last executing test programs: 2m24.99791684s ago: executing program 4 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000006c0)=""/66) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x19, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x0, 0x30, 0xb6, {0xb6, 0x30, "ad539abc081735151a80ee0de39af5f71324d561af4d365a5220deca1522889c6d1202abd4d7d7caf5f3939cfdc260afa87375d6b9dd6be63ab458265499a942cfa06ce8020acb572dd4ba99899c892e16fc2c8b8bf3da284f279d8f04498617747b19afbb52bcc39f6182ddf5f93533f4a38f20b7f18149001a620461972e03bc40ce76c74bff11d39f5a3950c9c97be95568a8955e851fda3afa52c0c2a6706f36ccc28fb0f8f4df0cd6a95322a01f3a18bd59"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0x8, "e40a665c"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x4, "c9d76228"}, @global=@item_012={0x2, 0x1, 0x5, "c9f9"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xaae}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x20, 0x15, 0x42, "302b5f889cf5c04eabe0113f6ad22b3de48705b46ab8d264cd598e61a341deace85f65177ea037928254935d4a684c771146009d0107eccef08b959610c841477843"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000540)={0x20, 0x1, 0x4c, "84a182a218eeb0bd6069fa751d526fc4357ffdf16cc04c72c2ea16561ac6895a01b7ee9842ed7b0cc174bade8b01914f2c4b9dece95c21e8630bd6fc6d84984496d722eea1294bddd562a491"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendto$inet6(r0, &(0x7f0000001180)=',', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback={0xffe0}, 0x2}, 0x1c) 2m22.022385053s ago: executing program 4 (id=1057): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x7000000, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) 2m22.022135857s ago: executing program 4 (id=1058): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffa3, 0xfa00, {0x200000, 0x0, 0x111, 0x5}}, 0xff92) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r1}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2e89, 0x30}, 0xc) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x400, 0x2, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x2, 0x5}}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 2m21.993726505s ago: executing program 4 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0xf5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) fsopen(0x0, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x6, 0x0, &(0x7f0000000100)) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) 2m20.735027584s ago: executing program 4 (id=1067): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) mmap(&(0x7f0000f77000/0x4000)=nil, 0x4000, 0x3, 0x110, 0xffffffffffffffff, 0xe5c70000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) syz_usb_connect(0x6, 0x5f, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x15ce, 0x8, 0x3, 0x50040733}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@l2={0x1f, 0xfbff, @any, 0x5f3, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], 0x1460}, 0x0, 0x40c4, 0x1}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0x0, 0x10001, 0x0}) 2m20.585778654s ago: executing program 4 (id=1069): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffa3, 0xfa00, {0x200000, 0x0, 0x111, 0x5}}, 0xff92) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r1}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2e89, 0x30}, 0xc) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x400, 0x2, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x2, 0x5}}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 2m20.396872923s ago: executing program 32 (id=1069): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffa3, 0xfa00, {0x200000, 0x0, 0x111, 0x5}}, 0xff92) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r1}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2e89, 0x30}, 0xc) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x400, 0x2, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x2, 0x5}}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 9.567068152s ago: executing program 2 (id=1672): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x7, r6, 0xa, 0x80) ptrace$getregset(0x4204, r6, 0x6, &(0x7f0000000140)={&(0x7f0000002280)=""/237, 0xed}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 8.205718972s ago: executing program 2 (id=1677): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000002020102000000000000000001000003080009000000000404000380"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2c, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffdb7}, 0x4040) madvise(&(0x7f0000191000/0x1000)=nil, 0x1000, 0xe) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1000000001, 0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000004d564b000000000900000000"]) r10 = io_uring_setup(0x8e, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x1, 0x0, 0x0, r5}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e00"/12, @ANYBLOB="b3"], 0x20) 4.948551254s ago: executing program 2 (id=1690): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d02, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10060, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f00000002c0)='./file0/../file0\x00', 0x800, 0xd00}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="8000dcfa2eb0077223b8c5dd23ae192666f732dc820e2e2fbfb8d35c8b942422045d44c75c92c2667839ec189b94ef6b110c9dd623511e4db56d5154a38686cab14e6a5b5878364efc4cd4430000000000000000000000000000197abf3b1c2e6b617e366169c4ec5ae9d8a30de4e88467ccc932507ca6c5a104b7dc3c90f15e78503bb772bf2c86d835287b8a76f893044c52d28d283b7dc1e4ef448f6e35be22f6b3cfd1f0badae19ac065f13ecc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00140000000078bde1e3663d692f9cd942e6b18956e36dd1580d1f5185e2a9df76d8ba2dd5561c87cd9adaa9a65cd56faad429f04eb6"], 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xac58}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xf9}, 0x0, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x1, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.270761707s ago: executing program 0 (id=1692): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x2) write(r3, &(0x7f0000000240)="94", 0x1) tee(r2, r7, 0x8f5, 0x100000000000000) read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020) write(r4, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000001000370429bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c040000000000180012800e000100776972656775617264"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 3.850093908s ago: executing program 0 (id=1693): timer_create(0x4, &(0x7f0000000000), &(0x7f00000000c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0xab84, 0x2, 0x0, 0xffffffffffffffff, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) shutdown(r1, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000200)={0x6a8, r5, 0x801, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x24, 0x9, 0x6, 0x12, 0x12, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x800, 0x1, 0xfa8e, 0x1, 0xfff8, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x5}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x1}, {0x1}, {0x4, 0x6}, {0x4}, {0x5}, {0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x1}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x1b, 0x16, 0x36, 0x24, 0x30, 0x30, 0x6, 0x6c, 0x18, 0x0, 0x48, 0x12, 0x24, 0x9, 0x6c, 0x12, 0x3, 0x2]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x2}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4, 0x6, 0x1b, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xee5b, 0x9, 0xdea3, 0xfffc, 0x8, 0x3, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x2}, {0x1}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x4, 0x7}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x8}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x8001, 0x5, 0x3, 0x8, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3af3, 0x1, 0x5, 0x7c, 0x4, 0xffff, 0xcba, 0x7]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x8}, {0x6}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x3}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x3ff, 0xbcd, 0x9, 0x0, 0xfff9, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff97, 0x100, 0x7, 0x4, 0x4, 0x4, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x3, 0x2, 0x180, 0x9, 0x7fff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x9, 0x1ff, 0x3, 0x0, 0x0, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x3, 0x16, 0x1b, 0x5, 0x6c, 0x30, 0x30, 0x1b, 0xc, 0x33, 0xc, 0x6, 0x9, 0x5, 0x1, 0x9, 0x0, 0x24, 0x1b, 0x9, 0x24, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x8, 0x1, 0x8, 0x5, 0x8, 0x400]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x3}, {0x2, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x9, 0x0, 0xba8, 0x3ddc, 0x3c3, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1990, 0x85c, 0x1, 0x2, 0x8, 0xcadc, 0xfeff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x0, 0x2, 0x6b, 0x60, 0x5, 0x48, 0x9, 0x5, 0xb, 0x36, 0x1, 0xc, 0x3, 0x1b, 0x18, 0x6, 0xb, 0x16, 0x48, 0x5, 0x9, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0x2}, {0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4800, 0xa, 0x4, 0x5, 0x4, 0x3, 0xfffd, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x6, 0x4, 0xa, 0x357e, 0x95d, 0x7f, 0xc]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x6}, {0x3, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x9, 0x2, 0x5, 0xe, 0x0, 0xdbe4]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x6}, {0x3, 0x4}, {0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x7}, {0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x1}, {0x5, 0x2}, {0x4, 0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x5, 0x2, 0xb, 0x36, 0x8f, 0x24, 0x6c, 0x32, 0x14]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x1, 0x4, 0x1, 0x6c, 0x48, 0x3, 0x12, 0x6c, 0x24, 0xb, 0x36, 0x2]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x30, 0x60, 0x60, 0x24, 0x6c, 0x9, 0x4, 0x5, 0x30, 0x30, 0x6c, 0x9, 0x2, 0x1, 0x1, 0x4, 0x36, 0x12, 0x16, 0xc, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x80, 0xffff, 0x1, 0x4, 0x200, 0x1, 0x2b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xf, 0xba, 0x2, 0x6, 0x80, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87e9, 0x1, 0x8, 0x7, 0x0, 0x3, 0xfff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x4, 0xe, 0x97e9, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe879, 0x9, 0xfffa, 0x3, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x3}, {0x6, 0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x6, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x3, 0x8}, {0x4, 0x8}, {0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x4, 0x18}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x9, 0x26, 0x5, 0x8, 0x1, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x5, 0xfe, 0x8, 0xd, 0x982, 0x72]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x24, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x9}, {0x1, 0x1}, {0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x4}, {0x7}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd799, 0xff, 0x7, 0x6, 0xd, 0x9, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x7}, {0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x1}, {0x7}, {0x6, 0x6}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x1}, {0x7, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0x5}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x1}, {0x0, 0x8}, {0x0, 0x5}, {}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x4}, {0x4}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x3, 0x60, 0x6c, 0x36, 0xb, 0x4, 0x48, 0x1b, 0x9, 0x60, 0x60, 0x36, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3566, 0xf, 0x6, 0x9, 0x1355, 0x9, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff6, 0x81, 0xf, 0x1, 0x5]}}]}]}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380000000001010400000000000000000200000024001b"], 0x38}}, 0x20000882) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 3.666574186s ago: executing program 0 (id=1695): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x7, "51dd8a44a02f2b218387fda78cfc9b5019277b3c347bf29d1cb0f7f01d29b765", 0x2}) 3.629114428s ago: executing program 0 (id=1696): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x402ff}]}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0xdb4, 0x10000002}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) 3.611838932s ago: executing program 1 (id=1697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x0, 0x10000, 0x1, {0x4, 0x0, 0x581, 0x4, 0x6, 0x2}, {0x86, 0x1, 0x3, 0xd, 0x6}, 0x10001, 0x8, 0x2d4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x43, 0x7, 0x3, 0x55, 0x9, 0xc, 0x81, 0x5, 0x81, 0x80000001, 0x9, 0x8, 0x7, 0x1640, 0x8000, 0x4, 0xa4, 0x9, 0x4, 0x6, 0x405, 0x8, 0x5, 0x6, 0xa95, 0x7, 0x5, 0xff, 0x4, 0xffff, 0x2, 0xe88, 0x1, 0x6, 0x85, 0x9, 0x2, 0x4, 0x8, 0x4, 0x1, 0x7, 0x1, 0x100, 0x9, 0x6, 0x101, 0x6, 0x2, 0x3, 0x2, 0x7f, 0x400, 0x1, 0x9, 0xf0000000, 0x7, 0x2, 0xffffffff, 0xffffffff, 0x7f, 0x2, 0x4, 0x1, 0x6, 0x6, 0x5, 0x1ff, 0x81, 0x5e6, 0x6f00, 0x5, 0x8, 0x9a6, 0x5, 0x4, 0x10, 0x3, 0x7f, 0x6, 0x8, 0x1, 0xaf, 0x81, 0x4, 0x3, 0x8, 0x2, 0x1, 0x1, 0x4, 0x7, 0x0, 0x1, 0xfffffffa, 0xee, 0x101, 0x3, 0x9, 0x10000, 0x1, 0x80000001, 0xffff, 0x1, 0x1, 0x7fff, 0x5, 0xfffffffc, 0x0, 0x9, 0x6, 0x10000, 0x1a13, 0x6, 0x10, 0x6, 0x7, 0x1, 0x444, 0x3, 0xfffffff1, 0x7fffffff, 0x42, 0x7, 0x6, 0x3, 0xe085ebab, 0x1, 0x3ff, 0x8, 0x8, 0x7, 0xe000, 0xd740, 0x3, 0x4, 0x10000, 0x2, 0x7c778187, 0x90, 0x80, 0x8001, 0x3, 0xa, 0xc7, 0x6, 0x9, 0x1, 0x7, 0xfffffffa, 0x3, 0x3000000, 0x7, 0x3, 0xe5, 0x8000, 0x8f9e, 0x7, 0xd6, 0x3, 0x5, 0x401, 0x100, 0x9, 0x101, 0x1, 0x100, 0x0, 0xfffffa1c, 0x6, 0x1, 0xffffffff, 0x900000, 0x2, 0xc6b, 0x2, 0x207, 0x7, 0x8, 0x8, 0x0, 0xffff, 0x9, 0x2, 0x4, 0x3, 0xffffffff, 0x65, 0x3, 0x77a45713, 0x0, 0x38000000, 0x1, 0x5, 0xfffffbce, 0x0, 0x9, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x2, 0x3, 0x9, 0x8, 0x9, 0x6, 0x4, 0x6, 0x5, 0x1, 0x80, 0x7, 0x5, 0x3, 0x2, 0x1000, 0x9d, 0x8000, 0x3dc, 0x400, 0x8001, 0x7, 0xed, 0x0, 0x0, 0x4, 0xcae, 0x401, 0x9, 0x9, 0x5, 0x2, 0x8000, 0x7, 0x3, 0x401, 0x8001, 0x10000, 0x5, 0x8fa, 0x0, 0x0, 0x9, 0x2, 0x9e8, 0xeb, 0x3, 0x8, 0x28c, 0x9, 0x80000001, 0x3, 0x2]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.504706193s ago: executing program 1 (id=1699): msgctl$MSG_STAT(0x0, 0xb, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x44}}, 0x20040004) 3.346572864s ago: executing program 1 (id=1701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.346404736s ago: executing program 3 (id=1702): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x48081) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x7, 0x6, 0x1, 0x9}}, &(0x7f0000000040)=0xb0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 3.346243229s ago: executing program 1 (id=1703): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f00000003c0)={0xa, 0x100, 0x0, {0x80000004, 0x1, 0x2, 0x7}}) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) capget(0x0, &(0x7f0000000180)={0xe, 0x5, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) 3.340930427s ago: executing program 3 (id=1704): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x44814) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x10) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x80000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) pipe2$watch_queue(&(0x7f0000001100), 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.781209628s ago: executing program 5 (id=1707): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x7, "51dd8a44a02f2b218387fda78cfc9b5019277b3c347bf29d1cb0f7f01d29b765", 0x2}) 2.631102124s ago: executing program 5 (id=1708): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)) unshare(0x20000400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) 2.498608244s ago: executing program 5 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3b340000}}, './file0\x00'}) connect$qrtr(r1, &(0x7f0000000100)={0x2a, 0x3, 0xfffffffe}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000007600000024001280090001007866726d0000000014000280080001000400000008000200020000000a00020000000000000000000a000100aa"], 0x5c}}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x4, @vbi={0x2, 0x2, 0x2e, 0x55595659, [0x8, 0x5], [0x10000, 0xffff], 0x1}}) 2.350859974s ago: executing program 5 (id=1710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000000940)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0xfcff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x2, 0x0, &(0x7f0000000380)="1a07"}) 2.244021433s ago: executing program 5 (id=1711): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 1.8265041s ago: executing program 1 (id=1712): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 1.822710355s ago: executing program 2 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.77080109s ago: executing program 3 (id=1714): r0 = socket(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0xe0140, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) 1.706425955s ago: executing program 2 (id=1715): userfaultfd(0x801) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef529800"], 0x0) syz_usb_disconnect(r1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)=@multiplanar_overlay={0xf52, 0x5, 0x4, 0x2, 0xab, {r4, r5/1000+60000}, {0x1, 0x0, 0x8, 0x6, 0x4, 0x2, "b67b445e"}, 0x5, 0x3, {&(0x7f0000000100)=[{0x7, 0x0, {0x9}, 0x5}, {0x3ff, 0x6, {}, 0x5}]}, 0x2da4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r6, 0x2, &(0x7f00000001c0)={&(0x7f0000001080)="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", 0x200}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0xb, @pix_mp={0xd, 0xfffffffe, 0x32314d4e, 0x2, 0x3, [{0x5, 0x1}, {0x1cd34a49, 0x4}, {0x8519, 0x4}, {0x10001, 0xe6}, {0x8, 0x2}, {0x400, 0x80000000}, {0x1, 0x2}, {0x3, 0x2}], 0x3, 0x6, 0xf, 0x2, 0x4}}) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) pselect6(0x40, &(0x7f0000000080)={0x283, 0x4, 0xf, 0x7, 0x1000, 0x7, 0x0, 0x1000000080}, &(0x7f00000000c0)={0x38, 0x8, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 1.65674694s ago: executing program 3 (id=1716): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)={0xffff1000, 0x3000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000200001000000000000000000020000009d00fbffffff00000c00144000000000000000000500130001"], 0x30}}, 0x0) r6 = dup3(r4, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r8, 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0x180, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.644390863s ago: executing program 0 (id=1717): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000400)=@ieee802154, &(0x7f0000000380)=0x80, 0x80000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000380)={{@host}, 0x2, 0x800000000000000, 0x1, 0xfffffffa}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.037416288s ago: executing program 3 (id=1718): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x7, "51dd8a44a02f2b218387fda78cfc9b5019277b3c347bf29d1cb0f7f01d29b765", 0x2}) 823.215648ms ago: executing program 3 (id=1719): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x200, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) socket(0x40000000015, 0x5, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r2 = dup(r1) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x5, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x0, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0xffffffff, 0x200003a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x1, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0xc, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 454.472804ms ago: executing program 1 (id=1720): syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001d31ad240f0bb010201002a1ad50a329e4155805f74f838b2e36780022d0003000000000904c50003ff0100ff030286030905870200040b951400000000000000000000000000000437b84eb3a8968730acacf30b2750bbb03e42dbc9e699eea39660a9687cfc1a5b1ac44f29ba4200122bc875658d42f40d9b7ffcab93421f9eb2a1a388533602fb59e07b5a7f22c5f35f011419"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x4, 0x7, 0x1, 0x0, &(0x7f0000000000), 0x102) 394.269644ms ago: executing program 2 (id=1721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x4) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) io_uring_setup(0x2c93, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0x0, 0x9f8}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000004d40)=[{{&(0x7f0000000b00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000b80)=""/86}], 0x0, &(0x7f0000000c00)=""/126}, 0xfffffff8}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000d00)=""/162}, {&(0x7f0000000dc0)=""/4096}, {&(0x7f0000001dc0)=""/223}], 0x0, &(0x7f0000001f00)=""/13}, 0x9}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @dev}, 0x0, &(0x7f0000002080)=[{&(0x7f0000001fc0)=""/67}, {&(0x7f00000026c0)=""/28}]}, 0xfffffffa}, {{&(0x7f00000020c0)=@xdp, 0x0, &(0x7f0000002380)=[{&(0x7f0000002140)=""/203}, {&(0x7f0000002240)=""/239}, {&(0x7f0000002340)=""/17}], 0x0, &(0x7f00000023c0)=""/130}, 0x3}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002480)=""/125}, {&(0x7f0000002500)=""/78}, {&(0x7f0000002580)=""/16}, {&(0x7f00000025c0)=""/226}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/39}], 0x0, &(0x7f00000027c0)=""/120}}, {{&(0x7f0000002840)=@xdp, 0x0, &(0x7f0000003a00)=[{&(0x7f00000028c0)=""/74}, {&(0x7f0000002940)=""/4096}, {&(0x7f0000003940)=""/32}, {&(0x7f0000003980)=""/88}], 0x0, &(0x7f0000005440)=""/4100}}, {{&(0x7f0000004a40)=@xdp, 0x0, &(0x7f0000005380)=[{&(0x7f0000004ac0)=""/62}, {&(0x7f0000004b00)=""/116}, {&(0x7f0000004b80)=""/226}, {&(0x7f0000004c80)=""/91}, {&(0x7f0000004f00)=""/233}, {&(0x7f0000005000)=""/162}, {&(0x7f00000050c0)=""/191}, {&(0x7f0000002040)}, {&(0x7f0000005180)=""/4}, {&(0x7f00000051c0)=""/209}, {&(0x7f00000052c0)=""/158}]}, 0xfff}], 0x70, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) getpgrp(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000"], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r5, 0x47b6, 0x3e80, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ac1414280000000000000000000000000000000033000000fe80000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c00140073686131000a000000000000000000000000e9000000000000000000000000000000000000000000000000254b87ed6425a88c55ed100e54ee6a020100000000000000000000000000760200000000000000000000000000ebcd5a13901ac511de6cfc09a345f269a0ba8f79d2beeeb71638f988c82597bee7b1"], 0x148}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000a80)=[{{&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)='H', 0x1}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x24}}], 0x18}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="deded28ef540752df74a5950604f5badda47d559b1ba090a7cda4ccfdf99ecfb45f58207a91fd994d7f2456b25fb2c9e35a6c4a399ec6f430c18deacde0f1d", 0x3f}, {&(0x7f0000000740)="daa95fe40e2b2d5c02aabf712773e3a2bacfb3436989e5c4f15483bb644582ed83248f119c1b4248983b2f63894793986bcc79d25dbaf20f7303c0", 0x3b}, {&(0x7f0000000900)="07839b3877849ddaec8939864ce9af1eb9919d7798a270503ffa0ec0679fb07394e3a5fbb1e2464cc230e13a609bf45850faaa3e1d2e5cf3b4f48eda7dde1612538a884f16df7f595883be89750b69449f84493c53ae27bbf7207ea898ba412c7c8a16d5d49a6345a44c709eb7d7343a239a4d4dcffcb12c9206891bd2b02faf25fe7e60859b8742b414b6f960da7c9b38dbe15a0e1ae0fcc7678ead3643e5f58270be39763e", 0xa6}, {&(0x7f00000009c0)="c167acdc1018a937118428b11b6a0b7dc6f72fed5fdffe04afb486a00377e4c2dac653b8c9e14c7f74927b24cfa69db451a06c1ca1c2fcf1382355da7675b80c8cff3bba5640242aab6896e4ed837048e74a87db9b13bb29b826f0f5fe9305a36db0856c483c80ecd8190b291a5a3e23fb96d847b024adef0d3e61aa90c9ad032200aa13c9f1f7d8d525885ea94f783aac93f544ee4010", 0x97}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e01016401010200000000140000000000000000000000020000000100000000000000140000000000000000000000070000000000000100000000110000000000000000000000010000000600000000000000110000000000000000000000010000000b00000000000000"], 0x80}}], 0x2, 0x4000000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r9, r8, r0, r9, r0, r8], 0x6) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000300)={&(0x7f0000003a40)=ANY=[@ANYBLOB="2c0000008cbffd1d671b10a75d19abfd589c0e5d91181c09c93739a80e0c511d66ba50df132ae4893520296ec39e5e751209fbd9147c2fa882e10485c3a600662f4e3672e0c83b12137a8cd70e7e03942a15b39d97de353e069e4d4b0b0a27130f5efeef87d8560abc6aa950ef4f49b5361da8aa4b72b595bc017b33809d9fdc7dd91ab779ba5ed41be5dc4345df262b40f6677863369608b08e6bf7c8ab555eb4d44a83b622d2b23424bc8a73dcd3ec203f23", @ANYRES16=r13, @ANYBLOB="0100000000000000e3ff0b000000180005800800010075647000050002"], 0x2c}, 0x1, 0x0, 0x0, 0x44015}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r11, 0x1}, 0x8) 58.66329ms ago: executing program 0 (id=1722): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x20000000, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='0\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$kcm(0x11, 0x3, 0x0) 0s ago: executing program 5 (id=1723): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c000100626974776973650024000280080003400000000408000240000000000800064000000000080001400000002009"], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = fsopen(0x0, 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000040)) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{0x0}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e25, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="41902256", 0x4}, {0x0}], 0x2}}], 0x2, 0x8000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) kernel console output (not intermixed with test programs): 565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.632949][ T5949] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 279.652806][ T5949] usb 2-1: device descriptor read/8, error -71 [ 279.707217][ T9565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.727412][ T9565] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.739787][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.746951][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.760495][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.767643][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.826757][ T9565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.860717][ T9565] veth0_vlan: entered promiscuous mode [ 279.872373][ T9565] veth1_vlan: entered promiscuous mode [ 279.897975][ T9565] veth0_macvtap: entered promiscuous mode [ 279.903927][ T5949] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 279.915702][ T9565] veth1_macvtap: entered promiscuous mode [ 279.933044][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.942523][ T5949] usb 2-1: device descriptor read/8, error -71 [ 279.954575][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.970897][ T3603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.985081][ T3603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.998059][ T3603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.007473][ T5863] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 280.022566][ T3603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.033397][ T5863] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 280.046844][ T5863] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 280.058902][ T5863] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 280.073494][ T5949] usb usb2-port1: unable to enumerate USB device [ 280.114828][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.130343][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.141857][ T1218] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 280.160067][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.169354][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.291568][ T1218] usb 1-1: device descriptor read/64, error -32 [ 280.451351][ T5949] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 280.551750][ T1218] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 280.607603][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1075'. [ 280.676572][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.687767][ T5949] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.697080][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.708221][ T5949] usb 6-1: config 0 descriptor?? [ 280.719277][ T9588] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 280.726996][ T1218] usb 1-1: device descriptor read/64, error -32 [ 280.913865][ T5184] Bluetooth: hci4: command tx timeout [ 280.971225][ T1218] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 280.991570][ T1218] usb 1-1: device descriptor read/8, error -32 [ 281.160687][ T5949] usbhid 6-1:0.0: can't add hid device: -71 [ 281.199783][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 281.460655][ T5949] usb 6-1: USB disconnect, device number 2 [ 281.890028][ T9608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.014566][ T5863] usb 1-1: USB disconnect, device number 33 [ 282.295920][ T9615] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 282.827528][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.836651][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.991412][ T5184] Bluetooth: hci4: command tx timeout [ 283.806523][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.818689][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.931248][ T5863] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 284.102941][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.116859][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.232230][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 284.318542][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.351608][ T5863] usb 2-1: SerialNumber: syz [ 284.395809][ T5863] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 284.549974][ T5863] usb-storage 2-1:1.0: USB Mass Storage device detected [ 284.645018][ T5863] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 284.662440][ T5863] scsi host1: usb-storage 2-1:1.0 [ 285.041284][ T1218] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 285.083878][ T5184] Bluetooth: hci4: command tx timeout [ 285.125373][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.142005][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.201268][ T1218] usb 6-1: Using ep0 maxpacket: 8 [ 285.208662][ T1218] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 285.229537][ T1218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.265944][ T1218] usb 6-1: config 0 has no interface number 0 [ 285.291476][ T1218] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 285.308129][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.338231][ T1218] usb 6-1: Product: syz [ 285.355215][ T1218] usb 6-1: Manufacturer: syz [ 285.374503][ T1218] usb 6-1: SerialNumber: syz [ 285.398941][ T1218] usb 6-1: config 0 descriptor?? [ 285.411694][ T1218] usb 6-1: Found UVC 0.00 device syz (046d:08c3) [ 285.421417][ T1218] usb 6-1: No valid video chain found. [ 285.710595][ T10] usb 6-1: USB disconnect, device number 3 [ 286.750256][ T9703] FAULT_INJECTION: forcing a failure. [ 286.750256][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.765905][ T9703] CPU: 1 UID: 0 PID: 9703 Comm: syz.1.1105 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 286.765939][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.765953][ T9703] Call Trace: [ 286.765962][ T9703] [ 286.765970][ T9703] dump_stack_lvl+0x189/0x250 [ 286.766001][ T9703] ? __pfx____ratelimit+0x10/0x10 [ 286.766030][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.766055][ T9703] ? __pfx__printk+0x10/0x10 [ 286.766083][ T9703] ? __might_fault+0xb0/0x130 [ 286.766113][ T9703] ? vfs_write+0x956/0xb30 [ 286.766142][ T9703] ? rcu_is_watching+0x15/0xb0 [ 286.766165][ T9703] should_fail_ex+0x414/0x560 [ 286.766194][ T9703] _copy_from_user+0x2d/0xb0 [ 286.766219][ T9703] __sys_bind+0x199/0x3e0 [ 286.766249][ T9703] ? __pfx___sys_bind+0x10/0x10 [ 286.766285][ T9703] ? __pfx_ksys_write+0x10/0x10 [ 286.766311][ T9703] ? rcu_is_watching+0x15/0xb0 [ 286.766343][ T9703] __x64_sys_bind+0x7a/0x90 [ 286.766379][ T9703] do_syscall_64+0xfa/0x3b0 [ 286.766411][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.766432][ T9703] ? clear_bhb_loop+0x60/0xb0 [ 286.766455][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.766476][ T9703] RIP: 0033:0x7f662698ebe9 [ 286.766495][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.766515][ T9703] RSP: 002b:00007f6627791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 286.766539][ T9703] RAX: ffffffffffffffda RBX: 00007f6626bb5fa0 RCX: 00007f662698ebe9 [ 286.766556][ T9703] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 286.766571][ T9703] RBP: 00007f6627791090 R08: 0000000000000000 R09: 0000000000000000 [ 286.766584][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.766597][ T9703] R13: 00007f6626bb6038 R14: 00007f6626bb5fa0 R15: 00007f6626cdfa28 [ 286.766621][ T9703] [ 286.992293][ T10] usb 2-1: USB disconnect, device number 38 [ 287.171764][ T5184] Bluetooth: hci4: command tx timeout [ 287.331628][ T5949] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 287.515574][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.555549][ T5949] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 287.694143][ T121] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 287.702157][ T5949] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 287.811575][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.830350][ T5949] usb 6-1: config 0 descriptor?? [ 287.839637][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 287.856362][ T5949] dvb-usb: bulk message failed: -22 (3/0) [ 287.872074][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 287.916650][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 287.951647][ T5949] usb 6-1: media controller created [ 287.958626][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.971676][ T121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.985908][ T121] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 287.995224][ T121] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 288.004088][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 288.009929][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 288.017132][ T121] usb 4-1: Manufacturer: syz [ 288.021921][ T121] usb 4-1: SerialNumber: syz [ 288.033068][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 288.044869][ T121] usb 4-1: config 0 descriptor?? [ 288.052046][ T121] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 288.068425][ T121] usb 4-1: No valid video chain found. [ 288.075357][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 288.098946][ T5949] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 288.251344][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 288.252899][ T44] usb 4-1: USB disconnect, device number 48 [ 288.257126][ T5949] dvb-usb: error while querying for an remote control event. [ 288.297091][ T10] usb 6-1: USB disconnect, device number 4 [ 288.343940][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 288.385507][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1111'. [ 288.411202][ T1218] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 288.488820][ T9731] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 288.498422][ T9731] netlink: 'syz.0.1114': attribute type 29 has an invalid length. [ 288.551210][ T1218] usb 2-1: device descriptor read/64, error -71 [ 288.791554][ T1218] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 288.805761][ T9742] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 288.941549][ T1218] usb 2-1: device descriptor read/64, error -71 [ 289.064565][ T1218] usb usb2-port1: attempt power cycle [ 289.103630][ T9751] bridge1: entered promiscuous mode [ 289.257685][ T9755] netlink: 'syz.5.1122': attribute type 10 has an invalid length. [ 289.267065][ T9755] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1122'. [ 289.276729][ T9755] bond0: entered promiscuous mode [ 289.285998][ T9755] bond_slave_0: entered promiscuous mode [ 289.298345][ T9755] bond_slave_1: entered promiscuous mode [ 289.309217][ T9755] bond0: entered allmulticast mode [ 289.309461][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1123'. [ 289.315117][ T9755] bond_slave_0: entered allmulticast mode [ 289.315137][ T9755] bond_slave_1: entered allmulticast mode [ 289.315419][ T9755] bridge0: port 3(bond0) entered blocking state [ 289.342853][ T9755] bridge0: port 3(bond0) entered disabled state [ 289.353492][ T9755] bridge0: port 3(bond0) entered blocking state [ 289.359884][ T9755] bridge0: port 3(bond0) entered forwarding state [ 289.631555][ T1218] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 289.672812][ T1218] usb 2-1: device descriptor read/8, error -71 [ 289.764863][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.784117][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.810785][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 289.911637][ T1218] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 289.941204][ T10] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 289.942273][ T1218] usb 2-1: device descriptor read/8, error -71 [ 290.021215][ T5949] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 290.063474][ T1218] usb usb2-port1: unable to enumerate USB device [ 290.092623][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 290.104391][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.114843][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 290.125726][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.138346][ T10] usb 1-1: config 0 descriptor?? [ 290.183174][ T5949] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 290.193515][ T5949] usb 6-1: config 150 has no interface number 0 [ 290.199957][ T5949] usb 6-1: config 150 interface 204 has no altsetting 0 [ 290.207128][ T5949] usb 6-1: config 150 interface 1 has no altsetting 0 [ 290.217482][ T5949] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 290.228641][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.231207][ T44] usb 4-1: device descriptor read/64, error -71 [ 290.243966][ T5949] usb 6-1: Product: syz [ 290.248181][ T5949] usb 6-1: Manufacturer: syz [ 290.255440][ T5949] usb 6-1: SerialNumber: syz [ 290.475354][ T5949] xr_serial 6-1:150.204: xr_serial converter detected [ 290.511326][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 290.698067][ T9773] binder: 9758:9773 ioctl c0306201 200000000480 returned -14 [ 290.705627][ T44] usb 4-1: device descriptor read/64, error -71 [ 290.811371][ T44] usb usb4-port1: attempt power cycle [ 291.279913][ T5949] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 291.286464][ T5949] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 291.740511][ T5949] usb 6-1: USB disconnect, device number 5 [ 291.982770][ T44] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 292.297793][ T5949] xr_serial 6-1:150.204: device disconnected [ 292.308308][ T44] usb 4-1: device descriptor read/8, error -71 [ 292.561732][ T44] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 293.194071][ T44] usb 4-1: device descriptor read/8, error -71 [ 293.367293][ T44] usb usb4-port1: unable to enumerate USB device [ 293.504112][ T9793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.520509][ T9793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.691017][ T9798] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 293.855647][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 293.884695][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 293.894491][ T10] usb 1-1: USB disconnect, device number 34 [ 294.140074][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1140'. [ 294.382222][ T9817] sctp: [Deprecated]: syz.2.1142 (pid 9817) Use of int in max_burst socket option. [ 294.382222][ T9817] Use struct sctp_assoc_value instead [ 294.651736][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 294.716235][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.724179][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.731330][ T9821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.903710][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 294.914346][ T9] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 294.925742][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.941301][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.022400][ T5863] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 295.347859][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 295.365714][ T5863] usb 2-1: config 2 has an invalid interface number: 4 but max is 0 [ 295.375863][ T5863] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 295.406754][ T5863] usb 2-1: config 2 has no interface number 0 [ 295.423094][ T44] usb 1-1: USB disconnect, device number 35 [ 295.460380][ T5863] usb 2-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.498348][ T5863] usb 2-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.526234][ T5863] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 295.537651][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.542846][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.547490][ T5863] usb 2-1: Product: syz [ 295.560194][ T5863] usb 2-1: Manufacturer: syz [ 295.567972][ T5863] usb 2-1: SerialNumber: syz [ 295.597102][ T5863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.719190][ T10] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.729907][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.754599][ T5863] snd-usb-audio 2-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 295.772949][ T10] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.835698][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.892904][ T5863] usb 2-1: USB disconnect, device number 43 [ 295.952595][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.971193][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.014683][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.040413][ T10] usb 6-1: invalid MIDI out EP 0 [ 296.239324][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.248405][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.273509][ T9834] binder: BINDER_SET_CONTEXT_MGR already set [ 296.279660][ T9834] binder: 9831:9834 ioctl 4018620d 200000000040 returned -16 [ 296.304234][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 296.733425][ T9844] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 297.101630][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 297.350893][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 297.363386][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.399002][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 297.410388][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.425501][ T10] usb 2-1: Product: syz [ 297.436143][ T10] usb 2-1: Manufacturer: syz [ 297.449009][ T10] usb 2-1: SerialNumber: syz [ 297.457558][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.468718][ T10] usb 2-1: config 0 descriptor?? [ 297.488736][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.490389][ T10] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 297.511607][ T10] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 297.555085][ T9848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.801255][ T5949] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 297.979076][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 298.020186][ T5949] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 298.028539][ T5949] usb 1-1: config 0 has no interface number 0 [ 298.117070][ T5949] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.212876][ T5949] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.242881][ T5949] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 298.254088][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.262391][ T5949] usb 1-1: Product: syz [ 298.271037][ T5949] usb 1-1: Manufacturer: syz [ 298.279353][ T5949] usb 1-1: SerialNumber: syz [ 298.286532][ T5949] usb 1-1: config 0 descriptor?? [ 298.301253][ T5949] appletouch 1-1:0.154: Could not find int-in endpoint [ 298.308463][ T5949] appletouch 1-1:0.154: probe with driver appletouch failed with error -5 [ 298.334458][ T5949] usbhid 1-1:0.154: couldn't find an input interrupt endpoint [ 298.506476][ T5949] usb 1-1: USB disconnect, device number 36 [ 298.761243][ T1218] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 298.969482][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.980695][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.993613][ T1218] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 299.002874][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.029740][ T1218] usb 4-1: config 0 descriptor?? [ 299.404424][ T9] usb 6-1: USB disconnect, device number 6 [ 299.581782][ T5863] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 299.741569][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 299.764009][ T5863] usb 1-1: config 2 has an invalid interface number: 4 but max is 0 [ 299.772394][ T5863] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 299.956576][ T1218] saitek 0003:06A3:0CFA.001A: unknown main item tag 0x0 [ 299.995049][ T5863] usb 1-1: config 2 has no interface number 0 [ 300.008063][ T1218] saitek 0003:06A3:0CFA.001A: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.3-1/input0 [ 300.026438][ T5863] usb 1-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.039819][ T9] usb 2-1: USB disconnect, device number 44 [ 300.046696][ T5863] usb 1-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.133121][ T5863] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 300.155590][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.164103][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.193136][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.223450][ T5863] usb 1-1: Product: syz [ 300.227663][ T5863] usb 1-1: Manufacturer: syz [ 300.247266][ T5863] usb 1-1: SerialNumber: syz [ 300.275759][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.302901][ T5863] snd-usb-audio 1-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 300.327095][ T9894] syz_tun: entered allmulticast mode [ 300.334707][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 300.348649][ T9894] syz_tun (unregistering): left allmulticast mode [ 300.494016][ T5863] usb 1-1: USB disconnect, device number 37 [ 300.548633][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.378470][ T9] usb 4-1: USB disconnect, device number 53 [ 301.544459][ T9911] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 301.557653][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 301.733420][ T1218] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 302.571231][ T1218] usb 1-1: Using ep0 maxpacket: 8 [ 302.585754][ T1218] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 302.635798][ T1218] usb 1-1: config 0 has no interface number 0 [ 302.676381][ T1218] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 302.765232][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1174'. [ 302.829361][ T9928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.880411][ T9913] delete_channel: no stack [ 302.891487][ T1218] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.946729][ T1218] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 302.976772][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.007208][ T1218] usb 1-1: Product: syz [ 303.066743][ T1218] usb 1-1: Manufacturer: syz [ 303.095948][ T1218] usb 1-1: SerialNumber: syz [ 303.123594][ T1218] usb 1-1: config 0 descriptor?? [ 303.133412][ T1218] appletouch 1-1:0.154: Could not find int-in endpoint [ 303.150673][ T1218] appletouch 1-1:0.154: probe with driver appletouch failed with error -5 [ 303.230663][ T1218] usbhid 1-1:0.154: couldn't find an input interrupt endpoint [ 303.430458][ T1218] usb 1-1: USB disconnect, device number 38 [ 303.443609][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.581355][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.177926][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 304.291542][ T1218] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 304.341210][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 304.657153][ T1218] usb 1-1: device descriptor read/64, error -71 [ 304.761575][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 304.768339][ T24] usb 6-1: config 2 has an invalid interface number: 4 but max is 0 [ 304.788512][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 304.813606][ T24] usb 6-1: config 2 has no interface number 0 [ 304.834733][ T24] usb 6-1: config 2 interface 4 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.855871][ T24] usb 6-1: config 2 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.900607][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 304.911254][ T1218] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 304.927741][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.941701][ T24] usb 6-1: Product: syz [ 304.948636][ T24] usb 6-1: Manufacturer: syz [ 304.954832][ T24] usb 6-1: SerialNumber: syz [ 305.050256][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.082078][ T24] snd-usb-audio 6-1:2.4: probe with driver snd-usb-audio failed with error -2 [ 305.101685][ T1218] usb 1-1: device descriptor read/64, error -71 [ 305.138747][ T9966] overlayfs: missing 'lowerdir' [ 305.214372][ T1218] usb usb1-port1: attempt power cycle [ 305.267218][ T24] usb 6-1: USB disconnect, device number 7 [ 305.585259][ T1218] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 305.639746][ T1218] usb 1-1: device descriptor read/8, error -71 [ 305.931312][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 305.938944][ T1218] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 306.151908][ T1218] usb 1-1: device descriptor read/8, error -71 [ 306.263099][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 306.302898][ T1218] usb usb1-port1: unable to enumerate USB device [ 306.332169][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.361931][ T9977] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 306.419697][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.464587][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 306.494365][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.520200][ T24] usb 4-1: config 0 descriptor?? [ 306.891331][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 306.962832][ T9971] No buffer was provided with the request [ 307.085729][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 307.125867][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 307.164626][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.198454][ T9] usb 2-1: config 0 descriptor?? [ 307.218692][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 307.419987][T10000] PKCS7: Unknown OID: [5] (bad) [ 307.474856][T10000] PKCS7: Only support pkcs7_signedData type [ 307.941701][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.095481][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.105638][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 308.127868][ T5863] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 308.215570][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.244871][ T5863] usb 6-1: config 0 descriptor?? [ 308.509537][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 308.509561][ T30] audit: type=1326 audit(1755572804.485:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 308.686498][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 308.699618][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 308.775380][ T24] usb 4-1: USB disconnect, device number 54 [ 308.820914][ T30] audit: type=1326 audit(1755572804.485:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 308.846939][ T9] gspca_sunplus: reg_w_riv err -71 [ 308.851853][ T30] audit: type=1326 audit(1755572804.485:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 308.852850][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 308.990594][ T30] audit: type=1326 audit(1755572804.485:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 309.052729][ T30] audit: type=1326 audit(1755572804.485:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 309.118546][ T9] usb 2-1: USB disconnect, device number 45 [ 309.316607][ T5863] ath6kl: Failed to submit usb control message: -110 [ 309.331603][ T5863] ath6kl: unable to send the bmi data to the device: -110 [ 309.346624][ T5863] ath6kl: Unable to send get target info: -110 [ 309.362391][ T5863] ath6kl: Failed to init ath6kl core: -110 [ 309.378631][ T5863] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 309.390664][ T30] audit: type=1326 audit(1755572805.395:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 309.424187][ T5863] usb 6-1: USB disconnect, device number 8 [ 309.434937][ T30] audit: type=1326 audit(1755572805.425:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.5.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7958ebe9 code=0x7ffc0000 [ 310.804848][T10042] trusted_key: encrypted_key: insufficient parameters specified [ 310.815188][T10042] trusted_key: encrypted_key: insufficient parameters specified [ 310.945887][T10045] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[10045] [ 311.408988][T10035] delete_channel: no stack [ 311.871531][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 312.011404][ T24] usb 6-1: device descriptor read/64, error -71 [ 312.251324][ T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 312.381573][ T24] usb 6-1: device descriptor read/64, error -71 [ 312.491916][ T24] usb usb6-port1: attempt power cycle [ 312.919743][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 313.211771][ T24] usb 6-1: device descriptor read/8, error -71 [ 313.266271][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.273775][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.370414][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.393954][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.451520][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 313.491886][ T24] usb 6-1: device descriptor read/8, error -71 [ 313.512315][T10094] netlink: 'syz.0.1215': attribute type 23 has an invalid length. [ 313.611674][ T24] usb usb6-port1: unable to enumerate USB device [ 314.062185][ T3496] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.168645][ T3496] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.327943][ T3496] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.370662][ T3496] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.616464][T10115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.678243][T10118] FAULT_INJECTION: forcing a failure. [ 314.678243][T10118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.721771][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.1.1220 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 314.721791][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.721813][T10118] Call Trace: [ 314.721818][T10118] [ 314.721823][T10118] dump_stack_lvl+0x189/0x250 [ 314.721843][T10118] ? __pfx____ratelimit+0x10/0x10 [ 314.721861][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.721876][T10118] ? __pfx__printk+0x10/0x10 [ 314.721894][T10118] ? lock_acquire+0x5f/0x360 [ 314.721915][T10118] should_fail_ex+0x414/0x560 [ 314.721933][T10118] prepare_alloc_pages+0x213/0x610 [ 314.721948][T10118] __alloc_frozen_pages_noprof+0x123/0x370 [ 314.721961][T10118] ? arch_stack_walk+0xfc/0x150 [ 314.721977][T10118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 314.721992][T10118] ? policy_nodemask+0x27c/0x720 [ 314.722011][T10118] alloc_pages_mpol+0x232/0x4a0 [ 314.722031][T10118] vma_alloc_folio_noprof+0xe4/0x200 [ 314.722049][T10118] ? sock_kzfree_s+0x28/0x60 [ 314.722062][T10118] ? hash_recvmsg+0x640/0x840 [ 314.722077][T10118] ? sock_recvmsg+0x229/0x270 [ 314.722093][T10118] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 314.722113][T10118] ? rcu_is_watching+0x15/0xb0 [ 314.722126][T10118] ? lock_release+0x4b/0x3e0 [ 314.722144][T10118] folio_prealloc+0x30/0x180 [ 314.722163][T10118] do_wp_page+0x1231/0x5800 [ 314.722185][T10118] ? __pfx_do_wp_page+0x10/0x10 [ 314.722200][T10118] ? do_raw_spin_lock+0x121/0x290 [ 314.722216][T10118] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.722231][T10118] ? ___pte_offset_map+0x45/0x250 [ 314.722250][T10118] __handle_mm_fault+0x1033/0x5440 [ 314.722271][T10118] ? __pfx___handle_mm_fault+0x10/0x10 [ 314.722288][T10118] ? lock_release+0x4b/0x3e0 [ 314.722335][T10118] ? lock_vma_under_rcu+0xdf/0x3d0 [ 314.722355][T10118] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 314.722377][T10118] handle_mm_fault+0x40a/0x8e0 [ 314.722398][T10118] do_user_addr_fault+0xa81/0x1390 [ 314.722422][T10118] ? rcu_is_watching+0x15/0xb0 [ 314.722435][T10118] ? trace_page_fault_user+0x84/0x1e0 [ 314.722457][T10118] exc_page_fault+0x76/0xf0 [ 314.722476][T10118] asm_exc_page_fault+0x26/0x30 [ 314.722489][T10118] RIP: 0033:0x7f6626948735 [ 314.722501][T10118] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 314.722513][T10118] RSP: 002b:00007f662778fde0 EFLAGS: 00010293 [ 314.722526][T10118] RAX: 0000000000000008 RBX: 00007f66276e7d60 RCX: 0000000000000000 [ 314.722535][T10118] RDX: 0000000000000000 RSI: 00007f6626a4f95e RDI: 00007f66276e7d60 [ 314.722544][T10118] RBP: 00007f662778ff00 R08: 0000000000000000 R09: 0000000000000005 [ 314.722553][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6626a4f500 [ 314.722562][T10118] R13: 0000000000000016 R14: 00007f6626b87460 R15: 0000000000000000 [ 314.722576][T10118] [ 314.724743][T10118] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 315.635253][T10090] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 315.694276][T10134] veth3: entered promiscuous mode [ 315.804371][T10090] usb 2-1: Using ep0 maxpacket: 8 [ 315.851186][T10090] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.874484][T10090] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 315.908175][T10090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.939655][T10090] usb 2-1: config 0 descriptor?? [ 316.080292][T10148] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 316.416859][T10090] kye 0003:0458:4018.001B: invalid report_count 49033 [ 316.423841][T10090] kye 0003:0458:4018.001B: item 0 2 1 9 parsing failed [ 316.453830][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.467228][T10090] kye 0003:0458:4018.001B: parse failed [ 316.487376][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.563888][T10090] kye 0003:0458:4018.001B: probe with driver kye failed with error -22 [ 316.615854][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.625875][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.689838][T10090] usb 2-1: USB disconnect, device number 46 [ 317.205911][T10164] binder: BINDER_SET_CONTEXT_MGR already set [ 317.212165][T10164] binder: 10163:10164 ioctl 4018620d 200000000040 returned -16 [ 317.234931][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 317.237667][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.255375][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.318065][T10090] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 317.555022][T10090] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.568857][T10090] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.590697][T10090] usb 6-1: config 0 interface 0 has no altsetting 0 [ 317.655121][T10090] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 317.688341][T10090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.102147][T10090] usb 6-1: config 0 descriptor?? [ 318.151829][T10174] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 318.690712][T10090] lenovo 0003:17EF:60EE.001C: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 318.793515][T10090] lenovo 0003:17EF:60EE.001C: Failed to switch middle button: -71 [ 318.802616][T10090] lenovo 0003:17EF:60EE.001C: Fn-lock setting failed: -71 [ 318.821576][T10108] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 318.843298][T10090] lenovo 0003:17EF:60EE.001C: Sensitivity setting failed: -71 [ 318.874167][T10090] usb 6-1: USB disconnect, device number 13 [ 318.972078][T10108] usb 4-1: Using ep0 maxpacket: 32 [ 318.979875][T10108] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 318.990602][T10108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.006850][T10108] usb 4-1: config 0 descriptor?? [ 319.023473][T10108] gspca_main: sunplus-2.14.0 probing 041e:400b [ 319.041315][T10105] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 319.179853][T10105] usb 1-1: device descriptor read/64, error -71 [ 319.611946][T10108] gspca_sunplus: reg_w_riv err -110 [ 319.617280][T10108] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 319.765084][T10105] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 319.954240][T10105] usb 1-1: device descriptor read/64, error -71 [ 320.061504][T10105] usb usb1-port1: attempt power cycle [ 320.401626][T10105] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 320.422314][T10105] usb 1-1: device descriptor read/8, error -71 [ 320.440667][T10208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.661240][T10105] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 320.682166][T10105] usb 1-1: device descriptor read/8, error -71 [ 321.166158][T10105] usb usb1-port1: unable to enumerate USB device [ 321.629348][ T30] audit: type=1326 audit(1755572817.635:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 321.665619][T10229] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[10229] [ 321.693544][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.701207][ T30] audit: type=1326 audit(1755572817.635:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 321.772542][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.815835][ T30] audit: type=1326 audit(1755572817.635:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 321.869875][ T30] audit: type=1326 audit(1755572817.645:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 322.188650][T10090] usb 4-1: USB disconnect, device number 55 [ 322.407911][ T30] audit: type=1326 audit(1755572818.415:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 322.481777][ T30] audit: type=1326 audit(1755572818.455:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 322.999301][T10252] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1260'. [ 324.451202][T10105] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 324.641404][T10105] usb 4-1: Using ep0 maxpacket: 8 [ 324.653584][T10105] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 324.662901][T10105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.670953][T10105] usb 4-1: Product: syz [ 324.680533][T10105] usb 4-1: Manufacturer: syz [ 324.797346][T10105] usb 4-1: SerialNumber: syz [ 324.837093][T10105] usb 4-1: config 0 descriptor?? [ 324.955685][T10268] delete_channel: no stack [ 324.973365][T10105] option 4-1:0.0: GSM modem (1-port) converter detected [ 325.154441][T10287] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[10287] [ 325.175471][T10108] usb 4-1: USB disconnect, device number 56 [ 325.182595][T10108] option 4-1:0.0: device disconnected [ 325.436232][T10295] dvmrp0: entered allmulticast mode [ 325.444335][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.453347][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.470664][T10295] dvmrp0: left allmulticast mode [ 325.868783][T10108] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 325.957528][T10305] netlink: 'syz.1.1277': attribute type 27 has an invalid length. [ 325.978172][T10305] netlink: 'syz.1.1277': attribute type 3 has an invalid length. [ 326.012642][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1277'. [ 326.013867][T10309] CIFS: VFS: Malformed UNC in devname [ 326.046069][T10108] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 326.055301][T10108] usb 6-1: config 150 has no interface number 0 [ 326.061879][T10108] usb 6-1: config 150 interface 204 has no altsetting 0 [ 326.070988][T10108] usb 6-1: config 150 interface 1 has no altsetting 0 [ 326.085762][T10108] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 326.095186][T10108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.105262][T10108] usb 6-1: Product: syz [ 326.109525][T10108] usb 6-1: Manufacturer: syz [ 326.114713][T10108] usb 6-1: SerialNumber: syz [ 326.367407][T10108] xr_serial 6-1:150.204: xr_serial converter detected [ 326.662314][T10325] vxcan1: tx address claim with dlc 0 [ 326.960596][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.970438][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.083505][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.092637][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.189318][T10108] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 327.209817][T10108] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 327.362597][T10108] usb 6-1: USB disconnect, device number 14 [ 327.410161][T10108] xr_serial 6-1:150.204: device disconnected [ 327.633310][T10336] netlink: 'syz.0.1286': attribute type 13 has an invalid length. [ 327.715192][T10339] syzkaller0: entered allmulticast mode [ 327.788266][T10341] input: syz1 as /devices/virtual/input/input19 [ 329.592271][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 329.991458][T10105] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 330.037288][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.047230][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.074786][T10385] program syz.2.1303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.175730][T10105] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 330.184335][T10105] usb 4-1: config 150 has no interface number 0 [ 330.193791][T10105] usb 4-1: config 150 interface 204 has no altsetting 0 [ 330.212556][T10105] usb 4-1: config 150 interface 1 has no altsetting 0 [ 330.238343][T10105] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 330.247756][T10105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.663335][T10105] usb 4-1: Product: syz [ 330.680967][T10105] usb 4-1: Manufacturer: syz [ 330.687984][T10105] usb 4-1: SerialNumber: syz [ 330.974785][T10105] xr_serial 4-1:150.204: xr_serial converter detected [ 331.873438][T10105] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 331.879918][T10105] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 332.100747][T10105] usb 4-1: USB disconnect, device number 57 [ 332.102075][T10105] xr_serial 4-1:150.204: device disconnected [ 332.593261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.827719][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 333.171691][ T5863] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 333.343654][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 333.400504][ T5863] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 333.432966][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.502757][ T5863] usb 4-1: config 0 descriptor?? [ 333.722368][ T5863] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 333.864800][T10420] lo: left promiscuous mode [ 333.870051][T10420] tunl0: left promiscuous mode [ 333.876373][T10420] gre0: left promiscuous mode [ 333.966952][T10420] gretap0: left promiscuous mode [ 334.206572][ T5863] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 334.221642][T10420] ip_vti0: left promiscuous mode [ 334.228089][T10420] ip6_vti0: left promiscuous mode [ 334.229210][ T5863] asix 4-1:0.0: probe with driver asix failed with error -61 [ 334.392016][T10434] ptrace attach of "./syz-executor exec"[9565] was attempted by "./syz-executor exec"[10434] [ 334.474485][T10420] sit0: left promiscuous mode [ 334.496562][T10420] ip6tnl0: left promiscuous mode [ 334.557522][T10420] ip6gre0: left promiscuous mode [ 334.572057][T10420] ip6gretap0: left promiscuous mode [ 334.579984][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.587305][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.598000][T10420] bridge0: left promiscuous mode [ 334.644709][T10420] bond0: left promiscuous mode [ 334.650037][T10420] bond_slave_0: left promiscuous mode [ 334.682626][T10420] bond_slave_1: left promiscuous mode [ 334.706186][T10420] team0: left promiscuous mode [ 334.715165][T10420] team_slave_0: left promiscuous mode [ 334.841491][T10420] team_slave_1: left promiscuous mode [ 335.095388][T10420] dummy0: left promiscuous mode [ 335.114562][T10420] nlmon0: left promiscuous mode [ 335.156277][T10420] caif0: left promiscuous mode [ 335.428062][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.444174][T10420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.668785][T10420] tipc: Resetting bearer [ 335.739680][T10090] usb 4-1: USB disconnect, device number 58 [ 335.758551][T10420] bridge1: left promiscuous mode [ 335.842405][T10420] veth3: left promiscuous mode [ 335.930570][ T30] audit: type=1326 audit(1755572831.935:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10445 comm="syz.3.1320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x0 [ 336.002092][ T3496] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.051491][ T3496] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.106774][ T3496] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.145857][ T3496] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.281806][T10455] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[10455] [ 339.350998][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.371515][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.981459][T10105] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 340.193045][T10105] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.249504][T10105] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 340.260585][T10105] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 340.275368][T10105] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.285498][T10105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.334030][T10105] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.497409][T10105] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 340.811880][T10514] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[10514] [ 342.245868][T10535] vxcan1: tx address claim with dlc 0 [ 342.687447][T10090] usb 4-1: USB disconnect, device number 59 [ 342.847863][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1343'. [ 343.041452][T10544] vlan2: entered promiscuous mode [ 343.067840][T10544] syz_tun: entered promiscuous mode [ 343.440520][T10548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.252698][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 344.313915][T10560] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[10560] [ 344.349099][T10562] ptrace attach of "./syz-executor exec"[9565] was attempted by "./syz-executor exec"[10562] [ 344.954500][T10569] binder_alloc: 10568: binder_alloc_buf, no vma [ 345.292317][T10587] kernel profiling enabled (shift: 9) [ 345.309761][T10587] bridge_slave_0: left allmulticast mode [ 345.319795][T10587] bridge_slave_0: left promiscuous mode [ 345.328320][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.393942][T10587] bridge_slave_1: left allmulticast mode [ 345.401646][T10587] bridge_slave_1: left promiscuous mode [ 345.407500][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.448442][T10587] bond0: (slave bond_slave_0): Releasing backup interface [ 345.474602][T10587] bond0: (slave bond_slave_1): Releasing backup interface [ 345.495562][T10587] team0: Port device team_slave_0 removed [ 345.510746][T10587] team0: Port device team_slave_1 removed [ 345.520214][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.528232][T10587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.538901][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.552378][T10587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.702975][T10594] pim6reg: entered allmulticast mode [ 346.099879][T10582] pim6reg: left allmulticast mode [ 346.904805][T10604] fuse: Bad value for 'fd' [ 347.847501][T10634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1370'. [ 347.911582][T10090] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 348.064670][T10636] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[10636] [ 348.090078][T10090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.259578][T10090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.289828][T10090] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.342278][T10090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.479431][T10090] usb 6-1: config 0 descriptor?? [ 348.622921][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.637515][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.741475][ T1218] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 348.905976][ T1218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 348.918827][ T1218] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 348.933009][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.962298][ T1218] usb 2-1: config 0 descriptor?? [ 348.970794][T10645] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 349.389325][ T1218] usbhid 2-1:0.0: can't add hid device: -71 [ 349.396101][ T1218] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 349.409165][ T1218] usb 2-1: USB disconnect, device number 47 [ 349.531677][ T5863] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 349.653882][T10659] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[10659] [ 349.767624][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 349.777977][ T5863] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 349.922659][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.010558][ T5863] usb 4-1: Product: syz [ 350.015972][ T5863] usb 4-1: Manufacturer: syz [ 350.033549][ T5863] usb 4-1: SerialNumber: syz [ 350.084367][ T5863] usb 4-1: config 0 descriptor?? [ 350.104628][ T5863] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 350.317298][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 350.694578][T10090] usbhid 6-1:0.0: can't add hid device: -71 [ 350.701833][T10090] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 350.726380][T10090] usb 6-1: USB disconnect, device number 15 [ 351.152127][T10108] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 351.515712][T10108] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.531186][T10108] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 351.701065][T10108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 351.728445][T10108] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.772465][T10108] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 351.784276][T10108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.808524][T10108] usb 2-1: Product: syz [ 351.848742][T10108] usb 2-1: Manufacturer: syz [ 351.859604][T10108] usb 2-1: SerialNumber: syz [ 351.866446][T10108] usb 2-1: config 0 descriptor?? [ 352.438192][ T5957] usb 2-1: USB disconnect, device number 48 [ 352.588370][ T30] audit: type=1326 audit(1755572848.595:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.618354][T10657] binder: 10656:10657 ioctl c0306201 2000000001c0 returned -22 [ 352.654922][ T30] audit: type=1326 audit(1755572848.595:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.682008][ T5863] gspca_sonixj: reg_w1 err -71 [ 352.691327][ T30] audit: type=1326 audit(1755572848.595:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.739576][ T30] audit: type=1326 audit(1755572848.625:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.766373][ T5863] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 352.775906][ T5863] usb 4-1: USB disconnect, device number 60 [ 352.798353][ T30] audit: type=1326 audit(1755572848.625:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.828458][T10700] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[10700] [ 352.843431][ T30] audit: type=1326 audit(1755572848.625:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.868942][ T30] audit: type=1326 audit(1755572848.625:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.895137][ T30] audit: type=1326 audit(1755572848.625:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.926403][ T30] audit: type=1326 audit(1755572848.625:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 352.972154][ T30] audit: type=1326 audit(1755572848.625:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f18ebe9 code=0x7ffc0000 [ 354.322533][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.361235][T10106] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 354.365601][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.463664][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.533248][T10106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 354.548124][T10106] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 354.562979][T10106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.598515][T10106] usb 1-1: config 0 descriptor?? [ 354.621899][T10720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.661254][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.973382][T10733] ptrace attach of "./syz-executor exec"[9565] was attempted by "./syz-executor exec"[10733] [ 355.038670][T10106] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 355.662339][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 355.776485][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1404'. [ 356.361962][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1410'. [ 356.391862][T10769] FAULT_INJECTION: forcing a failure. [ 356.391862][T10769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.409828][T10769] CPU: 1 UID: 0 PID: 10769 Comm: syz.2.1412 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 356.409859][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.409873][T10769] Call Trace: [ 356.409881][T10769] [ 356.409890][T10769] dump_stack_lvl+0x189/0x250 [ 356.409921][T10769] ? __pfx____ratelimit+0x10/0x10 [ 356.409951][T10769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.409984][T10769] ? __pfx__printk+0x10/0x10 [ 356.410015][T10769] ? rcu_is_watching+0x15/0xb0 [ 356.410037][T10769] should_fail_ex+0x414/0x560 [ 356.410065][T10769] _copy_to_user+0x31/0xb0 [ 356.410090][T10769] simple_read_from_buffer+0xe1/0x170 [ 356.410123][T10769] proc_fail_nth_read+0x1b3/0x220 [ 356.410147][T10769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.410172][T10769] ? rw_verify_area+0x2a6/0x4d0 [ 356.410197][T10769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.410221][T10769] vfs_read+0x1fd/0xa30 [ 356.410246][T10769] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.410278][T10769] ? lock_release+0x4b/0x3e0 [ 356.410308][T10769] ? __pfx_vfs_read+0x10/0x10 [ 356.410333][T10769] ? tipc_bind+0x149/0x260 [ 356.410359][T10769] ? __sys_bind+0x2e9/0x3e0 [ 356.410388][T10769] ? __pfx___sys_bind+0x10/0x10 [ 356.410419][T10769] ksys_read+0x145/0x250 [ 356.410447][T10769] ? __pfx_ksys_read+0x10/0x10 [ 356.410472][T10769] ? rcu_is_watching+0x15/0xb0 [ 356.410493][T10769] ? rcu_is_watching+0x15/0xb0 [ 356.410539][T10769] do_syscall_64+0xfa/0x3b0 [ 356.410588][T10769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.410609][T10769] ? clear_bhb_loop+0x60/0xb0 [ 356.410634][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.410655][T10769] RIP: 0033:0x7f750478d5fc [ 356.410673][T10769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 356.410692][T10769] RSP: 002b:00007f75056b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.410715][T10769] RAX: ffffffffffffffda RBX: 00007f75049b5fa0 RCX: 00007f750478d5fc [ 356.410732][T10769] RDX: 000000000000000f RSI: 00007f75056b10a0 RDI: 0000000000000004 [ 356.410746][T10769] RBP: 00007f75056b1090 R08: 0000000000000000 R09: 0000000000000000 [ 356.410760][T10769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.410773][T10769] R13: 00007f75049b6038 R14: 00007f75049b5fa0 R15: 00007f7504adfa28 [ 356.410798][T10769] [ 356.923696][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 357.029834][T10786] vxcan1: tx address claim with dlc 0 [ 357.114072][T10090] usb 1-1: USB disconnect, device number 47 [ 357.472793][T10792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.144326][T10798] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[10798] [ 358.518023][T10802] netlink: 'syz.5.1420': attribute type 29 has an invalid length. [ 358.590812][T10806] netlink: 'syz.5.1420': attribute type 29 has an invalid length. [ 358.753615][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1418'. [ 359.475606][ T5957] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 359.643070][ T5957] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.682245][ T5957] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.711205][ T5957] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.748264][ T5957] usb 6-1: config 1 has no interface number 1 [ 359.942499][T10105] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 360.015705][ T5957] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.200884][ T5957] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.217795][T10105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 360.239182][T10105] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 360.259031][T10105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.334049][ T5957] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.347302][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.356823][ T5957] usb 6-1: Product: syz [ 360.357206][T10105] usb 1-1: config 0 descriptor?? [ 360.361001][ T5957] usb 6-1: Manufacturer: syz [ 360.401473][ T5957] usb 6-1: SerialNumber: syz [ 360.410910][T10827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.640096][T10842] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 360.655173][T10842] veth0_vlan: left promiscuous mode [ 360.671023][T10842] veth0_vlan: entered promiscuous mode [ 360.701141][T10842] team0: Device veth0_vlan failed to register rx_handler [ 361.006261][T10105] elan 0003:04F3:0755.001E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 361.784382][ T5957] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 361.793322][ T5957] usb 6-1: MIDIStreaming interface descriptor not found [ 361.852772][ T5957] usb 6-1: USB disconnect, device number 16 [ 361.963768][T10860] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[10860] [ 362.192390][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.237488][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.269512][T10868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.399222][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.541820][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.074549][T10108] usb 1-1: USB disconnect, device number 48 [ 364.128007][T10897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.313424][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.322232][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.014634][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 365.223974][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 365.322308][T10919] xt_HMARK: proto mask must be zero with L3 mode [ 365.409259][T10926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.435620][T10928] program syz.0.1450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.503609][T10926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.505226][T10926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.611279][T10106] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 365.763364][T10106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 365.774884][T10106] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 365.785069][T10106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.796280][T10106] usb 2-1: config 0 descriptor?? [ 365.802900][T10923] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.232516][T10106] elan 0003:04F3:0755.001F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 366.473134][T10943] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[10943] [ 366.721765][T10106] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 366.783145][T10105] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 366.881361][T10106] usb 1-1: Using ep0 maxpacket: 8 [ 366.887991][T10106] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 366.897825][T10106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.979014][T10106] pvrusb2: Hardware description: Terratec Grabster AV400 [ 366.986865][T10105] usb 6-1: Using ep0 maxpacket: 16 [ 367.016046][T10105] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 367.031239][T10106] pvrusb2: ********** [ 367.035326][T10105] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 367.055427][T10106] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 367.096451][T10105] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.116733][T10106] pvrusb2: Important functionality might not be entirely working. [ 367.136010][T10106] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 367.149724][T10105] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.224952][T10106] pvrusb2: ********** [ 367.243364][T10105] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.260029][ T2344] pvrusb2: Invalid write control endpoint [ 367.280502][T10105] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.293851][T10105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.324078][T10105] usb 6-1: Product: syz [ 367.335412][T10105] usb 6-1: Manufacturer: syz [ 367.347621][T10105] usb 6-1: SerialNumber: syz [ 367.355802][ T2344] pvrusb2: Invalid write control endpoint [ 367.376776][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 367.391348][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 367.407631][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 367.419244][ T2344] pvrusb2: Device being rendered inoperable [ 367.428784][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 367.438105][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 367.453657][ T2344] pvrusb2: Attached sub-driver cx25840 [ 367.462780][T10104] usb 1-1: USB disconnect, device number 49 [ 367.470942][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 367.498605][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 367.628884][T10105] usb 6-1: USB disconnect, device number 17 [ 367.889680][T10957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.199518][T10973] vlan2: entered promiscuous mode [ 368.205451][T10090] usb 2-1: USB disconnect, device number 49 [ 368.432499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.851689][T10106] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 369.010382][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.067599][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.075588][T10106] usb 6-1: config 0 has no interfaces? [ 369.168465][T10106] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.177817][T10106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.287646][T10106] usb 6-1: Product: syz [ 369.318366][T10106] usb 6-1: Manufacturer: syz [ 369.397352][T10106] usb 6-1: SerialNumber: syz [ 369.525580][T10998] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[10998] [ 369.693426][T10106] usb 6-1: config 0 descriptor?? [ 370.324319][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.333727][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.343212][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.352513][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.369952][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.379856][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.388981][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.400127][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.494438][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.533547][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 370.576553][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.648490][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.753660][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.766469][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 370.766483][ T30] audit: type=1326 audit(1755572866.765:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 370.801991][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.951574][ T30] audit: type=1326 audit(1755572866.765:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 371.020068][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.048626][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.057848][ T30] audit: type=1326 audit(1755572866.765:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 371.080204][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.230736][ T30] audit: type=1326 audit(1755572866.765:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 371.321523][ T30] audit: type=1326 audit(1755572866.765:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 371.321568][ T30] audit: type=1326 audit(1755572866.765:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750478d550 code=0x7ffc0000 [ 371.321721][ T30] audit: type=1326 audit(1755572866.765:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750478e7eb code=0x7ffc0000 [ 371.321761][ T30] audit: type=1326 audit(1755572866.765:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750478e7eb code=0x7ffc0000 [ 371.321803][ T30] audit: type=1326 audit(1755572866.825:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 371.321841][ T30] audit: type=1326 audit(1755572866.825:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750478e7eb code=0x7ffc0000 [ 372.214781][T10105] usb 6-1: USB disconnect, device number 18 [ 372.565665][T11043] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 372.800971][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.826446][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.036676][T11066] mmap: syz.0.1492 (11066): VmData 37462016 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 373.164173][T11073] binder: 11072:11073 ioctl c0306201 2000000003c0 returned -14 [ 373.176093][T11073] tipc: Enabled bearer , priority 0 [ 373.184039][T11073] syzkaller0: entered promiscuous mode [ 373.189622][T11073] syzkaller0: entered allmulticast mode [ 373.422873][T11080] tipc: Resetting bearer [ 373.454312][T11072] tipc: Resetting bearer [ 373.545637][T11072] tipc: Disabling bearer [ 373.581177][T10090] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 373.805118][T10090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.846696][T10090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 373.880077][T10090] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 373.907875][T10090] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.917705][T10090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.758947][T11115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.862294][T10090] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.876901][T11114] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 374.917576][T10090] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 375.212052][T11118] CIFS: VFS: Malformed UNC in devname [ 375.371317][T10106] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 375.706186][T10106] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 375.729335][T10106] usb 6-1: config 150 has no interface number 0 [ 375.840532][T10106] usb 6-1: config 150 interface 204 has no altsetting 0 [ 375.894082][T10106] usb 6-1: config 150 interface 1 has no altsetting 0 [ 376.417543][T10106] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 376.426651][T10106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.441301][T10090] usb 4-1: USB disconnect, device number 61 [ 376.474920][T10106] usb 6-1: Product: syz [ 376.493030][T10106] usb 6-1: Manufacturer: syz [ 376.509559][T10106] usb 6-1: SerialNumber: syz [ 376.773916][T10106] xr_serial 6-1:150.204: xr_serial converter detected [ 377.161313][T10090] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 377.503044][T10090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.516485][T10090] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.550004][T10090] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.567098][T10090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.577043][T10106] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 377.636525][T10106] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 377.637822][T11143] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.666505][T10090] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.673518][T10106] usb 6-1: USB disconnect, device number 19 [ 377.686580][T10106] xr_serial 6-1:150.204: device disconnected [ 377.876111][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.894535][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.908015][T11162] __nla_validate_parse: 38 callbacks suppressed [ 377.908030][T11162] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1517'. [ 377.952243][T10106] usb 4-1: USB disconnect, device number 62 [ 378.222584][T11170] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[11170] [ 378.271279][T10108] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 378.477318][T10108] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 378.497416][T10108] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 378.548872][T10108] usb 1-1: config 220 has no interface number 2 [ 378.564042][T10108] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 378.578166][T10108] usb 1-1: config 220 interface 0 has no altsetting 0 [ 378.590181][T10108] usb 1-1: config 220 interface 76 has no altsetting 0 [ 378.597525][ T3496] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.606910][ T3496] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.616299][T10108] usb 1-1: config 220 interface 1 has no altsetting 0 [ 378.623972][ T3496] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.638597][T10108] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 378.641549][ T3471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.648205][T10108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.665218][T10108] usb 1-1: Product: syz [ 378.673752][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.691374][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.711441][T10108] usb 1-1: Manufacturer: syz [ 378.721685][T10108] usb 1-1: SerialNumber: syz [ 378.743827][T11176] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4 [ 378.818947][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.832286][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.972337][T11164] netlink: 161024 bytes leftover after parsing attributes in process `syz.0.1518'. [ 378.982267][T11164] netlink: zone id is out of range [ 378.987573][T11164] netlink: zone id is out of range [ 378.992884][T11164] netlink: zone id is out of range [ 378.998624][T11164] netlink: zone id is out of range [ 379.004067][T11164] netlink: zone id is out of range [ 379.009331][T11164] netlink: zone id is out of range [ 379.015237][T11164] netlink: zone id is out of range [ 379.020480][T11164] netlink: zone id is out of range [ 379.041930][T11164] netlink: zone id is out of range [ 379.053723][T10108] usb 1-1: selecting invalid altsetting 0 [ 379.060026][T10108] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 379.067491][T10108] usb 1-1: No valid video chain found. [ 379.082201][T10108] usb 1-1: selecting invalid altsetting 0 [ 379.088306][T10108] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 379.098415][T10108] usb 1-1: USB disconnect, device number 50 [ 379.331679][ T5863] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 379.484621][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.493102][ T5863] usb 2-1: not running at top speed; connect to a high speed hub [ 379.502484][ T5863] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 379.521616][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.532158][ T5863] usb 2-1: config 1 has no interface number 0 [ 379.538278][ T5863] usb 2-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.561482][ T5863] usb 2-1: config 1 interface 138 has no altsetting 0 [ 379.570175][ T5863] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 379.579595][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.588090][ T5863] usb 2-1: Product: syz [ 379.661147][ T5863] usb 2-1: Manufacturer: syz [ 379.667707][ T5863] usb 2-1: SerialNumber: syz [ 379.899166][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'. [ 379.944841][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 380.132044][ T5863] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.233403][ T5863] usb 2-1: USB disconnect, device number 50 [ 380.442446][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.496141][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.533974][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.571209][T10090] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 380.579036][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.605027][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.616373][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.630023][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.640756][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.652953][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.664469][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.675281][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.687511][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.757042][T10090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.767922][T10090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 380.809620][T10090] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 380.871210][T10090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.031497][T10090] usb 1-1: config 0 descriptor?? [ 381.281599][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 381.281627][ T30] audit: type=1326 audit(1755572877.265:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 381.676032][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.683783][ T30] audit: type=1326 audit(1755572877.265:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 381.688283][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.871637][ T30] audit: type=1326 audit(1755572877.265:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 381.911174][ T30] audit: type=1326 audit(1755572877.265:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 381.933542][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.976581][ T30] audit: type=1326 audit(1755572877.265:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 381.998993][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.059303][ T30] audit: type=1326 audit(1755572877.265:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 382.081704][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.096825][T10090] ath6kl: Failed to submit usb control message: -71 [ 382.110155][T10090] ath6kl: unable to send the bmi data to the device: -71 [ 382.279957][T10090] ath6kl: Unable to send get target info: -71 [ 382.286521][T10090] ath6kl: Failed to init ath6kl core: -71 [ 382.294312][T10090] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 382.324942][T10090] usb 1-1: USB disconnect, device number 51 [ 382.397770][ T30] audit: type=1326 audit(1755572878.075:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 382.497492][ T30] audit: type=1326 audit(1755572878.075:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11217 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaddb8ebe9 code=0x7ffc0000 [ 382.659282][T11247] sg_write: data in/out 8156/120 bytes for SCSI command 0x0-- guessing data in; [ 382.659282][T11247] program syz.5.1541 not setting count and/or reply_len properly [ 382.752418][ T5863] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 382.941383][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 382.951779][ T5863] usb 2-1: no configurations [ 382.957049][ T5863] usb 2-1: can't read configurations, error -22 [ 383.101714][ T5863] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 383.379434][T11271] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1547'. [ 383.419351][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 383.456805][ T5863] usb 2-1: no configurations [ 383.461762][ T5863] usb 2-1: can't read configurations, error -22 [ 383.469045][ T5863] usb usb2-port1: attempt power cycle [ 383.513239][T10090] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 383.794859][T10090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.828483][T10090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.881539][ T5863] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 383.905388][T10090] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 383.923715][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 383.943148][ T5863] usb 2-1: no configurations [ 383.995015][T10090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.008504][ T5863] usb 2-1: can't read configurations, error -22 [ 384.096131][T10090] usb 1-1: config 0 descriptor?? [ 384.211564][ T5863] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 384.231749][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 384.237564][ T5863] usb 2-1: no configurations [ 384.247992][ T5863] usb 2-1: can't read configurations, error -22 [ 384.282039][ T5863] usb usb2-port1: unable to enumerate USB device [ 384.591894][T10090] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 384.600437][T10090] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 384.799454][T10090] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 385.404132][T11269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.412900][T11269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.448516][T10090] cp2112 0003:10C4:EA90.0020: error reading lock byte: -71 [ 385.461319][T10090] usb 1-1: USB disconnect, device number 52 [ 385.918485][T10104] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 386.061339][T10104] usb 1-1: device descriptor read/64, error -71 [ 386.334465][T10104] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 386.351570][ T5863] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 386.502884][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 386.508745][T10104] usb 1-1: device descriptor read/64, error -71 [ 386.510051][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.528197][ T5863] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 386.536919][ T5863] usb 2-1: config 11 has an invalid descriptor of length 135, skipping remainder of the config [ 386.555945][ T5863] usb 2-1: config 11 has no interface number 0 [ 386.571345][ T5863] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid maxpacket 30290, setting to 64 [ 386.590481][ T5863] usb 2-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.604207][ T5863] usb 2-1: config 11 interface 244 has no altsetting 0 [ 386.664024][ T5863] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 386.673875][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.685321][ T5863] usb 2-1: Product: syz [ 386.695991][T10104] usb usb1-port1: attempt power cycle [ 386.703264][ T5863] usb 2-1: Manufacturer: syz [ 386.719095][ T5863] usb 2-1: SerialNumber: syz [ 387.041564][T10104] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 387.099980][T10104] usb 1-1: device descriptor read/8, error -71 [ 387.341170][T10104] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 387.401863][T10104] usb 1-1: device descriptor read/8, error -71 [ 387.512071][T10104] usb usb1-port1: unable to enumerate USB device [ 387.583726][ T30] audit: type=1326 audit(1755572883.595:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.654056][ T30] audit: type=1326 audit(1755572883.595:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.693251][ T30] audit: type=1326 audit(1755572883.595:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.715629][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.724187][ T30] audit: type=1326 audit(1755572883.595:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.746540][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.761844][ T30] audit: type=1326 audit(1755572883.595:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.784187][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.791340][ T30] audit: type=1326 audit(1755572883.595:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.813716][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.825071][ T30] audit: type=1326 audit(1755572883.595:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.847796][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.855079][ T30] audit: type=1326 audit(1755572883.595:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.881444][ T30] audit: type=1326 audit(1755572883.595:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.907068][ T30] audit: type=1326 audit(1755572883.595:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f750478ebe9 code=0x7ffc0000 [ 387.929475][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.136643][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 388.153369][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 388.200312][T11353] syz_tun: entered promiscuous mode [ 388.210782][T11353] batadv_slave_0: entered promiscuous mode [ 388.219157][T11353] debugfs: 'hsr1' already exists in 'hsr' [ 388.227342][T11353] Cannot create hsr debugfs directory [ 388.233514][T11353] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 388.243968][T11353] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.977576][T11369] netlink: 'syz.2.1576': attribute type 29 has an invalid length. [ 389.004419][T11369] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 389.241191][ T5863] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 389.266471][ T5863] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 389.522086][ T5863] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71 [ 389.544374][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.556694][ T5863] usb 2-1: USB disconnect, device number 55 [ 389.564577][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.081153][ T5957] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 390.232729][ T5957] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.245202][ T5957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 390.280647][ T5957] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 390.290487][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.300594][ T5957] usb 1-1: config 0 descriptor?? [ 390.321919][T11404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.646595][T11416] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[11416] [ 390.924573][T11411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.576389][ T5957] hid-alps 0003:044E:1215.0021: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 392.405110][T11432] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[11432] [ 392.650421][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1590'. [ 392.659641][T11433] net_ratelimit: 247 callbacks suppressed [ 392.659667][T11433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.678591][T11433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.935881][T10108] usb 1-1: USB disconnect, device number 57 [ 393.570191][T11446] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[11446] [ 393.724070][T11447] binder: BINDER_SET_CONTEXT_MGR already set [ 393.731631][T11447] binder: 11445:11447 ioctl 4018620d 200000000040 returned -16 [ 393.819822][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.835853][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.886319][T11475] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 394.892876][T11475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.901227][T11475] vhci_hcd vhci_hcd.0: Device attached [ 394.909174][T11480] vhci_hcd: connection closed [ 394.909387][ T3496] vhci_hcd: stop threads [ 394.918841][ T3496] vhci_hcd: release socket [ 394.928807][ T3496] vhci_hcd: disconnect device [ 394.943355][ T5957] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 395.031539][T10090] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 395.072620][T11484] netlink: 'syz.2.1604': attribute type 27 has an invalid length. [ 395.096137][T11484] wireguard0: left promiscuous mode [ 395.101465][T11484] wireguard0: left allmulticast mode [ 395.143908][ T5957] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 395.153285][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.172551][ T5957] usb 2-1: config 0 descriptor?? [ 395.183675][ T5957] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 395.226079][T10090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.291463][T11484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.299481][T11484] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.315999][T11484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.376825][T10090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 395.404547][ T5957] gspca_sn9c2028: read1 error -71 [ 395.440962][ T5957] gspca_sn9c2028: read1 error -71 [ 395.485019][T10090] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 395.504081][ T5957] gspca_sn9c2028: read1 error -71 [ 395.546730][ T5957] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 395.570767][T10090] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.591344][ T5957] usb 2-1: USB disconnect, device number 56 [ 395.601384][T10090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.652463][T10090] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.755273][T10090] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 396.301012][T11494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.481153][T10108] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 396.631223][T10108] usb 6-1: device descriptor read/64, error -71 [ 396.687249][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 396.719523][T11500] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1609'. [ 396.871284][T10108] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 397.111469][T10108] usb 6-1: device descriptor read/64, error -71 [ 397.239429][T10108] usb usb6-port1: attempt power cycle [ 397.573983][T10090] usb 4-1: USB disconnect, device number 63 [ 397.632586][T10108] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 397.923834][T10108] usb 6-1: device descriptor read/8, error -71 [ 398.235329][T11527] binder: 11526:11527 ioctl c0306201 0 returned -14 [ 398.321606][T10108] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 398.352350][T10108] usb 6-1: device descriptor read/8, error -71 [ 398.467381][T10108] usb usb6-port1: unable to enumerate USB device [ 398.798573][T11536] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[11536] [ 399.190368][T11542] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[11542] [ 399.446599][T11546] vxcan1: tx address claim with dlc 0 [ 399.750659][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.430578][T11565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 400.651498][T10090] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 400.659181][ T5957] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 400.792381][ T5957] usb 1-1: device descriptor read/64, error -71 [ 400.821951][T10090] usb 4-1: Using ep0 maxpacket: 32 [ 400.855225][T10090] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 400.876088][T10090] usb 4-1: config 0 has no interface number 0 [ 400.891201][T10090] usb 4-1: config 0 interface 85 has no altsetting 0 [ 400.903623][T10090] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 400.921240][T10090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.979756][T10090] usb 4-1: Product: syz [ 401.171489][ T5957] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 401.179167][T10090] usb 4-1: Manufacturer: syz [ 401.190350][T10090] usb 4-1: SerialNumber: syz [ 401.272516][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 401.331531][ T5957] usb 1-1: device descriptor read/64, error -71 [ 401.461619][ T5957] usb usb1-port1: attempt power cycle [ 401.761790][T10090] usb 4-1: config 0 descriptor?? [ 401.775469][T10090] appletouch 4-1:0.85: Could not find int-in endpoint [ 401.791202][T10090] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 401.810303][T10090] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 401.811182][T10108] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 401.974053][T10108] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 401.982888][T10108] usb 6-1: config 150 has no interface number 0 [ 401.992396][T10108] usb 6-1: config 150 interface 204 has no altsetting 0 [ 401.994354][T10090] usb 4-1: USB disconnect, device number 64 [ 401.999758][T10108] usb 6-1: config 150 interface 1 has no altsetting 0 [ 402.018428][T10108] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 402.027957][T10108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.031627][ T5957] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 402.041595][T10108] usb 6-1: Product: syz [ 402.047669][T10108] usb 6-1: Manufacturer: syz [ 402.055192][T10108] usb 6-1: SerialNumber: syz [ 402.062534][ T5957] usb 1-1: device descriptor read/8, error -71 [ 402.146425][T11588] netlink: 'syz.1.1630': attribute type 2 has an invalid length. [ 402.154739][T11588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1630'. [ 402.266364][T10108] xr_serial 6-1:150.204: xr_serial converter detected [ 402.311676][ T5957] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 402.355728][ T5957] usb 1-1: device descriptor read/8, error -71 [ 402.493737][ T5957] usb usb1-port1: unable to enumerate USB device [ 402.591636][T11595] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[11595] [ 403.053437][T10108] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 403.113435][T10108] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 403.166332][T10108] usb 6-1: USB disconnect, device number 24 [ 403.267185][T11602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.285463][T10108] xr_serial 6-1:150.204: device disconnected [ 404.138203][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.171507][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.191525][T10106] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 404.246159][T11622] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[11622] [ 404.405377][T10106] usb 4-1: Using ep0 maxpacket: 8 [ 404.405418][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.440182][T10106] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 404.449493][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.454728][T10106] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 404.466783][T10106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.475260][T10106] usb 4-1: Product: syz [ 404.480251][T10106] usb 4-1: Manufacturer: syz [ 404.485703][T10106] usb 4-1: SerialNumber: syz [ 404.501339][T10106] usb 4-1: config 0 descriptor?? [ 404.508070][T10106] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 404.516204][T10106] usb 4-1: setting power ON [ 404.520725][T10106] dvb-usb: bulk message failed: -22 (2/0) [ 404.601519][T10106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.612495][T10106] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 404.621021][T10106] usb 4-1: media controller created [ 404.638635][T10106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.793025][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.813506][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.845977][T10106] usb 4-1: selecting invalid altsetting 6 [ 404.867323][T10106] usb 4-1: digital interface selection failed (-22) [ 404.929671][T10106] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 404.961781][T10106] usb 4-1: setting power OFF [ 404.966534][T10106] dvb-usb: bulk message failed: -22 (2/0) [ 404.982726][T10106] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 405.003153][T10106] (NULL device *): no alternate interface [ 405.049746][T10106] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 405.091198][ T1218] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 405.241601][ T1218] usb 1-1: Using ep0 maxpacket: 32 [ 405.251036][ T1218] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.339678][ T1218] usb 1-1: config 0 has no interface number 0 [ 405.347108][ T1218] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.359697][ T1218] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.370273][ T1218] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 405.419677][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.781603][ T1218] usb 1-1: config 0 descriptor?? [ 406.037619][T11632] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1641'. [ 406.291016][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.311925][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.324086][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.334446][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.377008][ T1218] usbhid 1-1:0.1: can't add hid device: -71 [ 406.414280][ T1218] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 406.457780][ T1218] usb 1-1: USB disconnect, device number 62 [ 406.570870][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'. [ 407.129288][T10108] usb 4-1: USB disconnect, device number 65 [ 407.241234][T10106] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 407.266699][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.402726][T10106] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 407.414292][T10106] usb 2-1: config 150 has no interface number 0 [ 407.420700][T10106] usb 2-1: config 150 interface 204 has no altsetting 0 [ 407.433878][T10106] usb 2-1: config 150 interface 1 has no altsetting 0 [ 407.442708][T10106] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 407.465057][T10106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.487097][T10106] usb 2-1: Product: syz [ 407.495562][T10106] usb 2-1: Manufacturer: syz [ 407.508120][T10106] usb 2-1: SerialNumber: syz [ 407.540338][T11678] binder_alloc: 11677: binder_alloc_buf, no vma [ 407.722514][T10106] xr_serial 2-1:150.204: xr_serial converter detected [ 408.008521][T11694] syzkaller0: entered promiscuous mode [ 408.016368][T11694] syzkaller0: entered allmulticast mode [ 408.153127][ T1218] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 408.175789][ T1218] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.344904][T10106] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 408.357284][T10106] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 408.381302][T10106] usb 2-1: USB disconnect, device number 57 [ 408.417582][T10106] xr_serial 2-1:150.204: device disconnected [ 409.293931][T11735] tipc: Enabled bearer , priority 0 [ 409.380052][T11735] tipc: Disabling bearer [ 409.434891][T11747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.721845][ T1218] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 409.891312][ T1218] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 409.928490][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 409.966857][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.037961][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.534854][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.647595][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.696252][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.721236][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.731493][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.769381][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.794079][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.831254][T10104] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 410.865331][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.943369][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 410.961144][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.970157][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.027538][T10104] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 411.037736][T10104] usb 2-1: config 150 has no interface number 0 [ 411.045373][T10104] usb 2-1: config 150 interface 204 has no altsetting 0 [ 411.061517][T10104] usb 2-1: config 150 interface 1 has no altsetting 0 [ 411.070392][T10104] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 411.089783][T10104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.098594][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.118243][T10104] usb 2-1: Product: syz [ 411.126494][T10104] usb 2-1: Manufacturer: syz [ 411.136926][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.233260][T10104] usb 2-1: SerialNumber: syz [ 411.293017][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.307385][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.325823][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.344001][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.352083][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.362564][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.375766][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.409830][ T1218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.423861][ T1218] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.532873][T10104] xr_serial 2-1:150.204: xr_serial converter detected [ 411.599750][ T1218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.654793][ T1218] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 411.691524][ T1218] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 411.714231][ T1218] usb 1-1: Product: syz [ 411.735008][ T1218] usb 1-1: Manufacturer: syz [ 411.748684][ T1218] usb 1-1: SerialNumber: syz [ 411.762865][ T1218] usb 1-1: config 0 descriptor?? [ 411.911532][ T1218] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 412.087110][ T1218] usb 1-1: USB disconnect, device number 63 [ 412.101513][ T1218] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 412.129888][T11749] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1673'. [ 412.137159][T10104] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 412.151968][T10104] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 412.167054][T10104] usb 2-1: USB disconnect, device number 58 [ 412.183905][T10104] xr_serial 2-1:150.204: device disconnected [ 412.561451][ T5957] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 412.631218][T10090] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 412.664502][T11801] delete_channel: no stack [ 412.722760][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 412.753186][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.788459][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 412.801166][T10090] usb 4-1: Using ep0 maxpacket: 32 [ 412.865233][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.877425][T10090] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 412.886132][T10090] usb 4-1: config 0 has no interface number 0 [ 412.930579][T10090] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 412.958124][T10090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.966304][ T5957] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 412.975513][T10090] usb 4-1: Product: syz [ 412.979749][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.021788][T11811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.032629][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1686'. [ 413.060820][T10090] usb 4-1: Manufacturer: syz [ 413.076699][T10090] usb 4-1: SerialNumber: syz [ 413.096264][ T5957] usb 6-1: config 0 descriptor?? [ 413.101907][T10090] usb 4-1: config 0 descriptor?? [ 413.107407][T11786] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 413.116566][T10090] smsc95xx v2.0.0 [ 413.121240][ T5957] hub 6-1:0.0: USB hub found [ 413.347635][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.359471][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.675989][ T5957] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 413.763779][ T5957] usbhid 6-1:0.0: can't add hid device: -71 [ 413.770279][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 413.922761][T10090] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 413.933772][T10090] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 413.962038][ T5957] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 413.982814][ T5957] usb 6-1: device reset changed ep0 maxpacket size! [ 413.990050][ T5957] usb 6-1: USB disconnect, device number 25 [ 414.258205][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.267056][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.471610][ T5957] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 414.560121][T11792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.593486][T11792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.641463][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 414.692958][ T5957] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 414.711799][ T5957] usb 6-1: config 2 has no interface number 0 [ 414.774674][ T5957] usb 6-1: config 2 interface 31 has no altsetting 0 [ 414.830884][ T5957] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 414.877431][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.891802][T10090] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 414.921791][T10090] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 414.934959][ T5957] usb 6-1: Product: syz [ 414.963766][ T5957] usb 6-1: Manufacturer: syz [ 414.989707][ T5957] usb 6-1: SerialNumber: syz [ 415.008904][T10090] usb 4-1: USB disconnect, device number 66 [ 415.018909][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 415.249951][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.258853][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.272784][ T5957] ch9200 6-1:2.31: probe with driver ch9200 failed with error -71 [ 415.353492][ T5957] usb 6-1: USB disconnect, device number 26 [ 415.363030][T11850] delete_channel: no stack [ 415.701300][T10090] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 415.890155][T11880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.912970][T11882] netlink: 'syz.1.1703': attribute type 15 has an invalid length. [ 415.921222][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 415.954445][T10090] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 415.977473][T10090] usb 1-1: config 150 has no interface number 0 [ 416.039822][T10090] usb 1-1: config 150 interface 204 has no altsetting 0 [ 416.114947][T10090] usb 1-1: config 150 interface 1 has no altsetting 0 [ 416.304835][T10090] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 416.338615][T11891] delete_channel: no stack [ 416.345632][T10090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.420992][T10090] usb 1-1: Product: syz [ 416.445326][T10090] usb 1-1: Manufacturer: syz [ 416.494573][T10090] usb 1-1: SerialNumber: syz [ 416.804753][T10090] xr_serial 1-1:150.204: xr_serial converter detected [ 416.813007][T10090] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 416.833886][T10090] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 416.893950][T10090] usb 1-1: USB disconnect, device number 64 [ 416.916653][T10090] xr_serial 1-1:150.204: device disconnected [ 417.395005][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.405656][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.444334][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.459514][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.710174][T11920] ptrace attach of "./syz-executor exec"[9565] was attempted by "./syz-executor exec"[11920] [ 417.957198][T11926] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[11926] [ 418.167545][T11927] delete_channel: no stack [ 418.475661][T10106] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 418.622421][T11933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.703099][T10106] usb 4-1: Using ep0 maxpacket: 8 [ 418.711441][T10106] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.731045][T10106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.774810][T10106] usb 4-1: Product: syz [ 418.841140][T10106] usb 4-1: Manufacturer: syz [ 418.862957][T10106] usb 4-1: SerialNumber: syz [ 418.871283][T10108] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 418.883841][T10106] usb 4-1: config 0 descriptor?? [ 418.969740][T11940] sctp: [Deprecated]: syz.2.1721 (pid 11940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.969740][T11940] Use struct sctp_sack_info instead [ 419.057866][T10108] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 419.071666][T10108] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 419.080782][T10108] usb 2-1: can't read configurations, error -61 [ 419.141033][T11947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.208219][T10106] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 419.257391][T11949] CIFS: VFS: Malformed UNC in devname [ 419.635826][ T31] INFO: task kworker/1:6:5947 blocked for more than 143 seconds. [ 419.648133][T11948] random: crng reseeded on system resumption [ 419.654823][T10108] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 419.696453][T11948] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 419.864611][ T31] Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 [ 419.874889][T10108] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 419.899450][T10108] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 419.908423][T10106] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 419.922740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.933627][T11948] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 419.945564][T10108] usb 2-1: can't read configurations, error -61 [ 419.958490][T10108] usb usb2-port1: attempt power cycle [ 419.968039][ T31] task:kworker/1:6 state:D stack:22016 pid:5947 tgid:5947 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 419.981027][T11948] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 419.989701][T11948] PM: hibernation: Basic memory bitmaps created [ 419.989970][T10106] usb 4-1: USB disconnect, device number 67 [ 420.011834][ T31] Workqueue: usb_hub_wq hub_event [ 420.020784][ T31] Call Trace: [ 420.024293][ T31] [ 420.027422][ T31] __schedule+0x1798/0x4cc0 [ 420.032439][ T31] ? __pfx___schedule+0x10/0x10 [ 420.037485][ T31] ? schedule+0x91/0x360 [ 420.041901][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.046785][ T31] ? lock_release+0x4b/0x3e0 [ 420.055873][ T31] ? schedule+0x91/0x360 [ 420.060293][ T31] ? wq_worker_sleeping+0x63/0x250 [ 420.065976][ T31] schedule+0x165/0x360 [ 420.070444][ T31] schedule_timeout+0x9a/0x270 [ 420.080773][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 420.091568][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.104682][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.120188][ T31] ? wait_for_completion+0x267/0x5d0 [ 420.134792][ T31] wait_for_completion+0x2bf/0x5d0 [ 420.148611][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 420.167962][ T31] i2c_del_adapter+0x581/0x6e0 [ 420.178425][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 420.189536][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 420.200190][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 420.208474][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 420.214148][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 420.221156][ T31] usb_probe_interface+0x668/0xc30 [ 420.226408][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 420.232281][ T31] really_probe+0x26a/0x9e0 [ 420.236934][ T31] __driver_probe_device+0x18c/0x2f0 [ 420.242671][ T31] driver_probe_device+0x4f/0x430 [ 420.247815][ T31] __device_attach_driver+0x2ce/0x530 [ 420.253479][ T31] bus_for_each_drv+0x251/0x2e0 [ 420.258464][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 420.293760][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 420.299306][ T31] __device_attach+0x2b8/0x400 [ 420.305631][ T31] ? __pfx___device_attach+0x10/0x10 [ 420.311503][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 420.316888][ T31] bus_probe_device+0x185/0x260 [ 420.321904][ T31] device_add+0x7b6/0xb50 [ 420.326356][ T31] usb_set_configuration+0x1a87/0x20e0 [ 420.341228][T10108] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 420.349246][ T31] usb_generic_driver_probe+0x8d/0x150 [ 420.356206][ T31] usb_probe_device+0x1c1/0x390 [ 420.363152][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 420.368963][T10108] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 420.377207][ T31] really_probe+0x26a/0x9e0 [ 420.382343][ T31] __driver_probe_device+0x18c/0x2f0 [ 420.388116][T10108] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 420.396071][T10108] usb 2-1: can't read configurations, error -61 [ 420.403779][ T31] driver_probe_device+0x4f/0x430 [ 420.409341][ T31] __device_attach_driver+0x2ce/0x530 [ 420.416336][ T31] bus_for_each_drv+0x251/0x2e0 [ 420.421593][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 420.427657][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 420.434716][ T31] __device_attach+0x2b8/0x400 [ 420.439618][ T31] ? __pfx___device_attach+0x10/0x10 [ 420.446135][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 420.452986][ T31] bus_probe_device+0x185/0x260 [ 420.459072][ T31] device_add+0x7b6/0xb50 [ 420.464760][ T31] usb_new_device+0xa39/0x16f0 [ 420.469606][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 420.476484][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.484048][ T31] hub_event+0x2958/0x4a20 [ 420.488635][ T31] ? __pfx_hub_event+0x10/0x10 [ 420.494608][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.499536][ T31] ? lock_acquire+0x5f/0x360 [ 420.505589][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.510485][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.517762][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.524843][ T31] process_scheduled_works+0xade/0x17b0 [ 420.530461][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.536579][T10108] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 420.544843][ T31] worker_thread+0x8a0/0xda0 [ 420.550763][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.558397][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.564872][ T31] ? __kthread_parkme+0x7b/0x200 [ 420.570152][T10108] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 420.578826][ T31] kthread+0x70e/0x8a0 [ 420.583685][ T31] ? __pfx_worker_thread+0x10/0x10 [ 420.588875][T10108] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 420.596674][T10108] usb 2-1: can't read configurations, error -61 [ 420.603382][ T31] ? __pfx_kthread+0x10/0x10 [ 420.609274][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.614386][T10108] usb usb2-port1: unable to enumerate USB device [ 420.620907][ T31] ? __pfx_kthread+0x10/0x10 [ 420.626891][ T31] ret_from_fork+0x3f9/0x770 [ 420.631989][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.637181][ T31] ? __switch_to_asm+0x39/0x70 [ 420.642110][ T31] ? __switch_to_asm+0x33/0x70 [ 420.646979][ T31] ? __pfx_kthread+0x10/0x10 [ 420.651700][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.658323][ T31] [ 420.661865][ T31] INFO: lockdep is turned off. [ 420.683753][ T31] NMI backtrace for cpu 1 [ 420.683779][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 420.683801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.683812][ T31] Call Trace: [ 420.683819][ T31] [ 420.683827][ T31] dump_stack_lvl+0x189/0x250 [ 420.683853][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.683887][ T31] ? __pfx__printk+0x10/0x10 [ 420.683921][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 420.683948][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 420.683974][ T31] ? __pfx__printk+0x10/0x10 [ 420.684009][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.684045][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 420.684072][ T31] watchdog+0xf93/0xfe0 [ 420.684104][ T31] ? watchdog+0x1de/0xfe0 [ 420.684141][ T31] kthread+0x70e/0x8a0 [ 420.684173][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.684209][ T31] ? __pfx_kthread+0x10/0x10 [ 420.684233][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.684256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.684280][ T31] ? __pfx_kthread+0x10/0x10 [ 420.684322][ T31] ret_from_fork+0x3f9/0x770 [ 420.684342][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.684363][ T31] ? __switch_to_asm+0x39/0x70 [ 420.684386][ T31] ? __switch_to_asm+0x33/0x70 [ 420.684409][ T31] ? __pfx_kthread+0x10/0x10 [ 420.684430][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.684463][ T31] [ 420.684494][ T31] Sending NMI from CPU 1 to CPUs 0: [ 420.842868][ C0] NMI backtrace for cpu 0 [ 420.842886][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 420.842906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.842922][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 420.842951][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 420.842966][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 420.842981][ C0] RAX: fa1b872c4d240700 RBX: ffffffff81968308 RCX: fa1b872c4d240700 [ 420.842994][ C0] RDX: 0000000000000001 RSI: ffffffff8be336e0 RDI: ffffffff81968308 [ 420.843005][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 420.843018][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330 [ 420.843030][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 420.843040][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 420.843054][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.843064][ C0] CR2: 0000200000404030 CR3: 000000007f3fc000 CR4: 00000000003526f0 [ 420.843079][ C0] Call Trace: [ 420.843086][ C0] [ 420.843092][ C0] default_idle+0x13/0x20 [ 420.843107][ C0] default_idle_call+0x74/0xb0 [ 420.843121][ C0] do_idle+0x1e8/0x510 [ 420.843139][ C0] ? __pfx_do_idle+0x10/0x10 [ 420.843157][ C0] ? do_idle+0xc/0x510 [ 420.843172][ C0] cpu_startup_entry+0x44/0x60 [ 420.843187][ C0] rest_init+0x2de/0x300 [ 420.843204][ C0] start_kernel+0x3a9/0x410 [ 420.843222][ C0] x86_64_start_reservations+0x24/0x30 [ 420.843245][ C0] x86_64_start_kernel+0x143/0x1c0 [ 420.843267][ C0] common_startup_64+0x13e/0x147 [ 420.843294][ C0] [ 421.041226][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 421.048131][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 421.059951][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.070022][ T31] Call Trace: [ 421.073317][ T31] [ 421.076259][ T31] dump_stack_lvl+0x99/0x250 [ 421.080873][ T31] ? __asan_memcpy+0x40/0x70 [ 421.085474][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.090711][ T31] ? __pfx__printk+0x10/0x10 [ 421.095324][ T31] vpanic+0x281/0x750 [ 421.099323][ T31] ? __pfx_vpanic+0x10/0x10 [ 421.103839][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.108613][ T31] ? preempt_schedule+0xae/0xc0 [ 421.113469][ T31] ? preempt_schedule_common+0x83/0xd0 [ 421.118939][ T31] panic+0xb9/0xc0 [ 421.122665][ T31] ? __pfx_panic+0x10/0x10 [ 421.127096][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 421.132481][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 421.138639][ T31] watchdog+0xfd2/0xfe0 [ 421.142803][ T31] ? watchdog+0x1de/0xfe0 [ 421.147141][ T31] kthread+0x70e/0x8a0 [ 421.151213][ T31] ? __pfx_watchdog+0x10/0x10 [ 421.155982][ T31] ? __pfx_kthread+0x10/0x10 [ 421.160581][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.165786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.171001][ T31] ? __pfx_kthread+0x10/0x10 [ 421.175599][ T31] ret_from_fork+0x3f9/0x770 [ 421.180196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.185310][ T31] ? __switch_to_asm+0x39/0x70 [ 421.190097][ T31] ? __switch_to_asm+0x33/0x70 [ 421.194882][ T31] ? __pfx_kthread+0x10/0x10 [ 421.199480][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.204293][ T31] [ 421.207664][ T31] Kernel Offset: disabled [ 421.211985][ T31] Rebooting in 86400 seconds..