last executing test programs: 7.628227027s ago: executing program 0 (id=677): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8b2, 0x7, 0x2, 0xb155, 0x4, 0x7fffffff}, {0x86e7, 0x3, 0x9, 0xa7c, 0x8, 0xc8}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x10000000}) 7.623009427s ago: executing program 0 (id=678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x0, 0x4, 0x6, {{0x2d, 0x4, 0x2, 0x13, 0xb4, 0x68, 0x0, 0x48, 0x4, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x14}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@local, 0x5}]}, @cipso={0x86, 0x52, 0x2, [{0x5, 0xf, "772b6d2b13be19c3099ff32d85"}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x11, "f830158efc173a0dba9d9625f04382"}, {0x1, 0x9, "d1d10c7303b169"}, {0x5, 0x10, "685a007b06f4240f1edd6b94e416"}, {0x7, 0xc, "3e1fe00006728a610465"}, {0x2, 0x3, 'A'}]}, @ssrr={0x89, 0x23, 0x49, [@loopback, @broadcast, @broadcast, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x3d}, @local]}, @timestamp_prespec={0x44, 0x14, 0x18, 0x3, 0xa, [{@private=0xa010100, 0x2}, {@loopback, 0xe0}]}]}}}}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150002000000100016800900028008000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.204719896s ago: executing program 0 (id=682): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x0, 0x7, 0x6, "889a70e69ff3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x2, "be1a"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10) socket$unix(0x1, 0x5, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x204, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x7) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f000100000006001000090000000800010045"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 3.791758799s ago: executing program 0 (id=692): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x8000) read(r2, &(0x7f00000005c0)=""/139, 0x8b) syz_usb_disconnect(r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x8008, 0x4) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4017010000ba1a6766a3c15f93c757367e6683b11f3d2847f342313593559ae1867f2dbe23570b4538c9bca75cf0f1eb52db7ce88c992ba64eb8d91a7179ed6b4ee70ccba36a093bd7f9ccec3b880f1c9d30b1bcb768a85c2c048c9383891989efe5aca1df7d0487499ba1d43235fd1edfc975ab380363"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003040)=[{{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/79, 0x4f}, {&(0x7f00000007c0)=""/189, 0xbd}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f00000030c0)=""/49, 0x31}, {&(0x7f0000000a40)=""/18, 0x12}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0xa, &(0x7f0000001b40)=""/64, 0x40}, 0x9}, {{&(0x7f0000001b80)=@isdn, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/110, 0x6e}, {&(0x7f0000002c80)=""/90, 0x5a}, {&(0x7f0000002d00)=""/119, 0x77}, {&(0x7f0000002d80)=""/248, 0xf8}, {&(0x7f0000002e80)=""/48, 0x30}, {&(0x7f0000002ec0)=""/157, 0x9d}, {&(0x7f0000002f80)=""/33, 0x21}], 0x8}, 0x7}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000200)=0x7f, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd52, 0x0, 0x4f, &(0x7f0000000900)=""/277, 0x11a}, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x212a00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 3.626074848s ago: executing program 3 (id=695): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r0, &(0x7f00000002c0)=""/121, 0xfffffeda) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x1, 0x1, @name="091f22be2799038ee1618b4f85da2bb1f0c15c78124b317a1443a50762759c23"}) close(0x3) syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x200005}) ppoll(&(0x7f0000000080)=[{r3, 0x81}], 0x1, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) move_mount(r4, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20220a0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c18198b989e1ff4f8aeb9e77225de02d2b45c1c77d3a0522834e6c03b1aafab613b910a9e094d55b618c167ca369595011102267840323c9d9b35ca8d8417eb100de632541cfef3f1cc0fad165a35fcc077ec9a56fd95fe55848dcd5da9b41cb1a154ce019eae6dbc1bcef99a19dce75003e55a15bcaa3c01114d3b80eb189e78590515395d67c59e828bf46e1a15f1dbc6ece63b4f878d91db1cf3ed9b8c750a7e5ee03ec6a4f9ce1610b77226adf69ce3e0440ff2719d2e3bd9c2ec80af3c32b34187a6fa13552c", @ANYRESOCT=r4], 0x0, 0x0, 0x0) 3.436139861s ago: executing program 2 (id=697): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2, &(0x7f0000000480)=""/244, 0xf4}, 0x8000}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, &(0x7f0000000200)=""/41, 0x29}, 0x10000}, {{&(0x7f0000000280)=@in, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/123, 0x7b}], 0x7, &(0x7f0000000b40)=""/252, 0xfc}, 0xe0}, {{&(0x7f0000003140)=@generic, 0x80, &(0x7f0000003280)=[{&(0x7f00000031c0)=""/2, 0x2}, {&(0x7f0000003200)=""/99, 0x63}], 0x2, &(0x7f00000032c0)=""/92, 0x5c}, 0x2e3e}], 0x4, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x2, &(0x7f0000000480)=""/244, 0xf4}, 0x8000}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/135, 0x87}], 0x1, &(0x7f0000000200)=""/41, 0x29}, 0x10000}, {{&(0x7f0000000280)=@in, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/180, 0xb4}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/123, 0x7b}], 0x7, &(0x7f0000000b40)=""/252, 0xfc}, 0xe0}, {{&(0x7f0000003140)=@generic, 0x80, &(0x7f0000003280)=[{&(0x7f00000031c0)=""/2, 0x2}, {&(0x7f0000003200)=""/99, 0x63}], 0x2, &(0x7f00000032c0)=""/92, 0x5c}, 0x2e3e}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x7, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x242a02, 0x0) close(r6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) (async) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0xf623ff85f250c649) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r6, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) (async) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r6, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) 3.435947746s ago: executing program 3 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r2}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[], 0x34}}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, r4}, 0x10) 3.273816171s ago: executing program 3 (id=699): r0 = socket$inet6(0xa, 0x805, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$inet(0x2, 0xa, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback={0x300, 0xffff888101827518}, 0x7800, 0x10}}) 3.036220518s ago: executing program 2 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000180)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000001800000000000000b37500000000000000000000000000001800000000000000120d0000000000000000000000000000180000000000000004000000000000000a0000000000000061000000007f00000f01d1c462edbba3b5000000b8010000000f01c10f093e672666470fd225000000809ded88ef66b9800000c00f3235000800000f30"], 0x151}) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000f80)}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0, 0xa7}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x1000, 0x0, 0x2]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_batadv\x00', {0x3}, 0x7ff}) (async) bind$unix(r9, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.014904849s ago: executing program 3 (id=702): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)="86bb653c942d0be1119d3573681f66dde9b23cefc0292e74dfbb17af9e2688660baa77c3752602bdc1569d1318acbf88a2e53e1d60ceae24736580f51f0300329ae071c03591f9268feb11b6e0c0", &(0x7f0000000180)="74e33e953d4b2a1c44b4e65ee0c40000000000", 0x1003, r2}, 0x38) (async) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) (async) syz_open_dev$vivid(0x0, 0x0, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = syz_open_dev$sg(0x0, 0x0, 0x202001) splice(r3, &(0x7f00000001c0)=0xfffffffeffffffff, r4, &(0x7f0000000200)=0x3, 0x8884, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="993c6e3fdbae026abcdcb63900009240000004", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=0x0], 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000228030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) 2.806807317s ago: executing program 2 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400070000002c001080110001006272696467655f737a617665000000001400058005001b000000000005001c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 2.734925428s ago: executing program 2 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) close(0x3) 2.720661083s ago: executing program 1 (id=706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) (async, rerun: 64) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) (rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0x7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg$unix(r13, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2124, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa}}, [@TCA_RATE={0x6, 0x5, {0xf4, 0xe}}]}, 0x2c}}, 0x0) (async) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r6}) r14 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r14, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000, 0x2000}) 2.486161186s ago: executing program 3 (id=708): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a3200000000140000001100010000000004000000000000000a83802872fe595ed37176cbf432a19b895ec7c7c0505a93d5086dc39dd462d0913b5a0773a8dd0e5653b0"], 0x98}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffecd) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.364071667s ago: executing program 1 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r1, 0x6, {0x0, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1c, 0x1, "842d96409f31e7b1b0f578ffdbbf577cad2b3dd42537387ca6f62320e4ebde9037d6d0d71236536d88036b3b6c78f660ba4ccaba5c5f8cc06fd75fbb10bfa401", "75be611da1c8537bcbcee65b37f72367c12d749c8e718379d1d7814efcd9532464ce1a1e9e952be408a7dd8aba8b46e67e70b0c3b5699e3186dadc0bdc65d318", "3f06e514dc88b78d5a24289442b92f3550b1bad6b3ef27734703d91f2573d520", [0x9f, 0x8]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x1010}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004085}, 0x4000894) 1.282087246s ago: executing program 3 (id=714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.259390468s ago: executing program 1 (id=715): syz_io_uring_setup(0x2110, &(0x7f0000000140)={0x0, 0xb426, 0x40, 0x5, 0x1000}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) 1.146428058s ago: executing program 1 (id=717): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x3}, 0x18, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="216db3e5", 0x4}], 0x1) 1.106092006s ago: executing program 1 (id=718): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x4c09, 0x0) 1.06612824s ago: executing program 4 (id=719): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 64) socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64) r0 = fsopen(&(0x7f0000000040)='ubifs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x8) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0x4, 0x6, 0x1, 0xb63, 0x22, 0x2877f90f, 0x8000000, 0x800, 0x1, 0xe97, 0x200, 0x6754, 0x1, 0x2, 0x2, 0x76d5]}) pselect6(0x40, &(0x7f0000000100)={0x6bbfc096, 0x3, 0x6, 0x6, 0x8000000000000000, 0x2, 0x1, 0x2}, &(0x7f0000000140)={0x255, 0x5, 0x1000, 0x3, 0x6b4, 0x5, 0x7fffffffffffffff, 0x200}, &(0x7f0000000180)={0x10000, 0x8, 0x7, 0xdd, 0xffffffffffff1a01, 0x6, 0x2, 0x100000000}, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9de]}, 0x8}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0xf, 0x1, 0x2, 0x0, 0x7f, 0x7, 0x1, 0x7fffffff, 0x0}, &(0x7f00000002c0)=0x20) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x6}}, 0x8, 0x3fa}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x3) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6b, 0x0, 0x0, 0x0, 0x2, 0xbe, "dafadfb0ada2407424c3608fc8e21de9d2641ba5a93ae3e055a92aefb889d5612aba3ce0aa9783284187eb68b01553d5004ab462e032ada733238160c318896a1b69fdb5fb5544c07531bded683ea7b101bd53ee932fa68ed105d028c9eee3067bd42941f97fbbdc86e700"}}, 0x183) (async) setsockopt(r3, 0x8, 0x3, &(0x7f00000005c0)="00733820019b692d3f67cf80665ee6789d51d7ba9fd159c49e5efd584277f64c43a4010958ae038f789da971505e4c20602ec6e7369ec5dd3f6f45d89d572635710a5aeac72cbe95602cfa424989a48e79d31d7461e5d5add7c5291f98d4669309990fafa680ad5db268f1cb0a693712ceec15029116212c98d9eecf9239f0d064b92c27fa3c65792e31a5577d249ac6ca01689ad9a1992f3751a4324732c7a02977914b7af1bea74c085b16ef7d690d1fb7ed68d073585beee5a09c6439b325c0ac64482810e3269a9f9dbe1fb859346529dfd242776911b22d5e66e2e93b76ee", 0xe1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000006c0)=0x7, 0x4) (async, rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000501, r6, &(0x7f0000000800)) (async) r7 = getpgid(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000840)='limits\x00') setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000880)={0x4, 0x3, 0x8, 0x7, 0x2, 0x7, 0xc, 0xe, 0x9, 0x0, 0x8e, 0x5, 0x2, 0x17}, 0xe) (async) madvise(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x12) r9 = semget(0x1, 0x0, 0x2) semctl$GETVAL(r9, 0x4, 0xc, &(0x7f00000008c0)=""/19) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x410001, 0x0) (async, rerun: 64) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000940)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000980)=0x28) (async, rerun: 64) ioctl$VT_RELDISP(r1, 0x5605) (async) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000009c0)='lazytime\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000a00)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, r8, 0xcc9, '\x00', r10, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) 980.230526ms ago: executing program 2 (id=720): close(0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x800}, &(0x7f0000000040)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(0x3) syz_usb_connect(0x6, 0x6, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9f, 0xb0, 0x16, 0x40, 0x147a, 0xe016, 0x98bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}, 0x0) 934.948561ms ago: executing program 4 (id=721): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) r0 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) personality(0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000005c0)=[{0x30, 0x0, [0x3, 0x8, 0x1ff, 0x9, 0x81, 0xffffffff, 0x9, 0x4, 0x5, 0x7, 0x4, 0x10001, 0x3, 0x3ff, 0xea2, 0x5]}, {0x3, 0x0, [0xfffffffa, 0xe, 0x0, 0x8, 0xe487451, 0x800, 0x8, 0x6, 0x200, 0xfffffff9, 0xe, 0xfffffff8, 0x800, 0x0, 0x9, 0x44e34eeb]}, {0x79a9bc9222a54795, 0x0, [0x402, 0x5, 0x6, 0x71f5, 0x5, 0x7, 0x2, 0x7ff, 0x81, 0x5f7, 0x8, 0x81, 0x4, 0x7fffffff, 0x80000001, 0x5]}, {0x8, 0x0, [0x7, 0x0, 0xe08, 0x20dd307e, 0x7ff, 0x0, 0x0, 0x991c, 0x1000, 0x4, 0x80, 0x6, 0x6, 0x0, 0x8000, 0x2]}, {0x20, 0x0, [0x9, 0x80000000, 0x7, 0x8, 0x1, 0x4, 0xa, 0x9, 0x80000001, 0x9, 0x6, 0x8, 0x4, 0x7, 0x8, 0x2]}, {0x2, 0x0, [0xa5, 0x3, 0xa, 0x9, 0x3, 0x4, 0x8001, 0x6, 0xffffffff, 0x80, 0x8001, 0x4, 0xbd9, 0x8, 0xa, 0x80000001]}, {0x22, 0x0, [0x9, 0x2, 0xb, 0xffffff00, 0x0, 0x8e, 0x9, 0x20, 0x7, 0xf03, 0x9, 0x250, 0x430, 0x1, 0x3, 0x9]}, {0x54, 0x0, [0x6, 0x800, 0x5, 0xa5cb, 0xd81, 0x4, 0x9, 0xfff, 0x9, 0x0, 0x1, 0x3e, 0x8, 0x2b4f3988, 0x5, 0x5]}, {0xe, 0x0, [0x6, 0xae, 0x1fca, 0x9, 0x8656, 0x7fff, 0x8, 0x88d, 0x3, 0x6, 0xff, 0x1, 0x10, 0x80, 0x101, 0x9]}, {0x20, 0x0, [0x9, 0x8, 0x4, 0xfffffffa, 0x900000, 0x3, 0x40, 0x80000001, 0xf4000000, 0x3, 0x0, 0x5, 0x8, 0x10001, 0x0, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x2d0}}, 0x20) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r4 = socket(0x2a, 0xa, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 925.667646ms ago: executing program 1 (id=722): prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000580)={0xa, 0x3ff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x1, 0x8, 0x7, 0x47d, 0x0, 0xfffffffffffffffe, 0x40001, 0x5, 0x7f, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0xc4b06}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0x3, 0xd5, 0x0, 0x8, 0x10, 0x8, 0x5, 0xfb, 0xd, 0x7, 0x9, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6, 0x0, '\x00', 0xc, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, 0x0) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00483a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000000060bdd7c30000330006000000000000000000000000000001000000000000000000000000000000002c0200000000000004013e04010907080000000100140500"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x44, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0xe, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa3, 0x13, 0x96}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x6, 0x7, 0x3, 0x40, 0x5}, 0x134, &(0x7f0000000240)={0x5, 0xf, 0x134, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0xcd9, 0xf, 0x9, [0xff3f, 0xc000, 0xff000f, 0xff3f0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x7, 0x0, 0xfff9, 0x80}, @generic={0xf0, 0x10, 0x3, "7c5d431005f9fe3f3c9293000ff4b8a8e5fc3edd26e14181aa30002d41c06b0dbbe2b6be4d78b1e6edd33e919641e2ffe5429568c7df945205595a810f6511e82ac313065ce01737a00d99a047c012cfe289856ac41615e1b26cc577c8915e75872c44db7ff22a7f67e6d20a907fb0a8e981ff0686fdd5a04b6c7159c29d0ca705bfac3fe9d3991a44314cd45e4603e818dffbec009a76d88b042a642ae4260230025d03d084ddb1a81894083cf73bf51264b7730cb864193b2088c7425b5f2205d70d653ca525a837381efc5745db257b8645c58cfe776ff8ffc0ad4c1e34db4aff3891c376b6d74c44e78ba0"}, @generic={0x18, 0x10, 0x4, "d20b6b64506fb794041d2df4bb26ad58b3e6104adb"}]}, 0x5, [{0xc, &(0x7f0000000380)=@string={0xc, 0x3, "dea57dae4ee948139b37"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81d}}, {0x22, &(0x7f0000000480)=@string={0x22, 0x3, "5be3c64effd128cb01ae321accdb5cdd794e537156e8cbe01e60c5e9d1a85e1c"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) r9 = dup(r7) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 704.12249ms ago: executing program 0 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x78, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf7}, @NL80211_ATTR_FRAME={0x46, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@device_b, {0x5, 0x3}}, 0x4000, 0x205, @device_b, {}, @val, @val={0x2d, 0x1a, {0x4000, 0x3, 0x5, 0x0, {0x7, 0x10, 0x0, 0xa, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x9, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r4, &(0x7f0000000240)=""/167, 0xa7) rt_sigaction(0x8, &(0x7f0000000140)={&(0x7f0000000040)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce4123d33eca3eca0fc02c103cb9d2150e000000dbf5", 0x10000000, 0x0, {[0xffffffffffffffff]}}, 0x0, 0x8, &(0x7f00000002c0)) (async) rt_sigaction(0x8, &(0x7f0000000140)={&(0x7f0000000040)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce4123d33eca3eca0fc02c103cb9d2150e000000dbf5", 0x10000000, 0x0, {[0xffffffffffffffff]}}, 0x0, 0x8, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r5, 0x8000000) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r5, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x11c, &(0x7f0000000100)=0x5, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x11c, &(0x7f0000000100)=0x5, 0x0, 0x4) read$FUSE(r5, &(0x7f00000061c0)={0x2020}, 0x2020) 608.169793ms ago: executing program 0 (id=724): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x200a0204) keyctl$invalidate(0x15, r2) (async) keyctl$read(0xb, r2, &(0x7f0000000280)=""/218, 0x1001) (async) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0x2000000, 0x0, 0x10000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x6) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0) 388.09747ms ago: executing program 4 (id=725): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r3, 0x40044591, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000000280)={0xc}) syz_open_dev$usbfs(&(0x7f00000001c0), 0xfff, 0x4080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 287.684055ms ago: executing program 2 (id=726): pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000100)='n', 0x1}], 0x1, 0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) fcntl$setstatus(r3, 0x4, 0x2800) splice(r1, 0x0, r4, 0x0, 0x8000000000000000, 0x0) r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x7d, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x68, 0x0, r9, 0x80, &(0x7f0000000400)=@caif=@util={0x25, "221b23a7ac3fc4e3661c05398b41433b"}}) io_uring_enter(r5, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r10 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000280)={'gretap0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x7, 0x40, 0x7}, {0x5, 0xa2, 0x2, 0x6}, {0x5, 0x5, 0x6, 0xc44b}, {0x1a9f, 0xaf, 0x22, 0x7}, {0x80, 0x7, 0xa}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) 183.878923ms ago: executing program 4 (id=727): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) pread64(r0, 0x0, 0x0, 0x80000002) r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0xfdfd, 0x34343452, 0x140, 0xb4, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x0, 0x1, 0x87, 0x7}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x3ff, 0x8}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 109.385312ms ago: executing program 4 (id=728): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x109341) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) 0s ago: executing program 4 (id=729): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) io_submit(0x0, 0x0, &(0x7f0000002900)) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, 0x0, 0x0) (async) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, r5, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e21, @broadcast=0xac141436}}) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x1, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xf, 0x4f, 0x40, 0x100d, 0xcb01, 0x84d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0x74, 0x9a, 0xdc, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x6, &(0x7f00000002c0)=[{0xcf, 0x0, 0x40, 0x6}, {0x7ff, 0x8, 0x4, 0x8}, {0xdbd, 0x1, 0x62, 0xf9f}, {0xaa, 0x3, 0x8, 0xffa}, {0xff4e, 0x8, 0x5, 0x5}, {0x3, 0x81, 0x4, 0x800}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) getdents(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): tsetting 0 [ 181.527285][ T1211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.537624][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.542022][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.548784][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.579363][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 181.594081][ T1211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.605017][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.618301][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.631644][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 181.646698][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.647079][ T1211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.666527][ T43] usb 4-1: USB disconnect, device number 26 [ 181.678097][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.692287][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.701017][ T1211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.711350][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.725663][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.734279][ T1211] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.742073][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.744813][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.762170][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.770658][ T1211] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 181.773277][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.780676][ T1211] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 181.796747][ T1211] usb 2-1: Product: syz [ 181.801090][ T1211] usb 2-1: Manufacturer: syz [ 181.806638][ T1211] usb 2-1: SerialNumber: syz [ 181.814014][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.821853][ T1211] usb 2-1: config 0 descriptor?? [ 181.830894][ T1211] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 181.841659][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.851639][ T5995] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 181.862101][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.881623][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.901690][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.922554][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.941851][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.962742][ T5858] mceusb 5-1:0.0: Registered À with mce emulator interface version 1 [ 181.971163][ T5858] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 181.990867][ T5858] usb 5-1: USB disconnect, device number 37 [ 182.001588][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 182.011465][ T5995] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.023951][ T5995] usb 3-1: config 0 has no interface number 0 [ 182.035405][ T5995] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.051184][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.067333][ T5995] usb 3-1: Product: syz [ 182.071702][ T5995] usb 3-1: Manufacturer: syz [ 182.076432][ T5995] usb 3-1: SerialNumber: syz [ 182.084294][ T5995] usb 3-1: config 0 descriptor?? [ 182.094320][ T5995] smsc95xx v2.0.0 [ 182.120012][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.129148][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.925404][ T5995] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 182.988032][ T7360] vivid-000: disconnect [ 183.180434][ T5995] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 183.218009][ T5995] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 183.265688][ T5995] usb 3-1: USB disconnect, device number 41 [ 183.373074][ T5953] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 183.381269][ T1211] usb 1-1: USB disconnect, device number 21 [ 183.550973][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 183.562882][ T5953] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.599975][ T5953] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 183.609279][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.618204][ T5953] usb 4-1: Product: syz [ 183.623097][ T5953] usb 4-1: Manufacturer: syz [ 183.627780][ T5953] usb 4-1: SerialNumber: syz [ 183.645852][ T5953] usb 4-1: config 0 descriptor?? [ 183.727609][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 183.787862][ T5953] usb 2-1: USB disconnect, device number 26 [ 183.809178][ T5953] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 184.232014][ T5858] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 184.471480][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 184.508102][ T5858] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 184.541037][ T5858] usb 3-1: config 0 has no interface number 0 [ 184.721489][ T5858] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.901647][ T5858] usb 3-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.914781][ T5858] usb 3-1: config 0 interface 2 has no altsetting 0 [ 184.921732][ T5858] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 184.930799][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.119255][ T5858] usb 3-1: config 0 descriptor?? [ 185.204742][ T5858] usbhid 3-1:0.2: couldn't find an input interrupt endpoint [ 185.889353][ T7358] vivid-000: reconnect [ 185.893905][ T5995] usb 4-1: USB disconnect, device number 27 [ 186.546495][ T7397] GUP no longer grows the stack in syz.2.370 (7397): 200000005000-200000008000 (200000004000) [ 186.572137][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.2.370 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 186.572169][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.572183][ T7397] Call Trace: [ 186.572192][ T7397] [ 186.572201][ T7397] dump_stack_lvl+0x189/0x250 [ 186.572247][ T7397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.572272][ T7397] ? __pfx__printk+0x10/0x10 [ 186.572303][ T7397] ? find_vma+0xe7/0x160 [ 186.572329][ T7397] __get_user_pages+0x24d0/0x2ce0 [ 186.572347][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.572369][ T7397] ? __gup_longterm_locked+0xc68/0x1660 [ 186.572394][ T7397] ? __gup_longterm_locked+0xc68/0x1660 [ 186.572416][ T7397] __gup_longterm_locked+0xde9/0x1660 [ 186.572436][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.572455][ T7397] ? gup_fast_fallback+0x1db4/0x2010 [ 186.572476][ T7397] gup_fast_fallback+0x1e6a/0x2010 [ 186.572507][ T7397] ? __pfx_gup_fast_fallback+0x10/0x10 [ 186.572529][ T7397] ? is_valid_gup_args+0x11f/0x200 [ 186.572549][ T7397] ? get_user_pages_fast+0x4d/0xb0 [ 186.572569][ T7397] get_futex_key+0x938/0x1660 [ 186.572587][ T7397] ? futex_unqueue+0x22/0x240 [ 186.572607][ T7397] ? __pfx_get_futex_key+0x10/0x10 [ 186.572623][ T7397] ? futex_unqueue+0x211/0x240 [ 186.572639][ T7397] ? __futex_wait+0x1d1/0x3e0 [ 186.572662][ T7397] ? __futex_wait+0x34f/0x3e0 [ 186.572687][ T7397] futex_requeue+0x21b/0x19a0 [ 186.572718][ T7397] ? __pfx___futex_wait+0x10/0x10 [ 186.572741][ T7397] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 186.572768][ T7397] ? lock_release+0x4b/0x3e0 [ 186.572790][ T7397] ? __pfx_futex_requeue+0x10/0x10 [ 186.572816][ T7397] ? futex_wait+0x285/0x360 [ 186.572839][ T7397] ? __pfx_futex_wait+0x10/0x10 [ 186.572866][ T7397] ? __might_fault+0xb0/0x130 [ 186.572886][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.572902][ T7397] do_futex+0x362/0x420 [ 186.572922][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.572937][ T7397] ? __pfx_do_futex+0x10/0x10 [ 186.572956][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.572973][ T7397] __se_sys_futex+0x36f/0x400 [ 186.572995][ T7397] ? __pfx___se_sys_futex+0x10/0x10 [ 186.573014][ T7397] ? rcu_is_watching+0x15/0xb0 [ 186.573031][ T7397] ? __x64_sys_futex+0x21/0xf0 [ 186.573051][ T7397] do_syscall_64+0xfa/0x3b0 [ 186.573074][ T7397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.573090][ T7397] ? clear_bhb_loop+0x60/0xb0 [ 186.573107][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.573122][ T7397] RIP: 0033:0x7f2eb278ebe9 [ 186.573143][ T7397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.573158][ T7397] RSP: 002b:00007f2eb3682038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.573179][ T7397] RAX: ffffffffffffffda RBX: 00007f2eb29b6180 RCX: 00007f2eb278ebe9 [ 186.573190][ T7397] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000004000 [ 186.573201][ T7397] RBP: 00007f2eb2811e19 R08: 0000000000000000 R09: 0000000000000001 [ 186.573211][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.573220][ T7397] R13: 00007f2eb29b6218 R14: 00007f2eb29b6180 R15: 00007f2eb2adfa28 [ 186.573238][ T7397] [ 187.451697][ T5858] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 187.522534][ T5953] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 187.601662][ T43] usb 3-1: USB disconnect, device number 42 [ 187.613877][ T5858] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.632621][ T7412] FAULT_INJECTION: forcing a failure. [ 187.632621][ T7412] name failslab, interval 1, probability 0, space 0, times 1 [ 187.648951][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.674776][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.684693][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.0.380 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 187.684722][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.684736][ T7412] Call Trace: [ 187.684743][ T7412] [ 187.684752][ T7412] dump_stack_lvl+0x189/0x250 [ 187.684781][ T7412] ? __pfx____ratelimit+0x10/0x10 [ 187.684819][ T7412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.684844][ T7412] ? __pfx__printk+0x10/0x10 [ 187.684874][ T7412] ? __pfx___might_resched+0x10/0x10 [ 187.684894][ T7412] ? lock_acquire+0x5f/0x360 [ 187.684925][ T7412] should_fail_ex+0x414/0x560 [ 187.684955][ T7412] should_failslab+0xa8/0x100 [ 187.684987][ T7412] __kmalloc_noprof+0xcb/0x4f0 [ 187.685015][ T7412] ? tomoyo_encode+0x28b/0x550 [ 187.685037][ T7412] tomoyo_encode+0x28b/0x550 [ 187.685059][ T7412] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.685082][ T7412] ? tomoyo_domain+0xd9/0x130 [ 187.685106][ T7412] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 187.685135][ T7412] tomoyo_path_number_perm+0x1e8/0x5a0 [ 187.685163][ T7412] ? lock_release+0x4b/0x3e0 [ 187.685193][ T7412] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.685224][ T7412] ? rcu_is_watching+0x15/0xb0 [ 187.685246][ T7412] ? lock_release+0x4b/0x3e0 [ 187.685275][ T7412] ? vfs_write+0x956/0xb30 [ 187.685305][ T7412] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 187.685345][ T7412] ? lock_release+0x4b/0x3e0 [ 187.685378][ T7412] ? __fget_files+0x2a/0x420 [ 187.685396][ T7412] ? __fget_files+0x3a0/0x420 [ 187.685414][ T7412] ? __fget_files+0x2a/0x420 [ 187.685434][ T7412] security_file_ioctl+0xcb/0x2d0 [ 187.685463][ T7412] __se_sys_ioctl+0x47/0x170 [ 187.685490][ T7412] do_syscall_64+0xfa/0x3b0 [ 187.685522][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.685543][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 187.685567][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.685588][ T7412] RIP: 0033:0x7f2f6938ebe9 [ 187.685606][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.685626][ T7412] RSP: 002b:00007f2f6a208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.685650][ T7412] RAX: ffffffffffffffda RBX: 00007f2f695b5fa0 RCX: 00007f2f6938ebe9 [ 187.685667][ T7412] RDX: 0000000000000000 RSI: 00000000c020f509 RDI: 0000000000000004 [ 187.685681][ T7412] RBP: 00007f2f6a208090 R08: 0000000000000000 R09: 0000000000000000 [ 187.685695][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.685708][ T7412] R13: 00007f2f695b6038 R14: 00007f2f695b5fa0 R15: 00007f2f696dfa28 [ 187.685736][ T7412] [ 187.685803][ T7412] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.703063][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 187.715329][ T5858] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.743194][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.746047][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.788659][ T5953] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 187.866093][ T5858] usb 4-1: Product: syz [ 187.880123][ T5953] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 187.898324][ T5995] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 187.913323][ T5953] usb 5-1: config 4 has no interface number 0 [ 187.976704][ T5858] usb 4-1: Manufacturer: syz [ 188.059624][ T5953] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 188.069228][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.077841][ T5953] usb 5-1: Product: syz [ 188.085337][ T5953] usb 5-1: Manufacturer: syz [ 188.090089][ T5953] usb 5-1: SerialNumber: syz [ 188.114166][ T5995] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 188.122667][ T5995] usb 2-1: config 0 has no interface number 0 [ 188.130630][ T5995] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 188.162866][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.172819][ T5995] usb 2-1: Product: syz [ 188.177389][ T5995] usb 2-1: Manufacturer: syz [ 188.183725][ T5995] usb 2-1: SerialNumber: syz [ 188.199683][ T5995] usb 2-1: config 0 descriptor?? [ 188.231572][ T1211] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 188.251861][ T5995] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 188.259976][ T5995] dvb-usb: bulk message failed: -22 (4/0) [ 188.267904][ T5995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 188.294802][ T5995] dvb-usb: bulk message failed: -22 (5/0) [ 188.300604][ T5995] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 188.303345][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.329875][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.340036][ T5995] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 188.367992][ T5953] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 188.374603][ T1211] usb 1-1: device descriptor read/64, error -71 [ 188.385333][ T5953] usb 5-1: No valid video chain found. [ 188.390723][ T5995] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 188.403395][ T5953] usb 5-1: USB disconnect, device number 38 [ 188.472442][ T5952] usb 4-1: USB disconnect, device number 28 [ 188.473507][ T5995] usb 2-1: USB disconnect, device number 27 [ 188.529882][ T7424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.543892][ T7424] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 188.584422][ T7424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.590388][ T7424] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 188.600159][ T7424] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.608435][ T7424] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 188.631559][ T1211] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 188.659039][ T7424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.666535][ T7424] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.703908][ T7424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.717234][ T7424] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.807495][ T1211] usb 1-1: device descriptor read/64, error -71 [ 188.988513][ T1211] usb usb1-port1: attempt power cycle [ 189.442309][ T1211] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 189.743145][ T1211] usb 1-1: device descriptor read/8, error -71 [ 190.001515][ T1211] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 190.115258][ T1211] usb 1-1: device descriptor read/8, error -71 [ 190.144303][ T7443] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.389'. [ 190.160512][ T7443] openvswitch: netlink: Message has 5 unknown bytes. [ 190.344389][ T1211] usb usb1-port1: unable to enumerate USB device [ 190.616113][ T7454] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 190.642123][ T7454] fuse: Unknown parameter 'fdy`m;T̟ ' [ 190.665067][ T7454] syzkaller1: entered promiscuous mode [ 190.671164][ T7454] syzkaller1: entered allmulticast mode [ 190.891474][ T5989] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 191.064106][ T5989] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 191.074271][ T5989] usb 5-1: config 0 has no interface number 0 [ 191.086051][ T5989] usb 5-1: New USB device found, idVendor=126f, idProduct=a006, bcdDevice=bd.cd [ 191.097855][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.101777][ T5953] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 191.109927][ T5989] usb 5-1: Product: syz [ 191.121016][ T5989] usb 5-1: Manufacturer: syz [ 191.130875][ T5989] usb 5-1: SerialNumber: syz [ 191.142616][ T5989] usb 5-1: config 0 descriptor?? [ 191.292832][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.304348][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 191.319466][ T5953] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 191.329064][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.340710][ T5953] usb 4-1: config 0 descriptor?? [ 191.364682][ T5989] usb 5-1: USB disconnect, device number 39 [ 191.431640][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 191.593131][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.603615][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 191.612718][ T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 191.622620][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.640434][ T10] usb 2-1: config 0 descriptor?? [ 191.972168][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 192.009054][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.028715][ T5953] usb 4-1: USB disconnect, device number 29 [ 192.081533][ T5995] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 192.180686][ T10] Bluetooth: Can't get version to change to load ram patch err [ 192.199880][ T10] Bluetooth: Loading patch file failed [ 192.212511][ T10] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 192.221607][ T5995] usb 3-1: device descriptor read/64, error -71 [ 192.228195][ T10] usb 2-1: USB disconnect, device number 28 [ 192.301588][ T5952] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 192.318212][ T7493] netlink: 96 bytes leftover after parsing attributes in process `syz.0.404'. [ 192.434567][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.407'. [ 192.475115][ T5952] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 192.508796][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.526442][ T7506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.716187][ T5995] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 192.773769][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 27330, setting to 64 [ 192.799992][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.818441][ T7508] netlink: 'syz.3.408': attribute type 2 has an invalid length. [ 192.828340][ T7508] netlink: 119 bytes leftover after parsing attributes in process `syz.3.408'. [ 192.840427][ T5952] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 192.851529][ T5953] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 192.859650][ T5952] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 192.873358][ T5952] usb 5-1: Manufacturer: syz [ 192.883092][ T5952] usb 5-1: config 0 descriptor?? [ 192.891601][ T5995] usb 3-1: device descriptor read/64, error -71 [ 193.001822][ T5995] usb usb3-port1: attempt power cycle [ 193.011468][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 193.020472][ T5953] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 193.029324][ T5953] usb 1-1: config 0 has no interface number 0 [ 193.187893][ T5953] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 193.254928][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 193.275559][ T5953] usb 1-1: Product: syz [ 193.285269][ T5953] usb 1-1: SerialNumber: syz [ 193.303222][ T5953] usb 1-1: config 0 descriptor?? [ 193.366298][ T5953] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 193.451637][ T5995] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 193.482492][ T5995] usb 3-1: device descriptor read/8, error -71 [ 193.585327][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.592992][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.600139][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.607485][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.615794][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.624170][ T5953] usb 1-1: USB disconnect, device number 26 [ 193.630217][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 193.630252][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 193.651306][ T5953] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 193.741475][ T5995] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 193.762084][ T5995] usb 3-1: device descriptor read/8, error -71 [ 193.875591][ T5995] usb usb3-port1: unable to enumerate USB device [ 194.365518][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 194.751602][ T1211] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 194.901547][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 194.908828][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 194.921333][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 194.936865][ T1211] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 194.946338][ T1211] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 194.956839][ T1211] usb 4-1: Product: syz [ 194.961057][ T1211] usb 4-1: Manufacturer: syz [ 194.966849][ T1211] usb 4-1: SerialNumber: syz [ 194.975723][ T1211] usb 4-1: config 0 descriptor?? [ 194.997433][ T1211] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 195.049833][ T1211] usb 5-1: USB disconnect, device number 40 [ 195.121634][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 195.303282][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.316116][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.327334][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.340823][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.350226][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.363582][ T43] usb 1-1: config 0 descriptor?? [ 195.451495][ T5995] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 195.604295][ T5995] usb 3-1: config 0 has no interfaces? [ 195.616048][ T5995] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 195.634666][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.643953][ T5995] usb 3-1: Product: syz [ 195.657251][ T5995] usb 3-1: Manufacturer: syz [ 195.667371][ T5995] usb 3-1: SerialNumber: syz [ 195.685525][ T5995] usb 3-1: config 0 descriptor?? [ 195.743447][ T30] audit: type=1326 audit(1755613747.117:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.771784][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.791209][ T30] audit: type=1326 audit(1755613747.117:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.823258][ T30] audit: type=1326 audit(1755613747.147:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.847679][ T30] audit: type=1326 audit(1755613747.147:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.892437][ T30] audit: type=1326 audit(1755613747.147:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.938224][ T30] audit: type=1326 audit(1755613747.147:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fba8778ebe9 code=0x7ffc0000 [ 195.961556][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 195.976080][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 195.986718][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.020328][ T10] usb 2-1: config 0 descriptor?? [ 196.037589][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 196.045625][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 196.053829][ T6572] usb 4-1: Failed to submit usb control message: -110 [ 196.060714][ T6572] usb 4-1: unable to send the bmi data to the device: -110 [ 196.070897][ T43] usb 1-1: USB disconnect, device number 27 [ 196.077465][ T6572] usb 4-1: unable to get target info from device [ 196.090658][ T10] usb 2-1: interface 1 not found [ 196.092736][ T6572] usb 4-1: could not get target info (-110) [ 196.119265][ T6572] usb 4-1: could not probe fw (-110) [ 196.290641][ T43] usb 2-1: USB disconnect, device number 29 [ 196.566353][ T7563] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004 [ 196.574733][ T7563] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 196.751493][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 196.873711][ T7569] netlink: 'syz.1.424': attribute type 317 has an invalid length. [ 196.927377][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.936393][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.947553][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.956797][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.970594][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.980290][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.989896][ T10] usb 5-1: Product: syz [ 196.995997][ T10] usb 5-1: Manufacturer: syz [ 197.016139][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 197.028903][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 197.044059][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.060732][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.180065][ T5953] usb 4-1: USB disconnect, device number 30 [ 197.232740][ T43] usb 5-1: USB disconnect, device number 41 [ 197.279457][ T7576] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 197.581530][ T1211] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 197.991497][ T1211] usb 2-1: config 0 has no interfaces? [ 198.072625][ T43] usb 3-1: USB disconnect, device number 47 [ 198.083864][ T1211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.197069][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.300268][ T1211] usb 2-1: Product: syz [ 198.307132][ T1211] usb 2-1: Manufacturer: syz [ 198.311560][ T5995] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 198.315186][ T1211] usb 2-1: SerialNumber: syz [ 198.327221][ T1211] usb 2-1: config 0 descriptor?? [ 198.368628][ T7589] trusted_key: encrypted_key: insufficient parameters specified [ 198.501116][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.429'. [ 198.516114][ T5995] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.663284][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.682968][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.735777][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.748239][ T5995] usb 5-1: config 0 descriptor?? [ 198.766190][ T5995] cp210x 5-1:0.0: cp210x converter detected [ 198.967494][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.013913][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.046426][ T5995] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 199.055842][ T5995] cp210x 5-1:0.0: querying part number failed [ 199.090320][ T5995] usb 5-1: cp210x converter now attached to ttyUSB0 [ 200.570031][ T43] usb 2-1: USB disconnect, device number 30 [ 200.764527][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.770887][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.919218][ T7607] tipc: Started in network mode [ 200.939215][ T7607] tipc: Node identity 56ff5a0560fe, cluster identity 4711 [ 200.951969][ T7607] tipc: Enabled bearer , priority 0 [ 200.962391][ T7607] syzkaller0: entered promiscuous mode [ 200.971741][ T7607] syzkaller0: entered allmulticast mode [ 200.997712][ T7607] tipc: Resetting bearer [ 201.016952][ T7605] tipc: Resetting bearer [ 201.034384][ T7605] tipc: Disabling bearer [ 201.053048][ T5995] usb 5-1: USB disconnect, device number 42 [ 201.060226][ T5995] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.093700][ T5995] cp210x 5-1:0.0: device disconnected [ 201.444648][ T7623] openvswitch: netlink: IPv6 tunnel dst address is zero [ 201.481800][ T5995] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 201.592086][ T7616] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.635111][ T7616] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 201.652833][ T7616] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 201.653525][ T5995] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 201.672442][ T5995] usb 5-1: config 0 has no interface number 0 [ 201.679304][ T5995] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 201.694540][ T5995] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.707045][ T5995] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 201.728922][ T5995] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 201.739243][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.748002][ T5995] usb 5-1: Product: syz [ 201.756019][ T5995] usb 5-1: Manufacturer: syz [ 201.762436][ T5995] usb 5-1: SerialNumber: syz [ 201.772828][ T7616] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 201.780810][ T7616] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 201.788828][ T7616] kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 201.796916][ T7616] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 201.821834][ T5989] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 201.841578][ T5995] usb 5-1: config 0 descriptor?? [ 201.848119][ T7611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.857842][ T7611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.857846][ T7616] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 201.858103][ T7616] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 201.887715][ T5995] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 201.930840][ T7616] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 201.938733][ T5995] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 201.982104][ T5989] usb 3-1: device descriptor read/64, error -71 [ 202.116503][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.125708][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.261640][ T5989] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 202.413023][ T5989] usb 3-1: device descriptor read/64, error -71 [ 202.522959][ T5989] usb usb3-port1: attempt power cycle [ 202.653137][ T43] usb 5-1: USB disconnect, device number 43 [ 202.688890][ T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 202.738501][ T43] cyberjack 5-1:0.69: device disconnected [ 202.871849][ T5989] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 202.952073][ T5989] usb 3-1: device descriptor read/8, error -71 [ 203.202018][ T1211] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 203.266024][ T5989] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 203.303735][ T5989] usb 3-1: device descriptor read/8, error -71 [ 203.327385][ T7667] tipc: Started in network mode [ 203.332451][ T7667] tipc: Node identity 0a8f45aadee, cluster identity 4711 [ 203.339627][ T7667] tipc: Enabled bearer , priority 0 [ 203.347326][ T7667] syzkaller0: entered promiscuous mode [ 203.358943][ T7667] syzkaller0: entered allmulticast mode [ 203.411866][ T5989] usb usb3-port1: unable to enumerate USB device [ 203.434907][ T1211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.445421][ T1211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.457011][ T1211] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.466389][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.474559][ T1211] usb 1-1: SerialNumber: syz [ 203.487840][ T7666] tipc: Resetting bearer [ 203.501207][ T7666] tipc: Disabling bearer [ 203.687438][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.696380][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.726128][ T1211] usb 1-1: 0:2 : does not exist [ 203.740238][ T1211] usb 1-1: USB disconnect, device number 28 [ 203.770672][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.821951][ T5953] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 203.891579][ T5989] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 203.981519][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 203.991056][ T5953] usb 4-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 204.000301][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.008398][ T5953] usb 4-1: Product: syz [ 204.013724][ T5953] usb 4-1: Manufacturer: syz [ 204.018358][ T5953] usb 4-1: SerialNumber: syz [ 204.024416][ T5953] usb 4-1: config 0 descriptor?? [ 204.045673][ T5989] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.055507][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.064160][ T5989] usb 5-1: Product: syz [ 204.068398][ T5989] usb 5-1: Manufacturer: syz [ 204.073081][ T5989] usb 5-1: SerialNumber: syz [ 204.079275][ T5989] usb 5-1: config 0 descriptor?? [ 204.289239][ T5989] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.435323][ T5953] mxuport 4-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 204.445295][ T5953] mxuport 4-1:0.0: probe with driver mxuport failed with error -5 [ 204.455785][ T5953] usb 4-1: USB disconnect, device number 31 [ 204.776519][ T7693] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 204.788629][ T7693] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.005047][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.014108][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.024700][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.035110][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.045372][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.054149][ T5995] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 205.063865][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.074098][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.085029][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.095120][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.104305][ T7699] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.228674][ T5995] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 205.243424][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.252058][ T5995] usb 1-1: Product: syz [ 205.256278][ T5995] usb 1-1: Manufacturer: syz [ 205.260893][ T5995] usb 1-1: SerialNumber: syz [ 205.268905][ T5995] usb 1-1: config 0 descriptor?? [ 205.276775][ T5995] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 205.451813][ T1211] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 205.502972][ T5989] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.519017][ T5989] usb 5-1: USB disconnect, device number 44 [ 205.617896][ T1211] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.627348][ T1211] usb 4-1: config 1 interface 0 has no altsetting 0 [ 205.638148][ T1211] usb 4-1: string descriptor 0 read error: -22 [ 205.645651][ T1211] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 205.657353][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.673805][ T1211] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 205.683910][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'. [ 205.841536][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 205.869975][ T5216] bcm5974 4-1:1.0: could not read from device [ 205.887240][ T5216] bcm5974 4-1:1.0: could not read from device [ 205.892518][ T1211] usb 4-1: USB disconnect, device number 32 [ 205.902291][ T5876] bcm5974 4-1:1.0: could not read from device [ 205.981700][ T5995] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 205.989154][ T5995] sq905c 1-1:0.0: Reading version command failed [ 205.996023][ T5995] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 206.001585][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 206.014072][ T43] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.022734][ T43] usb 2-1: config 179 has no interface number 0 [ 206.029157][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 206.040621][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 206.052645][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.065271][ T43] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.078855][ T43] usb 2-1: config 179 interface 65 has no altsetting 0 [ 206.086051][ T43] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 206.096630][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.111938][ T43] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 206.192695][ T5216] input input17: unable to receive magic message: -110 [ 206.207884][ T5216] input input17: unable to receive magic message: -32 [ 206.230285][ T5216] input input17: unable to receive magic message: -32 [ 206.238636][ T5216] input input17: unable to receive magic message: -32 [ 206.248651][ T5216] input input17: unable to receive magic message: -32 [ 206.257476][ T5216] input input17: unable to receive magic message: -32 [ 206.312027][ T43] usb 2-1: USB disconnect, device number 31 [ 206.451709][ T5995] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 206.602774][ T5995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.615438][ T5995] usb 5-1: config 0 has no interface number 0 [ 206.627032][ T5995] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 206.643923][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.662520][ T5995] usb 5-1: config 0 descriptor?? [ 206.679683][ T5995] usb 5-1: selecting invalid altsetting 1 [ 206.693812][ T5995] dvb_ttusb_budget: ttusb_init_controller: error [ 206.914404][ T5995] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 207.087534][ T5995] DVB: Unable to find symbol cx22700_attach() [ 207.121353][ T5995] DVB: Unable to find symbol tda10046_attach() [ 207.127645][ T5995] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 207.139079][ T5995] usb 5-1: USB disconnect, device number 45 [ 207.830509][ T1211] usb 1-1: USB disconnect, device number 29 [ 208.031912][ T5995] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 208.081634][ T5953] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 208.161537][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 208.181470][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 208.187804][ T5995] usb 3-1: config 162 has an invalid interface number: 150 but max is 0 [ 208.196302][ T5995] usb 3-1: config 162 has no interface number 0 [ 208.201486][ T1211] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 208.202726][ T5995] usb 3-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.224122][ T5995] usb 3-1: config 162 interface 150 has no altsetting 0 [ 208.233742][ T5995] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 208.242879][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.250935][ T5995] usb 3-1: Product: syz [ 208.255158][ T5995] usb 3-1: Manufacturer: syz [ 208.259798][ T5995] usb 3-1: SerialNumber: syz [ 208.261557][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 208.276402][ T5953] usb 5-1: config 9 has an invalid interface number: 136 but max is 1 [ 208.285778][ T5953] usb 5-1: config 9 has an invalid interface number: 60 but max is 1 [ 208.296185][ T5953] usb 5-1: config 9 has no interface number 0 [ 208.302398][ T5953] usb 5-1: config 9 has no interface number 1 [ 208.308708][ T5953] usb 5-1: config 9 interface 136 has no altsetting 0 [ 208.311716][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 208.317194][ T5953] usb 5-1: config 9 interface 60 has no altsetting 0 [ 208.330642][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.330693][ T5953] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cf.52 [ 208.348349][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.349600][ T10] usb 2-1: config 0 has no interface number 0 [ 208.356560][ T5953] usb 5-1: Product: syz [ 208.367058][ T5953] usb 5-1: Manufacturer: syz [ 208.367653][ T10] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.371730][ T5953] usb 5-1: SerialNumber: syz [ 208.385526][ T1211] usb 1-1: Using ep0 maxpacket: 16 [ 208.388570][ T10] usb 2-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.393533][ T1211] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.408389][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 208.423227][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 208.423949][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.432842][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.453422][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.456036][ T10] usb 2-1: config 0 descriptor?? [ 208.464032][ T1211] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.483206][ T1211] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.487599][ T10] usbhid 2-1:0.2: couldn't find an input interrupt endpoint [ 208.497771][ T1211] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.507271][ T5995] usb 3-1: Found UVC 0.0a device syz (058f:3820) [ 208.520181][ T1211] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.520449][ T5995] usb 3-1: No valid video chain found. [ 208.532301][ T1211] usb 1-1: Manufacturer: syz [ 208.546285][ T1211] usb 1-1: config 0 descriptor?? [ 208.549364][ T5995] usb 3-1: USB disconnect, device number 52 [ 208.650178][ T7731] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 208.658387][ T7731] lo: entered promiscuous mode [ 208.666987][ T7731] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.821606][ T1211] rc_core: IR keymap rc-hauppauge not found [ 208.828817][ T1211] Registered IR keymap rc-empty [ 208.834145][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.871767][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.892240][ T1211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 208.906197][ T1211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 208.920620][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.951522][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.970446][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.979039][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.980853][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.002073][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.031666][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.061518][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.081559][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.101537][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.121654][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.141512][ T1211] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.163267][ T1211] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 209.172838][ T1211] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.259935][ T10] usb 1-1: USB disconnect, device number 30 [ 209.305073][ T5995] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 209.398415][ T7737] FAULT_INJECTION: forcing a failure. [ 209.398415][ T7737] name fail_futex, interval 1, probability 0, space 0, times 1 [ 209.412633][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.1.466 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 209.412664][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.412678][ T7737] Call Trace: [ 209.412686][ T7737] [ 209.412695][ T7737] dump_stack_lvl+0x189/0x250 [ 209.412725][ T7737] ? __pfx____ratelimit+0x10/0x10 [ 209.412917][ T7737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.412944][ T7737] ? __pfx__printk+0x10/0x10 [ 209.412971][ T7737] ? rcu_is_watching+0x15/0xb0 [ 209.412994][ T7737] ? rcu_is_watching+0x15/0xb0 [ 209.413018][ T7737] should_fail_ex+0x414/0x560 [ 209.413051][ T7737] get_futex_key+0x900/0x1660 [ 209.413079][ T7737] ? __pfx_get_futex_key+0x10/0x10 [ 209.413102][ T7737] ? __might_fault+0xb0/0x130 [ 209.413130][ T7737] ? rcu_is_watching+0x15/0xb0 [ 209.413157][ T7737] futex_requeue+0x21b/0x19a0 [ 209.413187][ T7737] ? kstrtoull+0x12f/0x1d0 [ 209.413220][ T7737] ? kstrtouint+0x6e/0xe0 [ 209.413252][ T7737] ? rcu_is_watching+0x15/0xb0 [ 209.413272][ T7737] ? get_pid_task+0x20/0x1f0 [ 209.413299][ T7737] ? __pfx_futex_requeue+0x10/0x10 [ 209.413329][ T7737] ? lock_release+0x4b/0x3e0 [ 209.413367][ T7737] ? lock_release+0x4b/0x3e0 [ 209.413397][ T7737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.413422][ T7737] ? security_file_permission+0x75/0x290 [ 209.413457][ T7737] ? rcu_is_watching+0x15/0xb0 [ 209.413479][ T7737] ? lock_release+0x4b/0x3e0 [ 209.413512][ T7737] ? vfs_write+0x956/0xb30 [ 209.413550][ T7737] do_futex+0x362/0x420 [ 209.413582][ T7737] ? __pfx_vfs_write+0x10/0x10 [ 209.413614][ T7737] ? __pfx_do_futex+0x10/0x10 [ 209.413645][ T7737] __se_sys_futex+0x36f/0x400 [ 209.413673][ T7737] ? fput+0xa0/0xd0 [ 209.413694][ T7737] ? ksys_write+0x22a/0x250 [ 209.413721][ T7737] ? __pfx___se_sys_futex+0x10/0x10 [ 209.413753][ T7737] ? __pfx_ksys_write+0x10/0x10 [ 209.413784][ T7737] ? __x64_sys_futex+0x21/0xf0 [ 209.413826][ T7737] do_syscall_64+0xfa/0x3b0 [ 209.413863][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.413885][ T7737] ? clear_bhb_loop+0x60/0xb0 [ 209.413909][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.413930][ T7737] RIP: 0033:0x7fd3e558ebe9 [ 209.413950][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.413970][ T7737] RSP: 002b:00007fd3e632a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.413993][ T7737] RAX: ffffffffffffffda RBX: 00007fd3e57b6180 RCX: 00007fd3e558ebe9 [ 209.414010][ T7737] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000004000 [ 209.414025][ T7737] RBP: 00007fd3e632a090 R08: 0000000000000000 R09: 0000000000000001 [ 209.414039][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.414052][ T7737] R13: 00007fd3e57b6218 R14: 00007fd3e57b6180 R15: 00007fd3e58dfa28 [ 209.414088][ T7737] [ 209.702519][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.746793][ T5995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.757087][ T5995] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.767883][ T5995] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.778615][ T5995] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.787600][ T5995] usb 3-1: Manufacturer: syz [ 209.797604][ T5995] usb 3-1: config 0 descriptor?? [ 210.019972][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.046504][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.108827][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 210.130163][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.553037][ T1211] usb 3-1: USB disconnect, device number 53 [ 210.818468][ T5953] usb 5-1: USB disconnect, device number 46 [ 210.963689][ T43] usb 2-1: USB disconnect, device number 32 [ 211.124773][ T7758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.472'. [ 211.382333][ T5995] IPVS: starting estimator thread 0... [ 211.521594][ T7774] IPVS: using max 34 ests per chain, 81600 per kthread [ 212.365839][ T7783] netlink: 5108 bytes leftover after parsing attributes in process `syz.1.478'. [ 212.561620][ T5995] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 212.716494][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.726962][ T5995] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.776462][ T5995] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 212.843041][ T5995] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 212.868621][ T5995] usb 5-1: Manufacturer: syz [ 212.893416][ T5995] usb 5-1: config 0 descriptor?? [ 212.941720][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.116341][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.134156][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 213.137296][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.146927][ T43] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 213.150515][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 213.161583][ T43] usb 1-1: config 0 has no interface number 0 [ 213.175163][ T43] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.186904][ T43] usb 1-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.202301][ T43] usb 1-1: config 0 interface 2 has no altsetting 0 [ 213.208964][ T43] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 213.218119][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.241635][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 213.241744][ T43] usb 1-1: config 0 descriptor?? [ 213.257901][ T43] usbhid 1-1:0.2: couldn't find an input interrupt endpoint [ 213.322478][ T5989] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 213.377762][ T5995] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 213.391631][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 213.398833][ T5995] usb 5-1: USB disconnect, device number 47 [ 213.404984][ T10] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 213.418009][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 213.426211][ T10] usb 2-1: can't read configurations, error -61 [ 213.471617][ T5989] usb 4-1: device descriptor read/64, error -71 [ 213.551610][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 213.561598][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 213.703692][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.711573][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 213.714836][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.719747][ T5989] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 213.729970][ T43] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 213.742173][ T10] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 213.747641][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.757997][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 213.764780][ T43] usb 3-1: config 0 descriptor?? [ 213.770215][ T10] usb 2-1: can't read configurations, error -61 [ 213.784972][ T10] usb usb2-port1: attempt power cycle [ 213.861501][ T5989] usb 4-1: device descriptor read/64, error -71 [ 213.971856][ T5989] usb usb4-port1: attempt power cycle [ 213.986110][ T7822] netlink: 76 bytes leftover after parsing attributes in process `syz.4.490'. [ 214.121630][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 214.144460][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 214.150944][ T10] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 214.167022][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 214.174998][ T10] usb 2-1: can't read configurations, error -61 [ 214.187466][ T7827] FAULT_INJECTION: forcing a failure. [ 214.187466][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.227766][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.0.482 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 214.227799][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.227809][ T7827] Call Trace: [ 214.227816][ T7827] [ 214.227823][ T7827] dump_stack_lvl+0x189/0x250 [ 214.227845][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 214.227869][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.227886][ T7827] ? __pfx__printk+0x10/0x10 [ 214.227909][ T7827] ? rcu_is_watching+0x15/0xb0 [ 214.227925][ T7827] should_fail_ex+0x414/0x560 [ 214.227946][ T7827] _copy_to_user+0x31/0xb0 [ 214.227963][ T7827] simple_read_from_buffer+0xe1/0x170 [ 214.227987][ T7827] proc_fail_nth_read+0x1b3/0x220 [ 214.228004][ T7827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.228021][ T7827] ? rw_verify_area+0x2a6/0x4d0 [ 214.228040][ T7827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.228055][ T7827] vfs_read+0x1fd/0xa30 [ 214.228073][ T7827] ? fdget_pos+0x247/0x320 [ 214.228087][ T7827] ? __pfx___mutex_lock+0x10/0x10 [ 214.228108][ T7827] ? __pfx_vfs_read+0x10/0x10 [ 214.228129][ T7827] ? __fget_files+0x3a0/0x420 [ 214.228141][ T7827] ? __fget_files+0x2a/0x420 [ 214.228156][ T7827] ksys_read+0x145/0x250 [ 214.228175][ T7827] ? __pfx_ksys_read+0x10/0x10 [ 214.228195][ T7827] ? rcu_is_watching+0x15/0xb0 [ 214.228209][ T7827] do_syscall_64+0xfa/0x3b0 [ 214.228231][ T7827] ? rcu_is_watching+0x15/0xb0 [ 214.228244][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.228259][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 214.228274][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.228289][ T7827] RIP: 0033:0x7f2f6938d5fc [ 214.228302][ T7827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 214.228315][ T7827] RSP: 002b:00007f2f6a1c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.228331][ T7827] RAX: ffffffffffffffda RBX: 00007f2f695b6180 RCX: 00007f2f6938d5fc [ 214.228342][ T7827] RDX: 000000000000000f RSI: 00007f2f6a1c60a0 RDI: 0000000000000008 [ 214.228351][ T7827] RBP: 00007f2f6a1c6090 R08: 0000000000000000 R09: 0000000000000001 [ 214.228361][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.228369][ T7827] R13: 00007f2f695b6218 R14: 00007f2f695b6180 R15: 00007f2f696dfa28 [ 214.228385][ T7827] [ 214.707667][ T5989] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 214.718613][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 214.735675][ T5995] usb 1-1: USB disconnect, device number 31 [ 214.752778][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 214.758909][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.792092][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 214.797622][ T5989] usb 4-1: device descriptor read/8, error -71 [ 214.806143][ T43] usb 3-1: USB disconnect, device number 54 [ 214.806306][ T10] usb 2-1: too many configurations: 32, using maximum allowed: 8 [ 214.922439][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 214.937517][ T10] usb 2-1: can't read configurations, error -61 [ 214.964176][ T10] usb usb2-port1: unable to enumerate USB device [ 215.151519][ T5989] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 215.183057][ T5989] usb 4-1: device descriptor read/8, error -71 [ 215.292929][ T5989] usb usb4-port1: unable to enumerate USB device [ 215.355587][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.363174][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.539892][ T7847] blktrace: Concurrent blktraces are not allowed on sg0 [ 215.941566][ T5989] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 216.037283][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.498'. [ 216.060796][ T7859] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 216.071546][ T5989] usb 3-1: device descriptor read/64, error -71 [ 216.105816][ T7859] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 216.264354][ T30] audit: type=1800 audit(1755613767.637:101): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.501" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 216.311769][ T5989] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 216.567891][ T7873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.502'. [ 216.798561][ T5989] usb 3-1: device descriptor read/64, error -71 [ 216.978248][ T5989] usb usb3-port1: attempt power cycle [ 217.357058][ T5989] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 217.443929][ T5989] usb 3-1: device descriptor read/8, error -71 [ 217.671506][ T5953] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 217.732569][ T5989] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 217.753169][ T5989] usb 3-1: device descriptor read/8, error -71 [ 217.851564][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 217.862297][ T5989] usb usb3-port1: unable to enumerate USB device [ 217.877316][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 217.886814][ T5953] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 217.895467][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.905989][ T5953] usb 1-1: config 0 has no interface number 0 [ 217.920251][ T5953] usb 1-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.940738][ T5953] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 217.950694][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.186993][ T5953] usb 1-1: config 0 descriptor?? [ 218.411759][ T5989] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 218.415747][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.428050][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.443559][ T5953] usb 1-1: USB disconnect, device number 32 [ 218.551505][ T5989] usb 4-1: device descriptor read/64, error -71 [ 218.987938][ T5989] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 219.093784][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 219.144014][ T5989] usb 4-1: device descriptor read/64, error -71 [ 219.322438][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 219.329531][ T5989] usb usb4-port1: attempt power cycle [ 219.343703][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.361742][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.375949][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.389858][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.401759][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.679446][ T10] usb 2-1: config 0 descriptor?? [ 219.749404][ T5989] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 219.792167][ T5989] usb 4-1: device descriptor read/8, error -71 [ 220.041636][ T5989] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 220.088046][ T5989] usb 4-1: device descriptor read/8, error -71 [ 220.185197][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.208355][ T5989] usb usb4-port1: unable to enumerate USB device [ 220.218312][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.231920][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.243885][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.253937][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.268948][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.277348][ T10] microsoft 0003:045E:07DA.0006: unknown main item tag 0x6 [ 220.286718][ T10] microsoft 0003:045E:07DA.0006: item fetching failed at offset 33/34 [ 220.300030][ T10] microsoft 0003:045E:07DA.0006: parse failed [ 220.321514][ T5924] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 220.331755][ T10] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 220.386345][ T43] usb 2-1: USB disconnect, device number 37 [ 220.451731][ T5924] usb 1-1: device descriptor read/64, error -71 [ 220.559507][ T7944] netlink: 548 bytes leftover after parsing attributes in process `syz.2.520'. [ 220.661548][ T1211] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 220.691569][ T5924] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 220.812718][ T1211] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 220.821073][ T1211] usb 5-1: config 0 has no interface number 0 [ 220.829349][ T1211] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 220.831533][ T5924] usb 1-1: device descriptor read/64, error -71 [ 220.838713][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.853284][ T1211] usb 5-1: Product: syz [ 220.857571][ T1211] usb 5-1: Manufacturer: syz [ 220.862325][ T1211] usb 5-1: SerialNumber: syz [ 220.868627][ T1211] usb 5-1: config 0 descriptor?? [ 220.880362][ T1211] xr_serial 5-1:0.46: More than one union descriptor, skipping ... [ 220.961703][ T5924] usb usb1-port1: attempt power cycle [ 221.125104][ T7953] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 221.211678][ T5989] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 221.226936][ T5858] usb 5-1: USB disconnect, device number 48 [ 221.301466][ T5924] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 221.332149][ T5924] usb 1-1: device descriptor read/8, error -71 [ 221.362928][ T5989] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.372578][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.428323][ T5989] usb 2-1: config 0 descriptor?? [ 221.444247][ T5989] cp210x 2-1:0.0: cp210x converter detected [ 221.518337][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 221.571667][ T5924] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 221.595119][ T7958] input: syz0 as /devices/virtual/input/input19 [ 221.602732][ T5924] usb 1-1: device descriptor read/8, error -71 [ 221.721745][ T5924] usb usb1-port1: unable to enumerate USB device [ 221.891707][ T5989] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 222.050279][ T5989] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 222.059714][ T5989] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 222.130293][ T5989] usb 2-1: cp210x converter now attached to ttyUSB0 [ 222.170572][ T5989] usb 2-1: USB disconnect, device number 38 [ 222.229417][ T5989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.268383][ T5989] cp210x 2-1:0.0: device disconnected [ 222.525663][ T7974] tls_set_device_offload: netdev not found [ 222.554095][ T1211] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 222.721668][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 222.730723][ T1211] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 222.742361][ T1211] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 222.776694][ T1211] usb 5-1: config 0 has no interface number 0 [ 222.795946][ T1211] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=80.75 [ 222.809494][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.818115][ T1211] usb 5-1: Product: syz [ 222.824041][ T1211] usb 5-1: Manufacturer: syz [ 222.829581][ T1211] usb 5-1: SerialNumber: syz [ 222.831452][ T5995] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 222.848830][ T1211] usb 5-1: config 0 descriptor?? [ 222.991564][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 222.999285][ T5995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.016942][ T5995] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 223.142012][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 223.169295][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 223.216959][ T5995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 223.233827][ T5995] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.262657][ T7990] Invalid logical block size (7) [ 223.301087][ T5995] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 223.317988][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.335106][ T5995] usb 4-1: Product: syz [ 223.345773][ T5995] usb 4-1: Manufacturer: syz [ 223.355423][ T5995] usb 4-1: SerialNumber: syz [ 223.373744][ T5995] usb 4-1: config 0 descriptor?? [ 223.384056][ T7977] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 223.697891][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.708877][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.758994][ T5953] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 223.883847][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 223.981756][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 223.999894][ T5953] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 224.009303][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.021115][ T5953] usb 1-1: Product: syz [ 224.039250][ T5953] usb 1-1: Manufacturer: syz [ 224.060941][ T5953] usb 1-1: SerialNumber: syz [ 224.079812][ T5953] usb 1-1: config 0 descriptor?? [ 224.096313][ T5953] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 224.120251][ T8006] bridge0: entered promiscuous mode [ 224.125988][ T8006] macsec1: entered allmulticast mode [ 224.133129][ T8006] bridge0: entered allmulticast mode [ 224.544989][ T5953] gspca_vc032x: reg_w err -71 [ 224.550061][ T5953] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 224.584176][ T5953] usb 1-1: USB disconnect, device number 37 [ 224.771465][ T5995] rc_core: IR keymap rc-snapstream-firefly not found [ 224.778244][ T5995] Registered IR keymap rc-empty [ 224.784107][ T5995] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 224.794933][ T5995] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 224.819952][ T5995] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 225.180620][ T8014] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 225.220968][ T8014] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 225.238256][ T8014] wg1: entered promiscuous mode [ 225.248988][ T8014] wg1: entered allmulticast mode [ 225.346552][ T1211] option 5-1:0.255: GSM modem (1-port) converter detected [ 225.363561][ T1211] usb 5-1: USB disconnect, device number 49 [ 225.375828][ T1211] option 5-1:0.255: device disconnected [ 225.487025][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 225.487128][ T5953] usb 4-1: USB disconnect, device number 41 [ 225.511697][ T5950] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 225.701927][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 225.709280][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.718189][ T5950] usb 1-1: config 4 interface 0 has no altsetting 0 [ 225.728425][ T5950] usb 1-1: string descriptor 0 read error: -22 [ 225.734768][ T5950] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 225.744762][ T5950] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 225.758820][ T5950] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 225.770836][ T5950] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.782770][ T5950] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 225.790213][ T5950] usb 1-1: media controller created [ 225.804469][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.852202][ T1211] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 225.911600][ T5953] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 225.953278][ T30] audit: type=1326 audit(1755613777.327:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 225.963006][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.983363][ T30] audit: type=1326 audit(1755613777.327:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 226.009398][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.019985][ T30] audit: type=1326 audit(1755613777.327:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 226.050910][ T30] audit: type=1326 audit(1755613777.327:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 226.090636][ T1211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.103494][ T1211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.113984][ T30] audit: type=1326 audit(1755613777.327:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 226.141658][ T5953] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 226.152761][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 226.164428][ T1211] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.175629][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.184040][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 226.197069][ T30] audit: type=1326 audit(1755613777.327:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2eb278ebe9 code=0x7ffc0000 [ 226.220168][ T1211] usb 5-1: Product: syz [ 226.224604][ T1211] usb 5-1: Manufacturer: syz [ 226.230386][ T1211] usb 5-1: SerialNumber: syz [ 226.236020][ T5953] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 226.247477][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.275752][ T5953] usb 4-1: config 0 descriptor?? [ 226.843515][ T5950] zl10353_read_register: readreg error (reg=127, ret==0) [ 227.008725][ T5950] usb 1-1: USB disconnect, device number 38 [ 227.011237][ T8032] fuse: Unknown parameter '0x00000000000000040x000000000000000400000000000000000000' [ 227.017821][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 227.043773][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 227.080418][ T5953] usb 4-1: USB disconnect, device number 42 [ 228.487971][ T1211] usb 5-1: 0:2 : does not exist [ 228.497019][ T1211] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 228.581563][ T1211] usb 5-1: USB disconnect, device number 50 [ 228.635335][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.228324][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 229.262267][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 229.317954][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 229.338737][ T8046] bridge0: port 3(vlan2) entered blocking state [ 229.357948][ T8046] bridge0: port 3(vlan2) entered disabled state [ 229.366967][ T8046] vlan2: entered allmulticast mode [ 229.375956][ T8046] bridge0: entered allmulticast mode [ 229.484529][ T8046] vlan2: left allmulticast mode [ 229.494073][ T5953] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 229.524192][ T8046] bridge0: left allmulticast mode [ 229.582233][ T5995] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 229.659317][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 229.668569][ T8066] veth0_to_bond: entered allmulticast mode [ 229.675273][ T5953] usb 4-1: no configurations [ 229.680164][ T5953] usb 4-1: can't read configurations, error -22 [ 229.731943][ T5995] usb 3-1: Invalid ep0 maxpacket: 64 [ 229.786875][ T8068] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 229.828677][ T8068] team0 (unregistering): Port device team_slave_0 removed [ 229.833459][ T5953] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 229.853025][ T8068] team0 (unregistering): Port device team_slave_1 removed [ 229.881828][ T5995] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 230.002450][ T5953] usb 4-1: no configurations [ 230.017441][ T5953] usb 4-1: can't read configurations, error -22 [ 230.024475][ T1211] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 230.039441][ T5953] usb usb4-port1: attempt power cycle [ 230.051667][ T5995] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.061560][ T5995] usb usb3-port1: attempt power cycle [ 230.140994][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 230.192525][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 230.199860][ T1211] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 230.210900][ T1211] usb 5-1: config 0 has no interface number 0 [ 230.268396][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 230.278544][ T8083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.451473][ T1211] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 230.472432][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.488837][ T1211] usb 5-1: Product: syz [ 230.495287][ T1211] usb 5-1: Manufacturer: syz [ 230.499941][ T1211] usb 5-1: SerialNumber: syz [ 230.507754][ T1211] usb 5-1: config 0 descriptor?? [ 230.514586][ T1211] smsc95xx v2.0.0 [ 230.521860][ T5995] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 230.524761][ T5953] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 230.552682][ T5953] usb 4-1: no configurations [ 230.552702][ T5995] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.557493][ T5953] usb 4-1: can't read configurations, error -22 [ 230.803130][ T5953] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 230.810758][ T5950] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 230.833899][ T5953] usb 4-1: no configurations [ 230.839525][ T5953] usb 4-1: can't read configurations, error -22 [ 230.846203][ T5953] usb usb4-port1: unable to enumerate USB device [ 230.861593][ T5995] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 230.890869][ T8088] fuse: Bad value for 'fd' [ 230.895930][ T5995] usb 3-1: Invalid ep0 maxpacket: 64 [ 230.903055][ T5995] usb usb3-port1: unable to enumerate USB device [ 230.961636][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 230.971324][ T5950] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 230.980772][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.990895][ T5950] usb 2-1: Product: syz [ 230.995648][ T5950] usb 2-1: Manufacturer: syz [ 231.007948][ T5950] usb 2-1: SerialNumber: syz [ 231.014000][ T8090] kvm: user requested TSC rate below hardware speed [ 231.029510][ T5950] usb 2-1: config 0 descriptor?? [ 231.036282][ T8090] netlink: 1 bytes leftover after parsing attributes in process `syz.4.552'. [ 231.046890][ T5950] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 231.048311][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 231.066425][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 231.151453][ T5953] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 231.244420][ T5950] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 231.311459][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 231.335950][ T5953] usb 1-1: config 6 has an invalid interface number: 76 but max is 0 [ 231.351563][ T5953] usb 1-1: config 6 has an invalid descriptor of length 204, skipping remainder of the config [ 231.368456][ T5953] usb 1-1: config 6 has no interface number 0 [ 231.375139][ T5953] usb 1-1: config 6 interface 76 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 231.388732][ T5953] usb 1-1: config 6 interface 76 has no altsetting 0 [ 231.402691][ T5953] usb 1-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=c7.98 [ 231.422396][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.436194][ T5953] usb 1-1: Product: ގ⋖鍓င凾䷥벺㈔ૹ鱝⠖ຕ봊잕몽鰜Ꮢ赬뿹侬쬻⬁㛂궎㧆䗛洵ϴ芻⥿䦮ʣ⅀旎訒Ե拏⚒肶ℎ湵雐曅적ꍙ鳬햛ꃉꦦହ牑 ﲻ狵赵ᰙ㷖懀ꁯ㮙䛲쑵낃嗺賈￭騁컠種汩罝 [ 231.465701][ T5953] usb 1-1: SerialNumber: 礇笪듷㸻⼷験嶷줏ꜰ㎔蹷癛텉瘣៣ᡈ薯쇲㽈龌둉缪च࡚钞⡌螳ꃁਭ饕萉✔웙ᙘ窔ㄸ饕䀫胛캔폭࡯磙 [ 231.567386][ T1211] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 231.713196][ T5953] asix 1-1:6.76 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.731949][ T5953] asix 1-1:6.76: probe with driver asix failed with error -71 [ 231.752863][ T5953] usb 1-1: USB disconnect, device number 39 [ 232.821621][ T5953] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 232.921529][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 233.021540][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 233.034622][ T5953] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 233.062486][ T5950] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 233.071177][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.084430][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.097728][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.118329][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.135266][ T5953] usb 3-1: New USB device found, idVendor=b760, idProduct=0932, bcdDevice=80.ea [ 233.152863][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.168131][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 233.179106][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.191701][ T5953] usb 3-1: Product: syz [ 233.204243][ T5953] usb 3-1: Manufacturer: syz [ 233.210123][ T43] usb 4-1: SerialNumber: syz [ 233.219197][ T5953] usb 3-1: SerialNumber: syz [ 233.233586][ T5953] usb 3-1: config 0 descriptor?? [ 233.251616][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 233.265195][ T5950] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.275642][ T5950] usb 1-1: config 0 has no interface number 0 [ 233.289937][ T5950] usb 1-1: config 0 interface 1 has no altsetting 0 [ 233.304284][ T5950] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.77 [ 233.322763][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.336809][ T5950] usb 1-1: Product: syz [ 233.345472][ T5950] usb 1-1: Manufacturer: syz [ 233.352804][ T5950] usb 1-1: SerialNumber: syz [ 233.366553][ T5950] usb 1-1: config 0 descriptor?? [ 233.502845][ T5953] usb 3-1: USB disconnect, device number 63 [ 233.521644][ T43] usb 4-1: 0:2 : does not exist [ 233.577720][ T43] usb 4-1: USB disconnect, device number 47 [ 233.578806][ T5924] usb 2-1: USB disconnect, device number 39 [ 233.590077][ T8110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1677391066 (6709564264 ns) > initial count (4324526900 ns). Using initial count to start timer. [ 233.636023][ T8116] netlink: 14 bytes leftover after parsing attributes in process `syz.3.565'. [ 233.677620][ T8116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.730345][ T5950] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 233.776366][ T8119] IPVS: set_ctl: invalid protocol: 208 224.0.0.2:20001 [ 233.788500][ T8116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.803950][ T5950] usb 1-1: USB disconnect, device number 40 [ 233.845332][ T8116] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 233.859258][ T8116] bond0 (unregistering): Released all slaves [ 234.159845][ T8123] random: crng reseeded on system resumption [ 235.350636][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 235.485851][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 235.597990][ T1211] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 235.639501][ T1211] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 235.696638][ T1211] usb 5-1: USB disconnect, device number 51 [ 235.922158][ T8169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.581'. [ 236.189257][ T1211] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 236.241629][ T5950] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 236.421459][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 236.426730][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 236.433718][ T1211] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.442427][ T5950] usb 3-1: config 211 has an invalid interface number: 98 but max is 0 [ 236.451218][ T5950] usb 3-1: config 211 has no interface number 0 [ 236.459834][ T1211] usb 5-1: config 0 has no interface number 0 [ 236.466201][ T5950] usb 3-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 236.476795][ T1211] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.496658][ T8158] syz.1.577 (8158): drop_caches: 2 [ 236.504541][ T5950] usb 3-1: config 211 interface 98 has no altsetting 0 [ 236.511640][ T1211] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.543151][ T1211] usb 5-1: config 0 interface 2 has no altsetting 0 [ 236.550909][ T5950] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 236.563607][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.614137][ T1211] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 236.645609][ T5950] usb 3-1: Product: syz [ 236.660208][ T5950] usb 3-1: Manufacturer: syz [ 236.666330][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.682430][ T5950] usb 3-1: SerialNumber: syz [ 236.729062][ T8169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 236.738651][ T1211] usb 5-1: config 0 descriptor?? [ 236.789284][ T1211] usbhid 5-1:0.2: couldn't find an input interrupt endpoint [ 236.822219][ T30] audit: type=1326 audit(1755613788.197:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 236.921857][ T5924] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 236.927413][ T30] audit: type=1326 audit(1755613788.197:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 236.969623][ T5950] mct_u232 3-1:211.98: MCT U232 converter detected [ 236.979616][ T5950] mct_u232 ttyUSB0: expected endpoint missing [ 236.993302][ T30] audit: type=1326 audit(1755613788.267:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.024048][ T5950] usb 3-1: USB disconnect, device number 64 [ 237.031357][ T5950] mct_u232 3-1:211.98: device disconnected [ 237.037412][ T30] audit: type=1326 audit(1755613788.267:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.073527][ T30] audit: type=1326 audit(1755613788.267:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.097652][ T5924] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.106557][ T5924] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 237.119348][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.166882][ T30] audit: type=1326 audit(1755613788.267:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.253021][ T30] audit: type=1326 audit(1755613788.267:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.282919][ T30] audit: type=1326 audit(1755613788.267:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.288454][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 237.322342][ T30] audit: type=1326 audit(1755613788.267:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.344930][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 237.361844][ T30] audit: type=1326 audit(1755613788.267:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.3.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bcb8ebe9 code=0x7ffc0000 [ 237.388040][ T5924] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.398944][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.407748][ T5924] usb 2-1: Product: syz [ 237.412266][ T5924] usb 2-1: Manufacturer: syz [ 237.438317][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 237.446248][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 237.457867][ T5924] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 237.466279][ T5924] cdc_wdm 2-1:1.0: Unknown control protocol [ 237.673780][ T8192] fuse: Bad value for 'fd' [ 237.925304][ T8199] kvm: pic: non byte write [ 238.025374][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 6 bytes [ 238.033959][ T8207] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[8207] [ 238.806873][ T5924] usb 5-1: USB disconnect, device number 52 [ 239.361702][ T5924] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 239.559018][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 239.578431][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 239.592236][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 239.608847][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.647218][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.648141][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.684840][ T8230] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 239.784646][ T5924] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 239.794501][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.813463][ T5924] usb 1-1: Product: syz [ 239.822284][ T5924] usb 1-1: Manufacturer: syz [ 239.826937][ T5924] usb 1-1: SerialNumber: syz [ 239.854454][ T5858] usb 2-1: USB disconnect, device number 40 [ 239.896285][ T5924] usb 1-1: config 0 descriptor?? [ 240.138623][ T5924] usb 1-1: USB disconnect, device number 41 [ 240.512075][ T8255] veth1: entered promiscuous mode [ 241.071576][ T1211] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 241.079872][ T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 241.097236][ T8278] program syz.0.612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.111485][ T5950] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 241.221483][ T5953] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 241.232757][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.241618][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.254770][ T1211] usb 2-1: config 0 has no interfaces? [ 241.262830][ T1211] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.273203][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.286875][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 241.294269][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.302874][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.315626][ T1211] usb 2-1: Product: syz [ 241.319997][ T1211] usb 2-1: Manufacturer: syz [ 241.325038][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.341458][ T1211] usb 2-1: SerialNumber: syz [ 241.347513][ T5950] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.357831][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.367054][ T1211] usb 2-1: config 0 descriptor?? [ 241.372400][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.383999][ T5950] usb 4-1: Product: syz [ 241.389601][ T5953] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 241.401528][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.410060][ T5950] usb 4-1: Manufacturer: syz [ 241.416135][ T5950] usb 4-1: SerialNumber: syz [ 241.422903][ T43] usb 5-1: Product: syz [ 241.427172][ T5953] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 241.436384][ T43] usb 5-1: Manufacturer: syz [ 241.444742][ T5950] usb 4-1: config 0 descriptor?? [ 241.452456][ T5953] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 241.467004][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 241.473433][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 241.478689][ T5953] usb 3-1: Manufacturer: syz [ 241.484177][ T5953] usb 3-1: SerialNumber: syz [ 241.490418][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 241.498035][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 241.687094][ T5950] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.714128][ T5953] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 241.728130][ T5953] usb 3-1: USB disconnect, device number 66 [ 242.039613][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 242.080865][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.093740][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.111588][ T1211] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 242.281249][ T1211] usb 1-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 242.299642][ T1211] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 242.317764][ T1211] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 242.327507][ T8286] loop7: detected capacity change from 0 to 7 [ 242.335229][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.356326][ T1211] usb 1-1: config 0 descriptor?? [ 242.384834][ T1211] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 242.637448][ T8286] Dev loop7: unable to read RDB block 7 [ 242.643511][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 242.651576][ T8286] loop7: unable to read partition table [ 242.653314][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 242.668620][ T8286] loop7: partition table beyond EOD, truncated [ 242.685395][ T8286] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 242.924743][ T8293] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 242.943436][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.959717][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.964652][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.019080][ T43] usb 1-1: USB disconnect, device number 42 [ 243.099494][ T8299] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 243.139863][ T8299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.141593][ T1211] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 243.158363][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 243.169773][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 243.188387][ T5950] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 243.205801][ T5950] usb 4-1: USB disconnect, device number 48 [ 243.215281][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 243.260376][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.274743][ T8299] bond2: (slave batadv1): making interface the new active one [ 243.287335][ T8299] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 243.301507][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 243.309132][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.331043][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.344063][ T1211] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 243.353505][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.364483][ T1211] usb 3-1: config 0 descriptor?? [ 243.809708][ T1211] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 243.838551][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 243.850904][ T5950] usb 5-1: USB disconnect, device number 53 [ 243.923408][ T43] usb 2-1: USB disconnect, device number 41 [ 244.021877][ T1211] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 244.341593][ T1211] ft260 0003:0403:6030.0007: failed to retrieve system status [ 244.364169][ T1211] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -5 [ 244.539427][ T1211] usb 3-1: USB disconnect, device number 67 [ 247.338086][ T8357] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 247.381974][ T8359] capability: warning: `syz.0.632' uses 32-bit capabilities (legacy support in use) [ 247.455365][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 247.583263][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 247.651490][ T5924] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 247.801804][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 247.808493][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.823407][ T5924] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 247.838898][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.850106][ T5924] usb 1-1: Product: syz [ 247.854637][ T5924] usb 1-1: Manufacturer: syz [ 247.860750][ T5924] usb 1-1: SerialNumber: syz [ 247.861988][ T1211] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 247.869557][ T5924] usb 1-1: config 0 descriptor?? [ 247.880545][ T5924] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 248.022983][ T1211] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.031904][ T1211] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.043311][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.052467][ T1211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 248.063526][ T1211] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 248.076466][ T1211] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.082040][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.087953][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.097084][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.111008][ T5995] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 248.125185][ T1211] usb 2-1: Product: syz [ 248.129853][ T5924] usb 1-1: qt2_attach - failed to power on unit: -71 [ 248.132702][ T1211] usb 2-1: Manufacturer: syz [ 248.139896][ T5924] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 248.155553][ T5924] usb 1-1: USB disconnect, device number 43 [ 248.168248][ T1211] cdc_wdm 2-1:1.0: skipping garbage [ 248.177997][ T1211] cdc_wdm 2-1:1.0: skipping garbage [ 248.185434][ T1211] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 248.191680][ T1211] cdc_wdm 2-1:1.0: Unknown control protocol [ 248.251521][ T5995] usb 5-1: device descriptor read/64, error -71 [ 248.501480][ T5995] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 248.631616][ T5995] usb 5-1: device descriptor read/64, error -71 [ 248.722707][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 7 bytes [ 248.743870][ T5995] usb usb5-port1: attempt power cycle [ 248.955912][ T8384] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8384 comm: syz.2.639) [ 248.973932][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 248.973952][ T30] audit: type=1800 audit(1755613800.347:119): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.639" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=23850 res=0 errno=0 [ 249.111476][ T5995] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 249.132080][ T5995] usb 5-1: device descriptor read/8, error -71 [ 249.371457][ T5995] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 249.391990][ T5995] usb 5-1: device descriptor read/8, error -71 [ 249.512600][ T5995] usb usb5-port1: unable to enumerate USB device [ 250.188041][ T8409] netlink: 5 bytes leftover after parsing attributes in process `syz.3.646'. [ 250.231678][ T8409] 0XD: renamed from macvtap0 (while UP) [ 250.407776][ T8409] 0XD: entered allmulticast mode [ 250.475740][ T8409] veth0_macvtap: entered allmulticast mode [ 250.493797][ T8409] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 250.626797][ T5858] usb 2-1: USB disconnect, device number 42 [ 250.789955][ T8418] program syz.1.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.072015][ T8433] netlink: 'syz.2.650': attribute type 4 has an invalid length. [ 251.079941][ T8433] netlink: 17 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.206614][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.218617][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.391641][ T5858] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 251.762539][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 251.770483][ T5858] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.782214][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.819288][ T5858] usb 5-1: Product: syz [ 251.824931][ T5858] usb 5-1: Manufacturer: syz [ 251.829538][ T5858] usb 5-1: SerialNumber: syz [ 251.872543][ T5858] usb 5-1: config 0 descriptor?? [ 252.029677][ T8455] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 252.040667][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.048225][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.063607][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.070926][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.078426][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.085637][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.117257][ T8455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 252.136669][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 252.198313][ T5858] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.387240][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.425654][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.611472][ T5924] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 252.764646][ T5924] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.773592][ T5924] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.791065][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.833687][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.929744][ T5858] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 252.950514][ T5858] usb 5-1: USB disconnect, device number 58 [ 253.020666][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 253.061679][ T5924] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.070870][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.087233][ T5924] usb 2-1: Product: syz [ 253.097551][ T5924] usb 2-1: Manufacturer: syz [ 253.122347][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 253.140435][ T5924] cdc_wdm 2-1:1.0: skipping garbage [ 253.162745][ T5924] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 253.331522][ T5924] cdc_wdm 2-1:1.0: Unknown control protocol [ 253.428201][ T8476] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 253.694724][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 7 bytes [ 253.864545][ T5950] IPVS: starting estimator thread 0... [ 253.940186][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.950323][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.968350][ T8503] netlink: 'syz.4.671': attribute type 20 has an invalid length. [ 253.981920][ T8499] IPVS: using max 37 ests per chain, 88800 per kthread [ 253.986826][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.999306][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 254.009986][ T8503] netlink: 'syz.4.671': attribute type 20 has an invalid length. [ 254.701456][ T5924] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 254.833992][ T5924] usb 5-1: device descriptor read/64, error -71 [ 255.091550][ T5924] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 255.141662][ T5950] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 255.231635][ T5924] usb 5-1: device descriptor read/64, error -71 [ 255.282640][ T8530] netlink: 'syz.0.678': attribute type 2 has an invalid length. [ 255.331567][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 255.337404][ T10] usb 2-1: USB disconnect, device number 43 [ 255.347715][ T5924] usb usb5-port1: attempt power cycle [ 255.358701][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.383684][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.408966][ T5950] usb 3-1: Product: syz [ 255.417864][ T5950] usb 3-1: Manufacturer: syz [ 255.422761][ T5950] usb 3-1: SerialNumber: syz [ 255.455463][ T5950] usb 3-1: config 0 descriptor?? [ 255.891528][ T5924] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 255.945334][ T5924] usb 5-1: device descriptor read/8, error -71 [ 255.969849][ T5950] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 256.202071][ T5924] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 256.222095][ T5924] usb 5-1: device descriptor read/8, error -71 [ 256.341738][ T5924] usb usb5-port1: unable to enumerate USB device [ 256.569515][ T30] audit: type=1326 audit(1755613807.937:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.576866][ T8544] tipc: Enabling of bearer rejected, failed to enable media [ 256.591743][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.614413][ T30] audit: type=1326 audit(1755613807.937:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.642101][ T30] audit: type=1326 audit(1755613807.937:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.687512][ T30] audit: type=1326 audit(1755613807.937:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.709690][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.746995][ T30] audit: type=1326 audit(1755613807.937:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.790850][ T30] audit: type=1326 audit(1755613807.947:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.830157][ T30] audit: type=1326 audit(1755613807.947:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.855723][ T30] audit: type=1326 audit(1755613807.947:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.871545][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 256.877837][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.881431][ T30] audit: type=1326 audit(1755613807.947:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558ebe9 code=0x7ffc0000 [ 256.913918][ T30] audit: type=1326 audit(1755613807.947:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8543 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd3e5590a7c code=0x7ffc0000 [ 257.063167][ T43] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 257.063282][ T5924] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 257.076555][ T43] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 257.091350][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.102891][ T43] usb 1-1: Product: syz [ 257.107118][ T43] usb 1-1: Manufacturer: syz [ 257.114062][ T43] usb 1-1: SerialNumber: syz [ 257.121032][ T43] usb 1-1: config 0 descriptor?? [ 257.211451][ T5924] usb 2-1: device descriptor read/64, error -71 [ 257.231110][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.242315][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.379761][ T5950] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 257.391185][ T5950] usb 3-1: USB disconnect, device number 68 [ 257.461560][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 257.469541][ T5924] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 257.611539][ T5924] usb 2-1: device descriptor read/64, error -71 [ 257.631462][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 257.649065][ T10] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 257.662166][ T10] usb 4-1: config 0 has no interface number 0 [ 257.669120][ T10] usb 4-1: config 0 interface 106 has no altsetting 0 [ 257.674608][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 257.679200][ T10] usb 4-1: New USB device found, idVendor=0d21, idProduct=6901, bcdDevice=2d.1d [ 257.693396][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 257.695668][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.712631][ T10] usb 4-1: Product: syz [ 257.716821][ T10] usb 4-1: Manufacturer: syz [ 257.725861][ T5924] usb usb2-port1: attempt power cycle [ 257.733571][ T10] usb 4-1: SerialNumber: syz [ 257.747807][ T10] usb 4-1: config 0 descriptor?? [ 257.756677][ T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 257.767427][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 257.966235][ T8546] ipip0: entered promiscuous mode [ 257.975431][ T10] usb 4-1: USB disconnect, device number 49 [ 258.046776][ T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 258.051269][ T8571] fuse: Bad value for 'fd' [ 258.081554][ T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 258.081672][ T5924] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 258.092152][ T43] asix 1-1:0.0: probe with driver asix failed with error -71 [ 258.132115][ T5924] usb 2-1: device descriptor read/8, error -71 [ 258.604930][ T43] usb 1-1: USB disconnect, device number 44 [ 258.695494][ T8576] loop6: detected capacity change from 0 to 63 [ 258.706012][ T8576] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.714700][ T8576] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.724668][ T5964] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.733065][ T8576] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.742349][ T5964] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.751963][ T8576] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.842468][ T5964] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.850851][ T5964] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.851942][ T5924] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 258.924087][ T5964] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.934614][ T5924] usb 2-1: device descriptor read/8, error -71 [ 258.946277][ T8577] Buffer I/O error on dev loop6, logical block 0, async page read [ 259.043630][ T5924] usb usb2-port1: unable to enumerate USB device [ 259.211576][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 259.227048][ T8586] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 259.227048][ T8586] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 259.227048][ T8586] ~^>Ƥr&Dq.;쀯<2AU,00000000000000000000005' [ 259.372896][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.385105][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 259.406155][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.429637][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.454463][ T8579] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.464400][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.725993][ T43] usb 1-1: USB disconnect, device number 45 [ 259.924870][ T8623] netlink: 'syz.2.704': attribute type 16 has an invalid length. [ 259.939604][ T8611] sock: sock_timestamping_bind_phc: sock not bind to device [ 260.221525][ T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 260.311857][ T1211] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 260.384549][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.403344][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.434547][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.453038][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.471933][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 260.478372][ T8611] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.491866][ T1211] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 260.503912][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.514182][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.537890][ T1211] usb 3-1: Product: syz [ 260.554271][ T1211] usb 3-1: Manufacturer: syz [ 260.558927][ T1211] usb 3-1: SerialNumber: syz [ 260.650495][ T1211] usb 3-1: config 0 descriptor?? [ 260.665706][ T1211] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 260.694628][ T8645] vivid-000: disconnect [ 260.850090][ T8648] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 260.860285][ T1211] gspca_sn9c2028: read1 error -32 [ 260.868848][ T1211] gspca_sn9c2028: read1 error -32 [ 261.185387][ T8634] vivid-000: reconnect [ 261.198379][ T1211] usb 3-1: USB disconnect, device number 69 [ 261.688159][ T8676] loop6: detected capacity change from 0 to 524287999 [ 261.781125][ T8686] sctp: [Deprecated]: syz.2.720 (pid 8686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.781125][ T8686] Use struct sctp_sack_info instead [ 261.841462][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 261.990462][ T5924] usb 1-1: USB disconnect, device number 46 [ 261.996587][ T10] usb 4-1: device descriptor read/64, error -71 [ 262.204870][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.211188][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.217680][ T1211] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 262.254793][ T10] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 262.371499][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 262.379083][ T1211] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.391470][ T1211] usb 2-1: config 0 has no interface number 0 [ 262.391513][ T10] usb 4-1: device descriptor read/64, error -71 [ 262.406110][ T1211] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 64, changing to 10 [ 262.426822][ T1211] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.429625][ T8708] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 262.443817][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.443864][ T1211] usb 2-1: Product: syz [ 262.443880][ T1211] usb 2-1: SerialNumber: syz [ 262.445599][ T1211] usb 2-1: config 0 descriptor?? [ 262.481910][ T5924] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 262.492945][ T8708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.501829][ T10] usb usb4-port1: attempt power cycle [ 262.505266][ T1211] cm109 2-1:0.8: invalid payload size 1, expected 4 [ 262.515706][ T1211] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input22 [ 262.517104][ T8711] bond2: (slave gretap1): making interface the new active one [ 262.535486][ T8711] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 262.635014][ T5924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.653646][ T5924] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 262.667222][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 262.679346][ T5924] usb 1-1: Product: syz [ 262.683967][ T5924] usb 1-1: Manufacturer: syz [ 262.689232][ T5924] usb 1-1: SerialNumber: syz [ 262.702154][ T5924] usb 1-1: config 0 descriptor?? [ 262.714547][ T5924] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 262.723091][ T5924] pctv452e: pctv452e_power_ctrl: 1 [ 262.723091][ T5924] [ 262.730765][ T5924] usb 1-1: selecting invalid altsetting 3 [ 262.737014][ T5924] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 262.737014][ T5924] [ 262.749798][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 262.761594][ T5924] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 262.785651][ T5924] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 262.851634][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 262.871998][ T10] usb 4-1: device descriptor read/8, error -71 [ 262.908410][ T5924] usb 1-1: USB disconnect, device number 47 [ 262.946490][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.957304][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.984743][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 262.991728][ C1] ------------[ cut here ]------------ [ 262.997220][ C1] URB ffff88802e494800 submitted while active [ 263.004324][ C1] WARNING: CPU: 1 PID: 1211 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 263.013945][ C1] Modules linked in: [ 263.017970][ C1] CPU: 1 UID: 0 PID: 1211 Comm: kworker/1:2 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 263.030068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.040173][ C1] Workqueue: usb_hub_wq hub_event [ 263.045228][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 263.050785][ C1] Code: 44 89 f2 e8 f1 dd 00 fa e9 13 fc ff ff e8 17 f4 93 fa c6 05 3b c3 61 08 01 90 48 c7 c7 20 fe 34 8c 48 89 de e8 b0 93 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 f1 f3 93 fa eb 11 e8 ea f3 93 fa bd [ 263.070395][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 263.076471][ C1] RAX: 71361fe898961000 RBX: ffff88802e494800 RCX: 0000000000040000 [ 263.084454][ C1] RDX: ffffc90002371000 RSI: 00000000000048bc RDI: 00000000000048bd [ 263.092449][ C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 263.100429][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 263.108415][ C1] R13: ffff8880564cc030 R14: ffff88802e494808 R15: 0000000000000820 [ 263.116416][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 263.125357][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.131951][ C1] CR2: 0000200000140030 CR3: 000000007e034000 CR4: 00000000003526f0 [ 263.139944][ C1] Call Trace: [ 263.143219][ C1] [ 263.146063][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 263.151267][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 263.156648][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 263.162028][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 263.167923][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.172686][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 263.178060][ C1] dummy_timer+0x862/0x4550 [ 263.182573][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 263.187780][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.193159][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.197923][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.202863][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.207802][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.212752][ C1] __hrtimer_run_queues+0x529/0xc60 [ 263.217961][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 263.223673][ C1] ? read_tsc+0x9/0x20 [ 263.227748][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 263.233556][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 263.238666][ C1] handle_softirqs+0x283/0x870 [ 263.243429][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 263.248190][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 263.253477][ C1] __irq_exit_rcu+0xca/0x1f0 [ 263.258086][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 263.263285][ C1] irq_exit_rcu+0x9/0x30 [ 263.267546][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 263.273186][ C1] [ 263.276116][ C1] [ 263.279040][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.285020][ C1] RIP: 0010:unwind_next_frame+0xa74/0x2390 [ 263.290825][ C1] Code: 17 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 48 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 78 13 00 00 49 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0 [ 263.310426][ C1] RSP: 0018:ffffc9000424f198 EFLAGS: 00000282 [ 263.316503][ C1] RAX: 0000000000000000 RBX: ffffffff9034a289 RCX: ffffffff8fb83c14 [ 263.324472][ C1] RDX: ffffffff9034a284 RSI: ffffffff9034a288 RDI: ffffffff8be336a0 [ 263.332440][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 263.340504][ C1] R10: ffffc9000424f2b8 R11: ffffffff81ac3760 R12: ffffc9000424fc80 [ 263.348474][ C1] R13: ffffc9000424f2b8 R14: ffffc9000424f268 R15: ffffc9000424f2a0 [ 263.356444][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.362619][ C1] ? unwind_next_frame+0xcb/0x2390 [ 263.367756][ C1] ? unwind_next_frame+0xa5/0x2390 [ 263.372866][ C1] ? process_scheduled_works+0xade/0x17b0 [ 263.378583][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.384748][ C1] arch_stack_walk+0x11c/0x150 [ 263.389519][ C1] ? process_scheduled_works+0xade/0x17b0 [ 263.395240][ C1] stack_trace_save+0x9c/0xe0 [ 263.399918][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 263.405294][ C1] ? stack_trace_save+0x9c/0xe0 [ 263.410145][ C1] ? stack_depot_save_flags+0x40/0x860 [ 263.415610][ C1] kasan_save_track+0x3e/0x80 [ 263.420380][ C1] ? kasan_save_track+0x3e/0x80 [ 263.425231][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 263.429995][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 263.435023][ C1] ? usb_alloc_urb+0x46/0x150 [ 263.439707][ C1] ? usb_control_msg+0x118/0x3e0 [ 263.444661][ C1] ? hub_ext_port_status+0x116/0x820 [ 263.449939][ C1] ? hub_event+0x770/0x4a20 [ 263.454446][ C1] ? process_scheduled_works+0xade/0x17b0 [ 263.460186][ C1] __kasan_kmalloc+0x93/0xb0 [ 263.464787][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 263.469658][ C1] ? usb_alloc_urb+0x46/0x150 [ 263.474350][ C1] usb_alloc_urb+0x46/0x150 [ 263.478850][ C1] usb_control_msg+0x118/0x3e0 [ 263.483612][ C1] hub_ext_port_status+0x116/0x820 [ 263.488725][ C1] hub_event+0x770/0x4a20 [ 263.493070][ C1] ? do_raw_spin_lock+0x121/0x290 [ 263.498187][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.503567][ C1] ? __pfx_hub_event+0x10/0x10 [ 263.508342][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.513106][ C1] ? lock_acquire+0x5f/0x360 [ 263.517706][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.522497][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 263.528213][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 263.533927][ C1] process_scheduled_works+0xade/0x17b0 [ 263.539483][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.545466][ C1] worker_thread+0x8a0/0xda0 [ 263.550060][ C1] kthread+0x70e/0x8a0 [ 263.554134][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.559243][ C1] ? __pfx_kthread+0x10/0x10 [ 263.563859][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.568637][ C1] ? __pfx_kthread+0x10/0x10 [ 263.573240][ C1] ret_from_fork+0x3f9/0x770 [ 263.577851][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.582963][ C1] ? __switch_to_asm+0x39/0x70 [ 263.587732][ C1] ? __switch_to_asm+0x33/0x70 [ 263.592499][ C1] ? __pfx_kthread+0x10/0x10 [ 263.597089][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.601865][ C1] [ 263.604879][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.612158][ C1] CPU: 1 UID: 0 PID: 1211 Comm: kworker/1:2 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 263.624215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.634269][ C1] Workqueue: usb_hub_wq hub_event [ 263.639301][ C1] Call Trace: [ 263.642579][ C1] [ 263.645418][ C1] dump_stack_lvl+0x99/0x250 [ 263.650023][ C1] ? __asan_memcpy+0x40/0x70 [ 263.654643][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.659891][ C1] ? __pfx__printk+0x10/0x10 [ 263.664502][ C1] vpanic+0x281/0x750 [ 263.668500][ C1] ? __pfx__printk+0x10/0x10 [ 263.673114][ C1] ? __pfx_vpanic+0x10/0x10 [ 263.677639][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 263.682955][ C1] panic+0xb9/0xc0 [ 263.686762][ C1] ? __pfx_panic+0x10/0x10 [ 263.691202][ C1] __warn+0x31b/0x4b0 [ 263.695196][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 263.700137][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 263.705089][ C1] report_bug+0x2be/0x4f0 [ 263.709455][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 263.714394][ C1] ? usb_submit_urb+0xfc1/0x1830 [ 263.719349][ C1] ? usb_submit_urb+0xfc3/0x1830 [ 263.724291][ C1] handle_bug+0x84/0x160 [ 263.728532][ C1] exc_invalid_op+0x1a/0x50 [ 263.733041][ C1] asm_exc_invalid_op+0x1a/0x20 [ 263.737909][ C1] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 263.743453][ C1] Code: 44 89 f2 e8 f1 dd 00 fa e9 13 fc ff ff e8 17 f4 93 fa c6 05 3b c3 61 08 01 90 48 c7 c7 20 fe 34 8c 48 89 de e8 b0 93 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 f1 f3 93 fa eb 11 e8 ea f3 93 fa bd [ 263.763067][ C1] RSP: 0018:ffffc90000a087b8 EFLAGS: 00010046 [ 263.769139][ C1] RAX: 71361fe898961000 RBX: ffff88802e494800 RCX: 0000000000040000 [ 263.777116][ C1] RDX: ffffc90002371000 RSI: 00000000000048bc RDI: 00000000000048bd [ 263.785170][ C1] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 263.793135][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 263.801125][ C1] R13: ffff8880564cc030 R14: ffff88802e494808 R15: 0000000000000820 [ 263.809107][ C1] ? usb_submit_urb+0xfc0/0x1830 [ 263.814049][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 263.819361][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 263.824768][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 263.830162][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 263.836074][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.840843][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 263.846233][ C1] dummy_timer+0x862/0x4550 [ 263.850748][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 263.855963][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.861354][ C1] ? rcu_is_watching+0x15/0xb0 [ 263.866133][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.871080][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.876029][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.880974][ C1] __hrtimer_run_queues+0x529/0xc60 [ 263.886179][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 263.891895][ C1] ? read_tsc+0x9/0x20 [ 263.895988][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 263.901811][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 263.906926][ C1] handle_softirqs+0x283/0x870 [ 263.911694][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 263.916570][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 263.921874][ C1] __irq_exit_rcu+0xca/0x1f0 [ 263.926464][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 263.931663][ C1] irq_exit_rcu+0x9/0x30 [ 263.935991][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 263.941631][ C1] [ 263.944560][ C1] [ 263.947579][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.953570][ C1] RIP: 0010:unwind_next_frame+0xa74/0x2390 [ 263.959401][ C1] Code: 17 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 48 0f bf 02 49 01 c4 48 8d 5e 01 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 78 13 00 00 49 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0 [ 263.979003][ C1] RSP: 0018:ffffc9000424f198 EFLAGS: 00000282 [ 263.985070][ C1] RAX: 0000000000000000 RBX: ffffffff9034a289 RCX: ffffffff8fb83c14 [ 263.993037][ C1] RDX: ffffffff9034a284 RSI: ffffffff9034a288 RDI: ffffffff8be336a0 [ 264.001027][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 264.008999][ C1] R10: ffffc9000424f2b8 R11: ffffffff81ac3760 R12: ffffc9000424fc80 [ 264.017328][ C1] R13: ffffc9000424f2b8 R14: ffffc9000424f268 R15: ffffc9000424f2a0 [ 264.025315][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 264.031505][ C1] ? unwind_next_frame+0xcb/0x2390 [ 264.036620][ C1] ? unwind_next_frame+0xa5/0x2390 [ 264.041742][ C1] ? process_scheduled_works+0xade/0x17b0 [ 264.047558][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 264.053749][ C1] arch_stack_walk+0x11c/0x150 [ 264.058562][ C1] ? process_scheduled_works+0xade/0x17b0 [ 264.064290][ C1] stack_trace_save+0x9c/0xe0 [ 264.068988][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 264.074366][ C1] ? stack_trace_save+0x9c/0xe0 [ 264.079242][ C1] ? stack_depot_save_flags+0x40/0x860 [ 264.084707][ C1] kasan_save_track+0x3e/0x80 [ 264.089402][ C1] ? kasan_save_track+0x3e/0x80 [ 264.094296][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 264.099066][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 264.104098][ C1] ? usb_alloc_urb+0x46/0x150 [ 264.108774][ C1] ? usb_control_msg+0x118/0x3e0 [ 264.113722][ C1] ? hub_ext_port_status+0x116/0x820 [ 264.119004][ C1] ? hub_event+0x770/0x4a20 [ 264.123508][ C1] ? process_scheduled_works+0xade/0x17b0 [ 264.129258][ C1] __kasan_kmalloc+0x93/0xb0 [ 264.133862][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 264.138730][ C1] ? usb_alloc_urb+0x46/0x150 [ 264.143426][ C1] usb_alloc_urb+0x46/0x150 [ 264.147923][ C1] usb_control_msg+0x118/0x3e0 [ 264.152702][ C1] hub_ext_port_status+0x116/0x820 [ 264.157817][ C1] hub_event+0x770/0x4a20 [ 264.162177][ C1] ? do_raw_spin_lock+0x121/0x290 [ 264.167211][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 264.172595][ C1] ? __pfx_hub_event+0x10/0x10 [ 264.177360][ C1] ? rcu_is_watching+0x15/0xb0 [ 264.182125][ C1] ? lock_acquire+0x5f/0x360 [ 264.186722][ C1] ? rcu_is_watching+0x15/0xb0 [ 264.191505][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 264.197223][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 264.202953][ C1] process_scheduled_works+0xade/0x17b0 [ 264.208524][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.214528][ C1] worker_thread+0x8a0/0xda0 [ 264.219135][ C1] kthread+0x70e/0x8a0 [ 264.223210][ C1] ? __pfx_worker_thread+0x10/0x10 [ 264.228346][ C1] ? __pfx_kthread+0x10/0x10 [ 264.232944][ C1] ? rcu_is_watching+0x15/0xb0 [ 264.237723][ C1] ? __pfx_kthread+0x10/0x10 [ 264.242314][ C1] ret_from_fork+0x3f9/0x770 [ 264.246907][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 264.252026][ C1] ? __switch_to_asm+0x39/0x70 [ 264.256809][ C1] ? __switch_to_asm+0x33/0x70 [ 264.261587][ C1] ? __pfx_kthread+0x10/0x10 [ 264.266198][ C1] ret_from_fork_asm+0x1a/0x30 [ 264.270997][ C1] [ 265.430024][ C1] Shutting down cpus with NMI [ 265.434955][ C1] Kernel Offset: disabled [ 265.439285][ C1] Rebooting in 86400 seconds..