T24] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 163.152401][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.160001][ T5903] usb 2-1: can't read configurations, error -61 [ 163.170351][ T24] usb 1-1: config 0 interface 11 has no altsetting 0 [ 163.181736][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 163.194709][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.209416][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.209700][ T5903] usb usb2-port1: attempt power cycle [ 163.228142][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.243083][ T6421] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 163.254150][ T6407] usb 5-1: device descriptor read/64, error -71 [ 163.258666][ T24] usb 1-1: config 0 descriptor?? [ 163.266511][ T6421] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.275659][ T6421] usb 3-1: Manufacturer: syz [ 163.281982][ T7256] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 163.303721][ T6421] usb 3-1: config 0 descriptor?? [ 163.308898][ T24] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 163.325768][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 163.345350][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 163.364654][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 163.379009][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 163.402527][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 163.418623][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 163.441727][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 163.467828][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 163.489525][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 163.521496][ T6407] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 163.521548][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 163.573027][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 163.590496][ T5903] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 163.609307][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 163.631791][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 163.642839][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.655590][ T24] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 163.670228][ T5903] usb 2-1: can't read configurations, error -61 [ 163.690935][ T6407] usb 5-1: device descriptor read/64, error -71 [ 163.729707][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 163.782419][ T24] usb 1-1: USB disconnect, device number 28 [ 163.787148][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.807810][ T6407] usb usb5-port1: attempt power cycle [ 163.814384][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.832333][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.839759][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.845338][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 163.856192][ T5903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 163.866289][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.880259][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.891509][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 163.892655][ T6421] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 163.910037][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 163.925891][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.940901][ T6421] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 163.955062][ T24] keyspan 1-1:0.11: device disconnected [ 163.961859][ T5903] usb 2-1: can't read configurations, error -61 [ 163.982332][ T6421] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 163.986656][ T5903] usb usb2-port1: unable to enumerate USB device [ 163.999998][ T6421] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 164.028493][ T6421] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -32 [ 164.047637][ T7273] loop2: detected capacity change from 0 to 7 [ 164.074522][ T7273] Dev loop2: unable to read RDB block 7 [ 164.085285][ T5903] usb 3-1: USB disconnect, device number 31 [ 164.092165][ T7273] loop2: unable to read partition table [ 164.099551][ T7273] loop2: partition table beyond EOD, truncated [ 164.117661][ T7273] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 164.170485][ T6407] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 164.218876][ T6407] usb 5-1: device descriptor read/8, error -71 [ 164.240069][ T7276] fido_id[7276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.320214][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 164.470265][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 164.470300][ T6407] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 164.483120][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 164.494760][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 164.501574][ T6407] usb 5-1: device descriptor read/8, error -71 [ 164.512483][ T6421] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 164.513389][ T24] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 164.531030][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.539053][ T24] usb 1-1: Product: syz [ 164.543518][ T24] usb 1-1: Manufacturer: syz [ 164.548161][ T24] usb 1-1: SerialNumber: syz [ 164.552834][ T5903] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 164.641238][ T6407] usb usb5-port1: unable to enumerate USB device [ 164.680192][ T6421] usb 4-1: Using ep0 maxpacket: 8 [ 164.687447][ T6421] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.696096][ T6421] usb 4-1: config 179 has no interface number 0 [ 164.703501][ T6421] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 164.714648][ T6421] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 164.725939][ T6421] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.739100][ T6421] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 164.743257][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.751330][ T6421] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.774833][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.779808][ T6421] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.793825][ T6421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.797804][ T24] usb 1-1: Fast Track Pro switching to config #2 [ 164.811007][ T7283] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 164.818837][ T5903] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 164.831269][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.857938][ T24] usb 1-1: USB disconnect, device number 29 [ 164.864737][ T5903] usb 3-1: config 0 descriptor?? [ 165.053192][ T6421] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 165.247706][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.257749][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.275995][ T24] usb 4-1: USB disconnect, device number 24 [ 165.276010][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 165.290849][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 165.312953][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.325540][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.439397][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 165.587473][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.840194][ T6421] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 166.012779][ T6421] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.124656][ T6421] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 166.183616][ T6421] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 166.232463][ T6421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.294719][ T6421] usb 1-1: config 0 descriptor?? [ 166.743867][ T6421] Bluetooth: Can't get state to change to load configuration err [ 166.777292][ T6421] Bluetooth: Loading sysconfig file failed [ 166.797210][ T6421] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 166.828769][ T6421] usb 1-1: USB disconnect, device number 30 [ 167.197550][ T7335] syzkaller0: entered promiscuous mode [ 167.209063][ T7335] syzkaller0: entered allmulticast mode [ 167.233650][ T7334] 0: reclassify loop, rule prio 0, protocol 800 [ 167.496141][ T5903] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 167.511939][ T5903] usb 3-1: USB disconnect, device number 32 [ 167.590928][ T6424] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 167.680207][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 167.780620][ T6424] usb 1-1: Using ep0 maxpacket: 8 [ 167.796839][ T6424] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 167.810530][ T24] usb 5-1: device descriptor read/64, error -71 [ 167.825930][ T6424] usb 1-1: config 2 has no interface number 0 [ 167.833359][ T6424] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.843792][ T6424] usb 1-1: config 2 interface 241 has no altsetting 0 [ 167.854147][ T6424] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 167.909523][ T6424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.954968][ T6424] usb 1-1: Product: syz [ 167.966194][ T6424] usb 1-1: Manufacturer: syz [ 167.994134][ T6424] usb 1-1: SerialNumber: syz [ 168.021771][ T6424] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 168.060275][ T6424] ti_usb_3410_5052 1-1:2.241: missing endpoints [ 168.077050][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 168.160210][ T6407] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 168.203869][ T7364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.355'. [ 168.225499][ T6424] usb 1-1: USB disconnect, device number 31 [ 168.250448][ T24] usb 5-1: device descriptor read/64, error -71 [ 168.264609][ T7365] fuse: Unknown parameter 'x' [ 168.275542][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 168.295737][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.303433][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.341270][ T6407] usb 3-1: Using ep0 maxpacket: 16 [ 168.353138][ T6407] usb 3-1: config 0 has no interfaces? [ 168.374780][ T24] usb usb5-port1: attempt power cycle [ 168.403028][ T5903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.419905][ T6407] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.456676][ T6407] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.486674][ T6407] usb 3-1: Manufacturer: syz [ 168.523881][ T6407] usb 3-1: config 0 descriptor?? [ 168.570429][ T5903] usb 4-1: device descriptor read/64, error -71 [ 168.752243][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 168.796467][ T24] usb 5-1: device descriptor read/8, error -71 [ 168.820291][ T5903] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 168.970231][ T5903] usb 4-1: device descriptor read/64, error -71 [ 169.100569][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 169.109597][ T5903] usb usb4-port1: attempt power cycle [ 169.132391][ T24] usb 5-1: device descriptor read/8, error -71 [ 169.213703][ T7354] Set syz1 is full, maxelem 6117 reached [ 169.248263][ T24] usb usb5-port1: unable to enumerate USB device [ 169.320229][ T6424] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 169.480399][ T6424] usb 2-1: Using ep0 maxpacket: 16 [ 169.492879][ T6424] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 169.493362][ T5903] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 169.522770][ T6424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.551566][ T5903] usb 4-1: device descriptor read/8, error -71 [ 169.560169][ T6424] usb 2-1: config 0 has no interface number 0 [ 169.578716][ T6424] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 169.604279][ T6424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.632754][ T6424] usb 2-1: Product: syz [ 169.649254][ T6424] usb 2-1: Manufacturer: syz [ 169.664671][ T6424] usb 2-1: SerialNumber: syz [ 169.689648][ T6424] usb 2-1: config 0 descriptor?? [ 169.716322][ T6424] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 169.810192][ T5903] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 169.832893][ T5903] usb 4-1: device descriptor read/8, error -71 [ 169.909774][ T24] usb 2-1: USB disconnect, device number 31 [ 169.950647][ T5903] usb usb4-port1: unable to enumerate USB device [ 170.193072][ T7413] geneve2: entered promiscuous mode [ 170.204894][ T7413] geneve2: entered allmulticast mode [ 170.820587][ T6424] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 170.920271][ T6407] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 170.981309][ T6424] usb 2-1: Using ep0 maxpacket: 32 [ 171.001663][ T6424] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 171.020342][ T6424] usb 2-1: config 0 has no interface number 0 [ 171.043439][ T6424] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.069045][ T6424] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 171.083792][ T6421] usb 3-1: USB disconnect, device number 33 [ 171.103335][ T6407] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 171.113408][ T6424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.126702][ T6424] usb 2-1: Product: syz [ 171.131679][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.158939][ T6424] usb 2-1: Manufacturer: syz [ 171.171803][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.185312][ T6424] usb 2-1: SerialNumber: syz [ 171.213673][ T6424] usb 2-1: config 0 descriptor?? [ 171.227507][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.241710][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.253846][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.268646][ T6424] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 171.301300][ T6424] em28xx 2-1:0.132: Video interface 132 found: [ 171.308850][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.321325][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.352794][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.366169][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 171.377877][ T7434] tipc: Cannot configure node identity twice [ 171.379332][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.393239][ T7434] tipc: Cannot configure node identity twice [ 171.395405][ T7440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.375'. [ 171.414872][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.426119][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.375'. [ 171.435725][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.447241][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.455148][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.500396][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.526740][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.546432][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.565771][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.578644][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.599711][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.609274][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.653980][ T6424] em28xx 2-1:0.132: chip ID is em2874 [ 171.669795][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.693920][ T6407] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.717164][ T6407] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.737066][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.760387][ T6407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.786724][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.806315][ T6407] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 171.840217][ T6407] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 171.848616][ T6407] usb 1-1: Product: syz [ 171.865790][ T6407] usb 1-1: Manufacturer: syz [ 171.882070][ T6407] usb 1-1: SerialNumber: syz [ 171.894268][ T6407] usb 1-1: config 0 descriptor?? [ 171.950348][ T6407] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 171.970404][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 172.065013][ T6424] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 172.067887][ T7457] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.086328][ T7456] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.110235][ T24] usb 4-1: device descriptor read/64, error -71 [ 172.120632][ T6424] em28xx 2-1:0.132: board has no eeprom [ 172.176011][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 172.176028][ T30] audit: type=1326 audit(1773969161.485:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.209421][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.222502][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.252722][ T30] audit: type=1326 audit(1773969161.485:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.270367][ T6407] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 172.286914][ T6424] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 172.330215][ T6424] em28xx 2-1:0.132: analog set to bulk mode. [ 172.334646][ T30] audit: type=1326 audit(1773969161.485:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ffe35cfce code=0x7ffc0000 [ 172.336449][ T6422] em28xx 2-1:0.132: Registering V4L2 extension [ 172.379996][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 172.386876][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 172.396416][ T5931] usb 1-1: USB disconnect, device number 32 [ 172.426043][ T5931] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 172.434792][ T30] audit: type=1326 audit(1773969161.485:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ffe39c42b code=0x7ffc0000 [ 172.452574][ T6424] usb 2-1: USB disconnect, device number 32 [ 172.469994][ T30] audit: type=1326 audit(1773969161.485:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ffe39c42b code=0x7ffc0000 [ 172.511360][ T6424] em28xx 2-1:0.132: Disconnecting em28xx [ 172.526880][ T30] audit: type=1326 audit(1773969161.565:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.550982][ T30] audit: type=1326 audit(1773969161.565:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.573876][ T6407] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.580239][ T30] audit: type=1326 audit(1773969161.615:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ffe35cfce code=0x7ffc0000 [ 172.584107][ T24] usb 4-1: device descriptor read/64, error -71 [ 172.603040][ T30] audit: type=1326 audit(1773969161.615:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.633287][ T30] audit: type=1326 audit(1773969161.615:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.0.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffe39c799 code=0x7ffc0000 [ 172.711043][ T6407] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 172.770719][ T24] usb usb4-port1: attempt power cycle [ 172.819612][ T6422] usb 2-1: Decoder not found [ 172.847452][ T6422] em28xx 2-1:0.132: failed to create media graph [ 172.863223][ T6422] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 172.870210][ T6407] usb 5-1: Invalid ep0 maxpacket: 64 [ 172.876194][ T6407] usb usb5-port1: attempt power cycle [ 172.922971][ T6422] em28xx 2-1:0.132: Remote control support is not available for this card. [ 172.937514][ T6424] em28xx 2-1:0.132: Closing input extension [ 172.964558][ T6424] em28xx 2-1:0.132: Freeing device [ 173.150183][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.240291][ T6407] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 173.270169][ T24] usb 4-1: device descriptor read/8, error -71 [ 173.368010][ T6407] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.571179][ T6407] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 173.612861][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 173.621811][ T6407] usb 5-1: Invalid ep0 maxpacket: 64 [ 173.654986][ T6407] usb usb5-port1: unable to enumerate USB device [ 173.674351][ T24] usb 4-1: device descriptor read/8, error -71 [ 173.804113][ T24] usb usb4-port1: unable to enumerate USB device [ 174.090799][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.270550][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 174.281616][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.301414][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 174.322442][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.350188][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.357320][ T24] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 174.383228][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.406077][ T24] usb 1-1: config 0 descriptor?? [ 175.032441][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 175.032533][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.060922][ T24] usb 1-1: USB disconnect, device number 33 [ 175.472550][ T7564] netlink: 'syz.2.395': attribute type 15 has an invalid length. [ 175.510168][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 175.547815][ T7564] netlink: 'syz.2.395': attribute type 15 has an invalid length. [ 175.547951][ T7513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 175.602146][ T7513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 175.637765][ T7513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 175.652363][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 175.657472][ T7513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 175.847128][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 175.930890][ T6407] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 176.020810][ T6424] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 176.091814][ T6407] usb 2-1: Invalid ep0 maxpacket: 16 [ 176.234797][ T6424] usb 3-1: Using ep0 maxpacket: 32 [ 176.250573][ T6407] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 176.276536][ T6424] usb 3-1: config 9 has an invalid interface number: 221 but max is 1 [ 176.305259][ T6424] usb 3-1: config 9 has an invalid interface number: 221 but max is 1 [ 176.323692][ T6424] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 176.335667][ T6424] usb 3-1: config 9 has no interface number 0 [ 176.343527][ T6424] usb 3-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 176.355374][ T6424] usb 3-1: config 9 interface 221 has no altsetting 0 [ 176.368671][ T6424] usb 3-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 176.380504][ T6424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.393280][ T6424] usb 3-1: Product: syz [ 176.397858][ T6424] usb 3-1: Manufacturer: syz [ 176.409602][ T6424] usb 3-1: SerialNumber: syz [ 176.460290][ T6407] usb 2-1: Invalid ep0 maxpacket: 16 [ 176.482940][ T6407] usb usb2-port1: attempt power cycle [ 176.850228][ T6407] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 176.892844][ T6407] usb 2-1: Invalid ep0 maxpacket: 16 [ 176.909921][ T6424] usb 3-1: USB disconnect, device number 34 [ 177.010896][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.053202][ T6407] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 177.101192][ T6407] usb 2-1: Invalid ep0 maxpacket: 16 [ 177.134791][ T6407] usb usb2-port1: unable to enumerate USB device [ 177.404409][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 177.797246][ T7592] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 178.150775][ T7599] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 178.157504][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.261604][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 178.285068][ T7600] vhci_hcd: connection closed [ 178.287461][ T1092] vhci_hcd vhci_hcd.0: stop threads [ 178.325820][ T1092] vhci_hcd vhci_hcd.0: release socket [ 178.340894][ T1092] vhci_hcd vhci_hcd.0: disconnect device [ 178.490292][ T7608] program syz.3.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.052610][ T6424] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 179.085536][ T7625] netlink: 80 bytes leftover after parsing attributes in process `syz.4.415'. [ 179.172444][ T6407] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 179.240256][ T6424] usb 4-1: Using ep0 maxpacket: 32 [ 179.273712][ T6424] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.328782][ T6424] usb 4-1: config 0 has no interface number 0 [ 179.350246][ T6424] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 179.380666][ T6424] usb 4-1: config 0 interface 1 has no altsetting 0 [ 179.393133][ T6407] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.406407][ T6424] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 179.430242][ T6407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.442727][ T6424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.454012][ T6407] usb 2-1: config 0 descriptor?? [ 179.484093][ T6424] usb 4-1: Product: syz [ 179.488292][ T6424] usb 4-1: Manufacturer: syz [ 179.496377][ T6407] cp210x 2-1:0.0: cp210x converter detected [ 179.511095][ T6424] usb 4-1: SerialNumber: syz [ 179.541300][ T6424] usb 4-1: config 0 descriptor?? [ 179.680675][ T6407] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 179.699541][ T6407] cp210x 2-1:0.0: querying part number failed [ 179.715385][ T796] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 179.760384][ T6407] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.769285][ T6424] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 179.802003][ T6424] cx231xx 4-1:0.1: Failed to read PCB config [ 179.808074][ T6424] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 179.826517][ T6424] usb 4-1: USB disconnect, device number 33 [ 179.880207][ T5931] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 179.910231][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 179.923110][ T796] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 179.940138][ T796] usb 5-1: config 0 has no interface number 0 [ 179.960940][ T796] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.994953][ T796] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 180.010152][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.028516][ T796] usb 5-1: Product: syz [ 180.038685][ T796] usb 5-1: Manufacturer: syz [ 180.043058][ T5931] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 180.043926][ T796] usb 5-1: SerialNumber: syz [ 180.069386][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.074692][ T796] usb 5-1: config 0 descriptor?? [ 180.093211][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.107636][ T796] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 180.123739][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.134283][ T796] em28xx 5-1:0.132: Video interface 132 found: [ 180.141070][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.154560][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.178025][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.195779][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.211905][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.234699][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.251477][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.264081][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.290239][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.301016][ T6424] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 180.317890][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.329755][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.351960][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.369841][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.389146][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.410021][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.431855][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.443787][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.471651][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.490334][ T6424] usb 4-1: Using ep0 maxpacket: 32 [ 180.503938][ T6424] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.512078][ T5931] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.529631][ T5931] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.532448][ T796] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 180.540755][ T6424] usb 4-1: config 0 has no interface number 0 [ 180.540798][ T6424] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 180.540820][ T6424] usb 4-1: config 0 interface 1 has no altsetting 0 [ 180.554731][ T6424] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 180.584687][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.602439][ T5931] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.615316][ T6424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.626083][ T5931] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.640251][ T6424] usb 4-1: Product: syz [ 180.646515][ T5931] usb 1-1: Product: syz [ 180.650802][ T6424] usb 4-1: Manufacturer: syz [ 180.660363][ T5931] usb 1-1: Manufacturer: syz [ 180.664989][ T5931] usb 1-1: SerialNumber: syz [ 180.670042][ T6424] usb 4-1: SerialNumber: syz [ 180.688226][ T6424] usb 4-1: config 0 descriptor?? [ 180.695865][ T5931] usb 1-1: config 0 descriptor?? [ 180.717293][ T5931] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 180.923593][ T7614] netlink: 'syz.3.411': attribute type 13 has an invalid length. [ 180.937678][ T6424] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 180.968174][ T6424] cx231xx 4-1:0.1: bad scenario!!!!! [ 180.968174][ T6424] config_info=0 [ 180.999589][ T7630] tipc: Enabled bearer , priority 0 [ 181.006543][ T6424] cx231xx 4-1:0.1: Failed to read PCB config [ 181.015491][ T7630] syzkaller0: entered promiscuous mode [ 181.026268][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 181.027855][ T5874] usb 1-1: USB disconnect, device number 34 [ 181.036635][ T7630] syzkaller0: entered allmulticast mode [ 181.042625][ T7633] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 181.071295][ T5874] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 181.120208][ T7630] tipc: Resetting bearer [ 181.180894][ T5903] usb 4-1: USB disconnect, device number 34 [ 181.336743][ T7629] tipc: Resetting bearer [ 181.481443][ T7629] tipc: Disabling bearer [ 181.512878][ T796] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 181.538084][ T796] em28xx 5-1:0.132: board has no eeprom [ 181.611522][ T796] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 181.637224][ T796] em28xx 5-1:0.132: analog set to bulk mode. [ 181.664991][ T5903] em28xx 5-1:0.132: Registering V4L2 extension [ 181.688937][ T796] usb 5-1: USB disconnect, device number 38 [ 181.703161][ T796] em28xx 5-1:0.132: Disconnecting em28xx [ 182.023304][ T5903] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 182.055243][ T5903] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 182.075275][ T5903] em28xx 5-1:0.132: No AC97 audio processor [ 182.082058][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 182.112655][ T5903] usb 5-1: Decoder not found [ 182.117288][ T5903] em28xx 5-1:0.132: failed to create media graph [ 182.161768][ T5903] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 182.183231][ T5903] em28xx 5-1:0.132: Remote control support is not available for this card. [ 182.192028][ T796] em28xx 5-1:0.132: Closing input extension [ 182.205297][ T5931] usb 2-1: USB disconnect, device number 37 [ 182.222198][ T796] em28xx 5-1:0.132: Freeing device [ 182.260872][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 182.269872][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.270628][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.301926][ T7660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.310108][ T5874] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 182.334415][ T24] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.369169][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.394422][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 182.413948][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.450174][ T24] usb 3-1: Product: syz [ 182.463381][ T24] usb 3-1: Manufacturer: syz [ 182.471052][ T24] usb 3-1: SerialNumber: syz [ 182.484206][ T7665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.510877][ T24] usb 3-1: config 0 descriptor?? [ 182.511662][ T5931] cp210x 2-1:0.0: device disconnected [ 182.600251][ T796] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 182.760164][ T796] usb 5-1: Invalid ep0 maxpacket: 64 [ 182.910608][ T796] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 182.945255][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.979012][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.025510][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 183.075527][ T796] usb 5-1: Invalid ep0 maxpacket: 64 [ 183.088239][ T796] usb usb5-port1: attempt power cycle [ 183.249048][ T24] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 183.266829][ T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 183.391550][ T5874] usb 1-1: device descriptor read/64, error -71 [ 183.451816][ T7680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.454948][ T796] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 183.494104][ T796] usb 5-1: Invalid ep0 maxpacket: 64 [ 183.640238][ T796] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 183.660261][ T5874] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 183.673908][ T796] usb 5-1: Invalid ep0 maxpacket: 64 [ 183.690617][ T796] usb usb5-port1: unable to enumerate USB device [ 183.697597][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 183.697724][ T30] audit: type=1326 audit(1773969173.005:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa45899c799 code=0x0 [ 183.820319][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 183.828003][ T5874] usb 1-1: device descriptor read/64, error -71 [ 183.940507][ T5874] usb usb1-port1: attempt power cycle [ 183.995046][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.013757][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.025519][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 184.035017][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.047896][ T24] usb 2-1: config 0 descriptor?? [ 184.266829][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.290297][ T5874] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 184.294322][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.328910][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.342576][ T5874] usb 1-1: device descriptor read/8, error -71 [ 184.353443][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.371107][ T24] usb 2-1: string descriptor 0 read error: -71 [ 184.381307][ T24] usbhid 2-1:0.0: can't add hid device: -22 [ 184.388233][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 184.401412][ T24] usb 2-1: USB disconnect, device number 38 [ 184.585739][ T30] audit: type=1326 audit(1773969173.895:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.3.432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa45899c799 code=0x0 [ 184.610951][ T5874] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 184.632817][ T5874] usb 1-1: device descriptor read/8, error -71 [ 184.741998][ T5874] usb usb1-port1: unable to enumerate USB device [ 184.820363][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 184.859001][ T6424] usb 3-1: USB disconnect, device number 35 [ 184.970870][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 184.981562][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.989663][ T24] usb 2-1: config 0 has no interface number 0 [ 184.996069][ T24] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.007900][ T24] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.017846][ T24] usb 2-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.031476][ T24] usb 2-1: config 0 interface 1 has no altsetting 0 [ 185.038187][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 185.048338][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.059895][ T24] usb 2-1: config 0 descriptor?? [ 185.273404][ T24] usb 2-1: string descriptor 0 read error: -71 [ 185.296339][ T24] hso 2-1:0.1: Failed to find BULK IN ep [ 185.319275][ T7708] atomic_op ffff88802ac8a198 conn xmit_atomic 0000000000000000 [ 185.339565][ T24] usb 2-1: USB disconnect, device number 39 [ 185.354960][ T7708] netlink: 100 bytes leftover after parsing attributes in process `syz.4.437'. [ 185.502563][ T7716] mmap: syz.2.436 (7716) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.456736][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.509051][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.603192][ T30] audit: type=1326 audit(1773969175.915:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 186.683906][ T30] audit: type=1326 audit(1773969175.915:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 186.706631][ T5931] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 186.775428][ T30] audit: type=1326 audit(1773969175.945:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc3f5cfce code=0x7ffc0000 [ 186.799817][ T30] audit: type=1326 audit(1773969175.945:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc3f5cfce code=0x7ffc0000 [ 186.834928][ T30] audit: type=1326 audit(1773969175.945:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 186.860260][ T30] audit: type=1326 audit(1773969175.945:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 186.882788][ T5931] usb 5-1: device descriptor read/64, error -71 [ 186.917990][ T30] audit: type=1326 audit(1773969175.945:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 187.040679][ T7769] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 187.048624][ T30] audit: type=1326 audit(1773969175.945:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 187.126757][ T7773] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 187.174982][ T7769] team0: Port device dummy0 added [ 187.180458][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 187.226339][ T7773] team0: Port device dummy0 removed [ 187.248902][ T7773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.628840][ T5903] IPVS: starting estimator thread 0... [ 187.720210][ T7787] IPVS: using max 46 ests per chain, 110400 per kthread [ 187.978158][ T7776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.989222][ T7776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.004590][ T7776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.018614][ T7776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.029043][ T7776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.280415][ T5903] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 188.290685][ T5874] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 188.470348][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 188.500388][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 188.520232][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 188.543337][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.584378][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.599200][ T5903] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.642010][ T5903] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 188.659126][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.675404][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.713219][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.735167][ T5903] usb 3-1: config 0 descriptor?? [ 188.762357][ T5874] usb 4-1: Product: syz [ 188.776692][ T5874] usb 4-1: Manufacturer: syz [ 188.818478][ T5874] usb 4-1: SerialNumber: syz [ 188.900857][ T5874] usb 4-1: config 0 descriptor?? [ 188.974474][ T5874] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.023085][ T5874] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 189.380598][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.573442][ T5874] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 189.595748][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 189.613051][ T5874] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 189.895701][ T7807] binder: binder_mmap: 7806 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 190.020396][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.020423][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.026546][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.102369][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.118496][ T5903] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 190.311071][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 190.350122][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 190.392075][ T6407] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 190.400243][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 190.422808][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.453213][ T5903] usb 2-1: config 0 descriptor?? [ 190.460540][ T7802] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 190.570227][ T6407] usb 5-1: Using ep0 maxpacket: 8 [ 190.594756][ T6407] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 190.640234][ T6407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.648290][ T6407] usb 5-1: Product: syz [ 190.683145][ T6407] usb 5-1: Manufacturer: syz [ 190.716123][ T6407] usb 5-1: SerialNumber: syz [ 190.756350][ T6407] usb 5-1: config 0 descriptor?? [ 190.795631][ T5903] usb 2-1: USB disconnect, device number 40 [ 190.804937][ T6407] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 190.886452][ T24] usb 3-1: USB disconnect, device number 36 [ 190.912405][ T5874] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 190.940118][ T5874] em28xx 4-1:0.0: No AC97 audio processor [ 191.379647][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 191.642682][ T5931] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 191.823946][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 191.831956][ T7838] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 191.857227][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.911786][ T5931] usb 3-1: config 0 descriptor?? [ 191.954902][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 191.975702][ T7840] pim6reg: entered allmulticast mode [ 191.994556][ T7840] pim6reg: left allmulticast mode [ 192.168988][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.176741][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.310668][ T6407] gspca_sonixj: reg_w1 err -110 [ 192.315704][ T6407] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 192.357246][ T5931] usb 3-1: USB disconnect, device number 37 [ 192.557421][ T6424] usb 4-1: USB disconnect, device number 35 [ 192.572639][ T6424] em28xx 4-1:0.0: Disconnecting em28xx [ 192.583328][ T6424] em28xx 4-1:0.0: Freeing device [ 192.737875][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.763366][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.050211][ T6424] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 193.139249][ T151] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.189683][ T151] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.207403][ T796] usb 5-1: USB disconnect, device number 45 [ 193.210365][ T6424] usb 4-1: Using ep0 maxpacket: 32 [ 193.221044][ T151] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.245093][ T6424] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.265230][ T151] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.267277][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'. [ 193.286283][ T6424] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 193.301674][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 193.327970][ T6424] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 193.350630][ T6424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.360823][ T6424] usb 4-1: Product: syz [ 193.365080][ T6424] usb 4-1: Manufacturer: syz [ 193.369804][ T6424] usb 4-1: SerialNumber: syz [ 193.579830][ T6424] usb 4-1: Limiting number of CPorts to U8_MAX [ 193.592948][ T6424] usb 4-1: Not enough endpoints found in device, aborting! [ 194.050287][ T5888] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 194.105320][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.111937][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220773][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 194.255414][ T5888] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 194.286814][ T7874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.305871][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.330080][ T5888] usb 3-1: Product: syz [ 194.352565][ T5888] usb 3-1: Manufacturer: syz [ 194.372272][ T5888] usb 3-1: SerialNumber: syz [ 194.800649][ T5888] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 194.817110][ T5888] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 194.912662][ T5888] usb 3-1: USB disconnect, device number 38 [ 194.920155][ T6424] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 194.995774][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.100725][ T6424] usb 5-1: Using ep0 maxpacket: 8 [ 195.112830][ T6424] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 195.123434][ T6424] usb 5-1: config 0 has no interface number 0 [ 195.136900][ T6424] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.164172][ T6424] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 195.177079][ T6424] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 195.195495][ T6424] usb 5-1: Product: syz [ 195.209571][ T6424] usb 5-1: config 0 descriptor?? [ 195.230941][ T6424] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 195.410660][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 195.419664][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 195.454181][ T6424] usb 5-1: USB disconnect, device number 46 [ 195.460288][ C0] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 195.490079][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 195.491381][ T151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.512859][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 195.523901][ T151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.544243][ T151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.561354][ T151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.735874][ T7898] ipip0: entered promiscuous mode [ 195.742235][ T7898] ipip0: entered allmulticast mode [ 195.794158][ T5888] usb 4-1: USB disconnect, device number 36 [ 196.033089][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 196.053430][ T6424] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 196.082990][ T7904] tc_dump_action: action bad kind [ 196.220377][ T6424] usb 5-1: Using ep0 maxpacket: 8 [ 196.263076][ T6424] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 196.278875][ T6424] usb 5-1: config 0 has no interface number 0 [ 196.299002][ T6424] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.330570][ T6424] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.343080][ T6424] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 196.363115][ T6424] usb 5-1: Product: syz [ 196.393701][ T6424] usb 5-1: config 0 descriptor?? [ 196.436862][ T6424] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 196.441205][ T796] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 196.640651][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 196.651435][ T796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.676237][ T796] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 196.707889][ T796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 196.734825][ T796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.748906][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.763459][ T796] usb 2-1: Product: syz [ 196.769690][ T796] usb 2-1: Manufacturer: syz [ 196.775397][ T796] usb 2-1: SerialNumber: syz [ 196.789579][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.090188][ T7923] syzkaller0: entered promiscuous mode [ 197.096470][ T7923] syzkaller0: entered allmulticast mode [ 197.110606][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 197.131389][ T7923] tipc: Enabled bearer , priority 0 [ 197.710232][ C1] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 197.781463][ T5881] usb 5-1: USB disconnect, device number 47 [ 197.805737][ T7922] tipc: Resetting bearer [ 197.825635][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 197.854649][ T796] cdc_ncm 2-1:1.0: bind() failure [ 197.888880][ T7922] tipc: Disabling bearer [ 197.927717][ T796] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 197.967766][ T796] usb 2-1: USB disconnect, device number 41 [ 198.210187][ T5881] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 198.305556][ T7934] tipc: Can't bind to reserved service type 1 [ 198.380240][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 198.393641][ T5881] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 198.412031][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.436394][ T5881] usb 5-1: Product: syz [ 198.445417][ T5881] usb 5-1: Manufacturer: syz [ 198.457943][ T5881] usb 5-1: SerialNumber: syz [ 198.485454][ T5881] usb 5-1: config 0 descriptor?? [ 198.523216][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.727088][ T7932] netlink: 240 bytes leftover after parsing attributes in process `syz.4.495'. [ 198.850265][ T796] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 198.990186][ T796] usb 2-1: device descriptor read/64, error -71 [ 199.251247][ T796] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 199.421602][ T796] usb 2-1: device descriptor read/64, error -71 [ 199.551913][ T796] usb usb2-port1: attempt power cycle [ 199.588658][ T5881] gspca_se401: read req failed req 0x06 error -19 [ 199.633697][ T5881] usb 5-1: USB disconnect, device number 48 [ 199.713542][ T7955] Cannot find del_set index 512 as target [ 199.801022][ T5874] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 199.877259][ T7958] loop7: detected capacity change from 0 to 132 [ 199.900256][ T796] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 199.962648][ T796] usb 2-1: device descriptor read/8, error -71 [ 199.980644][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 200.013529][ T5874] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 200.031525][ T5874] usb 1-1: config 0 has no interface number 0 [ 200.039086][ T5874] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 200.049912][ T5874] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.061141][ T5874] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 200.072235][ T5874] usb 1-1: config 0 interface 196 has no altsetting 0 [ 200.082041][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 200.102495][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.122371][ T5874] usb 1-1: Product: syz [ 200.126724][ T5874] usb 1-1: Manufacturer: syz [ 200.139419][ T5874] usb 1-1: SerialNumber: syz [ 200.163797][ T5874] usb 1-1: config 0 descriptor?? [ 200.173122][ T7953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 200.240238][ T796] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 200.280222][ T796] usb 2-1: device descriptor read/8, error -71 [ 200.390215][ T5881] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 200.398551][ T796] usb usb2-port1: unable to enumerate USB device [ 200.540203][ T5881] usb 3-1: device descriptor read/64, error -71 [ 200.620185][ T5903] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 200.750261][ T5903] usb 5-1: device descriptor read/64, error -71 [ 200.790193][ T5881] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 200.811607][ T5874] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 200.830336][ T5874] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 200.840972][ T5874] usb 1-1: USB disconnect, device number 39 [ 200.891589][ T5874] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 200.924525][ T5881] usb 3-1: device descriptor read/64, error -71 [ 200.990339][ T5903] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 201.050518][ T5881] usb usb3-port1: attempt power cycle [ 201.120966][ T5903] usb 5-1: device descriptor read/64, error -71 [ 201.230659][ T5903] usb usb5-port1: attempt power cycle [ 201.390357][ T5881] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 201.430932][ T5881] usb 3-1: device descriptor read/8, error -71 [ 201.580262][ T5903] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 201.622812][ T5903] usb 5-1: device descriptor read/8, error -71 [ 201.650302][ T5888] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 201.681842][ T5881] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 201.720664][ T5881] usb 3-1: device descriptor read/8, error -71 [ 201.820172][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 201.837689][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.852360][ T5881] usb usb3-port1: unable to enumerate USB device [ 201.878944][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 201.898490][ T5903] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 201.904052][ T5888] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 201.915366][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.923590][ T5888] usb 1-1: Product: syz [ 201.927928][ T5888] usb 1-1: Manufacturer: syz [ 201.932660][ T5888] usb 1-1: SerialNumber: syz [ 201.960797][ T5903] usb 5-1: device descriptor read/8, error -71 [ 201.969067][ T5888] usb 1-1: config 0 descriptor?? [ 202.041959][ T7982] loop6: detected capacity change from 0 to 2640 [ 202.056140][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.089035][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.107577][ T5903] usb usb5-port1: unable to enumerate USB device [ 202.134048][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.161622][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.192854][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.233959][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.278724][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.320648][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.338842][ T5821] ldm_validate_partition_table(): Disk read failed. [ 202.375819][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.404424][ T5821] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.418680][ T5821] Dev loop6: unable to read RDB block 0 [ 202.433556][ T5888] usb 1-1: USB disconnect, device number 40 [ 202.461947][ T5821] loop6: unable to read partition table [ 202.495748][ T7982] ldm_validate_partition_table(): Disk read failed. [ 202.504859][ T7982] Dev loop6: unable to read RDB block 0 [ 202.512815][ T7982] loop6: unable to read partition table [ 202.550527][ T7982] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 202.627886][ T5193] ldm_validate_partition_table(): Disk read failed. [ 202.643332][ T5193] Dev loop6: unable to read RDB block 0 [ 202.659202][ T5193] loop6: unable to read partition table [ 203.181592][ T7996] netlink: 108 bytes leftover after parsing attributes in process `syz.3.512'. [ 203.785242][ T7997] kvm: user requested TSC rate below hardware speed [ 203.820394][ T5903] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 203.992983][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.005833][ T5903] usb 5-1: config 0 has no interfaces? [ 204.012823][ T5903] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.023160][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.045420][ T5903] usb 5-1: config 0 descriptor?? [ 204.096675][ T8016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.429757][ T8026] kvm: pic: level sensitive irq not supported [ 204.429916][ T8026] kvm: pic: non byte read [ 204.501927][ T8036] nfs: Unknown parameter 'K' [ 206.544547][ T8071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.669816][ T8074] fuse: Bad value for 'fd' [ 206.670578][ T6405] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 206.682418][ T8073] fuse: Bad value for 'fd' [ 206.698655][ T6424] usb 5-1: USB disconnect, device number 53 [ 206.853595][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.887118][ T6405] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.900348][ T6405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.935020][ T6405] usb 4-1: config 0 descriptor?? [ 207.177010][ T6405] usbhid 4-1:0.0: can't add hid device: -71 [ 207.180331][ T6424] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 207.194049][ T6405] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 207.280069][ T6405] usb 4-1: USB disconnect, device number 37 [ 207.374591][ T8069] netlink: 304 bytes leftover after parsing attributes in process `syz.3.530'. [ 207.398276][ T6424] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 207.450155][ T6424] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.496874][ T6424] usb 5-1: config 0 has no interface number 0 [ 207.527608][ T6424] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 207.560668][ T6424] usb 5-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.627651][ T6424] usb 5-1: config 0 interface 2 has no altsetting 0 [ 207.660760][ T6424] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 207.681859][ T6424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.693952][ T6424] usb 5-1: Product: syz [ 207.698258][ T6424] usb 5-1: Manufacturer: syz [ 207.703551][ T6424] usb 5-1: SerialNumber: syz [ 207.719096][ T6424] usb 5-1: config 0 descriptor?? [ 207.741942][ T6405] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 207.878287][ T8091] could not allocate digest TFM handle poly1305-neon [ 207.910314][ T6405] usb 4-1: device descriptor read/64, error -71 [ 207.935291][ T6424] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.000003][ T6424] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 208.011854][ T5888] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 208.059703][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.093440][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 208.093453][ T30] audit: type=1326 audit(1773969197.405:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.122798][ T30] audit: type=1326 audit(1773969197.435:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.147661][ T30] audit: type=1326 audit(1773969197.465:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.172351][ T30] audit: type=1326 audit(1773969197.465:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.201342][ T6405] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 208.214564][ T980] usb 5-1: USB disconnect, device number 54 [ 208.226643][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.239769][ T5888] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.252867][ T30] audit: type=1326 audit(1773969197.565:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.276413][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.290212][ T30] audit: type=1326 audit(1773969197.605:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.333658][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.346597][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.356644][ T30] audit: type=1326 audit(1773969197.605:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.378996][ T5888] usb 2-1: Product: syz [ 208.386388][ T5888] usb 2-1: Manufacturer: syz [ 208.396552][ T6405] usb 4-1: device descriptor read/64, error -71 [ 208.400379][ T5888] usb 2-1: SerialNumber: syz [ 208.417125][ T30] audit: type=1326 audit(1773969197.695:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.443296][ T30] audit: type=1326 audit(1773969197.695:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.467729][ T5888] hub 2-1:1.0: bad descriptor, ignoring hub [ 208.475319][ T5888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 208.490899][ T30] audit: type=1326 audit(1773969197.695:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f6fc3f9c799 code=0x7ffc0000 [ 208.520632][ T6405] usb usb4-port1: attempt power cycle [ 208.650165][ T5903] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 208.679708][ T5888] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.790179][ T5903] usb 3-1: device descriptor read/64, error -71 [ 208.870808][ T6405] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 208.906477][ T6405] usb 4-1: device descriptor read/8, error -71 [ 209.030711][ T5903] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 209.152903][ T8096] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 209.170164][ T6405] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 209.177849][ T5903] usb 3-1: device descriptor read/64, error -71 [ 209.185410][ T5888] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 209.203571][ T6405] usb 4-1: device descriptor read/8, error -71 [ 209.290711][ T5903] usb usb3-port1: attempt power cycle [ 209.321859][ T6405] usb usb4-port1: unable to enumerate USB device [ 209.360151][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 209.366848][ T5888] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.374524][ T8096] usb 2-1: device firmware changed [ 209.381251][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.393393][ T5888] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 209.393697][ T5881] usb 2-1: USB disconnect, device number 46 [ 209.405140][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.419871][ T5881] usblp0: removed [ 209.430236][ T5888] usb 1-1: Product: syz [ 209.442010][ T5888] usb 1-1: Manufacturer: syz [ 209.458519][ T5888] usb 1-1: SerialNumber: syz [ 209.500271][ T5888] usb 1-1: config 0 descriptor?? [ 209.561400][ T5881] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 209.661243][ T5903] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 209.713508][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.723687][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.740391][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.752178][ T5881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.762537][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.772174][ T5881] usb 2-1: Product: syz [ 209.776487][ T5881] usb 2-1: Manufacturer: ༛昋兾䤙饮䉍䵤Ꝧ [ 209.784918][ T5881] usb 2-1: SerialNumber: syz [ 209.817735][ T5903] usb 3-1: device descriptor read/8, error -71 [ 209.860517][ T6405] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 209.956226][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 209.971615][ T5888] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 209.999581][ T5888] imon:send_packet: packet tx failed (-71) [ 210.008912][ T5881] usb 2-1: 0:1 : does not exist [ 210.015450][ T5881] usb 2-1: 0:2 : does not exist [ 210.020383][ T5888] imon 1-1:0.0: panel buttons/knobs setup failed [ 210.028706][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.050441][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.070707][ T5903] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 210.078445][ T6405] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 210.098448][ T6405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.107255][ T5888] rc_core: IR keymap rc-imon-pad not found [ 210.109674][ T5881] usb 2-1: USB disconnect, device number 47 [ 210.122823][ T5888] Registered IR keymap rc-empty [ 210.122957][ T6405] usb 4-1: config 0 descriptor?? [ 210.128237][ T5888] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 210.145613][ T5888] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 210.157446][ T5888] imon:send_packet: packet tx failed (-71) [ 210.180281][ T980] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 210.189751][ T5888] imon 1-1:0.0: remote input dev register failed [ 210.198573][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.210819][ T5888] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 210.241521][ T5888] imon 1-1:0.0: unable to initialize intf0, err 0 [ 210.249834][ T5888] imon:imon_probe: failed to initialize context! [ 210.256305][ T5888] imon 1-1:0.0: unable to register, err -19 [ 210.271765][ T5888] usb 1-1: USB disconnect, device number 41 [ 210.318455][ T5903] usb 3-1: device descriptor read/8, error -71 [ 210.342801][ T6405] usbhid 4-1:0.0: can't add hid device: -71 [ 210.348836][ T6405] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.363470][ T6405] usb 4-1: USB disconnect, device number 42 [ 210.377988][ T980] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 210.389893][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.402960][ T980] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 210.413070][ T980] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 210.421193][ T980] usb 5-1: Manufacturer: syz [ 210.428585][ T980] usb 5-1: config 0 descriptor?? [ 210.441461][ T5903] usb usb3-port1: unable to enumerate USB device [ 210.497615][ T980] rc_core: IR keymap rc-hauppauge not found [ 210.527147][ T980] Registered IR keymap rc-empty [ 210.545101][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.566674][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 210.802773][ T6405] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 210.875222][ C0] igorplugusb 5-1:0.0: receive overflow, at least 13 lost [ 210.940537][ T8133] sctp: [Deprecated]: syz.0.546 (pid 8133) Use of int in maxseg socket option. [ 210.940537][ T8133] Use struct sctp_assoc_value instead [ 210.981969][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.019375][ T6405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.050998][ T6405] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 211.080155][ T6405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.105980][ T6405] usb 4-1: config 0 descriptor?? [ 211.280618][ T980] usb 5-1: USB disconnect, device number 55 [ 211.330217][ T5888] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 211.500183][ T5888] usb 2-1: device descriptor read/64, error -71 [ 211.526149][ T6405] usbhid 4-1:0.0: can't add hid device: -71 [ 211.533564][ T6405] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 211.554110][ T6405] usb 4-1: USB disconnect, device number 43 [ 211.770317][ T5888] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 211.930202][ T5888] usb 2-1: device descriptor read/64, error -71 [ 212.040554][ T5888] usb usb2-port1: attempt power cycle [ 212.120410][ T8158] netlink: 'syz.3.554': attribute type 2 has an invalid length. [ 212.135097][ T8158] netlink: 119 bytes leftover after parsing attributes in process `syz.3.554'. [ 212.215013][ T8158] GUP no longer grows the stack in syz.3.554 (8158): 2000001d4000-200000200000 (2000001d2000) [ 212.225787][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.3.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.225817][ T8158] Tainted: [L]=SOFTLOCKUP [ 212.225826][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.225848][ T8158] Call Trace: [ 212.225857][ T8158] [ 212.225865][ T8158] dump_stack_lvl+0xe8/0x150 [ 212.225909][ T8158] __get_user_pages+0x2453/0x29d0 [ 212.225972][ T8158] get_user_pages_remote+0x2f6/0xab0 [ 212.226002][ T8158] ? __pfx_mtree_load+0x10/0x10 [ 212.226033][ T8158] ? __pfx_get_user_pages_remote+0x10/0x10 [ 212.226063][ T8158] ? __access_remote_vm+0xa3/0x7f0 [ 212.226094][ T8158] ? __access_remote_vm+0x44d/0x7f0 [ 212.226131][ T8158] __access_remote_vm+0x226/0x7f0 [ 212.226171][ T8158] ? __pfx___access_remote_vm+0x10/0x10 [ 212.226204][ T8158] ? rep_movs_alternative+0x4a/0x90 [ 212.226239][ T8158] proc_pid_cmdline_read+0x419/0x7f0 [ 212.226272][ T8158] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 212.226303][ T8158] ? rw_verify_area+0x2a6/0x4d0 [ 212.226335][ T8158] vfs_readv+0x587/0x840 [ 212.226365][ T8158] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 212.226397][ T8158] ? __pfx_vfs_readv+0x10/0x10 [ 212.226439][ T8158] ? __fget_files+0x2a/0x420 [ 212.226473][ T8158] ? __fget_files+0x3a0/0x420 [ 212.226502][ T8158] ? __fget_files+0x2a/0x420 [ 212.226540][ T8158] __x64_sys_preadv+0x19f/0x2a0 [ 212.226564][ T8158] ? __pfx___se_sys_futex+0x10/0x10 [ 212.226591][ T8158] ? __pfx___x64_sys_preadv+0x10/0x10 [ 212.226627][ T8158] do_syscall_64+0x14d/0xf80 [ 212.226648][ T8158] ? trace_irq_disable+0x3b/0x150 [ 212.226677][ T8158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.226698][ T8158] ? clear_bhb_loop+0x40/0x90 [ 212.226722][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.226742][ T8158] RIP: 0033:0x7fa45899c799 [ 212.226766][ T8158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.226783][ T8158] RSP: 002b:00007fa45982c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 212.226805][ T8158] RAX: ffffffffffffffda RBX: 00007fa458c15fa0 RCX: 00007fa45899c799 [ 212.226820][ T8158] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 000000000000000c [ 212.226833][ T8158] RBP: 00007fa458a32c99 R08: 0000000000006a76 R09: 0000000000000000 [ 212.226846][ T8158] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 212.226858][ T8158] R13: 00007fa458c16038 R14: 00007fa458c15fa0 R15: 00007fa458d3fa48 [ 212.226890][ T8158] [ 212.621240][ T980] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 212.629622][ T5888] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 212.651930][ T5888] usb 2-1: device descriptor read/8, error -71 [ 212.689841][ T8168] netlink: 52 bytes leftover after parsing attributes in process `syz.0.557'. [ 212.782322][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.792582][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.816793][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 212.828296][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.840761][ T980] usb 3-1: Product: syz [ 212.846134][ T980] usb 3-1: Manufacturer: syz [ 212.851091][ T980] usb 3-1: SerialNumber: syz [ 212.889518][ T8170] tipc: Cannot configure node identity twice [ 212.896015][ T5888] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 212.907962][ T8170] tipc: Cannot configure node identity twice [ 212.933011][ T5888] usb 2-1: device descriptor read/8, error -71 [ 212.990170][ T6405] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 213.046188][ T5888] usb usb2-port1: unable to enumerate USB device [ 213.087180][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.102842][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.210472][ T6405] usb 1-1: Using ep0 maxpacket: 8 [ 213.235759][ T6405] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 213.261890][ T6405] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.312479][ T6405] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.340209][ T6405] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.354021][ T6405] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.368784][ T6405] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.378433][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.607504][ T6405] usb 1-1: usb_control_msg returned -32 [ 213.616401][ T6405] usbtmc 1-1:16.0: can't read capabilities [ 213.963783][ T8184] usbtmc 1-1:16.0: control status returned 0 [ 213.970636][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 214.165208][ T5903] usb 1-1: USB disconnect, device number 42 [ 214.374871][ T8188] program syz.3.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.420207][ T6405] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 214.588394][ T6405] usb 2-1: Using ep0 maxpacket: 16 [ 214.596409][ T6405] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 214.612577][ T6405] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.619227][ T6405] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 214.630613][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.645576][ T6405] usb 2-1: config 0 descriptor?? [ 214.886555][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.895538][ T5903] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 214.906550][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.918017][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.928821][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.938613][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.949126][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.997939][ T980] usb 3-1: unit 132 not found! [ 215.062667][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 215.086410][ T5903] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 215.104552][ T980] usb 3-1: USB disconnect, device number 47 [ 215.117264][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.133420][ T6405] cougar 0003:060B:500A.0007: unexpected long global item [ 215.145703][ T5903] usb 4-1: Product: syz [ 215.149907][ T5903] usb 4-1: Manufacturer: syz [ 215.157953][ T6405] cougar 0003:060B:500A.0007: parse failed [ 215.164317][ T5903] usb 4-1: SerialNumber: syz [ 215.169229][ T6405] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 215.201968][ T5903] usb 4-1: config 0 descriptor?? [ 215.218413][ T5903] gspca_main: se401-2.14.0 probing 047d:5003 [ 215.279820][ T5902] usb 2-1: USB disconnect, device number 52 [ 215.431531][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.451805][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.522220][ T980] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 215.660258][ T980] usb 3-1: device descriptor read/64, error -71 [ 215.820224][ T5902] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 215.900587][ T980] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 215.981895][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 215.991770][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 216.001682][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 256, setting to 64 [ 216.013924][ T5902] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 216.023227][ T5902] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 216.032813][ T5902] usb 1-1: Manufacturer: syz [ 216.040015][ T5902] usb 1-1: config 0 descriptor?? [ 216.048167][ T980] usb 3-1: device descriptor read/64, error -71 [ 216.057475][ T5902] smsusb:smsusb_probe: board id=9, interface number 0 [ 216.067260][ T5902] smsusb:siano_media_device_register: media controller created [ 216.076879][ T5902] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 216.086659][ T5902] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 216.095905][ T5902] ------------[ cut here ]------------ [ 216.101576][ T5902] !PageLargeKmalloc(page) [ 216.101602][ T5902] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:4/5902 [ 216.115382][ T5902] Modules linked in: [ 216.119459][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.130514][ T5902] Tainted: [L]=SOFTLOCKUP [ 216.135972][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.140724][ T5903] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 216.148090][ T5902] Workqueue: usb_hub_wq hub_event [ 216.159202][ T5902] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 216.165025][ T5902] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 aa 1e f1 8d 5b 41 5e 5d e9 67 d9 03 ff [ 216.184723][ T5902] RSP: 0018:ffffc900042a6b20 EFLAGS: 00010206 [ 216.190865][ T5902] RAX: 00000000ff000000 RBX: ffffea00012e1880 RCX: 0000000000100001 [ 216.198875][ T5902] RDX: ffffc9001998a000 RSI: ffff88804b862000 RDI: ffffea00012e1880 [ 216.206959][ T5902] RBP: 0000000000000000 R08: ffff8880350e2f03 R09: 1ffff11006a1c5e0 [ 216.214991][ T5902] R10: dffffc0000000000 R11: ffffed1006a1c5e1 R12: 1ffff1100504c482 [ 216.222999][ T5902] R13: 0000000000000000 R14: ffff8880350e2f60 R15: dffffc0000000000 [ 216.231712][ T5902] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 216.241715][ T5902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.248311][ T5902] CR2: 00007f2ffe3e9e80 CR3: 0000000079e22000 CR4: 00000000003526f0 [ 216.257038][ T5902] Call Trace: [ 216.260438][ T5902] [ 216.263417][ T5902] usb_free_urb+0xd0/0x120 [ 216.267912][ T5902] smsusb_term_device+0x1d7/0x3e0 [ 216.273077][ T5902] smsusb_probe+0x1aba/0x2280 [ 216.277818][ T5902] ? __pfx_smsusb_probe+0x10/0x10 [ 216.282914][ T5902] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.287951][ T5902] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 216.293563][ T5902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.299407][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.305263][ T5902] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 216.310981][ T5902] usb_probe_interface+0x668/0xc90 [ 216.316139][ T5902] ? __pfx_usb_probe_interface+0x10/0x10 [ 216.321856][ T5902] really_probe+0x267/0xaf0 [ 216.326405][ T5902] __driver_probe_device+0x18c/0x320 [ 216.330437][ T5903] usb 4-1: device descriptor read/64, error -71 [ 216.331816][ T5902] driver_probe_device+0x4f/0x240 [ 216.345172][ T5902] __device_attach_driver+0x279/0x430 [ 216.350629][ T5902] bus_for_each_drv+0x258/0x2f0 [ 216.355521][ T5902] ? __pfx___device_attach_driver+0x10/0x10 [ 216.361515][ T5902] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.366930][ T5902] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.372218][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.378068][ T5902] __device_attach+0x2c5/0x450 [ 216.382959][ T5902] ? __pfx___device_attach+0x10/0x10 [ 216.388286][ T5902] ? _raw_spin_unlock+0x28/0x50 [ 216.393272][ T5902] device_initial_probe+0xa1/0xd0 [ 216.398347][ T5902] bus_probe_device+0x12a/0x220 [ 216.403321][ T5902] ? device_add+0x726/0xb70 [ 216.407838][ T5902] device_add+0x7b6/0xb70 [ 216.412252][ T5902] usb_set_configuration+0x1a87/0x2110 [ 216.417734][ T5902] usb_generic_driver_probe+0x8d/0x150 [ 216.423271][ T5902] usb_probe_device+0x1c4/0x3b0 [ 216.428137][ T5902] ? __pfx_usb_probe_device+0x10/0x10 [ 216.433560][ T5902] really_probe+0x267/0xaf0 [ 216.438073][ T5902] __driver_probe_device+0x18c/0x320 [ 216.444328][ T5902] driver_probe_device+0x4f/0x240 [ 216.449380][ T5902] __device_attach_driver+0x279/0x430 [ 216.455313][ T5902] bus_for_each_drv+0x258/0x2f0 [ 216.460217][ T5902] ? __pfx___device_attach_driver+0x10/0x10 [ 216.466119][ T5902] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.471519][ T5902] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.476722][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.482563][ T5902] __device_attach+0x2c5/0x450 [ 216.487356][ T5902] ? __pfx___device_attach+0x10/0x10 [ 216.492672][ T5902] ? _raw_spin_unlock+0x28/0x50 [ 216.497530][ T5902] device_initial_probe+0xa1/0xd0 [ 216.502618][ T5902] bus_probe_device+0x12a/0x220 [ 216.507470][ T5902] ? device_add+0x726/0xb70 [ 216.512028][ T5902] device_add+0x7b6/0xb70 [ 216.516381][ T5902] usb_new_device+0xa08/0x16f0 [ 216.521245][ T5902] ? __pfx_usb_new_device+0x10/0x10 [ 216.526460][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.531724][ T5902] hub_event+0x2a1c/0x4f30 [ 216.536234][ T5902] ? __pfx_hub_event+0x10/0x10 [ 216.541140][ T5902] ? process_scheduled_works+0xa8d/0x18c0 [ 216.547888][ T5902] ? process_scheduled_works+0xa8d/0x18c0 [ 216.554638][ T5902] process_scheduled_works+0xb6e/0x18c0 [ 216.560464][ T5902] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.566515][ T5902] ? assign_work+0x3d5/0x5e0 [ 216.571220][ T5902] worker_thread+0xa53/0xfc0 [ 216.575878][ T5902] kthread+0x388/0x470 [ 216.579991][ T5902] ? __pfx_worker_thread+0x10/0x10 [ 216.585244][ T5902] ? __pfx_kthread+0x10/0x10 [ 216.589883][ T5902] ret_from_fork+0x51e/0xb90 [ 216.594574][ T5902] ? __pfx_ret_from_fork+0x10/0x10 [ 216.599735][ T5902] ? __switch_to+0xc7d/0x1450 [ 216.604541][ T5902] ? __pfx_kthread+0x10/0x10 [ 216.609171][ T5902] ret_from_fork_asm+0x1a/0x30 [ 216.614295][ T5902] [ 216.617349][ T5902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.624663][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.635671][ T5902] Tainted: [L]=SOFTLOCKUP [ 216.640025][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.650140][ T5902] Workqueue: usb_hub_wq hub_event [ 216.655206][ T5902] Call Trace: [ 216.658512][ T5902] [ 216.661486][ T5902] vpanic+0x56c/0xa60 [ 216.665518][ T5902] ? __pfx__printk+0x10/0x10 [ 216.670142][ T5902] ? __pfx_vpanic+0x10/0x10 [ 216.674686][ T5902] ? is_bpf_text_address+0x292/0x2b0 [ 216.680007][ T5902] ? is_bpf_text_address+0x26/0x2b0 [ 216.685238][ T5902] panic+0xc5/0xd0 [ 216.688997][ T5902] ? __pfx_panic+0x10/0x10 [ 216.693445][ T5902] ? ret_from_fork_asm+0x1a/0x30 [ 216.698411][ T5902] __warn+0x315/0x4f0 [ 216.702413][ T5902] ? free_large_kmalloc+0xa3/0x140 [ 216.707541][ T5902] ? free_large_kmalloc+0xa3/0x140 [ 216.712667][ T5902] __report_bug+0x29a/0x540 [ 216.717183][ T5902] ? device_initial_probe+0xa1/0xd0 [ 216.722397][ T5902] ? bus_probe_device+0x12a/0x220 [ 216.727431][ T5902] ? device_add+0x7b6/0xb70 [ 216.731957][ T5902] ? free_large_kmalloc+0xa3/0x140 [ 216.737086][ T5902] ? __pfx___report_bug+0x10/0x10 [ 216.742119][ T5902] ? usb_new_device+0xa08/0x16f0 [ 216.747077][ T5902] ? hub_event+0x2a1c/0x4f30 [ 216.751705][ T5902] ? process_scheduled_works+0xb6e/0x18c0 [ 216.757458][ T5902] ? smscore_unregister_device+0x651/0x780 [ 216.763297][ T5902] ? free_large_kmalloc+0xa3/0x140 [ 216.768441][ T5902] report_bug+0x16a/0x220 [ 216.772795][ T5902] ? free_large_kmalloc+0xa3/0x140 [ 216.777929][ T5902] ? free_large_kmalloc+0xa5/0x140 [ 216.783061][ T5902] handle_bug+0x9c/0x200 [ 216.787348][ T5902] exc_invalid_op+0x1a/0x50 [ 216.791887][ T5902] asm_exc_invalid_op+0x1a/0x20 [ 216.796758][ T5902] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 216.802508][ T5902] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 aa 1e f1 8d 5b 41 5e 5d e9 67 d9 03 ff [ 216.822140][ T5902] RSP: 0018:ffffc900042a6b20 EFLAGS: 00010206 [ 216.828241][ T5902] RAX: 00000000ff000000 RBX: ffffea00012e1880 RCX: 0000000000100001 [ 216.836230][ T5902] RDX: ffffc9001998a000 RSI: ffff88804b862000 RDI: ffffea00012e1880 [ 216.844225][ T5902] RBP: 0000000000000000 R08: ffff8880350e2f03 R09: 1ffff11006a1c5e0 [ 216.852233][ T5902] R10: dffffc0000000000 R11: ffffed1006a1c5e1 R12: 1ffff1100504c482 [ 216.860237][ T5902] R13: 0000000000000000 R14: ffff8880350e2f60 R15: dffffc0000000000 [ 216.868248][ T5902] usb_free_urb+0xd0/0x120 [ 216.872699][ T5902] smsusb_term_device+0x1d7/0x3e0 [ 216.877761][ T5902] smsusb_probe+0x1aba/0x2280 [ 216.882468][ T5902] ? __pfx_smsusb_probe+0x10/0x10 [ 216.887512][ T5902] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.892568][ T5902] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 216.898154][ T5902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.903983][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.909816][ T5902] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 216.915474][ T5902] usb_probe_interface+0x668/0xc90 [ 216.920624][ T5902] ? __pfx_usb_probe_interface+0x10/0x10 [ 216.926285][ T5902] really_probe+0x267/0xaf0 [ 216.930826][ T5902] __driver_probe_device+0x18c/0x320 [ 216.936139][ T5902] driver_probe_device+0x4f/0x240 [ 216.941188][ T5902] __device_attach_driver+0x279/0x430 [ 216.946590][ T5902] bus_for_each_drv+0x258/0x2f0 [ 216.951459][ T5902] ? __pfx___device_attach_driver+0x10/0x10 [ 216.957379][ T5902] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.962771][ T5902] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.967999][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.973827][ T5902] __device_attach+0x2c5/0x450 [ 216.978621][ T5902] ? __pfx___device_attach+0x10/0x10 [ 216.983931][ T5902] ? _raw_spin_unlock+0x28/0x50 [ 216.988804][ T5902] device_initial_probe+0xa1/0xd0 [ 216.993857][ T5902] bus_probe_device+0x12a/0x220 [ 216.998723][ T5902] ? device_add+0x726/0xb70 [ 217.003245][ T5902] device_add+0x7b6/0xb70 [ 217.007602][ T5902] usb_set_configuration+0x1a87/0x2110 [ 217.013114][ T5902] usb_generic_driver_probe+0x8d/0x150 [ 217.018599][ T5902] usb_probe_device+0x1c4/0x3b0 [ 217.023475][ T5902] ? __pfx_usb_probe_device+0x10/0x10 [ 217.028880][ T5902] really_probe+0x267/0xaf0 [ 217.033429][ T5902] __driver_probe_device+0x18c/0x320 [ 217.038740][ T5902] driver_probe_device+0x4f/0x240 [ 217.043789][ T5902] __device_attach_driver+0x279/0x430 [ 217.049192][ T5902] bus_for_each_drv+0x258/0x2f0 [ 217.054068][ T5902] ? __pfx___device_attach_driver+0x10/0x10 [ 217.060032][ T5902] ? __pfx_bus_for_each_drv+0x10/0x10 [ 217.065428][ T5902] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.070641][ T5902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.076460][ T5902] __device_attach+0x2c5/0x450 [ 217.081247][ T5902] ? __pfx___device_attach+0x10/0x10 [ 217.086556][ T5902] ? _raw_spin_unlock+0x28/0x50 [ 217.091419][ T5902] device_initial_probe+0xa1/0xd0 [ 217.096471][ T5902] bus_probe_device+0x12a/0x220 [ 217.101341][ T5902] ? device_add+0x726/0xb70 [ 217.105858][ T5902] device_add+0x7b6/0xb70 [ 217.110202][ T5902] usb_new_device+0xa08/0x16f0 [ 217.114988][ T5902] ? __pfx_usb_new_device+0x10/0x10 [ 217.120205][ T5902] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.125426][ T5902] hub_event+0x2a1c/0x4f30 [ 217.129898][ T5902] ? __pfx_hub_event+0x10/0x10 [ 217.134684][ T5902] ? process_scheduled_works+0xa8d/0x18c0 [ 217.140410][ T5902] ? process_scheduled_works+0xa8d/0x18c0 [ 217.146143][ T5902] process_scheduled_works+0xb6e/0x18c0 [ 217.151724][ T5902] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.157721][ T5902] ? assign_work+0x3d5/0x5e0 [ 217.162335][ T5902] worker_thread+0xa53/0xfc0 [ 217.166970][ T5902] kthread+0x388/0x470 [ 217.171074][ T5902] ? __pfx_worker_thread+0x10/0x10 [ 217.176213][ T5902] ? __pfx_kthread+0x10/0x10 [ 217.180816][ T5902] ret_from_fork+0x51e/0xb90 [ 217.185436][ T5902] ? __pfx_ret_from_fork+0x10/0x10 [ 217.190565][ T5902] ? __switch_to+0xc7d/0x1450 [ 217.195272][ T5902] ? __pfx_kthread+0x10/0x10 [ 217.199887][ T5902] ret_from_fork_asm+0x1a/0x30 [ 217.204701][ T5902] [ 217.208357][ T5902] Kernel Offset: disabled [ 217.212690][ T5902] Rebooting in 86400 seconds..