last executing test programs: 3m25.967579774s ago: executing program 3 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000fcdbdf25020000000000000900000000060015000400000014001680100008800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080000000a140306000000000000000006001500"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0xe7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb2, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881e"}, {@device_a, @device_b, 0xb6, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f1"}]}, 0x1a2) getdents64(0xffffffffffffffff, &(0x7f00000010c0)=""/4067, 0xfe3) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="b000000000000000030100000800000003d57dd64b5a8166065a02760943f069b39ddb989097348e7ab5b0ae76b377770e0a01558e379c56be6818562bfd3526d23205d05a879bed2f7c82517d38426b8f8429f4659f8a4abdc8a0599fb95cd01be16c5cc4b49dae0da71eb938f12b747eede376cc0993c5e5b9cf74c25159af1111daf4095cd37296088102eb13e4221aad195be07f276ed81ed1395a69aa9234f4fcaefa03ef0a336f6b977324980000000000000029000000000000003a056d939623c59d3bb231546ec9392d1b6d06db940358d5ce73a24a4f4bcd18405edf131308059350a49b26b7a97221676794228a726a87a737e5b361e229ccce89d497b0e6f7ac6955f7093f352867a324e396d5e3a0674912b1cc510826536c6a4f39239e6f19d1f9de8f6d5906abf66095d2807b87bc1c06baa52ce622efcd0000000000000030000000000000000a01000009d800004d831bac0a7598bcea73b2eb3344c1e98eca1eb037ed9812c162f35274d300004000000000000000010100000100000078fa1f1346d5d3ca3e96cb968267e099540f40e0eba43e3389c072a437602a2a7f2375e3a4e1c4753ef7cc64820000000000"], 0x1b8}}], 0x1, 0x4008040) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000080002de531414000c000280050001000000000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m23.862843777s ago: executing program 3 (id=282): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x9, 0x0, 0x10, 0x0, 0x2, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x480, 0x0, 0x0) 3m19.790182064s ago: executing program 3 (id=297): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r0, 0x3) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}}, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async, rerun: 64) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) (rerun: 64) 3m18.235746019s ago: executing program 3 (id=301): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x41, 0x107, 0xfffffffc, 0x7, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x448d0) process_madvise(r1, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000000040)='\v', 0x1}], 0x2, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f4cc934746d6f64908974121bae0000000000000030303030303030213461", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x1) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={[&(0x7f0000000140)='\xd3\x05\xdb\"H\xd0\xb3e\xf5\x8f\x89\x1a\x92.\f\x88\\o\xa30\xf3\x00\x06x\xd0\xea3P\xc8\v\xc3\xd5mQ\xcf\xda\x9b^\xc1\x14\x9a\xed&}\xf4Y\xa8\x96u:\x008\xd6Y\x1b\xf3\xb7\'\x90|v\\\x8e4\x11\xf3\xd0\x1e\xe5\xdd\xf5Z\x1b\xe5\xd0mH\x9cSuLV\xcf\x8cG\xff\xe9U\xcb9\xef\x99\xa6\xcbQ1=\x93Q\xe0\xd4\xb1nJ\xcf\xff\x8fW\a,2\xd2\xcf9RA{\xd5\x9d\x99\x88g\xcd\x94\xc3O5}\x16D\x13\xd1g\xa5y\xcc\f,\xcbdd7t\xb2<\x9d\x97\xe6EW\xf9\x89\xaa\x8f\xc3\x9d\xe2Y\xc8']}, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x882c, &(0x7f0000000180)=ANY=[], 0x6, 0x0, 0x0) 3m18.041792512s ago: executing program 3 (id=303): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknod$loop(0x0, 0x2000, 0x0) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x80000) 3m17.748420981s ago: executing program 3 (id=305): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) socket$inet6(0xa, 0x2, 0xffffff01) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="040000005200777c3f94000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="04000020010000000000000002020000ad619ae36713bde2"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0xf}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3m17.27639307s ago: executing program 32 (id=305): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) socket$inet6(0xa, 0x2, 0xffffff01) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="040000005200777c3f94000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="04000020010000000000000002020000ad619ae36713bde2"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0xf}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11.60362208s ago: executing program 1 (id=932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x4c, 0x0, 0x8}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x4c, 0x0, 0x8}]}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000940)="cedd58d33155c2282718421d8a7f2c9fc0e9f67215bc2fa3be1778c6505a45e10a0c45b5502a8eccbc26cb3fd967b930842e300eb1d7aa377188a753b91b4d497aeb4d7547", 0x45}], 0x1, &(0x7f0000000200)=ANY=[], 0x18}}], 0x2, 0xc8040) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0x1, 0x1, 0xa, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0x1, 0x1, 0xa, 0x1ff, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050026bd7000000000000f0000000800", @ANYRES32, @ANYBLOB="35000e0080000000080211000001"], 0x74}}, 0x20000014) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 10.951433529s ago: executing program 1 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000fcdbdf25020000000000000900000000060015000400000014001680100008800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080000000a140306000000000000000006001500"], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4a62}, @device_a, @random="b1c0553d1e08", @device_b, {0x3, 0x10}, "", @value={0x0, 0x0, 0x0, 0x0, 0x28}, @value=@ver_80211n={0x0, 0xe7, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xb2, "6044ce6a449b6d9fd3bcd0a260df704b3b655907ebec6c78fb649f5ab7772d21cd1272b9c6f97ef62d34dad7f06e8f97ad4ed4dad94f768a7561181ad27608108bb7470a016245f447790d36df58a85e10966f234195f1f1d8c8cf349651fdb128463d2c7cb2a4bb7a1ee2bbfb265c9d0428f91254af694a4117c06c48def6402da837cb9ed6d72b00f19650a21605a20df5db2a3f951d6143b23652214595c53d85950d53bdb137bb1e7d352beb4b80881e"}, {@device_a, @device_b, 0xb6, "2e74187f33e3dc43288437731dcc94f8b6b430021f548e5b42ce6c1de324509090ac7f63911f5041f14138c6914e6c122ae909327b0c7cd286f61d55545dca01b31c321cd46c7b755e29e733795c876e8fa729992abcaaf4e09813a5b1941169f6736a6db79a0d48c64345a58f2f5290905b913982fa1fc03fd399647adf1a65e846675778470a4089763dbb2de08546d72047e294a18f920ecb30e32e2df02fcb42ac91fe0e653bdf575a1d89418e190c9ee23d68f1"}]}, 0x1a2) getdents64(0xffffffffffffffff, &(0x7f00000010c0)=""/4067, 0xfe3) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1b8}}], 0x1, 0x4008040) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000080002de531414000c000280050001000000000024000180"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.136441078s ago: executing program 0 (id=944): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) r5 = socket(0x40000000015, 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000003c0)={0x1, @raw_data="99604019ae47a394ca087240ce0762afe8d9ecd0addf84527b29b148ac67932829d84fe3bd2f023e3415e73decd04561092e10badc06aed633b521a7ca2ffd914e5387bb0ed4168973165741941d97edaac6e23345834448df662021c1389a383ac5a4f571df4b50da1aa70cee7c1d689544957698c0f6d632980247d05bcc7b456bfa8c3c243642e044e18a2ee2f57217c3dee722e5ed754c74b5a141da4e46b112736642e4db6f7002dccc50fc33eead2b1c473233a9bb65f0b0268e61f7d0b458f5a1d64603a2"}) sendto$inet6(r5, &(0x7f00000000c0)="c0b926743ee1", 0x6, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.00985059s ago: executing program 1 (id=945): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f80)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2000c9c4) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[@ANYBLOB="200000000307030000000000d60000000000000209000500"], 0x20}, 0x1, 0x0, 0x0, 0x22000094}, 0x4000840) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x80802, 0xc, 0x2}, 0x18) openat$incfs(r6, &(0x7f0000000140)='.pending_reads\x00', 0x224042, 0x2) flock(r5, 0x9) pread64(r0, &(0x7f00000002c0)=""/143, 0x8f, 0x6) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.851038375s ago: executing program 4 (id=946): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) dup(0xffffffffffffffff) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x10000}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r7, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000440)='Y', 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getownex(r8, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x2, &(0x7f0000000080)) 6.579677803s ago: executing program 2 (id=947): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/186, 0xba}, {&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/163, 0xa3}, {0x0}, {0x0}, {&(0x7f0000000d00)=""/132, 0x84}], 0x9}, 0x20f3fae5}, {{0x0, 0x0, 0x0}, 0xaf31}], 0x2, 0x18120, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r1 = inotify_init() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0x8, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 6.420526279s ago: executing program 2 (id=948): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x8001af85, &(0x7f0000000140)={0x1}) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "04b18b7c"}]}}, 0x0}, 0x0) 6.083233301s ago: executing program 1 (id=950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000001010400000000141a0000020000000000000f0800074000000001140005800e080000000000000030303030000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008050) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) r2 = socket(0x2b, 0x80801, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x80000) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000180)={0xd, 0xa, 0x3a1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='attr/exec\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 5.655043891s ago: executing program 0 (id=951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.532720096s ago: executing program 2 (id=953): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x22, 0x64, 0x7e, 0x40, 0x174f, 0x5212, 0x6d7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfc, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0x16, 0x1, 0x2, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x22}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) 3.968540011s ago: executing program 0 (id=954): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x14, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d40)=[{0x10, 0x9d4161a0676d4849}, {0x10, 0x1}], 0x20}}], 0x2, 0x40840) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.319539996s ago: executing program 4 (id=955): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000083c0)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000004c0)="459aa91a4fa824753a53b8e08b194562e8951e6b8e207b0c327795f42be4754e6d4ae3547b2e5bd21c7a51867d700b9e27591e41d015e30dfa6df1d57e575b8460bc81c6d65a596c4300fc4b48916805a5ad1ac4a53f669d1528d5e6142e86a48bf1938ce06b438a5b96aee873cb4922c82668944cb1b169e3195b6f5e7818729081844a365859a108b6d1b8fa72eb53e0491ca2ee4cae737ca1f8aa79ba0e67196c7f2cc053bdd4bbd4f62138af69cfe93a4b8f8a3c4c4c38282a945e90df18d7ef9defffa4", 0xc6}, {&(0x7f00000005c0)="ae876622de5ad6fc3e483a5ee67ab28f33b80123deb8b3d97b7d4c309c232e30ca4ab5cc7ecce62068ab631ebc439d744dc74852d016dc3d88257fb12ac1411760191d19fd9ee5ccd45bc720a8a5ed9f94392609e83a40666dabbac8ff26971413", 0x61}, {&(0x7f0000000640)="1fd195071e8579ed4969c07b7af78cee924cdf7122776b323260caa357f42a2511165c27cac82114aed673f0bbfd1339026933aa357f0047e57fcf7dcc1be736f68b27c7816443bd2cbff6ff161f7ccff5b02d1992c94410295539e2fff90ec0c8bbc6d84329e6bd41e2473dbc6c763685cbff5bb6d0216cd7fb75bcf3118182ef72ff8e273f2a6b87c2b2bb52fece268543157f9b0bae770a6ea5105ed65a413c298ec2f3af376ab1672769c7527f9fdf41a4865205753e588f36ca3c1734880f9f889e2f62a74fad17026f100675dd2c66c53a68b270debf16638c846386b2766503878a2fd1d7d3b549f2", 0xec}, {&(0x7f0000000140)="e001a76ff718f20851cc3cbfc7bc97aac7545b7588e7c791a24d6daee12ab5d65277288d32ddc757fa3f18c9aac4c5c6ea9135211a", 0x35}, {&(0x7f0000000740)="d217528244ce97a8813fd75bf7d0e418c9382410c6a89b882c7e6452c8c8a00d21c3f2b24712c047cbac45f872abd5df7118fedc71519d9ceddb94d78738d39a59f43750a6d4d577651c4d1c83590aff4016ad26483a08b5079f8b71ac767a7560d375109e92d925af0993fdf021b42096af111e486a3a729a70a80b3ce7305860287351be6bce35d25aaeba10463ee590c3536fde3a804df18b3322eea3f4f3c1edcb0bd8c2e790ee9776b9f51d5c22", 0xb0}], 0x6, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r2, r2, 0xffffffffffffffff]}}], 0xc0, 0x80}}, {{&(0x7f0000001c00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001c80)="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", 0xfa}, {&(0x7f0000001d80)="fb58000000002863aeba929a6780e0b20b60b665c968da1cd8f2661ff18636fae5", 0x21}, {&(0x7f0000001a00)="65db36eba2d07033f79c1d4267abd67c6b65b845fdb2752549ef69318e4e3f7de4063deac32f3eb30fa50e57c77e2a9e9f00cdae2f57e15d6a9f4b7b1b07e146d570af44db47eb3a98dfb787323a77517fa78f9b4763293c", 0x58}, {&(0x7f0000001e40)="0327b87fa4aa46c042cd6436302d61fa61188c9b949aaee93d9acd5b0e991693531a9f4df3b9a72ff865c0805b443a247aa5c624995148cfbef06cd26496f25637651665cdd89f5dec0aa27a51ae18a7573ae679ee0322d0854261b44d75da8d40c4f4a074c244224b8945952ec2b86b473035a8a5463f4ea881222b35a055c59e046154a2cedc19c214bf9a9720ee841d9034fe924c5a09a1dc499c48c708062854be2a1f16eed97b0b0447595377fc69441001fdefec5002f775f5e1b9eda25ea2c0598386", 0xc6}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)="bf8ae7f5e405815f0d0eccef201bff59c7a74617c8c984e43057e4d7c13178ed9cb2f5d6e7da287a3e48feefea1970c8feccc8838510a7acf9c7d1a4990d11724ce39f8dfcf5c8aac67d9fc7fe93cb22fa92d5a08027e32670082bf6f0a799e0c880122e0ab631347936b178a430794652e5553a49530ece17725626bdab3249ba8d2875", 0x84}], 0x6, &(0x7f0000002180)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}, @cred={{0x1c}}], 0x40, 0x4040}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_clone3(&(0x7f0000000980)={0x200, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x7, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x203b) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000000400000020000001000000020000200008f95655d366592010e985070024bf373ede3137202e49855e84058d6b457e9a905d0d"], 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="00210000000000004677000004e9ffffff4f7047128c2a7ffe379b97c4a3e5b4699ec650d6b0d6a9d0fad99ee0"], 0x0, 0x0, 0x0}) 3.319089455s ago: executing program 2 (id=956): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) socket(0x40000000015, 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000003c0)={0x1, @raw_data="99604019ae47a394ca087240ce0762afe8d9ecd0addf84527b29b148ac67932829d84fe3bd2f023e3415e73decd04561092e10badc06aed633b521a7ca2ffd914e5387bb0ed4168973165741941d97edaac6e23345834448df662021c1389a383ac5a4f571df4b50da1aa70cee7c1d689544957698c0f6d632980247d05bcc7b456bfa8c3c243642e044e18a2ee2f57217c3dee722e5ed754c74b5a141da4e46b112736642e4db6f7002dccc50fc33eead2b1c473233a9bb65f0b0268e61f7d0b458f5a1d64603a2"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.863667055s ago: executing program 1 (id=957): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, &(0x7f0000000180)=""/47, 0x2f}, 0x2}, {{&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000640)=""/246, 0xf6}], 0x3, &(0x7f0000000540)=""/119, 0x77}, 0x7}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x6, 0x98000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknod$loop(0x0, 0x2000, 0x0) listen(r5, 0xda90) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) accept4(r5, 0x0, 0x0, 0x80000) 2.705807228s ago: executing program 5 (id=958): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0xd1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x9, 0x9, 0x40000000000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00030000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) fsetxattr$security_evm(r5, &(0x7f0000000980), 0x0, 0x0, 0x3) (async) unshare(0x22020600) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x1}, 0xfe}, 0x18) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xb) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0xa) (async) r9 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00001b9000/0x1000)=nil, 0x1000}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x432203, 0x199) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket(0x400000000010, 0x3, 0x0) 2.374239959s ago: executing program 4 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="140000001002010000000000000000000100800a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480110001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205"], 0x108}}, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0xeb32, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181640, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) writev(r5, &(0x7f00000023c0)=[{&(0x7f00000000c0)="08549a", 0x3}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="083363fd", 0x4}, {&(0x7f00000011c0)="ec592b0640041c325ced65c13c5ab526ee182314f924c50bab2a98b6f3ea3b0303875b02b1e4e496245880f335e0afc93df3ab97710463f3828316f61f8d4ff4f35d722d8e495e815a63c0fef338d22cc9a2cb525400840161432894c10bf019cf56f37e5a59add0759580", 0x6b}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="4b4a6bcf0582fa444c51fe9ef4a251691fa312e98f23432a5ddb1d6a0917bbdfb35f16294cc3de0d8d26c47c7bf87a0860d202a99d30666f448627dea5496724a2f3a9c8d263e9412fe8fa00d847fad6cca44c4c5b283e41c65b246d6de47745088d4191cec745eaf53f5af2647d74351bb87d7b0562e32f4cc56e85fa08e0021e3e4c7b9b022c4520749fa0a6f7e907bdfd1f180363ee3acfa277f726d3a19b7a0531e24a00e9f39743ce494cc4a2f9cec80c45f5348de9f573e2bba16048902b66dc", 0xc3}, {&(0x7f0000002340)="50a00841201e02afe3343c409883dd69b5dc25879ee8f63587d70b79a288be0cc7dde7bc29586f1f7ed7baa990c7623d2b5385405466c293a688f0db6b4846b2ac8e883464d075415a3082", 0x4b}], 0x7) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000050000000001c0"]) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x5}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001180006040202aa"], 0x0) 1.71595252s ago: executing program 0 (id=960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1, 0x6) r3 = socket$inet6(0xa, 0xa, 0xfffffff9) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x0, @empty, 0x80}}, 0x0, 0x0, 0x11, 0x0, "9092690f39d7b417f6758f0481b931e31f313a14929bbecfecb6bed32bb89441353ef97d217f022fcc478b31acd5434c2e1b3e41f7521711f226f24955d77785dfcbdf21bc62431c1120fcea5ec01dc1"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 1.703628967s ago: executing program 1 (id=961): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(0x0, 0x1) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x7fd, 0xdddd0000, 0x0, r6}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x15000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x101000}) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003040)=[{0x0}], 0x1, 0x0, 0x2e}}, {{&(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740), 0x1}}], 0x2, 0x0) 1.703238861s ago: executing program 4 (id=962): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/235, 0xeb) 1.58917414s ago: executing program 0 (id=963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8000, 0xfffffe15, 0x7fffffff}}], 0x38, 0x20000000}, 0x24000080) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, {0x11000, 0x0, 0x0, 0x0, 0xfc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84, 0xfe}, {0x2000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 1.447865632s ago: executing program 4 (id=964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.277793984s ago: executing program 5 (id=965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x6}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 1.223980352s ago: executing program 2 (id=966): r0 = syz_io_uring_setup(0x1915, &(0x7f0000000380)={0x0, 0x400003, 0x4000, 0x3, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x2005}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x5b) (async) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) splice(r3, 0x0, r7, 0x0, 0x20000000000002, 0x2) (async) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x0, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000640)={'#! ', './file1', [{0x20, '#!\x002ma\x06\x80\x10\x95\xcb\x8c\xa6@[\xd6\xfc\xf1\xe3H\xf7\x1f\x8ce\x9cG\x17\x83\x0e\x12O\xe97\xbf%\x12\xe6\x169\xcf\x97\xe5\xe6\x13\xfdA]\xd7\xec\x98fB\x026\xcc\x14l\x97\x12\x9f\x98\xa9t\x92\x9830\xdd1\x88\xef7\x88SJf\xc4\xff1\x00h\x00\x00\x00\x00\x004H2\xcf\xf0\xa6\x95\x03I\xc3z9\x1a}#\xe6\xb82\x9ec\x9f\x13\xa1ro1\x1e\r\xc3\xa9\x9b\x9f3\xad\xfcUI\xbb\xc6\xf9K\xeeU\xf5\xd9v\xb9\'\x8f\x8dn\x9bwm&\xd7$\x85\x89(\xee/\xa7owN \xc7\xec\x04\xf2n\xbf\xd3\xa6\xbd.\xbbvG\xf3\xd6\x81\xb9b\xeb\xe7\xec%.\xad'}], 0xa, "dd079f5f82d82892df79e659b97c2bda6b75ecda2e752cb2d612f66ead2e68b90032faebf3488dad16e9dcb95f57e0d2f7e17d9b71f560d1d75548"}, 0xf8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x3, &(0x7f0000000180)={[0x3]}, 0x8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) mprotect(&(0x7f00008e9000/0x4000)=nil, 0x4000, 0x9) (async) open(&(0x7f0000000100)='./file1\x00', 0x107082, 0x14c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.107851125s ago: executing program 0 (id=967): syz_emit_ethernet(0x46, &(0x7f0000002140)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x2}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000500)={0x0, 0x9, 0x6, "b361d6640460"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 847.871407ms ago: executing program 5 (id=968): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x8c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3a}]}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="8558eacdb2608a07d63391e0ff2cb8e2053c8612fcf732cebda0"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00008fc000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f00000005c0)="64660f3805fdea0f008200660f383d6b0a650fc76e0066b9800000c00f326635000100000f300f09baf80c66b83437ed8366efbafc0c66ed0f008735a1a1b94b00", 0x41}], 0x4e, 0x47, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) 733.617521ms ago: executing program 2 (id=969): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000d00)='//_:e\xa4/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\xa5\x94\x0e\x0et\x8d@\xdc\x03+\xcf\xbf\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000ac0)={0x0, &(0x7f0000000a80), 0x0, r1, 0xeeeeeeee}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000480)='//_:e\xa4/\x8aNs\xae\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\xa5\x94\x0e\x0et\x8d@\xdc\x03+\xcf\xbf\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x10) inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bb210a08c907120082f60102030109022d000100000000090400000396b70a0009050f0000000000000905050000000000000905010000000000003d40763b3fddc57daa317cf35d0b74e6ff37800979"], 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) epoll_pwait(r6, &(0x7f0000000180)=[{}], 0x1, 0xf, &(0x7f0000000240)={[0x80000000]}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 393.753676ms ago: executing program 5 (id=970): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001d00000025bd7000ffdbdf250a000000", @ANYRES32=r5, @ANYBLOB="4000350314000100fc0200000000000000000000000000011400030004000000237c00000700000009000000140003800004000006000000faffffff0700000008000a000500000008000a000000000008000900030000000a0002000180c200000e000005000c0001000000"], 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 298.657031ms ago: executing program 5 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf2567"], 0x2c}}, 0x40) 267.139719ms ago: executing program 4 (id=972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$update(0x2, 0x0, 0x0, 0xfe) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24048005) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, 0x0, 0x0, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r4, r4, 0x0, 0x6) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x2000, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000240)) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'wg1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x400c013, r8, 0xed000) 0s ago: executing program 5 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) kernel console output (not intermixed with test programs): syz [ 191.766582][ T24] usb 6-1: SerialNumber: syz [ 191.778173][ T24] usb 6-1: config 0 descriptor?? [ 191.791435][ T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 191.798254][ T63] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 191.922508][ T5866] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 191.952517][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 191.959510][ T5866] usb 2-1: device descriptor read/8, error -71 [ 191.970689][ T63] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 191.980839][ T63] usb 3-1: config 0 has no interface number 0 [ 192.001484][ T63] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.029407][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.052636][ T63] usb 3-1: Product: syz [ 192.056849][ T63] usb 3-1: Manufacturer: syz [ 192.061526][ T63] usb 3-1: SerialNumber: syz [ 192.073019][ T5866] usb usb2-port1: unable to enumerate USB device [ 192.091377][ T63] usb 3-1: config 0 descriptor?? [ 192.100863][ T63] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.146360][ T7543] picdev_write: 1542 callbacks suppressed [ 192.146376][ T7543] kvm: pic: non byte write [ 192.227900][ T7543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147483648 (4294967296 ns) > initial count (3880 ns). Using initial count to start timer. [ 192.502903][ T24] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 192.521731][ T24] gspca_pac7302 6-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 192.878441][ T7558] tipc: Started in network mode [ 192.902451][ T7558] tipc: Node identity 9e3624101aa4, cluster identity 4711 [ 192.922728][ T7558] tipc: Enabled bearer , priority 0 [ 192.946546][ T7559] syzkaller0: entered promiscuous mode [ 192.952089][ T7559] syzkaller0: entered allmulticast mode [ 192.983674][ T7558] tipc: Resetting bearer [ 193.031435][ T7557] tipc: Resetting bearer [ 193.048649][ T7557] tipc: Disabling bearer [ 193.622494][ T5949] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 193.777468][ T5949] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.805784][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.830228][ T5949] usb 5-1: config 0 descriptor?? [ 193.847166][ T5949] cp210x 5-1:0.0: cp210x converter detected [ 194.181408][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193131][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260264][ T5949] usb 5-1: cp210x converter now attached to ttyUSB0 [ 194.308785][ T5949] usb 5-1: USB disconnect, device number 29 [ 194.363989][ T63] usb 3-1: qt2_attach - failed to power on unit: -71 [ 194.376387][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.391558][ T63] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 194.415723][ T5949] cp210x 5-1:0.0: device disconnected [ 194.443266][ T63] usb 3-1: USB disconnect, device number 41 [ 194.449991][ T5866] usb 6-1: USB disconnect, device number 7 [ 194.664520][ T7585] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 195.128088][ T7585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.207543][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.292565][ T5949] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 195.730216][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 195.752892][ T5949] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.762476][ T5949] usb 1-1: config 0 has no interface number 0 [ 195.988233][ T5949] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.054677][ T5949] usb 1-1: config 0 interface 85 has no altsetting 0 [ 196.074010][ T5949] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 196.083131][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.101898][ T5949] usb 1-1: Product: syz [ 196.115100][ T5949] usb 1-1: Manufacturer: syz [ 196.333081][ T7604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.352487][ T5991] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 196.445956][ T5949] usb 1-1: SerialNumber: syz [ 196.455507][ T5949] usb 1-1: config 0 descriptor?? [ 196.557731][ T5991] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.582475][ T5991] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 196.617813][ T7612] tipc: Enabled bearer , priority 0 [ 196.625062][ T7612] syzkaller0: entered promiscuous mode [ 196.630591][ T7612] syzkaller0: entered allmulticast mode [ 196.691294][ T5949] appletouch 1-1:0.85: Failed to read mode from device. [ 196.707804][ T5949] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 196.756846][ T5991] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.778035][ T7614] tipc: Resetting bearer [ 196.862770][ T7611] tipc: Resetting bearer [ 196.888938][ T5991] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.903167][ T7611] tipc: Disabling bearer [ 196.948863][ T5991] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.958226][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.988649][ T5991] usb 2-1: Product: syz [ 197.002682][ T5991] usb 2-1: Manufacturer: syz [ 197.074817][ T5991] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 197.311716][ T5949] usb 1-1: USB disconnect, device number 29 [ 197.832566][ T5949] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.912886][ T7210] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 197.973256][ T7632] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[7632] [ 198.002507][ T30] kauditd_printk_skb: 1096 callbacks suppressed [ 198.002523][ T30] audit: type=1326 audit(1759011000.029:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.2.434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33cfb8eec9 code=0x0 [ 198.022535][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 198.030486][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.126788][ T7210] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 198.135254][ T7210] usb 5-1: config 0 has no interface number 0 [ 198.152633][ T5949] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 198.166494][ T5949] usb 6-1: config 0 interface 0 has no altsetting 0 [ 198.188779][ T7210] usb 5-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 198.201413][ T5949] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 198.242517][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.259236][ T5949] usb 6-1: Product: syz [ 198.263858][ T7210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.264242][ T5949] usb 6-1: Manufacturer: syz [ 198.296830][ T5949] usb 6-1: SerialNumber: syz [ 198.382673][ T5949] usb 6-1: config 0 descriptor?? [ 198.403708][ T5949] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 198.424328][ T7210] usb 5-1: config 0 descriptor?? [ 198.449026][ T7210] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 198.457916][ T7210] usb 5-1: setting power ON [ 198.467205][ T7210] dvb-usb: bulk message failed: -22 (2/0) [ 198.610526][ T5949] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 198.618347][ T7210] dvb-usb: bulk message failed: -22 (1/0) [ 198.622829][ T5949] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 198.636072][ T5949] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 198.662568][ T5991] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 198.737934][ T7210] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 198.756065][ T7210] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 198.780866][ T7210] dvb_usb_cxusb 5-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 198.807056][ T63] usb 2-1: USB disconnect, device number 43 [ 198.833626][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 198.860526][ T5991] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.872039][ T5991] usb 1-1: config 0 has no interface number 0 [ 198.878495][ T5991] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.911563][ T5991] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.941420][ T7642] netlink: 'syz.5.431': attribute type 33 has an invalid length. [ 198.949288][ T7642] netlink: 152 bytes leftover after parsing attributes in process `syz.5.431'. [ 198.977486][ T5991] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 198.986841][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.014078][ T5991] usb 1-1: config 0 descriptor?? [ 199.660611][ T5991] uclogic 0003:28BD:0094.0007: pen parameters not found [ 199.683842][ T5991] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 200.124708][ T5949] usb 1-1: USB disconnect, device number 30 [ 200.293883][ T7660] fuse: Bad value for 'group_id' [ 200.299040][ T7660] fuse: Bad value for 'group_id' [ 200.800838][ T5866] usb 5-1: USB disconnect, device number 30 [ 201.022545][ T5991] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 201.343972][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.358462][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.375293][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.385404][ T5991] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 201.399554][ T5991] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.410364][ T5991] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.448140][ T5991] usb 1-1: Manufacturer: syz [ 201.465725][ T5991] usb 1-1: config 0 descriptor?? [ 201.632063][ T5949] usb 6-1: USB disconnect, device number 8 [ 202.166713][ T7681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.263431][ T5991] rc_core: IR keymap rc-hauppauge not found [ 202.272615][ T5991] Registered IR keymap rc-empty [ 202.283591][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.352770][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.383603][ T5949] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 202.389700][ T5991] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 202.412606][ T5991] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 202.471659][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.495878][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.508611][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.523117][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.532943][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.562624][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.562880][ T5949] usb 6-1: Invalid ep0 maxpacket: 16 [ 202.584227][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.605892][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.614571][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.630562][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.652729][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.672539][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.722603][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.736084][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.749234][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.772514][ T5991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 202.776169][ T5949] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 202.819643][ T5991] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.829238][ T5991] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.873506][ T5991] usb 1-1: USB disconnect, device number 31 [ 202.932652][ T5949] usb 6-1: Invalid ep0 maxpacket: 16 [ 202.938469][ T5949] usb usb6-port1: attempt power cycle [ 203.253780][ T7695] loop5: detected capacity change from 0 to 7 [ 203.262123][ T7695] Dev loop5: unable to read RDB block 7 [ 203.270939][ T7695] loop5: unable to read partition table [ 203.282112][ T7695] loop5: partition table beyond EOD, truncated [ 203.283461][ T5949] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 203.296699][ T7695] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.334023][ T5949] usb 6-1: Invalid ep0 maxpacket: 16 [ 203.373471][ T5866] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 203.413512][ T5948] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 203.474181][ T5949] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 203.493054][ T5949] usb 6-1: Invalid ep0 maxpacket: 16 [ 203.500532][ T5949] usb usb6-port1: unable to enumerate USB device [ 203.658605][ T5948] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.669382][ T5948] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 203.682802][ T5866] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 203.743360][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.752523][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.792474][ T5948] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.922603][ T5866] usb 2-1: config 0 descriptor?? [ 204.082951][ T5948] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.101799][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.153102][ T5948] usb 3-1: Product: syz [ 204.157315][ T5948] usb 3-1: Manufacturer: syz [ 204.262559][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 204.347383][ T5948] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 204.436031][ T7692] tipc: Enabled bearer , priority 0 [ 204.443254][ T7692] syzkaller0: entered promiscuous mode [ 204.449032][ T7692] syzkaller0: entered allmulticast mode [ 204.463040][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.472248][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.522873][ T9] usb 1-1: Product: syz [ 204.532989][ T9] usb 1-1: Manufacturer: syz [ 204.547006][ T9] usb 1-1: SerialNumber: syz [ 204.584752][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.655019][ T7707] tipc: Resetting bearer [ 204.681493][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.730239][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.751924][ T5928] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.227263][ T7692] tipc: Resetting bearer [ 205.253227][ T7692] tipc: Disabling bearer [ 205.334790][ T5866] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 205.375796][ T5866] asix 2-1:0.0: probe with driver asix failed with error -71 [ 205.430804][ T5866] usb 2-1: USB disconnect, device number 45 [ 205.792651][ T5928] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 205.807970][ T5928] ath9k_htc: Failed to initialize the device [ 205.837739][ T5928] usb 1-1: ath9k_htc: USB layer deinitialized [ 206.108306][ T5948] usb 3-1: USB disconnect, device number 42 [ 206.161213][ T7722] dlm: non-version read from control device 36 [ 206.241945][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 206.267907][ T7724] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.638030][ T7730] binder: 7728:7730 ioctl 40046205 0 returned -22 [ 206.652938][ T5991] usb 1-1: USB disconnect, device number 32 [ 207.205142][ T7734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.508449][ T7739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.057117][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 208.250053][ T5948] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 208.562474][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 208.584365][ T5948] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 208.603536][ T5948] usb 1-1: config 0 has no interface number 0 [ 208.611113][ T5948] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 208.646595][ T5948] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 208.748605][ T5948] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 208.780521][ T5948] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 208.838715][ T5948] usb 1-1: Product: syz [ 209.061931][ T5948] usb 1-1: Manufacturer: syz [ 209.082461][ T5948] usb 1-1: SerialNumber: syz [ 209.114483][ T5948] usb 1-1: config 0 descriptor?? [ 209.121548][ T5948] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 209.137029][ T5948] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 209.159348][ T7776] sctp: [Deprecated]: syz.1.470 (pid 7776) Use of int in maxseg socket option. [ 209.159348][ T7776] Use struct sctp_assoc_value instead [ 209.178569][ T5948] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 209.190318][ T5948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 209.200847][ T5948] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 209.224571][ T5948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 209.238155][ T5948] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 209.247668][ T5948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 209.257398][ T5948] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 209.304666][ T5948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 209.723066][ T5948] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 210.313119][ T5948] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.340978][ T5948] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.407180][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.440676][ T5948] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 210.462473][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.527201][ T5948] usb 3-1: config 0 descriptor?? [ 210.743023][ T5948] usb 3-1: string descriptor 0 read error: -71 [ 210.781788][ T5948] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 210.821055][ T5221] bcm5974 3-1:0.0: could not read from device [ 210.917676][ T5221] bcm5974 3-1:0.0: could not read from device [ 210.967122][ T5221] bcm5974 3-1:0.0: could not read from device [ 210.988332][ T5948] usb 3-1: USB disconnect, device number 43 [ 211.042811][ T5882] bcm5974 3-1:0.0: could not read from device [ 211.050689][ T9] usb 1-1: USB disconnect, device number 33 [ 211.072788][ T5221] bcm5974 3-1:0.0: could not read from device [ 211.103330][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 211.158884][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 211.198464][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 211.233489][ T5882] udevd[5882]: Error opening device "/dev/input/event4": No such device [ 211.270219][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 211.271133][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 211.483392][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 211.493771][ T9] keyspan 1-1:0.107: device disconnected [ 211.557073][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 211.616642][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 211.827582][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 211.842598][ T5948] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 212.036107][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64 [ 212.050660][ T5948] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 212.063463][ T7810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.070908][ T7810] IPv6: NLM_F_CREATE should be set when creating new route [ 212.089652][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.118980][ T5948] usb 3-1: config 0 descriptor?? [ 212.402969][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 212.566711][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 212.579980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.611721][ T5948] ath6kl: Failed to submit usb control message: -71 [ 212.646932][ T9] usb 2-1: config 0 descriptor?? [ 212.762594][ T5948] ath6kl: unable to send the bmi data to the device: -71 [ 212.794984][ T5948] ath6kl: Unable to send get target info: -71 [ 212.813799][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 212.831437][ T5948] ath6kl: Failed to init ath6kl core: -71 [ 212.839695][ T5948] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 212.902998][ T5948] usb 3-1: USB disconnect, device number 44 [ 213.059792][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.492634][ T5948] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 214.696319][ T5948] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 214.705578][ T5948] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 214.759459][ T5948] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 214.828487][ T5948] usb 3-1: config 220 has no interface number 2 [ 214.882961][ T5948] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.034485][ T5948] usb 3-1: config 220 interface 0 has no altsetting 0 [ 215.057688][ T5948] usb 3-1: config 220 interface 76 has no altsetting 0 [ 215.084583][ T5948] usb 3-1: config 220 interface 1 has no altsetting 0 [ 215.111285][ T5948] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.157168][ T9] usb 2-1: USB disconnect, device number 46 [ 215.232144][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.246960][ T5948] usb 3-1: Product: syz [ 215.254738][ T5948] usb 3-1: Manufacturer: syz [ 215.263783][ T5948] usb 3-1: SerialNumber: syz [ 215.323337][ T7843] fuse: Bad value for 'user_id' [ 215.328181][ T7843] fuse: Bad value for 'user_id' [ 215.752548][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 215.922517][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 215.934262][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.056914][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.138255][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.268050][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 216.297510][ T7842] delete_channel: no stack [ 216.318148][ T9] usb 2-1: USB disconnect, device number 47 [ 217.305927][ T5948] usb 3-1: selecting invalid altsetting 0 [ 217.346983][ T5948] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 217.360057][ T5948] usb 3-1: No valid video chain found. [ 217.563547][ T5948] usb 3-1: selecting invalid altsetting 0 [ 217.569713][ T5948] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 217.645220][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 217.660764][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 217.947879][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 218.027230][ T5948] usb 3-1: USB disconnect, device number 45 [ 218.167781][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.204712][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 218.225240][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.261998][ T9] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 218.288097][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.297708][ T9] usb 1-1: Product: syz [ 218.302839][ T9] usb 1-1: Manufacturer: syz [ 218.307577][ T9] usb 1-1: SerialNumber: syz [ 218.320307][ T9] usb 1-1: config 0 descriptor?? [ 218.329628][ T7863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.693518][ T9] powermate: unknown product id 0240 [ 218.756328][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 218.817298][ T7210] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 218.832978][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 219.643525][ T7210] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.816076][ T7210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.831746][ T7210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.856338][ T7210] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.876368][ T7210] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.888924][ T7210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.015314][ C0] powermate: config urb returned -71 [ 220.022188][ C0] powermate: config urb returned -71 [ 220.022519][ T63] usb 1-1: USB disconnect, device number 34 [ 220.027485][ C0] powermate: usb_submit_urb(config) failed [ 220.033662][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 220.102133][ T7210] usb 6-1: config 0 descriptor?? [ 220.201000][ T7889] netlink: 'syz.0.500': attribute type 29 has an invalid length. [ 220.672045][ T7210] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 221.042086][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 221.056883][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 221.071001][ T30] audit: type=1326 audit(1759011023.099:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.094984][ T30] audit: type=1326 audit(1759011023.099:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.117282][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.127233][ T30] audit: type=1326 audit(1759011023.099:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.150227][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.186830][ T30] audit: type=1326 audit(1759011023.099:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.248458][ T30] audit: type=1326 audit(1759011023.099:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.372733][ T5948] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 221.389556][ T30] audit: type=1326 audit(1759011023.099:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.554175][ T30] audit: type=1326 audit(1759011023.099:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.579195][ T30] audit: type=1326 audit(1759011023.099:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.668259][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.729956][ T30] audit: type=1326 audit(1759011023.099:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63d72af79 code=0x7ffc0000 [ 221.768261][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 221.787288][ T30] audit: type=1326 audit(1759011023.099:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63d78eec9 code=0x7ffc0000 [ 221.822710][ T5948] usb 5-1: can't read configurations, error -71 [ 221.831776][ T7912] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 222.176208][ T7912] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 222.337854][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.426681][ T7210] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 222.562553][ T7210] usb 6-1: device descriptor read/64, error -32 [ 222.813039][ T7210] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 222.952501][ T7210] usb 6-1: device descriptor read/64, error -32 [ 223.212750][ T7210] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 223.302860][ T7210] usb 6-1: device descriptor read/8, error -32 [ 224.511641][ T63] usb 6-1: USB disconnect, device number 13 [ 225.111063][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.491348][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 229.501667][ T8017] team0: Port device batadv2 added [ 231.822481][ T7210] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 232.298419][ T7210] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 232.326088][ T7210] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 232.336930][ T7210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 232.374585][ T7210] usb 3-1: Product: syz [ 232.434039][ T7210] usb 3-1: Manufacturer: syz [ 232.439917][ T7210] usb 3-1: SerialNumber: syz [ 232.452562][ T7210] usb 3-1: config 0 descriptor?? [ 232.707670][ T7210] usb 3-1: USB disconnect, device number 46 [ 235.462338][ T8091] syz_tun: entered promiscuous mode [ 235.513178][ T8091] batadv_slave_0: entered promiscuous mode [ 235.645500][ T8092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.281939][ T8111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.556'. [ 238.981404][ T8133] fuse: Invalid rootmode [ 239.543136][ T7210] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 239.683592][ T7210] usb 2-1: device descriptor read/64, error -71 [ 239.942857][ T7210] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 240.220198][ T7210] usb 2-1: device descriptor read/64, error -71 [ 240.333428][ T7210] usb usb2-port1: attempt power cycle [ 240.790352][ T7210] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 240.829648][ T7210] usb 2-1: device descriptor read/8, error -71 [ 241.083153][ T7210] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 241.123274][ T7210] usb 2-1: device descriptor read/8, error -71 [ 241.326728][ T7210] usb usb2-port1: unable to enumerate USB device [ 244.888597][ T63] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 245.102490][ T63] usb 3-1: Invalid ep0 maxpacket: 9 [ 245.276247][ T63] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 245.455364][ T63] usb 3-1: Invalid ep0 maxpacket: 9 [ 245.494080][ T63] usb usb3-port1: attempt power cycle [ 245.742677][ T5935] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 245.818685][ T8229] fuse: Unknown parameter 'fe' [ 245.832484][ T63] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 245.921068][ T63] usb 3-1: Invalid ep0 maxpacket: 9 [ 245.930335][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 245.940068][ T5935] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 245.958299][ T5935] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 245.977483][ T5935] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.991497][ T5935] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 246.020829][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.030373][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 246.051545][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.062202][ T5935] usb 5-1: config 0 descriptor?? [ 246.094300][ T63] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 246.133012][ T63] usb 3-1: Invalid ep0 maxpacket: 9 [ 246.138433][ T63] usb usb3-port1: unable to enumerate USB device [ 246.412658][ T8224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.583'. [ 246.647770][ T8224] netlink: 92 bytes leftover after parsing attributes in process `syz.4.583'. [ 246.937922][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 246.961485][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 247.014270][ T5935] usb 5-1: USB disconnect, device number 33 [ 247.562460][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 247.754267][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.779450][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.809163][ T24] usb 1-1: config 0 descriptor?? [ 247.817690][ T24] cp210x 1-1:0.0: cp210x converter detected [ 248.227328][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 248.392447][ T5928] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 248.474915][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 248.623002][ T5928] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.642438][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.666977][ T5928] usb 3-1: config 0 descriptor?? [ 248.684431][ T5928] cp210x 3-1:0.0: cp210x converter detected [ 248.690493][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.721182][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.813584][ T5866] usb 1-1: USB disconnect, device number 35 [ 248.838970][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.932780][ T5866] cp210x 1-1:0.0: device disconnected [ 249.081198][ T5928] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 249.113834][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.124459][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.152500][ T5928] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 249.185108][ T5928] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 249.205891][ T5928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 249.344217][ T5928] usb 3-1: USB disconnect, device number 51 [ 249.364799][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.512562][ T5866] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 249.574287][ T5928] cp210x 3-1:0.0: device disconnected [ 249.657133][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.598'. [ 249.682735][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 249.688720][ T5866] usb 5-1: no configurations [ 249.694547][ T5866] usb 5-1: can't read configurations, error -22 [ 249.822953][ T5866] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 250.074071][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 250.090184][ T5866] usb 5-1: no configurations [ 250.100969][ T5866] usb 5-1: can't read configurations, error -22 [ 250.129044][ T5866] usb usb5-port1: attempt power cycle [ 250.431246][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 250.449154][ T8308] loop5: detected capacity change from 0 to 7 [ 250.461258][ T6356] Dev loop5: unable to read RDB block 7 [ 250.469623][ T6356] loop5: unable to read partition table [ 250.483096][ T6356] loop5: partition table beyond EOD, truncated [ 250.492619][ T5866] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 250.511788][ T8308] Dev loop5: unable to read RDB block 7 [ 250.522798][ T8308] loop5: unable to read partition table [ 250.526322][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 250.535472][ T8308] loop5: partition table beyond EOD, truncated [ 250.544006][ T5866] usb 5-1: no configurations [ 250.551946][ T8308] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.568507][ T5866] usb 5-1: can't read configurations, error -22 [ 250.597869][ T5236] Dev loop5: unable to read RDB block 7 [ 250.615671][ T5236] loop5: unable to read partition table [ 250.621695][ T5236] loop5: partition table beyond EOD, truncated [ 250.672506][ T5928] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 250.713284][ T5866] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 250.753274][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 250.772537][ T5866] usb 5-1: no configurations [ 250.779941][ T5866] usb 5-1: can't read configurations, error -22 [ 250.795266][ T5866] usb usb5-port1: unable to enumerate USB device [ 250.869224][ T5928] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 250.880094][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.908076][ T5928] usb 3-1: config 0 has no interface number 0 [ 250.927476][ T5928] usb 3-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.980781][ T5928] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 251.133703][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.152495][ T5928] usb 3-1: Product: syz [ 251.156735][ T5928] usb 3-1: Manufacturer: syz [ 251.161328][ T5928] usb 3-1: SerialNumber: syz [ 251.185213][ T5928] r8152-cfgselector 3-1: Unknown version 0x0000 [ 251.191694][ T5928] r8152-cfgselector 3-1: config 0 descriptor?? [ 251.424513][ T5928] r8152 3-1:0.129: Expected endpoints are not found [ 251.449778][ T5928] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 251.540254][ T8317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.830128][ T8344] netlink: 'syz.2.609': attribute type 12 has an invalid length. [ 253.131243][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.612'. [ 253.193457][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.612'. [ 253.778765][ T8369] pimreg: entered allmulticast mode [ 253.855294][ T8371] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 253.986209][ T8371] program syz.1.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.083023][ T8369] pimreg: left allmulticast mode [ 254.492333][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 255.808376][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814979][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.140429][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 257.140446][ T30] audit: type=1326 audit(1759011059.169:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.300536][ T30] audit: type=1326 audit(1759011059.169:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.513910][ T30] audit: type=1326 audit(1759011059.169:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.547494][ T30] audit: type=1326 audit(1759011059.169:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.573605][ T30] audit: type=1326 audit(1759011059.169:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.595855][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.717113][ T8396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.797025][ T30] audit: type=1326 audit(1759011059.169:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 257.819926][ T30] audit: type=1326 audit(1759011059.169:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 258.131449][ T30] audit: type=1326 audit(1759011059.169:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 258.230697][ T30] audit: type=1326 audit(1759011059.169:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 258.286528][ T30] audit: type=1326 audit(1759011059.169:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 258.518760][ T8420] netlink: 'syz.4.626': attribute type 3 has an invalid length. [ 258.518801][ T8420] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.626'. [ 258.742637][ T5935] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 259.593031][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.774240][ T5935] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.812210][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.869483][ T5935] usb 1-1: config 0 descriptor?? [ 259.891621][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 260.310794][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.342913][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.389000][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 260.447298][ T8440] netlink: 'syz.5.632': attribute type 10 has an invalid length. [ 260.497265][ T8440] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.604757][ T5935] pwc: recv_control_msg error -71 req 02 val 2c00 [ 260.636649][ T5935] pwc: recv_control_msg error -71 req 04 val 1000 [ 260.739903][ T5935] pwc: recv_control_msg error -71 req 04 val 1300 [ 260.761397][ T5935] pwc: recv_control_msg error -71 req 04 val 1400 [ 260.971678][ T5935] pwc: recv_control_msg error -71 req 02 val 2000 [ 260.989813][ T5935] pwc: recv_control_msg error -71 req 02 val 2100 [ 261.001287][ T5935] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.010117][ T5935] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.040796][ T5935] pwc: recv_control_msg error -71 req 02 val 2400 [ 261.050857][ T5935] pwc: recv_control_msg error -71 req 02 val 2600 [ 261.062109][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 261.088176][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 261.098829][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 261.112750][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 261.325571][ T5935] pwc: Registered as video103. [ 261.625853][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 261.732538][ T5935] usb 1-1: USB disconnect, device number 36 [ 262.513986][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.593423][ T8472] fuse: Unknown parameter '0x0000000000000009' [ 263.808005][ T5866] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 263.965251][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 264.016421][ T5866] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 264.025952][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.052606][ T5866] usb 2-1: Product: syz [ 264.066244][ T5866] usb 2-1: Manufacturer: syz [ 264.102157][ T5866] usb 2-1: SerialNumber: syz [ 264.115139][ T5866] usb 2-1: config 0 descriptor?? [ 264.155289][ T5866] gspca_main: mars-2.14.0 probing 093a:050f [ 264.359776][ T5866] usb 2-1: USB disconnect, device number 52 [ 264.420762][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.641188][ T8499] netlink: 'syz.0.647': attribute type 5 has an invalid length. [ 264.706583][ T8499] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.647'. [ 265.392206][ T8512] net_ratelimit: 13 callbacks suppressed [ 265.392224][ T8512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.513546][ T8517] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 265.513631][ T8517] batman_adv: batadv0: Interface deactivated: dummy0 [ 265.515437][ T8517] batman_adv: batadv0: Removing interface: dummy0 [ 265.534318][ T8517] team0: Port device dummy0 added [ 265.536120][ T8517] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 265.667660][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 265.667703][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 265.673775][ T8517] team0: Port device dummy0 removed [ 265.678318][ T8517] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.143144][ T5866] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 269.322568][ T5866] usb 6-1: device descriptor read/64, error -71 [ 269.598587][ T5866] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 269.735334][ T8592] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.754273][ T5866] usb 6-1: device descriptor read/64, error -71 [ 269.895787][ T5866] usb usb6-port1: attempt power cycle [ 270.262540][ T5866] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 270.473039][ T5866] usb 6-1: device descriptor read/8, error -71 [ 270.702448][ T7210] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 270.712524][ T5866] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 270.743341][ T5866] usb 6-1: device descriptor read/8, error -71 [ 270.845655][ T8621] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 270.857691][ T5866] usb usb6-port1: unable to enumerate USB device [ 270.871702][ T8621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.679'. [ 270.876552][ T7210] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.898913][ T7210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.904275][ T8621] .`: renamed from bond0 (while UP) [ 270.913576][ T7210] usb 5-1: Product: syz [ 270.917986][ T7210] usb 5-1: Manufacturer: syz [ 270.923166][ T7210] usb 5-1: SerialNumber: syz [ 270.930761][ T7210] usb 5-1: config 0 descriptor?? [ 271.346167][ T7210] usb 5-1: Firmware version (0.0) predates our first public release. [ 271.358594][ T7210] usb 5-1: Please update to version 0.2 or newer [ 271.574938][ T7210] usb 5-1: Firmware: build Æ.Þ [ 273.699109][ T63] usb 5-1: USB disconnect, device number 38 [ 273.861184][ T8652] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.909960][ T5948] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 273.954018][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 273.992461][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.008702][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.089301][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.108029][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.128023][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.134143][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.142400][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.188893][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.206308][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.213487][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.249263][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.271953][ T7210] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 274.295763][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.308932][ T7210] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 274.347406][ T5948] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.432494][ T63] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 274.456487][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.508092][ T5948] usb 1-1: config 0 descriptor?? [ 274.556492][ T8658] fido_id[8658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.612605][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 274.620458][ T63] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 274.639195][ T63] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 274.670313][ T63] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 274.681979][ T63] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 274.719597][ T63] usb 3-1: config 0 has no interface number 0 [ 274.730978][ T63] usb 3-1: config 0 has no interface number 1 [ 274.760279][ T63] usb 3-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.791304][ T63] usb 3-1: too many endpoints for config 0 interface 198 altsetting 193: 66, using maximum allowed: 30 [ 274.811325][ T63] usb 3-1: config 0 interface 198 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 274.882451][ T63] usb 3-1: config 0 interface 4 has no altsetting 0 [ 274.899263][ T63] usb 3-1: config 0 interface 198 has no altsetting 0 [ 274.930260][ T63] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=bc.6d [ 274.958850][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.987581][ T63] usb 3-1: Product: syz [ 274.995273][ T63] usb 3-1: Manufacturer: syz [ 275.000233][ T63] usb 3-1: SerialNumber: syz [ 275.051516][ T63] usb 3-1: config 0 descriptor?? [ 275.074642][ T63] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.4/input/input14 [ 275.332153][ T5221] bcm5974 3-1:0.4: could not read from device [ 275.341588][ T5948] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 275.383322][ T5221] bcm5974 3-1:0.4: could not read from device [ 275.482495][ T5948] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 275.507439][ T8671] netlink: 'syz.4.691': attribute type 30 has an invalid length. [ 275.540186][ T5948] usb 1-1: USB disconnect, device number 37 [ 275.553004][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.691'. [ 275.602718][ T5221] bcm5974 3-1:0.4: could not read from device [ 275.622655][ T63] usb 3-1: USB disconnect, device number 53 [ 275.656201][ T5221] bcm5974 3-1:0.4: could not read from device [ 275.786729][ T8672] fido_id[8672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 275.863490][ T5882] udevd[5882]: Error opening device "/dev/input/event4": No such file or directory [ 275.918020][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 275.958781][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 275.987155][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 276.021016][ T5882] udevd[5882]: Unable to EVIOCGABS device "/dev/input/event4" [ 276.143294][ T5882] udevd[5882]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 276.233290][ T5236] udevd[5236]: worker [5882] terminated by signal 6 (Aborted) [ 276.288543][ T5236] udevd[5236]: worker [5882] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.4/input/input14/event4' [ 277.165489][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 277.805727][ T8703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.462575][ T7210] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 279.622545][ T7210] usb 2-1: device descriptor read/64, error -71 [ 279.862567][ T7210] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 280.012536][ T7210] usb 2-1: device descriptor read/64, error -71 [ 280.042683][ T5866] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 280.123706][ T7210] usb usb2-port1: attempt power cycle [ 280.232562][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 280.246142][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.260147][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.274311][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.287821][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.310382][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.330062][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.345089][ T5935] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 280.484223][ T7210] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 280.513318][ T7210] usb 2-1: device descriptor read/8, error -71 [ 280.519588][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 280.534017][ T5935] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 280.544687][ T5935] usb 5-1: config 0 has no interface number 0 [ 280.558092][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 280.563894][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 280.564292][ T5935] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 280.670707][ T5935] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 280.693930][ T5935] usb 5-1: config 0 interface 48 has no altsetting 0 [ 280.728672][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'. [ 280.832499][ T7210] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 280.846392][ T5935] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 280.861413][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 280.883543][ T7210] usb 2-1: device descriptor read/8, error -71 [ 280.912540][ T5935] usb 5-1: Product: syz [ 281.043308][ T7210] usb usb2-port1: unable to enumerate USB device [ 281.054167][ T5935] usb 5-1: Manufacturer: syz [ 281.059832][ T5935] usb 5-1: SerialNumber: syz [ 281.067752][ T7210] usb 3-1: USB disconnect, device number 54 [ 281.076749][ T5935] usb 5-1: config 0 descriptor?? [ 281.822432][ T7210] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 281.987924][ T7210] usb 6-1: unable to get BOS descriptor or descriptor too short [ 281.999833][ T7210] usb 6-1: config 13 has an invalid interface number: 50 but max is 3 [ 282.009529][ T7210] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 282.028716][ T7210] usb 6-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 282.039115][ T7210] usb 6-1: config 13 has no interface number 0 [ 282.053838][ T7210] usb 6-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 282.071222][ T7210] usb 6-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.094479][ T7210] usb 6-1: config 13 interface 50 has no altsetting 0 [ 282.188536][ T7210] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 282.199005][ T7210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.213396][ T7210] usb 6-1: Product: syz [ 282.225302][ T7210] usb 6-1: Manufacturer: syz [ 282.230728][ T7210] usb 6-1: SerialNumber: syz [ 282.630605][ T7210] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 282.644526][ T75] usb 6-1: Failed to submit usb control message: -71 [ 282.680724][ T75] usb 6-1: unable to send the bmi data to the device: -71 [ 282.693403][ T7210] usb 6-1: USB disconnect, device number 18 [ 282.742657][ T75] usb 6-1: unable to get target info from device [ 282.749049][ T75] usb 6-1: could not get target info (-71) [ 282.755960][ T75] usb 6-1: could not probe fw (-71) [ 283.434206][ T5935] usb 5-1: USB disconnect, device number 39 [ 283.835644][ T8766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.846648][ T8789] IPv6: addrconf: prefix option has invalid lifetime [ 284.112470][ T5991] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 284.174658][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 284.274057][ T5991] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 284.285048][ T5991] usb 6-1: config 0 has no interface number 0 [ 284.294625][ T5991] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 284.311788][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.376140][ T5991] usb 6-1: Product: syz [ 284.402634][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 284.412676][ T5991] usb 6-1: Manufacturer: syz [ 284.426435][ T5991] usb 6-1: SerialNumber: syz [ 284.486019][ T5991] usb 6-1: config 0 descriptor?? [ 284.533280][ T5991] hub 6-1:0.217: bad descriptor, ignoring hub [ 284.559011][ T5991] hub 6-1:0.217: probe with driver hub failed with error -5 [ 284.569356][ T24] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 284.581156][ T24] usb 5-1: config 0 has no interface number 0 [ 284.602023][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 284.611210][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.621939][ T24] usb 5-1: Product: syz [ 284.629545][ T24] usb 5-1: Manufacturer: syz [ 284.879953][ T5991] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 284.894750][ T24] usb 5-1: SerialNumber: syz [ 284.910780][ T24] usb 5-1: config 0 descriptor?? [ 284.916954][ T5991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.927129][ T5991] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 284.936951][ T24] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 284.949210][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 284.956096][ T5991] usb 6-1: media controller created [ 284.962421][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 284.982490][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 284.988428][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.021483][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.128387][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 285.361744][ T24] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 285.589805][ T24] usb 5-1: USB disconnect, device number 40 [ 285.731747][ T5991] DVB: Unable to find symbol dib7000p_attach() [ 285.741095][ T5991] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 285.849758][ T8836] bridge_slave_0: left allmulticast mode [ 285.855943][ T8836] bridge_slave_0: left promiscuous mode [ 285.861921][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.918555][ T8836] bridge_slave_1: left allmulticast mode [ 285.924363][ T5991] rc_core: IR keymap rc-dib0700-rc5 not found [ 285.930657][ T5991] Registered IR keymap rc-empty [ 285.951080][ T5991] dvb-usb: could not initialize remote control. [ 285.959225][ T8836] bridge_slave_1: left promiscuous mode [ 285.968763][ T5991] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 285.989592][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.030452][ T5991] usb 6-1: USB disconnect, device number 19 [ 286.216524][ T8845] loop5: detected capacity change from 0 to 7 [ 286.234215][ T5991] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 286.261587][ T8845] Dev loop5: unable to read RDB block 7 [ 286.270123][ T8845] loop5: unable to read partition table [ 286.300499][ T8845] loop5: partition table beyond EOD, truncated [ 286.316483][ T8836] .`: (slave bond_slave_0): Releasing backup interface [ 286.365175][ T8845] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.376461][ T8836] .`: (slave bond_slave_1): Releasing backup interface [ 286.423199][ T8836] team0: Port device team_slave_0 removed [ 286.524405][ T8836] team0: Port device team_slave_1 removed [ 286.569573][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.589982][ T8836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.678035][ T8836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.723837][ T8836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.831143][ T5866] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 286.841812][ T5991] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 286.984280][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.002554][ T5991] usb 6-1: device descriptor read/64, error -71 [ 287.003365][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 287.312210][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.320741][ T5866] usb 5-1: Product: syz [ 287.333178][ T8856] fuse: Unknown parameter '@' [ 287.344682][ T5866] usb 5-1: Manufacturer: syz [ 287.360577][ T5866] usb 5-1: SerialNumber: syz [ 287.376774][ T5991] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 287.523462][ T5991] usb 6-1: device descriptor read/64, error -71 [ 287.652913][ T5991] usb usb6-port1: attempt power cycle [ 287.829015][ T5866] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 287.837237][ T5866] cdc_ncm 5-1:1.0: bind() failure [ 287.890284][ T5866] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 287.911809][ T5866] cdc_ncm 5-1:1.1: bind() failure [ 288.032437][ T5991] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 288.076138][ T5991] usb 6-1: device descriptor read/8, error -71 [ 288.337915][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 288.337932][ T30] audit: type=1326 audit(1759011090.299:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.380110][ T30] audit: type=1326 audit(1759011090.299:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.403100][ T30] audit: type=1326 audit(1759011090.299:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.425936][ T30] audit: type=1326 audit(1759011090.299:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.467909][ T5991] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 288.505802][ T5991] usb 6-1: device descriptor read/8, error -71 [ 288.560966][ T30] audit: type=1326 audit(1759011090.299:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.679734][ T5991] usb usb6-port1: unable to enumerate USB device [ 288.702637][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 288.711957][ T8873] IPVS: lc: FWM 3 0x00000003 - no destination available [ 288.734351][ T30] audit: type=1326 audit(1759011090.299:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.736108][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 288.790826][ T30] audit: type=1326 audit(1759011090.379:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.824890][ T30] audit: type=1326 audit(1759011090.379:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.852667][ T30] audit: type=1326 audit(1759011090.409:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 288.972506][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 289.008498][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 289.090631][ T30] audit: type=1326 audit(1759011090.409:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227958eec9 code=0x7ffc0000 [ 289.120677][ T24] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 289.690838][ T24] usb 1-1: config 0 has no interface number 0 [ 289.706244][ T24] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.851648][ T7210] usb 5-1: USB disconnect, device number 41 [ 289.882834][ T24] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 289.898268][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.931567][ T24] usb 1-1: Product: syz [ 289.989498][ T24] usb 1-1: Manufacturer: syz [ 290.018516][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.086599][ T24] usb 1-1: SerialNumber: syz [ 290.149499][ T24] usb 1-1: config 0 descriptor?? [ 291.633294][ T5948] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 292.295007][ T5948] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.310834][ T5948] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 292.416341][ T5948] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 292.424031][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.456840][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.682310][ T24] kvaser_usb 1-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 292.772972][ T24] usb 1-1: USB disconnect, device number 38 [ 292.781904][ T8904] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.932940][ T5948] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.934567][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 293.381998][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 293.425930][ T7210] usb 5-1: USB disconnect, device number 42 [ 293.507277][ T8934] netlink: 'syz.0.755': attribute type 7 has an invalid length. [ 293.571682][ T8934] netlink: 'syz.0.755': attribute type 8 has an invalid length. [ 293.607726][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 294.132456][ T5866] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 294.288229][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 294.299916][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 294.361049][ T5866] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 294.387905][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.412678][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 294.445553][ T5866] usb 2-1: Product: syz [ 294.462769][ T5866] usb 2-1: Manufacturer: syz [ 294.475917][ T5866] usb 2-1: SerialNumber: syz [ 294.522065][ T5866] usb 2-1: config 0 descriptor?? [ 294.608269][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 294.633439][ T24] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 294.701192][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.743335][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.747738][ T5866] powermate: unknown product id 0240 [ 294.762446][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.790813][ T24] usb 6-1: Product: syz [ 294.806566][ T24] usb 6-1: Manufacturer: syz [ 294.811280][ T5866] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 294.818618][ T24] usb 6-1: SerialNumber: syz [ 294.899959][ T5866] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 294.974664][ C0] powermate: config urb returned -71 [ 294.980103][ C0] powermate: config urb returned -71 [ 294.985861][ C0] powermate: config urb returned -71 [ 294.991253][ C0] powermate: config urb returned -71 [ 295.043831][ T5866] usb 2-1: USB disconnect, device number 57 [ 295.049839][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 295.082638][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.114331][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.227947][ T24] usb 6-1: 0:2 : does not exist [ 295.336603][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 295.477770][ T24] usb 6-1: USB disconnect, device number 24 [ 295.601678][ T6356] udevd[6356]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.073432][ T63] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 296.388586][ T8972] netlink: 'syz.4.761': attribute type 2 has an invalid length. [ 296.682081][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 296.694358][ T63] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 296.764166][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.828028][ T63] usb 1-1: config 0 descriptor?? [ 296.859118][ T8967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.282477][ T63] usbhid 1-1:0.0: can't add hid device: -71 [ 297.308924][ T63] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.332634][ T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 297.375303][ T63] usb 1-1: USB disconnect, device number 39 [ 297.495048][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.515218][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.579164][ T8987] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 297.585676][ T8987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.595129][ T8987] vhci_hcd vhci_hcd.0: Device attached [ 297.625376][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 297.843646][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.858352][ T24] usb 6-1: config 0 descriptor?? [ 297.962490][ T5928] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 298.032641][ T63] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 298.108026][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 298.127979][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 298.183549][ T24] usb 6-1: USB disconnect, device number 25 [ 298.204422][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 298.236306][ T63] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 298.277038][ T63] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 298.306939][ T8988] vhci_hcd: connection reset by peer [ 298.318682][ T63] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 298.331234][ T63] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 298.352443][ T63] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.365619][ T63] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 298.382698][ T63] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 298.391590][ T3568] vhci_hcd: stop threads [ 298.391954][ T63] usb 1-1: Product: syz [ 298.397529][ T3568] vhci_hcd: release socket [ 298.407963][ T63] usb 1-1: Manufacturer: syz [ 298.412918][ T63] usb 1-1: SerialNumber: syz [ 298.423080][ T63] usb 1-1: config 0 descriptor?? [ 298.433846][ T63] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 298.444456][ T63] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 298.480067][ T3568] vhci_hcd: disconnect device [ 298.646518][ T9] usb 1-1: USB disconnect, device number 40 [ 298.652560][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 298.679736][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 298.846315][ T8983] ldusb: No device or device unplugged -19 [ 299.000679][ T9002] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 299.382442][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 299.556730][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.567940][ T5948] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 299.609479][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.624592][ T9014] netlink: 'syz.4.778': attribute type 21 has an invalid length. [ 299.642445][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.661321][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 299.671047][ T9] usb 3-1: config 0 descriptor?? [ 299.734541][ T5948] usb 2-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.747957][ T5948] usb 2-1: config 1 interface 0 has no altsetting 0 [ 299.757625][ T5948] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 299.767299][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.801967][ T5948] usb 2-1: Product: syz [ 299.819650][ T5948] usb 2-1: Manufacturer: syz [ 299.832000][ T5948] usb 2-1: SerialNumber: syz [ 299.926254][ T9007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 300.187385][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 300.187403][ T30] audit: type=1800 audit(1759011102.219:1268): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.777" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 300.348376][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.361353][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.631787][ T63] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 301.785383][ T63] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 301.785410][ T63] usb 6-1: config 0 has no interface number 0 [ 301.785451][ T63] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 301.818551][ T63] usb 6-1: config 0 interface 110 has no altsetting 0 [ 301.829714][ T63] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 301.842435][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.862021][ T63] usb 6-1: Product: syz [ 301.862275][ T63] usb 6-1: Manufacturer: syz [ 301.878587][ T63] usb 6-1: SerialNumber: syz [ 301.888607][ T63] usb 6-1: config 0 descriptor?? [ 301.917134][ T9042] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 302.255234][ T5948] usbhid 2-1:1.0: can't add hid device: -71 [ 302.255353][ T5948] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 302.394293][ T5948] usb 2-1: USB disconnect, device number 58 [ 302.440247][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 302.440356][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 302.443178][ T9] usb 3-1: USB disconnect, device number 55 [ 302.693396][ T9051] tipc: Enabled bearer , priority 0 [ 302.694212][ T9051] syzkaller0: entered promiscuous mode [ 302.694231][ T9051] syzkaller0: entered allmulticast mode [ 302.707568][ T9051] tipc: Resetting bearer [ 303.042793][ T5928] vhci_hcd: vhci_device speed not set [ 303.180993][ T9045] tipc: Resetting bearer [ 303.189532][ T9045] tipc: Disabling bearer [ 304.003912][ T7210] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 304.164662][ T5928] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 304.287507][ T7210] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 304.300204][ T7210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.323442][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 304.329988][ T7210] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 304.341506][ T5928] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 304.353748][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.361991][ T5928] usb 3-1: Product: syz [ 304.367884][ T5928] usb 3-1: Manufacturer: syz [ 304.383114][ T7210] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 304.400063][ T5928] usb 3-1: SerialNumber: syz [ 304.405427][ T7210] usb 2-1: Manufacturer: syz [ 304.431679][ T5928] usb 3-1: config 0 descriptor?? [ 304.432590][ T7210] usb 2-1: config 0 descriptor?? [ 304.461610][ T5928] gspca_main: se401-2.14.0 probing 047d:5003 [ 304.902607][ T7210] rc_core: IR keymap rc-hauppauge not found [ 304.908596][ T7210] Registered IR keymap rc-empty [ 304.923569][ T7210] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 304.946743][ T5928] gspca_se401: Frame size: 115x0 bayer [ 304.957501][ T5928] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.974449][ T5928] gspca_se401: Frame size: 0x0 1/16th janggu [ 304.986686][ T7210] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 305.337928][ T5928] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 305.501260][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.563184][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.574669][ T5928] usb 3-1: USB disconnect, device number 56 [ 305.869571][ T63] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -71 [ 306.051032][ T63] usb 6-1: USB disconnect, device number 26 [ 306.074121][ T5948] usb 2-1: USB disconnect, device number 59 [ 306.862498][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 307.054976][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 307.065791][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 307.074446][ T9] usb 1-1: config 0 has no interface number 0 [ 307.262110][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 307.324479][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.341257][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.452711][ T9] usb 1-1: Product: syz [ 307.456903][ T9] usb 1-1: Manufacturer: syz [ 307.547364][ T9] usb 1-1: SerialNumber: syz [ 307.594867][ T9] usb 1-1: config 0 descriptor?? [ 307.615523][ T9] smsc75xx v1.0.0 [ 308.442575][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 308.655837][ T9123] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.797'. [ 308.660483][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 308.915636][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 308.942468][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 309.012408][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 309.049657][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 309.126313][ T9] usb 1-1: USB disconnect, device number 41 [ 309.718567][ T9136] tipc: Started in network mode [ 309.724568][ T9136] tipc: Node identity 080211000001, cluster identity 4711 [ 309.732940][ T9136] tipc: Enabled bearer , priority 0 [ 309.740529][ T9136] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 309.749926][ T9136] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 309.777097][ T9136] tipc: Resetting bearer [ 309.802481][ T7210] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 309.912574][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 309.969598][ T7210] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 309.987981][ T7210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.020047][ T7210] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 310.039921][ T7210] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.062068][ T7210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.077509][ T7210] usb 1-1: config 0 descriptor?? [ 310.090434][ T7210] pwc: Askey VC010 type 2 USB webcam detected. [ 310.120884][ T9] usb 5-1: config 255 has no interfaces? [ 310.149469][ T9] usb 5-1: string descriptor 0 read error: -22 [ 310.176247][ T9] usb 5-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=94.de [ 310.186501][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.436481][ T9] usb 5-1: USB disconnect, device number 43 [ 310.496244][ T7210] pwc: recv_control_msg error -32 req 02 val 2b00 [ 310.496909][ T7210] pwc: recv_control_msg error -32 req 02 val 2700 [ 310.497475][ T7210] pwc: recv_control_msg error -32 req 02 val 2c00 [ 310.498040][ T7210] pwc: recv_control_msg error -32 req 04 val 1000 [ 310.498618][ T7210] pwc: recv_control_msg error -32 req 04 val 1300 [ 310.499205][ T7210] pwc: recv_control_msg error -32 req 04 val 1400 [ 310.501805][ T7210] pwc: recv_control_msg error -32 req 02 val 2000 [ 310.503027][ T7210] pwc: recv_control_msg error -32 req 02 val 2100 [ 310.504495][ T7210] pwc: recv_control_msg error -32 req 04 val 1500 [ 310.505085][ T7210] pwc: recv_control_msg error -32 req 02 val 2500 [ 310.511679][ T7210] pwc: recv_control_msg error -32 req 02 val 2400 [ 310.612470][ T7210] pwc: recv_control_msg error -32 req 02 val 2600 [ 310.615156][ T7210] pwc: recv_control_msg error -32 req 02 val 2900 [ 310.615870][ T7210] pwc: recv_control_msg error -32 req 02 val 2800 [ 310.832662][ T24] tipc: Node number set to 134418688 [ 311.442546][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 311.443680][ T7210] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.455014][ T7210] pwc: Registered as video103. [ 311.457998][ T7210] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 311.465664][ T7210] usb 1-1: USB disconnect, device number 42 [ 311.653361][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 311.665694][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 311.665736][ T24] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 311.665762][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.679774][ T24] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 311.679800][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.679819][ T24] usb 5-1: Product: syz [ 311.679832][ T24] usb 5-1: Manufacturer: syz [ 311.679845][ T24] usb 5-1: SerialNumber: syz [ 311.686080][ T24] usb 5-1: config 0 descriptor?? [ 311.690991][ T24] usb 5-1: cannot find UAC_HEADER [ 311.816040][ T24] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 311.897216][ T7210] usb 5-1: USB disconnect, device number 44 [ 311.917258][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.339867][ T9153] bridge0: port 3(syz_tun) entered blocking state [ 312.339993][ T9153] bridge0: port 3(syz_tun) entered disabled state [ 312.340213][ T9153] syz_tun: entered allmulticast mode [ 312.342060][ T9153] syz_tun: entered promiscuous mode [ 312.350890][ T9153] bridge0: port 3(syz_tun) entered blocking state [ 312.351017][ T9153] bridge0: port 3(syz_tun) entered forwarding state [ 312.852579][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 312.882450][ T7210] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 313.004337][ T9] usb 3-1: New USB device found, idVendor=28fd, idProduct=0855, bcdDevice= 0.00 [ 313.004367][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.007186][ T9] usb 3-1: config 0 descriptor?? [ 313.054736][ T7210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.054768][ T7210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.054805][ T7210] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 313.054826][ T7210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.069776][ T7210] usb 6-1: config 0 descriptor?? [ 313.222702][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 313.382565][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 313.405249][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 313.413683][ T24] usb 1-1: config 0 has no interface number 0 [ 313.419796][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 313.439117][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 313.535888][ T9158] netlink: 'syz.2.814': attribute type 7 has an invalid length. [ 313.550170][ T9158] netlink: 'syz.2.814': attribute type 8 has an invalid length. [ 313.796708][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.801893][ T9] hid-generic 0003:28FD:0855.000B: unbalanced collection at end of report description [ 313.818201][ T7210] logitech 0003:046D:C29C.000C: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 313.836423][ T24] usb 1-1: Product: syz [ 313.837487][ T9] hid-generic 0003:28FD:0855.000B: probe with driver hid-generic failed with error -22 [ 313.871226][ T24] usb 1-1: Manufacturer: syz [ 313.891734][ T24] usb 1-1: SerialNumber: syz [ 313.902427][ T7210] logitech 0003:046D:C29C.000C: no inputs found [ 313.996420][ T24] usb 1-1: config 0 descriptor?? [ 314.060919][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.064444][ T7210] usb 6-1: USB disconnect, device number 27 [ 314.079446][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.142878][ T24] smsc75xx v1.0.0 [ 314.228435][ T5948] usb 3-1: USB disconnect, device number 57 [ 314.502674][ T9180] tipc: Enabling of bearer rejected, already enabled [ 314.707898][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 314.750067][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 315.687531][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.670375][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 316.686702][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 316.716914][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 316.727188][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 316.736648][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 316.771487][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 316.801624][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 316.832406][ T7210] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 316.877428][ T24] usb 1-1: USB disconnect, device number 43 [ 317.014196][ T7210] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.024008][ T7210] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.035710][ T7210] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.045058][ T7210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.067335][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073805][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.085712][ T7210] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.095241][ T7210] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.103676][ T7210] usb 3-1: Product: syz [ 317.112545][ T7210] usb 3-1: Manufacturer: syz [ 317.124503][ T7210] cdc_wdm 3-1:1.0: skipping garbage [ 317.130329][ T7210] cdc_wdm 3-1:1.0: skipping garbage [ 317.137170][ T7210] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.364481][ T7210] usb 3-1: USB disconnect, device number 58 [ 319.823028][ T7210] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 319.897823][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.944062][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.985541][ T7210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.997781][ T7210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.016070][ T7210] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.032572][ T7210] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.048233][ T7210] usb 2-1: config 1 interface 0 has no altsetting 0 [ 320.091118][ T7210] usb 2-1: config 1 interface 0 has no altsetting 1 [ 320.103477][ T7210] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 320.114115][ T7210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.122132][ T7210] usb 2-1: Product: syz [ 320.126632][ T63] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 320.136477][ T7210] usb 2-1: Manufacturer: syz [ 320.141343][ T7210] usb 2-1: SerialNumber: syz [ 320.232612][ T5948] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 320.292575][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 320.300186][ T63] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 320.308722][ T63] usb 1-1: config 0 has no interface number 0 [ 320.318494][ T63] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 320.340292][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.372838][ T5948] usb 6-1: device descriptor read/64, error -71 [ 320.412972][ T7210] smsusb:smsusb_probe: board id=8, interface number 0 [ 320.427042][ T7210] usb 2-1: selecting invalid altsetting 0 [ 320.439165][ T7210] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 320.459514][ T63] usb 1-1: Product: syz [ 320.468841][ T7210] smsusb 2-1:1.0: probe with driver smsusb failed with error -22 [ 320.480264][ T63] usb 1-1: Manufacturer: syz [ 320.497447][ T63] usb 1-1: SerialNumber: syz [ 320.504305][ T7210] usb 2-1: USB disconnect, device number 60 [ 320.527124][ T63] usb 1-1: config 0 descriptor?? [ 320.563548][ T63] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 320.657720][ T9250] loop2: detected capacity change from 0 to 7 [ 320.671329][ T6356] Dev loop2: unable to read RDB block 7 [ 320.682463][ T6356] loop2: unable to read partition table [ 320.699548][ T6356] loop2: partition table beyond EOD, truncated [ 320.706103][ T5948] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 320.724200][ T9250] Dev loop2: unable to read RDB block 7 [ 320.740098][ T9250] loop2: unable to read partition table [ 320.749999][ T9250] loop2: partition table beyond EOD, truncated [ 320.761238][ T63] usb 1-1: qt2_attach - failed to power on unit: -71 [ 320.772249][ T63] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 320.782541][ T9250] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.798079][ T63] usb 1-1: USB disconnect, device number 44 [ 320.824713][ T5236] Dev loop2: unable to read RDB block 7 [ 320.830318][ T5236] loop2: unable to read partition table [ 320.842451][ T5948] usb 6-1: device descriptor read/64, error -71 [ 320.857511][ T5236] loop2: partition table beyond EOD, truncated [ 320.955333][ T5948] usb usb6-port1: attempt power cycle [ 321.030186][ T9252] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 321.454296][ T5948] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 321.503627][ T5948] usb 6-1: device descriptor read/8, error -71 [ 321.537330][ T9258] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 321.543953][ T9258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 321.630583][ T9258] vhci_hcd vhci_hcd.0: Device attached [ 321.752653][ T5948] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 321.790256][ T9266] vhci_hcd: connection closed [ 321.790831][ T8577] vhci_hcd: stop threads [ 321.813564][ T5948] usb 6-1: device descriptor read/8, error -71 [ 321.984728][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 321.991101][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 322.022440][ T8577] vhci_hcd: release socket [ 322.029383][ T8577] vhci_hcd: disconnect device [ 322.123035][ T5948] usb usb6-port1: unable to enumerate USB device [ 323.196398][ T9289] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 323.251334][ T9289] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.282469][ T7210] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 324.118744][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 324.211810][ T9306] vlan2: entered allmulticast mode [ 324.892174][ T9317] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 324.900312][ T9317] netlink: 'syz.0.853': attribute type 2 has an invalid length. [ 324.909055][ T9317] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.853'. [ 324.925554][ T9321] loop5: detected capacity change from 0 to 7 [ 324.954855][ T9321] Dev loop5: unable to read RDB block 7 [ 324.960472][ T9321] loop5: unable to read partition table [ 325.146968][ T9321] loop5: partition table beyond EOD, truncated [ 325.170655][ T9321] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.322404][ T5991] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 326.589797][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 326.599259][ T5991] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 326.608013][ T5991] usb 2-1: config 0 has no interface number 0 [ 326.612986][ T9346] ptrace attach of "./syz-executor exec"[7152] was attempted by "./syz-executor exec"[9346] [ 326.662473][ T5991] usb 2-1: config 0 interface 161 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 326.715920][ T5991] usb 2-1: config 0 interface 161 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 326.756346][ T5991] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 326.767171][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.777267][ T9346] dns_resolver: Unsupported server list version (0) [ 326.944153][ T5991] usb 2-1: Product: syz [ 326.984433][ T5991] usb 2-1: Manufacturer: syz [ 327.006135][ T5991] usb 2-1: SerialNumber: syz [ 327.057979][ T9] usb 38-1: device descriptor read/8, error -110 [ 327.058938][ T5991] usb 2-1: config 0 descriptor?? [ 327.089205][ T9339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.098105][ T9339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.659507][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.689047][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.735430][ T5991] pl2303 2-1:0.161: required interrupt-in endpoint missing [ 327.763677][ T9] usb usb38-port1: attempt power cycle [ 327.804987][ T5991] usb 2-1: USB disconnect, device number 61 [ 328.363715][ T9] usb usb38-port1: unable to enumerate USB device [ 329.392436][ T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 329.555442][ T9] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 329.578669][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 329.648013][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 329.815588][ T9] usb 6-1: config 8 has no interface number 0 [ 329.959446][ T9] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 330.001070][ T9] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.224606][ T9] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 330.239849][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.268741][ T9] usb 6-1: Product: syz [ 330.273608][ T9] usb 6-1: Manufacturer: syz [ 330.278220][ T9] usb 6-1: SerialNumber: syz [ 330.557232][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 330.692302][ T9] usb 6-1: USB disconnect, device number 33 [ 330.752520][ T5991] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 330.915822][ T5991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.926205][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 330.939311][ T5991] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.961877][ T5991] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 330.971180][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.979644][ T5991] usb 5-1: Product: syz [ 330.986989][ T5991] usb 5-1: Manufacturer: syz [ 331.002701][ T5991] usb 5-1: SerialNumber: syz [ 331.010042][ T5991] usb 5-1: config 0 descriptor?? [ 331.024953][ T5991] usb 5-1: ucan: probing device on interface #0 [ 331.031567][ T5991] usb 5-1: ucan: invalid EP count (1) [ 331.041375][ T5991] usb 5-1: ucan: probe failed; try to update the device firmware [ 332.318149][ T9372] veth0_to_bond: left allmulticast mode [ 332.941479][ T8580] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.961497][ T8580] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.979029][ T8580] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.998467][ T8580] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.258527][ T9400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.282582][ T5948] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 333.323207][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 333.429997][ T5928] usb 5-1: USB disconnect, device number 45 [ 333.453001][ T9] usb 3-1: device descriptor read/64, error -71 [ 333.461355][ T5948] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.640572][ T5948] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.657508][ T5948] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.668006][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.722401][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 333.790233][ T5948] usb 6-1: Product: syz [ 333.796230][ T5948] usb 6-1: Manufacturer: syz [ 333.805503][ T5948] usb 6-1: SerialNumber: syz [ 333.902610][ T9] usb 3-1: device descriptor read/64, error -71 [ 334.026491][ T9] usb usb3-port1: attempt power cycle [ 334.045128][ T5948] usb 6-1: 0:2 : does not exist [ 334.062898][ T5948] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 334.105205][ T5948] usb 6-1: USB disconnect, device number 34 [ 334.180755][ T6356] udevd[6356]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.544829][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 334.607846][ T9] usb 3-1: device descriptor read/8, error -71 [ 334.873638][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 334.920617][ T9] usb 3-1: device descriptor read/8, error -71 [ 335.034050][ T9] usb usb3-port1: unable to enumerate USB device [ 335.182561][ T5928] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 335.222526][ T63] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 335.312486][ T5928] usb 6-1: device descriptor read/64, error -71 [ 335.361273][ T9426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.882'. [ 335.384614][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.882'. [ 335.476850][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 335.484332][ T63] usb 2-1: config 1 has an invalid interface number: 6 but max is 0 [ 335.502425][ T63] usb 2-1: config 1 has no interface number 0 [ 335.533750][ T63] usb 2-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 335.543230][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.572505][ T5928] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 335.589876][ T63] usb 2-1: Product: syz [ 335.594900][ T63] usb 2-1: Manufacturer: syz [ 335.601734][ T63] usb 2-1: SerialNumber: syz [ 335.772685][ T5928] usb 6-1: device descriptor read/64, error -71 [ 335.819650][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.915560][ T5928] usb usb6-port1: attempt power cycle [ 335.943255][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.060153][ T63] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 336.078075][ T63] visor 2-1:1.6: Handspring Visor / Palm OS converter detected [ 336.112248][ T63] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 336.145705][ T63] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 336.170898][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 336.182005][ T9438] netlink: 'syz.0.884': attribute type 11 has an invalid length. [ 336.209263][ T63] usb 2-1: USB disconnect, device number 62 [ 336.238662][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 336.249363][ T9438] netlink: 'syz.0.884': attribute type 11 has an invalid length. [ 336.264274][ T2943] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.287813][ T63] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 336.305119][ T63] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 336.318499][ T63] visor 2-1:1.6: device disconnected [ 336.321223][ T2943] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.363494][ T2943] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.372777][ T5928] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 336.437772][ T2943] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.468167][ T5928] usb 6-1: device descriptor read/8, error -71 [ 336.472461][ T5991] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 336.922427][ T5991] usb 3-1: Using ep0 maxpacket: 16 [ 336.937936][ T5991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.942479][ T5928] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 336.952372][ T5991] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.977197][ T5991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.998313][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.040133][ T5991] usb 3-1: Product: syz [ 337.057860][ T5991] usb 3-1: Manufacturer: syz [ 337.063113][ T5928] usb 6-1: device descriptor read/8, error -71 [ 337.068549][ T5991] usb 3-1: SerialNumber: syz [ 337.172793][ T5928] usb usb6-port1: unable to enumerate USB device [ 337.182569][ T63] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 337.306612][ T5991] usb 3-1: 0:2 : does not exist [ 337.353460][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 337.371934][ T63] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 337.382082][ T5991] usb 3-1: USB disconnect, device number 63 [ 337.402431][ T63] usb 2-1: config 0 has no interface number 0 [ 337.411155][ T63] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 337.440058][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.491944][ T63] usb 2-1: Product: syz [ 337.514452][ T63] usb 2-1: Manufacturer: syz [ 337.528998][ T63] usb 2-1: SerialNumber: syz [ 337.634602][ T63] usb 2-1: config 0 descriptor?? [ 337.653336][ T63] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 337.860084][ T63] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 337.862578][ T5928] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 337.880063][ T63] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 338.039334][ T5928] usb 1-1: device descriptor read/64, error -71 [ 338.063477][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.072175][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.083302][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 24 [ 338.332532][ T5928] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 338.381378][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 338.389462][ T5991] usb 2-1: USB disconnect, device number 63 [ 338.406602][ T5991] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 338.456454][ T5991] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 338.472705][ T5928] usb 1-1: device descriptor read/64, error -71 [ 338.498770][ T5991] quatech2 2-1:0.51: device disconnected [ 338.603842][ T5928] usb usb1-port1: attempt power cycle [ 338.619436][ T9469] netlink: 'syz.4.895': attribute type 4 has an invalid length. [ 338.647521][ T9469] netlink: 128 bytes leftover after parsing attributes in process `syz.4.895'. [ 338.957075][ T5928] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 338.993590][ T5928] usb 1-1: device descriptor read/8, error -71 [ 339.302547][ T5928] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 339.325918][ T5928] usb 1-1: device descriptor read/8, error -71 [ 339.582296][ T5928] usb usb1-port1: unable to enumerate USB device [ 339.949734][ T9493] loop5: detected capacity change from 0 to 7 [ 339.963529][ T9493] Dev loop5: unable to read RDB block 7 [ 340.013410][ T9493] loop5: unable to read partition table [ 340.042895][ T9493] loop5: partition table beyond EOD, truncated [ 340.068797][ T9493] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.135802][ T5236] Dev loop5: unable to read RDB block 7 [ 340.141511][ T5236] loop5: unable to read partition table [ 340.155035][ T5236] loop5: partition table beyond EOD, truncated [ 341.202458][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 341.242984][ T63] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 341.361549][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.381096][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.401394][ T9] usb 2-1: Product: syz [ 341.419224][ T9] usb 2-1: Manufacturer: syz [ 341.438262][ T63] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.448208][ T63] usb 6-1: config 0 has no interface number 0 [ 341.490455][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 341.499441][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 341.512751][ T9] usb 2-1: SerialNumber: syz [ 341.518673][ T9524] netlink: 'syz.4.910': attribute type 14 has an invalid length. [ 341.702627][ T63] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 341.717592][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.986586][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 342.062447][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 342.082256][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 342.132616][ T63] usb 6-1: Product: syz [ 342.151933][ T63] usb 6-1: Manufacturer: syz [ 342.157901][ T63] usb 6-1: SerialNumber: syz [ 342.274511][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 342.286926][ T63] usb 6-1: config 0 descriptor?? [ 342.309157][ T9] usb 2-1: USB disconnect, device number 64 [ 342.613089][ T63] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 342.707388][ T63] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.737665][ T63] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 342.767870][ T63] usb 6-1: media controller created [ 342.808594][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.821806][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.862262][ T63] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.862527][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.972790][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.108461][ T30] audit: type=1326 audit(1759011145.139:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.5.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda5dd8eec9 code=0x0 [ 343.164103][ T9535] loop5: detected capacity change from 0 to 7 [ 343.171413][ T9535] Dev loop5: unable to read RDB block 7 [ 343.197452][ T9535] loop5: unable to read partition table [ 343.219934][ T9535] loop5: partition table beyond EOD, truncated [ 343.472380][ T9535] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.532553][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 343.749826][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.946072][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.961759][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.006623][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.024828][ T63] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 344.174586][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 344.357399][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.406118][ T24] usb 2-1: config 0 descriptor?? [ 344.682542][ T5948] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 344.753573][ T63] usb 6-1: USB disconnect, device number 39 [ 344.942957][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 345.012454][ T5948] usb 5-1: device descriptor read/64, error -71 [ 345.021846][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 345.252390][ T5948] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 345.393955][ T5948] usb 5-1: device descriptor read/64, error -71 [ 345.514399][ T5948] usb usb5-port1: attempt power cycle [ 345.524432][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.919'. [ 346.002424][ T5948] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 346.035072][ T5948] usb 5-1: device descriptor read/8, error -71 [ 346.332589][ T5948] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 346.364499][ T5948] usb 5-1: device descriptor read/8, error -71 [ 346.483783][ T5948] usb usb5-port1: unable to enumerate USB device [ 346.601894][ T24] usb 2-1: USB disconnect, device number 65 [ 347.322160][ T9593] loop5: detected capacity change from 0 to 7 [ 347.368022][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 347.394402][ T9593] Dev loop5: unable to read RDB block 7 [ 347.448274][ T9593] loop5: unable to read partition table [ 347.472639][ T9593] loop5: partition table beyond EOD, truncated [ 347.479858][ T9593] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 347.542494][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 347.552651][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 347.590372][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 347.662579][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.765167][ T24] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 347.812824][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.861461][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 347.882474][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.954945][ T24] usb 2-1: config 0 descriptor?? [ 348.002533][ T63] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 348.428897][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.440991][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.452566][ T63] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 348.465042][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.5.927'. [ 348.482442][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.734154][ T63] usb 5-1: config 0 descriptor?? [ 348.859851][ T24] logitech-djreceiver 0003:046D:C53A.000E: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 349.018411][ T9608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.044405][ T24] usb 2-1: USB disconnect, device number 66 [ 349.097529][ T9612] fido_id[9612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 349.292126][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 349.308495][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.327605][ T63] usb 5-1: USB disconnect, device number 50 [ 349.726330][ T9621] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 349.788676][ T9621] macvlan1: entered allmulticast mode [ 349.796702][ T9621] veth1_vlan: entered allmulticast mode [ 349.875073][ T9621] team0: Port device macvlan1 added [ 350.790731][ T9634] loop5: detected capacity change from 0 to 7 [ 351.029849][ T9634] Dev loop5: unable to read RDB block 7 [ 351.140371][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.211028][ T9634] loop5: unable to read partition table [ 351.230331][ T9634] loop5: partition table beyond EOD, truncated [ 351.312043][ T9634] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 353.477463][ T9669] netlink: 'syz.1.945': attribute type 5 has an invalid length. [ 354.562454][ T5948] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 354.712455][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 354.719079][ T5948] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 354.737851][ T5948] usb 5-1: config 0 has no interface number 0 [ 354.762559][ T5948] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.780073][ T5948] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 354.803095][ T5948] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.824551][ T5948] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.841005][ T5948] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 354.851394][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.898621][ T5948] usb 5-1: config 0 descriptor?? [ 354.929082][ T5948] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 355.022636][ T7210] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 355.052211][ T9679] loop5: detected capacity change from 0 to 7 [ 355.072145][ T6356] Dev loop5: unable to read RDB block 7 [ 355.112484][ T6356] loop5: unable to read partition table [ 355.118605][ T6356] loop5: partition table beyond EOD, truncated [ 355.157661][ T9679] Dev loop5: unable to read RDB block 7 [ 355.194064][ T7210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.227748][ T9679] loop5: unable to read partition table [ 355.238111][ T7210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.238144][ T7210] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 355.238157][ T7210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.245092][ T7210] usb 3-1: config 0 descriptor?? [ 355.287154][ T9679] loop5: partition table beyond EOD, truncated [ 355.287181][ T9679] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.760070][ T9692] netlink: 'syz.5.952': attribute type 12 has an invalid length. [ 355.984319][ T7210] hid-led 0003:27B8:01ED.000F: probe with driver hid-led failed with error -71 [ 355.998965][ T7210] usb 3-1: USB disconnect, device number 64 [ 356.922500][ T5948] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 357.085305][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.201066][ T5948] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 357.461269][ T9699] hub 9-0:1.0: USB hub found [ 357.467240][ T9699] hub 9-0:1.0: 1 port detected [ 357.569697][ T5948] usb 3-1: can't read configurations, error -71 [ 357.701186][ T7210] usb 5-1: USB disconnect, device number 51 [ 357.712910][ T7210] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 359.187998][ T9722] netlink: 1 bytes leftover after parsing attributes in process `syz.4.959'. [ 359.229712][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 359.242689][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 359.258896][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 360.342751][ T5948] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 360.552603][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 360.559210][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 360.583292][ T5948] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 360.594732][ T5948] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 360.603296][ T5948] usb 1-1: Product: syz [ 360.607542][ T5948] usb 1-1: Manufacturer: syz [ 360.612143][ T5948] usb 1-1: SerialNumber: syz [ 360.752394][ T7210] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 360.837390][ T5948] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 360.881500][ T5948] usb 1-1: Handspring Visor / Palm OS: port 100, is for unknown use [ 360.920404][ T5948] usb 1-1: Handspring Visor / Palm OS: port 96, is for Remote File System use [ 360.938392][ T5948] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 360.968613][ T7210] usb 3-1: Using ep0 maxpacket: 8 [ 360.983201][ T7210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 361.008981][ T7210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.067199][ T5948] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 361.107849][ T5948] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 361.152666][ T5948] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 361.189671][ T9773] ------------[ cut here ]------------ [ 361.196393][ T9773] WARNING: CPU: 1 PID: 9773 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 361.205080][ T9773] Modules linked in: [ 361.209182][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 361.218459][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.228568][ T9773] RIP: 0010:path_noexec+0x1af/0x200 [ 361.233812][ T9773] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 361.253428][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.259566][ T9773] RSP: 0018:ffffc9000453fbd8 EFLAGS: 00010287 [ 361.259778][ T5948] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 361.265691][ T9773] RAX: ffffffff8235dc1e RBX: ffff888030099580 RCX: 0000000000080000 [ 361.265779][ T9773] RDX: ffffc900122aa000 RSI: 0000000000000071 RDI: 0000000000000072 [ 361.265794][ T9773] RBP: 0000000000080000 R08: ffff88801df71e00 R09: 0000000000000003 [ 361.265808][ T9773] R10: 0000000000000003 R11: 0000000000000002 R12: 000000000400c013 [ 361.265821][ T9773] R13: 1ffff920008a7f90 R14: 0000000000000000 R15: dffffc0000000000 [ 361.265835][ T9773] FS: 00007fc63e6266c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 361.282949][ T5948] usb 1-1: USB disconnect, device number 49 [ 361.290252][ T9773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.337444][ T9773] CR2: 000000110c3adf21 CR3: 000000002d36a000 CR4: 00000000003526f0 [ 361.345501][ T9773] Call Trace: [ 361.348786][ T9773] [ 361.351724][ T9773] do_mmap+0xa43/0x10d0 [ 361.355971][ T9773] ? __pfx_do_mmap+0x10/0x10 [ 361.360574][ T9773] ? down_write_killable+0x178/0x230 [ 361.365922][ T9773] ? __pfx_down_write_killable+0x10/0x10 [ 361.371590][ T9773] ? common_file_perm+0x1b5/0x230 [ 361.376745][ T9773] vm_mmap_pgoff+0x2a6/0x4d0 [ 361.381357][ T9773] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 361.384291][ T5948] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 361.386516][ T9773] ? __fget_files+0x2a/0x420 [ 361.402044][ T9773] ? __fget_files+0x3a0/0x420 [ 361.406801][ T9773] ? __fget_files+0x2a/0x420 [ 361.411411][ T9773] ksys_mmap_pgoff+0x51f/0x760 [ 361.416231][ T9773] do_syscall_64+0xfa/0x3b0 [ 361.420770][ T9773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.426894][ T9773] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 361.432562][ T9773] ? clear_bhb_loop+0x60/0xb0 [ 361.437274][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.443212][ T9773] RIP: 0033:0x7fc63d78eec9 [ 361.447633][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.449487][ T5948] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 361.467417][ T9773] RSP: 002b:00007fc63e626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 361.467446][ T9773] RAX: ffffffffffffffda RBX: 00007fc63d9e6270 RCX: 00007fc63d78eec9 [ 361.467463][ T9773] RDX: 000000000200000c RSI: 0000000000001000 RDI: 0000200000ffc000 [ 361.467477][ T9773] RBP: 00007fc63d811f91 R08: 000000000000000b R09: 00000000000ed000 [ 361.467491][ T9773] R10: 000000000400c013 R11: 0000000000000246 R12: 0000000000000000 [ 361.467505][ T9773] R13: 00007fc63d9e6308 R14: 00007fc63d9e6270 R15: 00007fc63db0fa28 [ 361.467539][ T9773] [ 361.467550][ T9773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 361.467565][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 361.467586][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.467597][ T9773] Call Trace: [ 361.467605][ T9773] [ 361.467613][ T9773] dump_stack_lvl+0x99/0x250 [ 361.467638][ T9773] ? __asan_memcpy+0x40/0x70 [ 361.467661][ T9773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.467684][ T9773] ? __pfx__printk+0x10/0x10 [ 361.467722][ T9773] vpanic+0x281/0x750 [ 361.467743][ T9773] ? __pfx__printk+0x10/0x10 [ 361.467767][ T9773] ? __pfx_vpanic+0x10/0x10 [ 361.467788][ T9773] ? is_bpf_text_address+0x292/0x2b0 [ 361.467827][ T9773] panic+0xb9/0xc0 [ 361.467848][ T9773] ? __pfx_panic+0x10/0x10 [ 361.467899][ T9773] __warn+0x31b/0x4b0 [ 361.467918][ T9773] ? path_noexec+0x1af/0x200 [ 361.467941][ T9773] ? path_noexec+0x1af/0x200 [ 361.467961][ T9773] report_bug+0x2be/0x4f0 [ 361.467979][ T9773] ? path_noexec+0x1af/0x200 [ 361.467998][ T9773] ? path_noexec+0x1af/0x200 [ 361.468017][ T9773] ? path_noexec+0x1b1/0x200 [ 361.468038][ T9773] handle_bug+0x84/0x160 [ 361.468062][ T9773] exc_invalid_op+0x1a/0x50 [ 361.468084][ T9773] asm_exc_invalid_op+0x1a/0x20 [ 361.468101][ T9773] RIP: 0010:path_noexec+0x1af/0x200 [ 361.468122][ T9773] Code: 02 31 ff 48 89 de e8 d0 e3 89 ff d1 eb eb 07 e8 e7 de 89 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 08 90 47 09 cc e8 d2 de 89 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 361.468138][ T9773] RSP: 0018:ffffc9000453fbd8 EFLAGS: 00010287 [ 361.468153][ T9773] RAX: ffffffff8235dc1e RBX: ffff888030099580 RCX: 0000000000080000 [ 361.468167][ T9773] RDX: ffffc900122aa000 RSI: 0000000000000071 RDI: 0000000000000072 [ 361.468180][ T9773] RBP: 0000000000080000 R08: ffff88801df71e00 R09: 0000000000000003 [ 361.468193][ T9773] R10: 0000000000000003 R11: 0000000000000002 R12: 000000000400c013 [ 361.468205][ T9773] R13: 1ffff920008a7f90 R14: 0000000000000000 R15: dffffc0000000000 [ 361.468226][ T9773] ? path_noexec+0x1ae/0x200 [ 361.468253][ T9773] ? path_noexec+0x1ae/0x200 [ 361.468276][ T9773] do_mmap+0xa43/0x10d0 [ 361.468309][ T9773] ? __pfx_do_mmap+0x10/0x10 [ 361.468329][ T9773] ? down_write_killable+0x178/0x230 [ 361.468356][ T9773] ? __pfx_down_write_killable+0x10/0x10 [ 361.468376][ T9773] ? common_file_perm+0x1b5/0x230 [ 361.468403][ T9773] vm_mmap_pgoff+0x2a6/0x4d0 [ 361.468433][ T9773] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 361.468457][ T9773] ? __fget_files+0x2a/0x420 [ 361.468478][ T9773] ? __fget_files+0x3a0/0x420 [ 361.468494][ T9773] ? __fget_files+0x2a/0x420 [ 361.468515][ T9773] ksys_mmap_pgoff+0x51f/0x760 [ 361.468545][ T9773] do_syscall_64+0xfa/0x3b0 [ 361.468567][ T9773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.468585][ T9773] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 361.468603][ T9773] ? clear_bhb_loop+0x60/0xb0 [ 361.468625][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.468643][ T9773] RIP: 0033:0x7fc63d78eec9 [ 361.468660][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.468676][ T9773] RSP: 002b:00007fc63e626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 361.468696][ T9773] RAX: ffffffffffffffda RBX: 00007fc63d9e6270 RCX: 00007fc63d78eec9 [ 361.468710][ T9773] RDX: 000000000200000c RSI: 0000000000001000 RDI: 0000200000ffc000 [ 361.468723][ T9773] RBP: 00007fc63d811f91 R08: 000000000000000b R09: 00000000000ed000 [ 361.468735][ T9773] R10: 000000000400c013 R11: 0000000000000246 R12: 0000000000000000 [ 361.468747][ T9773] R13: 00007fc63d9e6308 R14: 00007fc63d9e6270 R15: 00007fc63db0fa28 [ 361.468778][ T9773] [ 361.477568][ T9773] Kernel Offset: disabled