last executing test programs: 9.915836608s ago: executing program 2 (id=235): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6(0x2d, 0x2, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x80800) bind(r1, &(0x7f00000002c0)=@generic={0x1e, "107f4a021ebb098585804403d00460b4eb2a02f25c6b3e2d0e11db2a41b5e61d484efbf99bdfe0ee6564036c7a8b83cee0be1e8148094fe78e22ab0acf8383b03bd440456d692e2730e1e4466e9c35a6f9c68fc732a957279e1cdc0210b5c3e6f1e7e0a896b6f7ad71b068f7e860855fc4e84d2b0cd69ff421481a676a98"}, 0x80) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="47c30f01cf48b83f1c5e09000000000f23d80f21f835000000700f23f866ba610066ed2e3e0fc72a440f060f01c52e65440f794450000ff1d148b800000000008000000f23d00f21f835200000090f23f8", 0x51}], 0x1, 0xe4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="e7736a", 0x3c}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0xdd86, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) 9.716559903s ago: executing program 2 (id=236): syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1014}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1014}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02"], 0x0) 6.806841914s ago: executing program 3 (id=245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000800000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7030000080000007a0000001900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 6.755533164s ago: executing program 3 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x6018, 0x400c}}, 0x20}}, 0x404c840) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 6.634877796s ago: executing program 3 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/snd/controlC#\x00') socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000240)={r6, 0x6}, 0x8) (async) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000850) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000039c0)="88", 0x1}], 0x1}, 0x48043) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) (async) r9 = dup(r0) write$FUSE_INIT(r9, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x76, 0x15100020, 0x3, 0x7, 0x9, 0x4, 0x0, 0x0, 0x8, 0x400000ff}}, 0x50) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) fremovexattr(r10, &(0x7f0000002140)=@known='user.syz\x00') (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) (async) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[], 0x34000) 6.586628897s ago: executing program 2 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) r1 = epoll_create1(0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x614}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 5.61279638s ago: executing program 3 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socket$igmp6(0xa, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010007, 0x0, 0x9}]}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000002c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71cf, 0x2000, 0x6, 0x15e, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xf7f9, 0xd3, 0x0, 0x0}}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r12, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0xffffffff}, @local, 0xd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) tee(r11, 0xffffffffffffffff, 0x2, 0xd) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48}) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r13, 0x89e0, &(0x7f0000000400)={0x1}) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[], 0x0) 5.596167046s ago: executing program 0 (id=253): io_uring_enter(0xffffffffffffffff, 0x5a9b, 0xf1e1, 0x81, &(0x7f0000000000)={[0xbc77]}, 0x8) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000080)='/^$%:-\x00', &(0x7f00000000c0)='*}\x00', &(0x7f0000000100)='&$^{-]\\\x00']}, &(0x7f0000000280)={[&(0x7f0000000180)=':\x00', &(0x7f00000001c0)='\'^\'](\x00', &(0x7f0000000200)='^}!%#\x00', &(0x7f0000000240)='!^-)-^(\x9a(./@],,*\\[\\\\^&f\x00']}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f00000002c0)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e) pivot_root(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00') r0 = epoll_create1(0x0) readlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/87, 0x57) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000005c0)={0x7, 0x5, 0x4, 0x0, 0x9, 0x9, 0x0, &(0x7f0000000500)=[{0x18, 0x1ff, 0x8}, {0x19, 0x101}, {0x4, 0xfe, 0x7}, {0x14, 0x101, 0xaeaf}, {0x18, 0x1ff, 0x4}, {0x10, 0x101, 0x7c}, {0x0, 0x101, 0x7}, {0xb, 0x1ff, 0x1ff}, {0x6, 0xfe, 0x7}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600), 0x100000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x4000, 0x3c}, 0x18) renameat2(r1, &(0x7f0000000640)='./file0/file0\x00', r2, &(0x7f0000000700)='./file0\x00', 0x5) r3 = memfd_secret(0x0) file_getattr(r3, &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x18, 0x800) unshare(0x80) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000007c0)={0xff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000c40)={0x0, 0x1, 0x0, &(0x7f0000000880)=[{}], 0x5, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000b40)=[{}], 0x4, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}]}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000cc0)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) unlink(&(0x7f0000000d00)='./file0/file0\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000001140)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "1bd4d6ab1021943ee92875e95f94b985fdb7123a8428d179debc14a365d4b15beb6cbdf006de05a9ebd98af2271c586465bd8ad0"}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x395442d7}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35401399}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x258, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'rose0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x368}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000001240)={&(0x7f0000001180)=""/152, 0x98}) write$tcp_mem(r3, &(0x7f0000001280), 0x48) statx(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file0\x00', 0x400, 0x1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0/file0\x00'}) syz_mount_image$fuse(&(0x7f0000001300), &(0x7f0000001340)='./file0/file0\x00', 0x830, &(0x7f0000001500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}], [{@subj_role={'subj_role', 0x3d, '+){)'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@flag='silent'}]}}, 0x0, 0x0, &(0x7f00000015c0)="efe37e77d2800373c83fc706f2976374dbfc4a358f036c7bfd087fb8c0d1ee62318f8c93f30922eef9a5e33143537ee450d90d3c48aa79e9f726b00940920c7f39d59b064441159c84caf189") truncate(&(0x7f0000001640)='./file0/file0\x00', 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001680)={0x101ff, 0x4, 0x1ff8, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 5.51949311s ago: executing program 2 (id=255): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000300)={0x200000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x200000, &(0x7f0000001000/0x1000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x9, @loopback, 0x3}}, 0x43, 0x7, 0x2, 0x9fe3, 0x0, 0x10000, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r7, 0x6}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0xad4) syz_usb_control_io$hid(r6, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r6) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0x1, 0x8ffff) lseek(r10, 0x2, 0x4) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.383971887s ago: executing program 0 (id=256): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@wrmsr={0x65, 0x20, {0x6e0, 0x5}}], 0x20}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002300)={[0x35, 0x9, 0x0, 0x34, 0x5fffffffffffffff, 0x10, 0xf4, 0x401, 0x80, 0x3, 0x6, 0x7fff, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@svm={0x4, 0x1, 0x1080, {0x58000}, {"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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.113648551s ago: executing program 0 (id=257): fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000040)='+\x00', 0x200080, &(0x7f0000000080)={@_ha_fsid={[0xfffffffd, 0x7]}, {0x6, 0x78ce, 0x1, 0x81}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1c00}, 0x2, &(0x7f0000000380)=[{0x1, 0x0, &(0x7f0000000140)='\'!!,&\xbd\x00', &(0x7f0000000180)="0a82f5692995101c40334f3ac740d438022546d17f9dccaaeffb77687aa344ffaa45d8ad139693ca0905dceaa90335a38178c515fbfc58d5b9a3ad54afdb0f3322f36dfbca3e566d8a97eee61da8a77a19317283c86a522dda341f8688bc6254cc20e5a947bd138df0af8b45cc8a31710c42cd38443130775a7a60b8867e0987faa879eafa3d96463438a7789e96948f7538aab328e5220d4eb8d7a298a09eaf", 0xa0}, {0x3, 0x3, &(0x7f0000000240)='-*&\x00', &(0x7f0000000280)="32ca96475f36a49cba9d2f2539681838937a622e6f0ae6324dd0116ba797480baf7931a3ef82bad92c3352a2b485ee87342472b68f9c2bcc16bbe2cc9292d921ba1ed41f1d3e9ab504957b183c7191cb01c7d46dbb829ac0b4a498f2bef618bccdb70e2453e8e744bb5849c4f32de0ab924a3baf6cd67446e4cec297c11f751a00252f16ffe24074e3c82328e617ebcd0969e832ef2233dcba19770986f36cd191df2fcd9f294c3ed9764049ff2b6297f83862c4f1c114c992b4369bab590cf456a22dc889431d52f3c1bbab0771682f18affdb2c65f5b9b17e8b42998ccab", 0xdf, 0xa}]}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) accept$inet(r1, &(0x7f0000000440)={0x2, 0x0, @private}, &(0x7f0000000480)=0x10) utime(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x6, 0x3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0xffff, 0x5, 0x9, 0x4}, {0x2, 0x10, 0xf1, 0x7ff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000900)={0x5, &(0x7f0000000840)=[{0x4936, 0x63, &(0x7f0000000680)="26197ac6233c4f2d0413da95709dfbd0c983418d70edf6d914053c722d4747d83847d1a9b14f6e883d71189d0550299449b942a699d2b368d0c46f1ebd7643ea39faa3ca129c7d616e3799c2dc294700a4b136f69e5ad7d1490208324def199164aa1e", 0x1}, {0x8, 0x30, &(0x7f0000000700)="bb911076fa3b2ed4a7aae6651a642b1799ab0f706a4e42229be7bcf23ca619d337eb51c2b4506c9f73204ed8b9dc7989"}, {0x3, 0x76, &(0x7f0000000740)="a3863d0d81b26b75772df269f3d708bd5137c1a3dafcf7574e8ea1ac4bb115538b39e0651e92de4a263845d0ddf57cc7fc4b11eef69584b6b8fa1d2b0bf3f9d9aef7269341b55a09e8065fabda1fc67dbd4ca17e7951a4e6ce8ab4f3441e8ee815a0aeeb96f2dfc92fdff15153698d62a3a4fbac440d"}, {0xfff, 0x29, &(0x7f00000007c0)="0ad732cd419d42e88a6276105ea7f60750b8082b77073b361719a536154d4be937e37e7d909fc0091f", 0x1, 0x1}, {0x5, 0x0, &(0x7f0000000800), 0x1}]}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) pidfd_getfd(r2, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a80)={'tunl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x81, 0xbb1, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x64, 0x0, 0xf8, 0x2f, 0x0, @broadcast, @remote, {[@generic={0x89, 0x9, "e06a833bd8eab9"}, @ssrr={0x89, 0xb, 0xb5, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0x4, "960d"}, @end, @generic={0x83, 0xb, "84bffd1cb2fb806083"}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x1, 0xb, "a7526a624f91e0c972"}, {0x6, 0x10, "1b8b6f8a8c61a73c2512a785dcf0"}, {0x0, 0x8, "79f829789450"}, {0x7, 0x3, 'X'}]}, @rr={0x7, 0xb, 0xe1, [@remote, @multicast2]}, @generic={0x86, 0xf, "2e60d3a393a819c857e2f33299"}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@newtclass={0x60, 0x28, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0xf, 0x8}, {0xd, 0xffff}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x38, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xe}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r8 = fsopen(&(0x7f0000000bc0)='qnx4\x00', 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000c00)={0x4, r8, 0x1}) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000c40)={0x2, 0x0, [{0x0, 0x3, 0x4, 0x8001, 0x39, 0x8, 0x1}, {0xc0000000, 0x6, 0x6, 0x8648, 0x7d6b, 0x8, 0xb}]}) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000cc0)) r9 = openat$cgroup_procs(r1, &(0x7f0000000e00)='cgroup.threads\x00', 0x2, 0x0) r10 = fcntl$getown(r4, 0x9) write$cgroup_pid(r9, &(0x7f0000000e40)=r10, 0x12) r11 = syz_usb_connect$uac3(0x5, 0xd6, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0xd5, 0x0, 0xbd, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xd4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x32, 0x80000001}, [@mixer_unit={0x5, 0x24, 0x5, 0x4, 0x3}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x2, 0x40, 0xf9, 0x9}, @power_domain={0xa, 0x24, 0x10, 0xc, 0x5, 0x29, 0x44, 'L'}, @extension_unit={0xd, 0x24, 0xa, 0x4, 0x6, [0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x6, 0xc0}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x10, 0x5, 0x81, 0xfb}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x1, 0xe, {0xa, 0x25, 0x25, 0x4, 0xa, 0x59a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x79, 0x2, "f6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x9, 0xb, "fa05"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xe, 0xa2, 0x5, {0xa, 0x25, 0x25, 0x8, 0x2, 0x4}}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x200, 0x9, 0xff, 0x8, 0xff, 0x6}, 0x40, &(0x7f0000000fc0)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x10000, 0xf, 0xfffa, [0xffc0f0, 0x0, 0xc0, 0xff3f0f, 0xc0, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e54218cc48231ec943c64da8d1a9d048"}, @ptm_cap={0x3}]}, 0x2, [{0x9b, &(0x7f0000001000)=@string={0x9b, 0x3, "245faa51c18eda9d0a99bb42160b899b729f17e7401b13d803017bc27685eeeb45eae2f368db28bd33c54e561c38ba36cbad3ee6e67bc4ee140a0dcc1634f14e4dea71222c68599560bb3e067b932047f33963421fe32ad8acbf258a2075faaf8d012101b6d0bcf7fee92935ebf12f282a7956fb42b888de3190964feede7efab7a9de12f59a04820446616a43d956060b98c94bbf399bfaa9"}}, {0x9b, &(0x7f00000010c0)=@string={0x9b, 0x3, "3f7d75d103996f20e71148f621af0d12d4665b9ba138d976e39d17da2eef2f8d0a1c63addbc3a80d0b2726e9ed07261f72831a49c7dbc09f27eff05eb95cf4ba0b966ed7835144b3bb58801cb4041a94551140ec22f7c6ecd725fd4ca479ec286425eb5bd566ef995fbbc6de776e6b1b0ed883de632c12dbcafed9e9b05eee37d18277e92ce7d4b8ec95868b2b3bc8e45b55334cec4d248953"}}]}) syz_usb_control_io$uac3(r11, &(0x7f0000001240)={0x14, &(0x7f00000011c0)={0x20, 0x23, 0xf, {0xf, 0x23, "90a955eaac2f284daa0ae56ce1"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001480)={0x44, &(0x7f0000001280)={0x0, 0xd}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001340)={0x20, 0x81, 0x2, "74be"}, &(0x7f0000001380)={0x20, 0x82, 0x2, "b7a2"}, &(0x7f00000013c0)={0x20, 0x83, 0x3, "a3b1bb"}, &(0x7f0000001400)={0x20, 0x84, 0x1, "a7"}, &(0x7f0000001440)={0x20, 0x85, 0x3, "9a2878"}}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x440380, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000001640)={r6, &(0x7f0000001540)=';[%(\\*\xa6\x00', 0x10500, &(0x7f0000001580)={@_ha_fsid={[0xfffffffc]}, {0x81ac, 0x8, 0x0, 0x453}}, 0x0, &(0x7f00000015c0)={@_ha_fsid}, &(0x7f0000001600)=0x2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000001680)={{0x1, 0x1, 0x18, r13}, './file0\x00'}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000016c0), &(0x7f0000001700)={'L-', 0x6a9}, 0x16, 0x1) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f00000017c0)={0xfffffffffffffffa, 0x80}) 3.334645836s ago: executing program 0 (id=260): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}], 0x1, 0x40480c0) r1 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0) syz_usb_ep_write(r1, 0x84, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 3.148798378s ago: executing program 1 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) write(r3, &(0x7f00000000c0)="ffffefffffff0011223344554305000f3200000091845de2b103eaea00020011223344557f00", 0x26) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x30}, 0xc) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x6, '\x00', r7, r9, 0x4, 0x2, 0x3}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_ACT={0x54, 0x4, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe1f, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7ff, 0xe, 0x8, 0xef, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 3.111093194s ago: executing program 4 (id=262): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xfffffffffffffe2c, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000080)=""/197, 0xfffffffffffffe2c, 0x0, 0x2, 0x2}}, 0x48) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000071104d000000000006000000000000009500000000000000eada6c4ec7b49d93e6cfe47cbffc32e0ab0e0ae810033033920437"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250100000000000000014140000074c13125e4dd30b56f20001700000006ffffffc57eb9c7fd31c268315f76"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000) (async) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4e}, @NL80211_ATTR_PMK={0x14, 0xfe, "c98798accb0cca2e4979bfbb00ef91fe"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK={0x14, 0xfe, "257e3db43801d5835052dd20326ced75"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x400}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/19, 0x13}], 0x1}, 0xf1a2}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001080)=""/52, 0x34}], 0x1}, 0x40}], 0x2, 0x0, 0x0) ioctl$MTDFILEMODE(r1, 0x4d13, 0x2) 2.293593023s ago: executing program 3 (id=263): socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lsm_list_modules(&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=0x38, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_io_uring_setup(0x5790, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.196382143s ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000001300000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.111439023s ago: executing program 2 (id=265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) r1 = epoll_create1(0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x614}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.998618649s ago: executing program 4 (id=266): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 1.782534563s ago: executing program 4 (id=267): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x0, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x45, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x1, 0x1}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0x3e, 0x8000000000000000}) (async) io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 1.162657928s ago: executing program 2 (id=268): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xfd, 0x4c, 0xae, 0x40, 0xb05, 0x179d, 0x1920, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x1d, 0xb0, 0x8, "", [{{0x9, 0x4, 0x52, 0xff, 0x0, 0x56, 0x99, 0x7c, 0xe3}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x816}}, {0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}]}) 874.832577ms ago: executing program 3 (id=269): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x2, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x40, 0x1c, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) write$FUSE_INTERRUPT(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "220200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062baad630400"}) r4 = syz_open_pts(r1, 0x80) dup3(r4, r1, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$tipc(r12, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 502.844214ms ago: executing program 4 (id=270): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x20, 0x0, 0xb1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x259}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND_ZC={0x2f, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000001240)="682d916c3835292f0413df31742e398268e255c0cee3fc420cde4b66a4ac9165e5ffdc9f486e8e0871a215e75dfaba1bb34a9adabb57b4ac4af9b19bd2317ea1c82883a45362d73bb31ab8e94d7bdb635415376163484b1c39738147454bc1dc491d57061fd15dd63583a67c2c786dde01fecfd7fa8d33575a4d2aaa0988589a45", 0x0, 0x4, 0x8080, 0x1, {0x0, 0x0, 0x81}}) io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 390.673104ms ago: executing program 1 (id=271): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}}], 0x2, 0x20008000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x3f}, 0x1, 0x0, 0x80, 0x0, [{@private}, {@empty}, {}, {@broadcast}, {@broadcast}, {@dev}, {@multicast2}, {@empty}]}}) 375.222277ms ago: executing program 1 (id=272): r0 = syz_io_uring_setup(0x85e, &(0x7f0000000100)={0x0, 0xc9dd, 0x2000, 0x0, 0x295}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0xffff, @broadcast}, 0xfce1) r2 = io_uring_setup(0x40002a27, &(0x7f0000000080)={0x0, 0xbf6b, 0x0, 0x0, 0x8000, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) syz_io_uring_setup(0x85e, &(0x7f0000000100)={0x0, 0xc9dd, 0x2000, 0x0, 0x295}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000580)={0x2, 0xffff, @broadcast}, 0xfce1) (async) io_uring_setup(0x40002a27, &(0x7f0000000080)={0x0, 0xbf6b, 0x0, 0x0, 0x8000, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20) (async) 325.706561ms ago: executing program 4 (id=273): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x6, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x5, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x9, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x10000, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0xcbd, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x8, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x404, 0x102, 0x1, 0x41, 0x1, 0xee4b, 0x2000004, 0x1, 0xa, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0xeb5, 0x5, 0xd3, 0x8, 0x97f7, 0x10001, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0x4, 0x1, 0x77, 0x5, 0x6, 0x10002, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x40, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0xd226cb99, 0x84, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x81, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x276, 0x6, 0xfffffff9, 0x7, 0x3, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x6, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x1, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000ba000000"], 0xc8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x8, 0x0, 0x20) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r9, 0x5) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000040)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r11, 0x2) 293.247991ms ago: executing program 0 (id=274): r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x141000, 0x10) mknodat$loop(r0, &(0x7f0000000480)='./file0\x00', 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) move_pages(0x0, 0xa, &(0x7f0000000080)=[&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000000)=[0x3, 0x6, 0x8, 0x200c3e, 0x5], &(0x7f0000000000), 0x0) syz_io_uring_setup(0x6488, &(0x7f0000000400)={0x0, 0x4e99, 0x2000, 0xffffffff, 0x21}, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x0, 0x5, 0x743c8}, @TCA_MPLS_LABEL={0xff07, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x98}}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x2b6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000000380)={{0x88, @private=0xa010101, 0x0, 0x3, 'none\x00', 0x10, 0x1, 0x806}, {@empty, 0x4e1d, 0x4, 0x7, 0x8, 0xfffffffc}}, 0x44) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r9, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000240)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r12 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x40080) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000200)={&(0x7f0000001580)=[{0x2, 0x200, 0x0, 0x0}, {0x5, 0x1, 0x6, &(0x7f0000000080)="5f351a12c30a"}], 0x2}) sendmmsg$inet(r7, &(0x7f0000009900)=[{{&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="98", 0x1}], 0x1}}], 0x1, 0x2400c004) 219.031332ms ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) 128.126049ms ago: executing program 1 (id=276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000111900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 52.713643ms ago: executing program 0 (id=277): r0 = socket(0x10, 0x1, 0x80000000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x200000, 0x0, 0xfffc}) write$UHID_CREATE(r1, &(0x7f0000000180)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x5, 0xfffffffa, 0x4, 0x8}}, 0x120) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001004000", 0x24) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001004000", 0x24) 0s ago: executing program 1 (id=278): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffe3e) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="1d", 0x1}], 0x1}}], 0x1, 0x40003) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x488, 0x0, 0x37af}]}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfffc, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005580)={0xffffffffffffffff}) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000202, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private=0xa010101, 0x1, 0x0, 0x10, 0x0, [{@empty}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x5, 0x22802420, 0x4, 0x8, 0x401, 0x1, 0x0, 0x0, 0x8, 0x5}}, 0x50) kernel console output (not intermixed with test programs): nfigured BSSID 50:50:50:50:50:50 [ 89.040975][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.041452][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042102][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.053234][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.069786][ T4933] Bluetooth: hci2: command tx timeout [ 89.069806][ T5621] Bluetooth: hci3: command tx timeout [ 89.214906][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.214925][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.338015][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.338036][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.354709][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.376112][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.553714][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553736][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.580301][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.580494][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.717645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.717667][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.780370][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780392][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.995995][ T5727] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 90.024439][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.024460][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.454619][ T5735] Zero length message leads to an empty skb [ 90.869770][ T5745] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 90.964835][ T5745] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 91.068468][ T4933] Bluetooth: hci1: command tx timeout [ 91.068503][ T4933] Bluetooth: hci0: command tx timeout [ 91.068526][ T4933] Bluetooth: hci4: command tx timeout [ 91.149418][ T4933] Bluetooth: hci3: command tx timeout [ 91.149434][ T5621] Bluetooth: hci2: command tx timeout [ 91.155800][ T5745] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 91.176841][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.352610][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.353723][ T5714] usb 5-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 91.358180][ T5714] usb 5-1: config index 0 descriptor too short (expected 7954, got 18) [ 91.358207][ T5714] usb 5-1: config 97 has too many interfaces: 225, using maximum allowed: 32 [ 91.358229][ T5714] usb 5-1: config 97 has 1 interface, different from the descriptor's value: 225 [ 91.406176][ T5714] usb 5-1: config 97 has no interface number 0 [ 91.420152][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 91.420178][ T5714] usb 5-1: Product: syz [ 91.420193][ T5714] usb 5-1: Manufacturer: syz [ 91.420208][ T5714] usb 5-1: SerialNumber: syz [ 91.659975][ T5698] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.819106][ T5698] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 91.821323][ T5698] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 91.821346][ T5698] usb 1-1: config 1 has no interface number 0 [ 91.826606][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.826630][ T5698] usb 1-1: Product: syz [ 91.826640][ T5698] usb 1-1: Manufacturer: syz [ 91.826651][ T5698] usb 1-1: SerialNumber: syz [ 91.886483][ T25] cfg80211: failed to load regulatory.db [ 91.972143][ T5698] usb 1-1: 3:0 : does not exist [ 91.972167][ T5698] usb 1-1: 3:0 : does not exist [ 92.237063][ T5759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.649619][ T10] usb 1-1: USB disconnect, device number 2 [ 93.206678][ T5714] cdc_phonet 5-1:97.102: probe with driver cdc_phonet failed with error -22 [ 93.347688][ T5714] usb 5-1: USB disconnect, device number 2 [ 94.253130][ T5778] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.783734][ T5789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18'. [ 94.948446][ T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.008666][ T1661] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.121463][ T25] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 95.122902][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.122928][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 95.122965][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.161147][ T1661] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 95.163285][ T1661] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.163334][ T1661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 95.163362][ T1661] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 95.163402][ T1661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.400619][ T5785] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 95.427711][ T5785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.433539][ T5785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.457790][ T10] usb 1-1: USB disconnect, device number 3 [ 95.478813][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.479670][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.016526][ T5805] batman_adv: batadv0: Adding interface: netdevsim0 [ 96.016546][ T5805] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.016584][ T5805] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 96.418625][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.481459][ T5813] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 96.578328][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 96.581122][ T5714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.582713][ T5714] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 96.582764][ T5714] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.582788][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.582814][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.582847][ T5714] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.582889][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.864415][ T5714] usb 2-1: usb_control_msg returned -32 [ 96.864465][ T5714] usbtmc 2-1:16.0: can't read capabilities [ 96.926765][ T5818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.930207][ T5818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.150265][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.288376][ T10] usb 1-1: device descriptor read/64, error -71 [ 97.309074][ T1661] cxacru 3-1:1.0: send of cm 0x90 failed (-104) [ 97.349138][ T5823] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 97.349162][ T5823] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 97.493855][ T1661] usb 3-1: USB disconnect, device number 2 [ 97.530188][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.659361][ T10] usb 1-1: device descriptor read/64, error -71 [ 97.734533][ T5829] netlink: 'syz.2.28': attribute type 29 has an invalid length. [ 97.779369][ T10] usb usb1-port1: attempt power cycle [ 97.887228][ T5829] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 97.918391][ T5714] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.070346][ T5714] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 98.071797][ T5714] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 98.071827][ T5714] usb 4-1: config 1 has no interface number 0 [ 98.075631][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.075655][ T5714] usb 4-1: Product: syz [ 98.075670][ T5714] usb 4-1: Manufacturer: syz [ 98.075684][ T5714] usb 4-1: SerialNumber: syz [ 98.135342][ T5714] usb 4-1: 3:0 : does not exist [ 98.135369][ T5714] usb 4-1: 3:0 : does not exist [ 98.158328][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.179067][ T10] usb 1-1: device descriptor read/8, error -71 [ 98.428751][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.449786][ T10] usb 1-1: device descriptor read/8, error -71 [ 98.559462][ T10] usb usb1-port1: unable to enumerate USB device [ 98.596792][ T25] usb 4-1: USB disconnect, device number 2 [ 99.140955][ T5836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.251741][ T5715] usb 2-1: USB disconnect, device number 2 [ 99.389757][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31'. [ 99.419126][ T5844] random: crng reseeded on system resumption [ 99.694417][ T5852] warning: `syz.4.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.778722][ T5715] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.909105][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.929354][ T5715] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.932863][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.932986][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.955615][ T5715] usb 4-1: config 0 descriptor?? [ 99.959515][ T5714] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.060098][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 100.060972][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 100.064912][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.101142][ T10] usb 2-1: config 0 descriptor?? [ 100.120914][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 100.124906][ T5714] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 100.127757][ T5714] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 100.128080][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 100.128177][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.178194][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 100.255540][ T5714] usb 5-1: config 0 descriptor?? [ 100.324278][ T5714] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 100.712402][ T10] gspca_sunplus: reg_w_riv err -110 [ 100.712479][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 100.937500][ T5861] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 101.536392][ T5872] FAULT_INJECTION: forcing a failure. [ 101.536392][ T5872] name failslab, interval 1, probability 0, space 0, times 1 [ 101.536429][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.2.38 Not tainted syzkaller #0 PREEMPT(full) [ 101.536446][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.536461][ T5872] Call Trace: [ 101.536499][ T5872] [ 101.536511][ T5872] dump_stack_lvl+0xe8/0x150 [ 101.536553][ T5872] should_fail_ex+0x410/0x560 [ 101.536585][ T5872] should_failslab+0xa8/0x100 [ 101.536605][ T5872] ? skb_clone+0x212/0x3a0 [ 101.536626][ T5872] kmem_cache_alloc_noprof+0xa1/0x600 [ 101.536652][ T5872] ? skb_clone+0x212/0x3a0 [ 101.536678][ T5872] skb_clone+0x212/0x3a0 [ 101.536702][ T5872] __netlink_deliver_tap+0x413/0x860 [ 101.536753][ T5872] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.536789][ T5872] netlink_deliver_tap+0x19c/0x1b0 [ 101.536823][ T5872] netlink_unicast+0x781/0x940 [ 101.536862][ T5872] netlink_sendmsg+0x813/0xb40 [ 101.536900][ T5872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.536930][ T5872] ? apparmor_socket_sendmsg+0x98/0x360 [ 101.536949][ T5872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.536973][ T5872] sock_sendmsg_nosec+0x13a/0x180 [ 101.536991][ T5872] ____sys_sendmsg+0x54e/0x850 [ 101.537016][ T5872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.537062][ T5872] ? import_iovec+0x73/0xa0 [ 101.537085][ T5872] ___sys_sendmsg+0x2a5/0x360 [ 101.537106][ T5872] ? __lock_acquire+0x747/0x2de0 [ 101.537125][ T5872] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.537151][ T5872] ? kstrtouint+0x6e/0xe0 [ 101.537208][ T5872] ? __fget_files+0x2a/0x420 [ 101.537229][ T5872] ? __fget_files+0x3a2/0x420 [ 101.537258][ T5872] __sys_sendmmsg+0x273/0x4d0 [ 101.537283][ T5872] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.537334][ T5872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.537376][ T5872] ? ksys_write+0x242/0x270 [ 101.537403][ T5872] ? __pfx_ksys_write+0x10/0x10 [ 101.537432][ T5872] __x64_sys_sendmmsg+0xa0/0xc0 [ 101.537456][ T5872] do_syscall_64+0x166/0x520 [ 101.537478][ T5872] ? trace_irq_disable+0x3b/0x140 [ 101.537494][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.537510][ T5872] ? clear_bhb_loop+0x70/0xc0 [ 101.537530][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.537546][ T5872] RIP: 0033:0x7fe6c6d9e159 [ 101.537565][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.537579][ T5872] RSP: 002b:00007fe6c7cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.537599][ T5872] RAX: ffffffffffffffda RBX: 00007fe6c7025fa0 RCX: 00007fe6c6d9e159 [ 101.537611][ T5872] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 101.537622][ T5872] RBP: 00007fe6c7cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 101.537631][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.537641][ T5872] R13: 00007fe6c7026038 R14: 00007fe6c7025fa0 R15: 00007fe6c714fa48 [ 101.537665][ T5872] [ 101.913690][ T5862] nvme nvme0: failed to connect socket: -512 [ 102.045220][ T5864] nvme nvme0: failed to connect socket: -512 [ 102.403070][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 102.403212][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.432785][ T5715] usb 4-1: USB disconnect, device number 3 [ 102.476018][ T5677] usb 2-1: USB disconnect, device number 3 [ 102.770543][ T5677] usb 5-1: USB disconnect, device number 3 [ 102.948714][ T5715] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.104555][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.105711][ T5715] usb 4-1: not running at top speed; connect to a high speed hub [ 103.105748][ T5715] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 103.106786][ T5715] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 103.106812][ T5715] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 103.106834][ T5715] usb 4-1: config 14 has no interface number 0 [ 103.106860][ T5715] usb 4-1: config 14 has no interface number 1 [ 103.106923][ T5715] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 103.106949][ T5715] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 103.106976][ T5715] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 103.107006][ T5715] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.107035][ T5715] usb 4-1: config 14 interface 57 has no altsetting 0 [ 103.107055][ T5715] usb 4-1: config 14 interface 228 has no altsetting 0 [ 103.120465][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.120536][ T5715] usb 4-1: Product: syz [ 103.120576][ T5715] usb 4-1: Manufacturer: syz [ 103.120611][ T5715] usb 4-1: SerialNumber: syz [ 103.235853][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.381257][ T5714] usb 2-1: device descriptor read/64, error -71 [ 103.604430][ T5715] legousbtower 4-1:14.57: interrupt endpoints not found [ 103.619763][ T5714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.748441][ T5714] usb 2-1: device descriptor read/64, error -71 [ 103.858788][ T5714] usb usb2-port1: attempt power cycle [ 104.001561][ T5715] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 104.025088][ T5715] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 104.142724][ T5901] FAULT_INJECTION: forcing a failure. [ 104.142724][ T5901] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 104.142770][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 104.142795][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.142807][ T5901] Call Trace: [ 104.142816][ T5901] [ 104.142825][ T5901] dump_stack_lvl+0xe8/0x150 [ 104.142863][ T5901] should_fail_ex+0x410/0x560 [ 104.142893][ T5901] prepare_alloc_pages+0x223/0x600 [ 104.142924][ T5901] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 104.142953][ T5901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.142978][ T5901] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 104.143005][ T5901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.143034][ T5901] ? __pfx_policy_nodemask+0x10/0x10 [ 104.143068][ T5901] __alloc_pages_noprof+0x10/0x100 [ 104.143093][ T5901] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.143126][ T5901] ? alloc_pages_noprof+0x140/0x2b0 [ 104.143159][ T5901] __kasan_populate_vmalloc+0xb7/0x1c0 [ 104.143189][ T5901] alloc_vmap_area+0xd1a/0x1420 [ 104.143236][ T5901] ? __pfx_alloc_vmap_area+0x10/0x10 [ 104.143265][ T5901] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 104.143290][ T5901] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 104.143312][ T5901] ? __get_vm_area_node+0x155/0x2f0 [ 104.143350][ T5901] __get_vm_area_node+0x200/0x2f0 [ 104.143389][ T5901] __vmalloc_node_range_noprof+0x343/0x1540 [ 104.143423][ T5901] ? bpf_check+0x10ee/0x2e10 [ 104.143451][ T5901] ? rcu_is_watching+0x16/0xb0 [ 104.143486][ T5901] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 104.143519][ T5901] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 104.143557][ T5901] ? bpf_check+0x106b/0x2e10 [ 104.143583][ T5901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.143625][ T5901] ? security_capable+0xb9/0x2c0 [ 104.143653][ T5901] ? bpf_check+0x10ee/0x2e10 [ 104.143675][ T5901] __vmalloc_noprof+0xd2/0x120 [ 104.143707][ T5901] ? bpf_check+0x10ee/0x2e10 [ 104.143742][ T5901] bpf_check+0x10ee/0x2e10 [ 104.143778][ T5901] ? ktime_get_with_offset+0x93/0x2d0 [ 104.143806][ T5901] ? __pfx_bpf_check+0x10/0x10 [ 104.143834][ T5901] ? bpf_obj_name_cpy+0x194/0x1e0 [ 104.143871][ T5901] bpf_prog_load+0x14d6/0x1c20 [ 104.143911][ T5901] ? __pfx_bpf_prog_load+0x10/0x10 [ 104.143967][ T5901] __sys_bpf+0xd0d/0xd90 [ 104.144002][ T5901] ? __pfx___sys_bpf+0x10/0x10 [ 104.144039][ T5901] ? __fget_files+0x2a/0x420 [ 104.144097][ T5901] ? ksys_write+0x242/0x270 [ 104.144134][ T5901] ? __pfx_ksys_write+0x10/0x10 [ 104.144173][ T5901] __x64_sys_bpf+0xba/0xd0 [ 104.144198][ T5901] do_syscall_64+0x166/0x520 [ 104.144223][ T5901] ? trace_irq_disable+0x3b/0x140 [ 104.144246][ T5901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.144268][ T5901] ? clear_bhb_loop+0x70/0xc0 [ 104.144296][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.144318][ T5901] RIP: 0033:0x7f6cbd19e159 [ 104.144338][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.144357][ T5901] RSP: 002b:00007f6cbe0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.144381][ T5901] RAX: ffffffffffffffda RBX: 00007f6cbd425fa0 RCX: 00007f6cbd19e159 [ 104.144398][ T5901] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 104.144412][ T5901] RBP: 00007f6cbe0a9090 R08: 0000000000000000 R09: 0000000000000000 [ 104.144426][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.144440][ T5901] R13: 00007f6cbd426038 R14: 00007f6cbd425fa0 R15: 00007f6cbd54fa48 [ 104.144474][ T5901] [ 104.146275][ T5901] syz.4.48: vmalloc error: size 2584, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.146481][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 104.146505][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.146518][ T5901] Call Trace: [ 104.146526][ T5901] [ 104.146536][ T5901] dump_stack_lvl+0xe8/0x150 [ 104.146572][ T5901] warn_alloc+0x24d/0x270 [ 104.146596][ T5901] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.146623][ T5901] ? __pfx_warn_alloc+0x10/0x10 [ 104.146644][ T5901] ? kfree+0x1c5/0x650 [ 104.146683][ T5901] ? __get_vm_area_node+0x219/0x2f0 [ 104.146723][ T5901] __vmalloc_node_range_noprof+0x36b/0x1540 [ 104.146768][ T5901] ? rcu_is_watching+0x16/0xb0 [ 104.146806][ T5901] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 104.146839][ T5901] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 104.146877][ T5901] ? bpf_check+0x106b/0x2e10 [ 104.146904][ T5901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.146951][ T5901] ? security_capable+0xb9/0x2c0 [ 104.146980][ T5901] ? bpf_check+0x10ee/0x2e10 [ 104.147020][ T5901] __vmalloc_noprof+0xd2/0x120 [ 104.147053][ T5901] ? bpf_check+0x10ee/0x2e10 [ 104.147080][ T5901] bpf_check+0x10ee/0x2e10 [ 104.147117][ T5901] ? ktime_get_with_offset+0x93/0x2d0 [ 104.147147][ T5901] ? __pfx_bpf_check+0x10/0x10 [ 104.147176][ T5901] ? bpf_obj_name_cpy+0x194/0x1e0 [ 104.147214][ T5901] bpf_prog_load+0x14d6/0x1c20 [ 104.147255][ T5901] ? __pfx_bpf_prog_load+0x10/0x10 [ 104.147309][ T5901] __sys_bpf+0xd0d/0xd90 [ 104.147346][ T5901] ? __pfx___sys_bpf+0x10/0x10 [ 104.147384][ T5901] ? __fget_files+0x2a/0x420 [ 104.147435][ T5901] ? ksys_write+0x242/0x270 [ 104.147472][ T5901] ? __pfx_ksys_write+0x10/0x10 [ 104.147513][ T5901] __x64_sys_bpf+0xba/0xd0 [ 104.147540][ T5901] do_syscall_64+0x166/0x520 [ 104.147565][ T5901] ? trace_irq_disable+0x3b/0x140 [ 104.147588][ T5901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147611][ T5901] ? clear_bhb_loop+0x70/0xc0 [ 104.147640][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147663][ T5901] RIP: 0033:0x7f6cbd19e159 [ 104.147683][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.147702][ T5901] RSP: 002b:00007f6cbe0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.147725][ T5901] RAX: ffffffffffffffda RBX: 00007f6cbd425fa0 RCX: 00007f6cbd19e159 [ 104.147750][ T5901] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 104.147765][ T5901] RBP: 00007f6cbe0a9090 R08: 0000000000000000 R09: 0000000000000000 [ 104.147778][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.147791][ T5901] R13: 00007f6cbd426038 R14: 00007f6cbd425fa0 R15: 00007f6cbd54fa48 [ 104.147827][ T5901] [ 104.147925][ T5901] Mem-Info: [ 104.147936][ T5901] active_anon:5685 inactive_anon:0 isolated_anon:0 [ 104.147936][ T5901] active_file:0 inactive_file:43098 isolated_file:0 [ 104.147936][ T5901] unevictable:0 dirty:742 writeback:0 [ 104.147936][ T5901] slab_reclaimable:10259 slab_unreclaimable:94027 [ 104.147936][ T5901] mapped:29944 shmem:524 pagetables:1212 [ 104.147936][ T5901] sec_pagetables:0 bounce:0 [ 104.147936][ T5901] kernel_misc_reclaimable:0 [ 104.147936][ T5901] free:1330394 free_pcp:10663 free_cma:0 [ 104.148003][ T5901] Node 0 active_anon:22740kB inactive_anon:0kB active_file:0kB inactive_file:172192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119776kB dirty:2960kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12168kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.148065][ T5901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.148128][ T5901] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.148205][ T5901] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 104.148248][ T5901] Node 0 DMA32 free:1359504kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22740kB inactive_anon:0kB active_file:0kB inactive_file:172192kB unevictable:0kB writepending:2960kB zspages:0kB present:3129332kB managed:2547000kB mlocked:0kB bounce:0kB free_pcp:40604kB local_pcp:20800kB free_cma:0kB [ 104.161272][ T5901] lowmem_reserve[]: 0 0 0 0 0 [ 104.161402][ T5901] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.161555][ T5901] lowmem_reserve[]: 0 0 0 0 0 [ 104.161593][ T5901] Node 1 Normal free:3946712kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 104.161654][ T5901] lowmem_reserve[]: 0 0 0 0 0 [ 104.161692][ T5901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.162095][ T5901] Node 0 DMA32: 1346*4kB (UME) 457*8kB (UM) 188*16kB (UM) 100*32kB (UM) 72*64kB (ME) 38*128kB (UME) 20*256kB (ME) 11*512kB (UME) 7*1024kB (UME) 3*2048kB (M) 320*4096kB (UM) = 1359504kB [ 104.168214][ T5901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.170107][ T5901] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 4*16kB (UM) 9*32kB (UM) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946712kB [ 104.170563][ T5901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.170604][ T5901] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 104.170663][ T5901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.175102][ T5901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 104.175159][ T5901] 43618 total pagecache pages [ 104.175196][ T5901] 0 pages in swap cache [ 104.175222][ T5901] Free swap = 124996kB [ 104.175250][ T5901] Total swap = 124996kB [ 104.175272][ T5901] 2097051 pages RAM [ 104.175292][ T5901] 0 pages HighMem/MovableOnly [ 104.175311][ T5901] 428685 pages reserved [ 104.175332][ T5901] 0 pages cma reserved [ 104.200448][ T5714] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.223833][ T5714] usb 2-1: device descriptor read/8, error -71 [ 104.498663][ T5714] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.523043][ T5714] usb 2-1: device descriptor read/8, error -71 [ 104.629633][ T5714] usb usb2-port1: unable to enumerate USB device [ 105.758365][ T5677] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.908510][ T5677] usb 5-1: Using ep0 maxpacket: 32 [ 105.914874][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.914922][ T5677] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 105.916217][ T5677] usb 5-1: config 12 has an invalid interface number: 183 but max is 3 [ 105.916282][ T5677] usb 5-1: config 12 has an invalid interface number: 229 but max is 3 [ 105.916306][ T5677] usb 5-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 105.916327][ T5677] usb 5-1: config 12 has no interface number 0 [ 105.916344][ T5677] usb 5-1: config 12 has no interface number 1 [ 105.917374][ T5677] usb 5-1: config 12 interface 183 has no altsetting 0 [ 105.923555][ T5714] usb 4-1: USB disconnect, device number 4 [ 105.996454][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.996484][ T5677] usb 5-1: Product: syz [ 105.996499][ T5677] usb 5-1: Manufacturer: syz [ 105.996516][ T5677] usb 5-1: SerialNumber: syz [ 106.026309][ T5714] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 106.303589][ T5929] capability: warning: `syz.4.51' uses deprecated v2 capabilities in a way that may be insecure [ 106.394629][ T5677] usb 5-1: USB disconnect, device number 4 [ 106.400103][ T5714] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.488415][ T5715] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.560684][ T5714] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 106.562816][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 106.564798][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.564829][ T5714] usb 4-1: Product: syz [ 106.564841][ T5714] usb 4-1: Manufacturer: syz [ 106.564851][ T5714] usb 4-1: SerialNumber: syz [ 106.577139][ T5920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.660386][ T5715] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 106.666109][ T5715] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 106.666131][ T5715] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 106.677555][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.677679][ T5715] usb 2-1: Product: syz [ 106.677727][ T5715] usb 2-1: Manufacturer: syz [ 106.677762][ T5715] usb 2-1: SerialNumber: syz [ 106.720014][ T5715] usb 2-1: config 0 descriptor?? [ 106.739193][ T5715] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 106.809445][ T5714] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.809516][ T5714] usb 4-1: MIDIStreaming interface descriptor not found [ 106.881933][ T5714] usb 4-1: USB disconnect, device number 5 [ 106.973424][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.001309][ T3216] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.149995][ T3216] usb 1-1: Using ep0 maxpacket: 32 [ 107.226680][ T3216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.226761][ T3216] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 107.226798][ T3216] usb 1-1: too many configurations: 80, using maximum allowed: 8 [ 107.227891][ T3216] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.227927][ T3216] usb 1-1: can't read configurations, error -71 [ 107.248411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 107.316184][ T5945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.458577][ T5715] gspca_sunplus: reg_r err -110 [ 107.458718][ T5715] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 107.504284][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 107.686173][ T5715] usb 2-1: USB disconnect, device number 8 [ 107.781958][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 107.781984][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'. [ 108.298373][ T5677] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 108.368414][ T3216] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.465055][ T5677] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 108.465854][ T5677] usb 5-1: config 0 has no interfaces? [ 108.483573][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.483598][ T5677] usb 5-1: Product: syz [ 108.483613][ T5677] usb 5-1: Manufacturer: syz [ 108.483629][ T5677] usb 5-1: SerialNumber: syz [ 108.528835][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 108.529604][ T3216] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 108.531499][ T5677] usb 5-1: config 0 descriptor?? [ 108.540041][ T3216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.540097][ T3216] usb 1-1: Product: syz [ 108.540135][ T3216] usb 1-1: Manufacturer: syz [ 108.540172][ T3216] usb 1-1: SerialNumber: syz [ 108.593369][ T3216] usb 1-1: config 0 descriptor?? [ 108.607727][ T31] audit: type=1326 audit(1789614184.797:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.616205][ T3216] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 108.641412][ T31] audit: type=1326 audit(1789614184.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.641458][ T31] audit: type=1326 audit(1789614184.837:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.643630][ T31] audit: type=1326 audit(1789614184.837:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.647012][ T3216] usb 1-1: Detected FT-X [ 108.682503][ T31] audit: type=1326 audit(1789614184.877:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.705874][ T31] audit: type=1326 audit(1789614184.897:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.724289][ T31] audit: type=1326 audit(1789614184.897:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.803288][ T31] audit: type=1326 audit(1789614184.897:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.804148][ T31] audit: type=1326 audit(1789614185.007:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.826289][ T31] audit: type=1326 audit(1789614185.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.67" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1c519e159 code=0x7ffc0000 [ 108.886075][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.921248][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.927484][ T5715] usb 5-1: USB disconnect, device number 5 [ 109.184062][ T3216] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 109.185307][ T3216] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 109.219472][ T3216] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.297229][ T3216] usb 1-1: USB disconnect, device number 10 [ 109.350845][ T5976] netlink: 6 bytes leftover after parsing attributes in process `syz.2.69'. [ 109.350868][ T5976] netlink: 144 bytes leftover after parsing attributes in process `syz.2.69'. [ 109.357061][ T3216] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.397005][ T3216] ftdi_sio 1-1:0.0: device disconnected [ 109.450395][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.502195][ T5977] loop5: detected capacity change from 0 to 7 [ 109.550466][ T5977] Dev loop5: unable to read RDB block 7 [ 109.550507][ T5977] loop5: AHDI p1 p2 p4 [ 109.550529][ T5977] loop5: partition table partially beyond EOD, truncated [ 109.552081][ T5977] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 109.610164][ T5715] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 109.614188][ T5977] loop5: p4 start 3288604672 is beyond EOD, truncated [ 109.618453][ T5715] usb 5-1: config index 0 descriptor too short (expected 73, got 45) [ 109.618546][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.618660][ T5715] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.651994][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.652066][ T5715] usb 5-1: Product: syz [ 109.652113][ T5715] usb 5-1: Manufacturer: syz [ 109.652154][ T5715] usb 5-1: SerialNumber: syz [ 109.743968][ T5715] usb 5-1: unsupported MDLM descriptors [ 109.917386][ T5715] usb 5-1: USB disconnect, device number 6 [ 109.978756][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.130570][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 110.280226][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.280279][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 110.281347][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 110.281383][ T10] usb 2-1: can't read configurations, error -71 [ 110.408682][ T3216] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.558609][ T3216] usb 4-1: Using ep0 maxpacket: 8 [ 110.559189][ T3216] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.561380][ T3216] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 110.561431][ T3216] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.561455][ T3216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.561481][ T3216] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.561506][ T3216] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.561547][ T3216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.854824][ T3216] usb 4-1: usb_control_msg returned -32 [ 110.854872][ T3216] usbtmc 4-1:16.0: can't read capabilities [ 111.280735][ T10] usb 4-1: USB disconnect, device number 6 [ 111.828389][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.899743][ T5677] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.980382][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.981470][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.981490][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.981506][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.981532][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.986149][ T25] usb 5-1: config 0 descriptor?? [ 112.045584][ T5677] usb 4-1: device descriptor read/64, error -71 [ 112.178421][ T3216] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.281866][ T5677] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.336736][ T3216] usb 2-1: Using ep0 maxpacket: 8 [ 112.344205][ T3216] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 112.345816][ T3216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.368422][ T3216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.368440][ T3216] usb 2-1: Product: syz [ 112.378688][ T3216] usb 2-1: Manufacturer: syz [ 112.378706][ T3216] usb 2-1: SerialNumber: syz [ 112.401085][ T3216] usb 2-1: config 0 descriptor?? [ 112.410508][ T5677] usb 4-1: device descriptor read/64, error -71 [ 112.423359][ T3216] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 112.427214][ T3216] usb 2-1: selecting invalid altsetting 1 [ 112.476844][ T25] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 112.519338][ T5677] usb usb4-port1: attempt power cycle [ 112.612419][ T6041] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 112.666986][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.86'. [ 112.869172][ T5677] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.888023][ T6059] program syz.1.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.900717][ T5677] usb 4-1: device descriptor read/8, error -71 [ 113.018372][ T3216] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.138395][ T5677] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.168365][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 113.169762][ T5677] usb 4-1: device descriptor read/8, error -71 [ 113.231367][ T3216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.231419][ T3216] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 113.232464][ T3216] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 113.232493][ T3216] usb 1-1: can't read configurations, error -71 [ 113.280348][ T5677] usb usb4-port1: unable to enumerate USB device [ 113.781699][ T6061] sctp: [Deprecated]: syz.0.91 (pid 6061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.781699][ T6061] Use struct sctp_sack_info instead [ 114.278386][ T3216] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 114.435790][ T3216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.435844][ T3216] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 114.436996][ T3216] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.437020][ T3216] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.480786][ T3216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.480814][ T3216] usb 1-1: Product: syz [ 114.480830][ T3216] usb 1-1: Manufacturer: syz [ 114.480846][ T3216] usb 1-1: SerialNumber: syz [ 114.603809][ T5715] usb 5-1: USB disconnect, device number 7 [ 114.722041][ T6061] sctp: [Deprecated]: syz.0.91 (pid 6061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.722041][ T6061] Use struct sctp_sack_info instead [ 114.746683][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.760404][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.843151][ T3216] usb 1-1: Can't get UAC3 power state for id 10 [ 114.861709][ T3216] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 114.885098][ T3216] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 114.885127][ T3216] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 114.885147][ T3216] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 114.992213][ T6082] kvm: pic: non byte write [ 114.992447][ T6083] kvm: user requested TSC rate below hardware speed [ 115.014599][ T3216] usb 1-1: USB disconnect, device number 12 [ 115.061544][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.103192][ T5698] usb 2-1: USB disconnect, device number 11 [ 115.218590][ T5715] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.261980][ T6092] netlink: NAT attribute has 4 unknown bytes [ 115.262009][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.264639][ T6092] misc userio: No port type given on /dev/userio [ 115.370037][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 115.371236][ T5715] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.373302][ T5715] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 115.373329][ T5715] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.373351][ T5715] usb 5-1: config 0 has no interface number 0 [ 115.373403][ T5715] usb 5-1: config 0 interface 184 has no altsetting 0 [ 115.376536][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.376560][ T5715] usb 5-1: Product: syz [ 115.376575][ T5715] usb 5-1: Manufacturer: syz [ 115.376591][ T5715] usb 5-1: SerialNumber: syz [ 115.423565][ T5715] usb 5-1: config 0 descriptor?? [ 115.634862][ T5715] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 115.635102][ T5715] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 115.682828][ T5715] usb 5-1: USB disconnect, device number 8 [ 115.726883][ T6102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.915669][ T6107] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.918225][ T6107] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.950888][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 116.007158][ T31] kauditd_printk_skb: 99 callbacks suppressed [ 116.007176][ T31] audit: type=1326 audit(1789614192.197:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.007954][ T31] audit: type=1326 audit(1789614192.197:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.008193][ T31] audit: type=1326 audit(1789614192.197:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.015553][ T31] audit: type=1326 audit(1789614192.207:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.016529][ T31] audit: type=1326 audit(1789614192.207:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.017308][ T31] audit: type=1326 audit(1789614192.207:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.018170][ T31] audit: type=1326 audit(1789614192.207:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.021551][ T31] audit: type=1326 audit(1789614192.217:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.024045][ T31] audit: type=1326 audit(1789614192.217:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.025187][ T31] audit: type=1326 audit(1789614192.217:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.1.103" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 116.069438][ T25] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 116.199648][ T5715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.225721][ T25] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 116.240933][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 116.241008][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.241102][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.271903][ T5677] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 116.358461][ T5715] usb 5-1: device descriptor read/64, error -71 [ 116.440001][ T5677] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 116.441072][ T5677] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.441105][ T5677] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.441132][ T5677] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.441164][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.444156][ T5677] usb 4-1: config 0 descriptor?? [ 116.534165][ T25] pegasus 1-1:1.0: probe with driver pegasus failed with error -71 [ 116.553052][ T25] usb 1-1: USB disconnect, device number 13 [ 116.599189][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.728379][ T5715] usb 5-1: device descriptor read/64, error -71 [ 116.838812][ T5715] usb usb5-port1: attempt power cycle [ 116.882067][ T5677] sony 0003:054C:0268.0002: invalid report_count 47366 [ 116.882089][ T5677] sony 0003:054C:0268.0002: item 0 2 1 9 parsing failed [ 116.882772][ T5677] sony 0003:054C:0268.0002: parse failed [ 116.882865][ T5677] sony 0003:054C:0268.0002: probe with driver sony failed with error -22 [ 117.000526][ T6117] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 117.018859][ T6117] team0: Port device dummy0 added [ 117.020677][ T6117] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 117.027887][ T6117] team0: Port device dummy0 removed [ 117.058802][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.059201][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.188459][ T5715] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 117.210006][ T5715] usb 5-1: device descriptor read/8, error -71 [ 117.305572][ T6130] binder: BINDER_SET_CONTEXT_MGR already set [ 117.305587][ T6130] binder: 6129:6130 ioctl 4018620d 200000000100 returned -16 [ 117.353032][ T6134] binder_alloc: binder_alloc_mmap_handler: 6129 200000ffe000-200001000000 already mapped failed -16 [ 117.386407][ T6130] binder: 6129:6130 ioctl c0306201 0 returned -14 [ 117.387782][ T6131] binder: 6129:6131 ioctl c0306201 0 returned -14 [ 117.452037][ T5715] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.480828][ T5715] usb 5-1: device descriptor read/8, error -71 [ 117.590144][ T5715] usb usb5-port1: unable to enumerate USB device [ 117.850321][ T6148] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 117.887822][ T6148] bond1: entered promiscuous mode [ 117.888146][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.159462][ T5677] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 118.319490][ T5677] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.323461][ T5677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.323511][ T5677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.323538][ T5677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 118.323563][ T5677] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 118.326690][ T5677] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.326715][ T5677] usb 1-1: Manufacturer: syz [ 118.404927][ T5677] usb 1-1: config 0 descriptor?? [ 118.511272][ T6168] netlink: 'syz.2.116': attribute type 3 has an invalid length. [ 118.515087][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 118.675818][ T5677] rc_core: IR keymap rc-hauppauge not found [ 118.675837][ T5677] Registered IR keymap rc-empty [ 118.676694][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.697521][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.716522][ T5677] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 118.738210][ T5677] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 118.755726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.786472][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.798755][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.818729][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.839116][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.868739][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.888617][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.922246][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.938665][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.961370][ T9] usb 4-1: USB disconnect, device number 11 [ 118.962816][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 118.976058][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 118.994146][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 119.018985][ T5677] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 119.058679][ T5677] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 119.058734][ T5677] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.214060][ T9] usb 1-1: USB disconnect, device number 14 [ 119.608360][ T5715] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 119.630263][ T6193] binder: 6190:6193 ioctl c0046209 0 returned -22 [ 119.769611][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.769664][ T5715] usb 2-1: New USB device found, idVendor=10c4, idProduct=813d, bcdDevice=5a.12 [ 119.772188][ T5715] usb 2-1: config 74 has an invalid interface number: 18 but max is 0 [ 119.772214][ T5715] usb 2-1: config 74 has no interface number 0 [ 119.772256][ T5715] usb 2-1: config 74 interface 18 has no altsetting 0 [ 119.774992][ T5715] usb 2-1: Dual-Role OTG device on HNP port [ 119.775282][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.775307][ T5715] usb 2-1: Product: syz [ 119.775322][ T5715] usb 2-1: Manufacturer: syz [ 119.775337][ T5715] usb 2-1: SerialNumber: syz [ 119.993745][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.997574][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.042164][ T5715] cp210x 2-1:74.18: cp210x converter detected [ 120.043604][ T5715] cp210x 2-1:74.18: failed to get vendor val 0x370b size 1: -71 [ 120.043641][ T5715] cp210x 2-1:74.18: querying part number failed [ 120.108186][ T5715] usb 2-1: cp210x converter now attached to ttyUSB0 [ 120.127075][ T5715] usb 2-1: USB disconnect, device number 12 [ 120.153246][ T5715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.153856][ T5715] cp210x 2-1:74.18: device disconnected [ 120.243198][ T6206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.425383][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.4.128'. [ 120.537994][ T6214] netlink: 27 bytes leftover after parsing attributes in process `syz.4.129'. [ 120.928413][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 121.088975][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 121.091637][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.091701][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 121.095034][ T10] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 121.095057][ T10] usb 2-1: config 127 has no interface number 0 [ 121.095083][ T10] usb 2-1: config 127 interface 124 has no altsetting 0 [ 121.110346][ T10] usb 2-1: string descriptor 0 read error: -22 [ 121.110739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.316553][ T10] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 121.685296][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 121.988482][ T10] usb 2-1: device descriptor read/64, error -71 [ 122.229366][ T10] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 122.243120][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 122.243138][ T31] audit: type=1326 audit(1789614198.437:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.0.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe200b9e159 code=0x0 [ 122.425253][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.678080][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 122.678472][ T3216] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.700451][ T6218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.131'. [ 122.747739][ T10] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 122.781917][ T10] usb 2-1: USB disconnect, device number 13 [ 122.840242][ T3216] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.842497][ T3216] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.842533][ T3216] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.842554][ T3216] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.842583][ T3216] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.842600][ T3216] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.847557][ T3216] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.847583][ T3216] usb 4-1: Product: syz [ 122.847599][ T3216] usb 4-1: Manufacturer: syz [ 122.952908][ T3216] cdc_wdm 4-1:1.0: skipping garbage [ 122.952923][ T3216] cdc_wdm 4-1:1.0: skipping garbage [ 122.973452][ T3216] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 122.973483][ T3216] cdc_wdm 4-1:1.0: Unknown control protocol [ 123.360037][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.360332][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.702393][ T6278] netlink: 5 bytes leftover after parsing attributes in process `syz.4.146'. [ 123.902440][ T6285] loop2: detected capacity change from 0 to 7 [ 123.906714][ T6285] Dev loop2: unable to read RDB block 7 [ 123.906743][ T6285] loop2: AHDI p1 p2 p3 [ 123.906763][ T6285] loop2: partition table partially beyond EOD, truncated [ 123.907006][ T6285] loop2: p1 start 1601398130 is beyond EOD, truncated [ 123.907028][ T6285] loop2: p2 start 1702059890 is beyond EOD, truncated [ 123.964367][ T5677] usb 4-1: USB disconnect, device number 12 [ 124.355548][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 124.578741][ T5677] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.688369][ T30] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 124.718349][ T5677] usb 5-1: device descriptor read/64, error -71 [ 124.818381][ T30] usb 2-1: device descriptor read/64, error -71 [ 124.888401][ T5698] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 124.958512][ T5677] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.008328][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.038965][ T5698] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 125.039992][ T5698] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.040016][ T5698] usb 4-1: config 0 has no interface number 0 [ 125.040056][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.040085][ T5698] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.040111][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.043167][ T5698] usb 4-1: config 0 descriptor?? [ 125.068816][ T30] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 125.117613][ T5677] usb 5-1: device descriptor read/64, error -71 [ 125.168384][ T10] usb 1-1: device descriptor read/64, error -71 [ 125.198403][ T30] usb 2-1: device descriptor read/64, error -71 [ 125.218606][ T5677] usb usb5-port1: attempt power cycle [ 125.309755][ T30] usb usb2-port1: attempt power cycle [ 125.408454][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 125.537174][ T5698] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 125.550664][ T10] usb 1-1: device descriptor read/64, error -71 [ 125.551417][ T5698] hid_prodikeys: hid-prodikeys: failed to find output report [ 125.551417][ T5698] [ 125.558476][ T5677] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 125.585106][ T5677] usb 5-1: device descriptor read/8, error -71 [ 125.648335][ T30] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 125.661045][ T10] usb usb1-port1: attempt power cycle [ 125.672226][ T30] usb 2-1: device descriptor read/8, error -71 [ 125.731986][ T3216] usb 4-1: USB disconnect, device number 13 [ 125.818384][ T5677] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 125.838750][ T5677] usb 5-1: device descriptor read/8, error -71 [ 125.908489][ T30] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 125.928745][ T30] usb 2-1: device descriptor read/8, error -71 [ 125.950504][ T5677] usb usb5-port1: unable to enumerate USB device [ 125.998390][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 126.019103][ T10] usb 1-1: device descriptor read/8, error -71 [ 126.038606][ T30] usb usb2-port1: unable to enumerate USB device [ 126.259820][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.278986][ T10] usb 1-1: device descriptor read/8, error -71 [ 126.388655][ T10] usb usb1-port1: unable to enumerate USB device [ 126.844141][ T6335] FAULT_INJECTION: forcing a failure. [ 126.844141][ T6335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.844181][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.3.159 Not tainted syzkaller #0 PREEMPT(full) [ 126.844197][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.844206][ T6335] Call Trace: [ 126.844211][ T6335] [ 126.844218][ T6335] dump_stack_lvl+0xe8/0x150 [ 126.844248][ T6335] should_fail_ex+0x410/0x560 [ 126.844268][ T6335] prepare_alloc_pages+0x223/0x600 [ 126.844288][ T6335] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 126.844311][ T6335] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.844330][ T6335] ? __pfx_policy_nodemask+0x10/0x10 [ 126.844355][ T6335] alloc_pages_mpol+0x21e/0x390 [ 126.844377][ T6335] folio_alloc_mpol_noprof+0x39/0x160 [ 126.844397][ T6335] shmem_alloc_and_add_folio+0x43e/0xf60 [ 126.844417][ T6335] ? filemap_get_entry+0xcd/0x3f0 [ 126.844445][ T6335] ? __pfx_filemap_get_entry+0x10/0x10 [ 126.844465][ T6335] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 126.844487][ T6335] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 126.844510][ T6335] shmem_get_folio_gfp+0x5da/0x16d0 [ 126.844540][ T6335] shmem_fault+0x179/0x390 [ 126.844565][ T6335] __do_fault+0x138/0x2a0 [ 126.844580][ T6335] do_pte_missing+0x684/0x34b0 [ 126.844600][ T6335] ? handle_mm_fault+0xf1/0x3750 [ 126.844622][ T6335] handle_mm_fault+0x1a53/0x3750 [ 126.844648][ T6335] ? handle_mm_fault+0xf1/0x3750 [ 126.844674][ T6335] ? __pfx_handle_mm_fault+0x10/0x10 [ 126.844705][ T6335] ? lock_mm_and_find_vma+0xa7/0x340 [ 126.844729][ T6335] do_user_addr_fault+0x746/0x1340 [ 126.844754][ T6335] exc_page_fault+0x6a/0xc0 [ 126.844770][ T6335] asm_exc_page_fault+0x26/0x30 [ 126.844783][ T6335] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 126.844805][ T6335] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 126.844817][ T6335] RSP: 0018:ffffc9000dd5fb48 EFLAGS: 00050206 [ 126.844830][ T6335] RAX: ffffffff84df0001 RBX: 0000000000001000 RCX: 0000000000000248 [ 126.844840][ T6335] RDX: 0000000000000000 RSI: ffff888028bd2db8 RDI: 0000200000002000 [ 126.844850][ T6335] RBP: ffffc9000dd5fc90 R08: ffff888028bd2fff R09: 1ffff1100517a5ff [ 126.844860][ T6335] R10: dffffc0000000000 R11: ffffed100517a600 R12: 0000200000002248 [ 126.844871][ T6335] R13: 00007ffffffff000 R14: ffff888028bd2000 R15: 0000200000001248 [ 126.844886][ T6335] ? _copy_from_user+0xa1/0xb0 [ 126.844909][ T6335] _copy_to_user+0x8a/0xb0 [ 126.844929][ T6335] pagemap_read+0x4dc/0x7c0 [ 126.844960][ T6335] ? __pfx_pagemap_read+0x10/0x10 [ 126.844985][ T6335] ? rw_verify_area+0x24a/0x4c0 [ 126.845008][ T6335] ? __pfx_pagemap_read+0x10/0x10 [ 126.845027][ T6335] vfs_read+0x213/0xa80 [ 126.845054][ T6335] ? __pfx_vfs_read+0x10/0x10 [ 126.845076][ T6335] ? __fget_files+0x2a/0x420 [ 126.845099][ T6335] ? __fget_files+0x2a/0x420 [ 126.845117][ T6335] ? __fget_files+0x3a2/0x420 [ 126.845137][ T6335] ? __fget_files+0x2a/0x420 [ 126.845162][ T6335] __x64_sys_pread64+0x196/0x220 [ 126.845186][ T6335] ? __pfx___x64_sys_pread64+0x10/0x10 [ 126.845217][ T6335] do_syscall_64+0x166/0x520 [ 126.845232][ T6335] ? trace_irq_disable+0x3b/0x140 [ 126.845246][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.845261][ T6335] ? clear_bhb_loop+0x70/0xc0 [ 126.845278][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.845292][ T6335] RIP: 0033:0x7fd1c519e159 [ 126.845308][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.845319][ T6335] RSP: 002b:00007fd1c6025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 126.845332][ T6335] RAX: ffffffffffffffda RBX: 00007fd1c5425fa0 RCX: 00007fd1c519e159 [ 126.845343][ T6335] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000007 [ 126.845352][ T6335] RBP: 00007fd1c6025090 R08: 0000000000000000 R09: 0000000000000000 [ 126.845360][ T6335] R10: 0000000fffff7ff8 R11: 0000000000000246 R12: 0000000000000001 [ 126.845369][ T6335] R13: 00007fd1c5426038 R14: 00007fd1c5425fa0 R15: 00007fd1c554fa48 [ 126.845391][ T6335] [ 127.415724][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.416685][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.516251][ T6343] netlink: 495 bytes leftover after parsing attributes in process `syz.2.161'. [ 127.649269][ T5698] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 127.748336][ T3216] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 127.800566][ T5698] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 127.802670][ T5698] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.802714][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.802736][ T5698] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.804710][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.804734][ T5698] usb 4-1: Product: syz [ 127.804749][ T5698] usb 4-1: Manufacturer: syz [ 127.804763][ T5698] usb 4-1: SerialNumber: syz [ 127.821311][ T5698] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) [ 127.970318][ T3216] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 127.971367][ T3216] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.974232][ T3216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.974256][ T3216] usb 5-1: Product: syz [ 127.974271][ T3216] usb 5-1: Manufacturer: syz [ 127.974285][ T3216] usb 5-1: SerialNumber: syz [ 128.018628][ T5698] usb 4-1: USB disconnect, device number 14 [ 128.039643][ T3216] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 128.196688][ T6360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 128.389487][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 128.389510][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 128.392283][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 128.392303][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 128.393170][ T3216] gspca_mr97310a: reg write [21] error -71 [ 128.393251][ T3216] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 128.458722][ T3216] usb 5-1: USB disconnect, device number 17 [ 128.709100][ T5698] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 128.840601][ T5698] usb 1-1: device descriptor read/64, error -71 [ 128.898421][ T3216] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 129.049220][ T3216] usb 4-1: Using ep0 maxpacket: 32 [ 129.051264][ T3216] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 129.052433][ T3216] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 129.052464][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 129.052492][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 129.052515][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 129.052543][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 129.055020][ T3216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.055046][ T3216] usb 4-1: Product: syz [ 129.055062][ T3216] usb 4-1: Manufacturer: syz [ 129.055090][ T3216] usb 4-1: SerialNumber: syz [ 129.068154][ T3216] usb 4-1: config 0 descriptor?? [ 129.088090][ T5698] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 129.229782][ T5698] usb 1-1: device descriptor read/64, error -71 [ 129.238519][ T30] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 129.338625][ T5698] usb usb1-port1: attempt power cycle [ 129.390134][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 129.390915][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.392282][ T30] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 129.392331][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.392380][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.392405][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.392429][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.392469][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.488227][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 129.488338][ T3216] input input6: Device does not respond to id packet M [ 129.489087][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 129.489136][ T3216] input input6: Device does not respond to id packet P [ 129.490520][ T3216] input input6: Device does not respond to id packet B [ 129.617150][ T30] usb 5-1: usb_control_msg returned -71 [ 129.617228][ T30] usbtmc 5-1:16.0: can't read capabilities [ 129.646609][ T30] usb 5-1: USB disconnect, device number 18 [ 129.693228][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.693282][ T3216] input input6: Device does not respond to id packet N [ 129.695408][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.697273][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.698035][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.699530][ T3216] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.738467][ T5698] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.745895][ T3216] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 129.760008][ T5698] usb 1-1: device descriptor read/8, error -71 [ 129.799786][ T3216] usb 4-1: USB disconnect, device number 15 [ 129.828351][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 129.988330][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 129.989251][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 129.991900][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 129.991942][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.991970][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 129.991997][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.992030][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.027104][ T5698] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 130.078001][ T9] usb 2-1: config 0 descriptor?? [ 130.085167][ T5698] usb 1-1: device descriptor read/8, error -71 [ 130.151319][ T6399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.197088][ T5698] usb usb1-port1: unable to enumerate USB device [ 130.429458][ T3216] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 130.510051][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510091][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510119][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510147][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510186][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510212][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510238][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510264][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510291][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510317][ T9] hid-retrode 0003:0403:97C1.0004: unknown main item tag 0x0 [ 130.510383][ T9] hid-retrode 0003:0403:97C1.0004: unbalanced collection at end of report description [ 130.511132][ T9] hid-retrode 0003:0403:97C1.0004: probe with driver hid-retrode failed with error -22 [ 130.558405][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.581327][ T3216] usb 5-1: Using ep0 maxpacket: 32 [ 130.583793][ T3216] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 130.628058][ T3216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.628129][ T3216] usb 5-1: Product: syz [ 130.628193][ T3216] usb 5-1: Manufacturer: syz [ 130.630625][ T3216] usb 5-1: SerialNumber: syz [ 130.645420][ T3216] usb 5-1: config 0 descriptor?? [ 130.705415][ T25] usb 2-1: USB disconnect, device number 18 [ 130.714760][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.717483][ T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.717618][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.717693][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.717806][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.717968][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.789574][ T30] usb 4-1: config 0 descriptor?? [ 130.851327][ T3216] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 130.851357][ T3216] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 130.920504][ T3216] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 130.924317][ T3216] usb 5-1: USB disconnect, device number 19 [ 131.210039][ T30] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.328131][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 131.604435][ T6413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.696394][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 131.696417][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 131.696451][ T6416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 131.698354][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 131.878353][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 131.878385][ T5758] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 131.882135][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.882179][ T25] usb 5-1: New USB device found, idVendor=1608, idProduct=0243, bcdDevice=c3.b4 [ 131.883170][ T25] usb 5-1: config 6 has an invalid interface number: 233 but max is 0 [ 131.883195][ T25] usb 5-1: config 6 has no interface number 0 [ 131.883234][ T25] usb 5-1: config 6 interface 233 altsetting 8 endpoint 0xB has invalid maxpacket 1479, setting to 64 [ 131.883261][ T25] usb 5-1: config 6 interface 233 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 131.883282][ T25] usb 5-1: config 6 interface 233 has no altsetting 0 [ 131.893920][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.893942][ T25] usb 5-1: Product: syz [ 131.893955][ T25] usb 5-1: Manufacturer: syz [ 131.893968][ T25] usb 5-1: SerialNumber: syz [ 131.991543][ T6410] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 131.999090][ T5698] usb 4-1: USB disconnect, device number 16 [ 132.038539][ T5758] usb 2-1: Using ep0 maxpacket: 8 [ 132.039350][ T5758] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 132.040379][ T5758] usb 2-1: config 129 has an invalid interface number: 26 but max is 0 [ 132.040405][ T5758] usb 2-1: config 129 has no interface number 0 [ 132.040436][ T5758] usb 2-1: too many endpoints for config 129 interface 26 altsetting 80: 97, using maximum allowed: 30 [ 132.040550][ T5758] usb 2-1: config 129 interface 26 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 132.040590][ T5758] usb 2-1: config 129 interface 26 has no altsetting 0 [ 132.044345][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.044370][ T5758] usb 2-1: Product: syz [ 132.044388][ T5758] usb 2-1: Manufacturer: syz [ 132.044403][ T5758] usb 2-1: SerialNumber: syz [ 132.195360][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.197307][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.206898][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.211578][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.252834][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.253974][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.624297][ T6422] netlink: 'syz.3.189': attribute type 3 has an invalid length. [ 132.819664][ T5758] ums_eneub6250 2-1:129.26: USB Mass Storage device detected [ 132.848804][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848884][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937417][ T25] io_ti 5-1:6.233: required endpoints missing [ 132.957127][ T5758] usb 2-1: USB disconnect, device number 19 [ 132.983335][ T25] usb 5-1: USB disconnect, device number 20 [ 133.023561][ T6433] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 133.023582][ T6433] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 133.057339][ T6433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.193'. [ 133.340667][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.342601][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.379045][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 133.396756][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 133.438856][ T6445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.442346][ T6441] bridge_slave_0: left allmulticast mode [ 133.442362][ T6441] bridge_slave_0: left promiscuous mode [ 133.442518][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.481872][ T6441] bridge_slave_1: left allmulticast mode [ 133.481889][ T6441] bridge_slave_1: left promiscuous mode [ 133.482041][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.510322][ T6441] bond0: (slave bond_slave_0): Releasing backup interface [ 133.516496][ T6441] bond0: (slave bond_slave_1): Releasing backup interface [ 133.535000][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.535044][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 133.536529][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 133.563777][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 133.571321][ T30] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 133.572425][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.572493][ T25] usb 5-1: Product: syz [ 133.572583][ T25] usb 5-1: Manufacturer: syz [ 133.572622][ T25] usb 5-1: SerialNumber: syz [ 133.583330][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.583382][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.634364][ T30] usb 4-1: config 0 descriptor?? [ 133.652046][ T6441] team0: Port device team_slave_0 removed [ 133.657232][ T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 133.691562][ T6441] team0: Port device team_slave_1 removed [ 133.695226][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.717541][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.733120][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.735916][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.761214][ T6441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.842913][ T25] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 134.148337][ T5758] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 134.148696][ T5715] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 134.271998][ T6453] syzkaller0: entered promiscuous mode [ 134.272028][ T6453] syzkaller0: entered allmulticast mode [ 134.300752][ T5715] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 134.304998][ T5715] usb 1-1: config 255 has an invalid interface number: 97 but max is 1 [ 134.305023][ T5715] usb 1-1: config 255 has an invalid interface descriptor of length 2, skipping [ 134.305042][ T5715] usb 1-1: config 255 has an invalid interface number: 227 but max is 1 [ 134.305063][ T5715] usb 1-1: config 255 has no interface number 0 [ 134.305107][ T5715] usb 1-1: config 255 has no interface number 1 [ 134.305164][ T5715] usb 1-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.305191][ T5715] usb 1-1: config 255 interface 97 has no altsetting 0 [ 134.305210][ T5715] usb 1-1: config 255 interface 227 has no altsetting 0 [ 134.308419][ T5758] usb 2-1: Using ep0 maxpacket: 8 [ 134.325240][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.325296][ T5715] usb 1-1: Product: syz [ 134.325383][ T5715] usb 1-1: Manufacturer: syz [ 134.325416][ T5715] usb 1-1: SerialNumber: syz [ 134.326504][ T5758] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 134.362089][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.447269][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.447299][ T5758] usb 2-1: Product: syz [ 134.447316][ T5758] usb 2-1: Manufacturer: syz [ 134.447332][ T5758] usb 2-1: SerialNumber: syz [ 134.476710][ T5758] usb 2-1: config 0 descriptor?? [ 134.489811][ T5758] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 134.489915][ T5758] usb 2-1: selecting invalid altsetting 1 [ 134.639583][ T5715] rndis_host 1-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 134.837143][ T6462] netlink: 'syz.2.199': attribute type 2 has an invalid length. [ 134.845080][ T5715] usb 1-1: USB disconnect, device number 24 [ 134.889786][ T25] usb 5-1: failed to enable PITCH for EP 0x82 [ 134.891738][ T25] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 134.891768][ T25] usb 5-1: clock source 0 is not valid, cannot use [ 134.893584][ T25] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 134.896029][ T25] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 135.063941][ T6465] program syz.1.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.334032][ T25] usb 5-1: USB disconnect, device number 21 [ 135.535715][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.988025][ T6483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.125739][ T5715] usb 4-1: USB disconnect, device number 17 [ 136.315214][ T6488] kvm [6484]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 136.315391][ T6488] kvm [6484]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 136.319296][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 136.440581][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 136.442499][ T6491] veth1_macvtap: left promiscuous mode [ 136.468335][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 136.468875][ T25] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 136.470913][ T25] usb 5-1: config 129 has an invalid interface number: 26 but max is 0 [ 136.470939][ T25] usb 5-1: config 129 has no interface number 0 [ 136.470969][ T25] usb 5-1: too many endpoints for config 129 interface 26 altsetting 80: 97, using maximum allowed: 30 [ 136.471004][ T25] usb 5-1: config 129 interface 26 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 136.471033][ T25] usb 5-1: config 129 interface 26 has no altsetting 0 [ 136.473581][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.473605][ T25] usb 5-1: Product: syz [ 136.473621][ T25] usb 5-1: Manufacturer: syz [ 136.473635][ T25] usb 5-1: SerialNumber: syz [ 136.774197][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 136.785962][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 136.798385][ T5714] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 136.938420][ T30] usb 2-1: USB disconnect, device number 20 [ 136.956869][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 136.964586][ T5714] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 136.969003][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.969067][ T5714] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.999565][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.999589][ T5714] usb 4-1: Product: syz [ 136.999633][ T5714] usb 4-1: Manufacturer: syz [ 136.999643][ T5714] usb 4-1: SerialNumber: syz [ 137.227907][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.243589][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.246156][ T6491] xt_addrtype: ipv6 does not support BROADCAST matching [ 137.305270][ T5714] usb 4-1: unit 5 not found! [ 137.305318][ T5714] usb 4-1: unit 16 not found! [ 137.329765][ T6501] IPVS: You probably need to specify IP address on multicast interface. [ 137.330268][ T6501] IPVS: Error connecting to the multicast addr [ 137.383389][ T25] ums_eneub6250 5-1:129.26: USB Mass Storage device detected [ 137.451394][ T5714] usb 4-1: USB disconnect, device number 18 [ 137.487971][ T25] usb 5-1: USB disconnect, device number 22 [ 137.534731][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.739681][ T31] audit: type=1326 audit(1789614213.937:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 137.740041][ T31] audit: type=1326 audit(1789614213.937:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ade99e159 code=0x7ffc0000 [ 137.740073][ T31] audit: type=1326 audit(1789614213.937:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.741263][ T31] audit: type=1326 audit(1789614213.937:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.742463][ T31] audit: type=1326 audit(1789614213.937:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.743667][ T31] audit: type=1326 audit(1789614213.937:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.744967][ T31] audit: type=1326 audit(1789614213.937:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.746184][ T31] audit: type=1326 audit(1789614213.937:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.747407][ T31] audit: type=1326 audit(1789614213.937:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.772877][ T31] audit: type=1326 audit(1789614213.967:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.1.209" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ade95e98e code=0x7ffc0000 [ 137.928686][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.943695][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 138.050997][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 138.051033][ T6516] bond0: Unable to set down delay as MII monitoring is disabled [ 138.088441][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 138.089216][ T30] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.090309][ T30] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.090335][ T30] usb 1-1: config 0 has no interface number 0 [ 138.090391][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.090416][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.090446][ T30] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.090472][ T30] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.090513][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.092931][ T30] usb 1-1: config 0 descriptor?? [ 138.113014][ T25] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 138.159383][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.159450][ T25] usb 5-1: Product: syz [ 138.159487][ T25] usb 5-1: Manufacturer: syz [ 138.159526][ T25] usb 5-1: SerialNumber: syz [ 138.223035][ T25] usb 5-1: config 0 descriptor?? [ 138.226847][ T30] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.256055][ T25] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 138.329703][ T30] usb 1-1: USB disconnect, device number 25 [ 138.329809][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 138.335689][ T30] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 138.348711][ T5714] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 138.444009][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 138.505637][ T5714] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 138.507590][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.507624][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 138.507695][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.549791][ T5714] usb 4-1: config 0 descriptor?? [ 138.866662][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.872708][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.887097][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.890485][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.912616][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.913176][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.919157][ T25] gspca_sunplus: reg_w_riv err -71 [ 138.919245][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 138.924353][ T25] usb 5-1: USB disconnect, device number 23 [ 138.999691][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.000063][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.050043][ T6526] program syz.0.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.114702][ T6532] binder: BINDER_SET_CONTEXT_MGR already set [ 139.114717][ T6532] binder: 6528:6532 ioctl 4018620d 200000004a80 returned -16 [ 139.613638][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 139.613658][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 139.613671][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 140.228453][ T5698] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 140.379844][ T5698] usb 5-1: device descriptor read/64, error -71 [ 140.630472][ T5698] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 140.770302][ T5698] usb 5-1: device descriptor read/64, error -71 [ 140.890288][ T5698] usb usb5-port1: attempt power cycle [ 141.152082][ T5714] usbhid 4-1:0.0: can't add hid device: -71 [ 141.152193][ T5714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.190216][ T5714] usb 4-1: USB disconnect, device number 19 [ 141.238446][ T5698] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 141.273768][ T5698] usb 5-1: device descriptor read/8, error -71 [ 141.518557][ T5698] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 141.539578][ T5698] usb 5-1: device descriptor read/8, error -71 [ 141.611243][ T5714] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.633837][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 141.659773][ T5698] usb usb5-port1: unable to enumerate USB device [ 141.761647][ T5714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.762968][ T5714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.763011][ T5714] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.763032][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.763079][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.763107][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.767953][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.767979][ T5714] usb 4-1: Product: syz [ 141.767994][ T5714] usb 4-1: Manufacturer: syz [ 141.839430][ T5714] cdc_wdm 4-1:1.0: skipping garbage [ 141.839477][ T5714] cdc_wdm 4-1:1.0: skipping garbage [ 141.859205][ T5714] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 141.859220][ T5714] cdc_wdm 4-1:1.0: Unknown control protocol [ 141.902700][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.902710][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.902774][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.902780][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.902844][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.902850][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.902912][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.902937][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903008][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903014][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903088][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903093][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903149][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903155][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903231][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903237][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903369][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903375][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903436][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903441][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903497][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903502][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.903559][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.903565][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.913949][ T6591] binder: 6589:6591 ioctl c0306201 200000000040 returned -14 [ 141.917695][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.917965][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.921014][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.921043][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.921292][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.921319][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.921515][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.921766][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.923912][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.924198][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.930390][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.930413][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.930800][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.930829][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.931081][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.931108][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.931766][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.932033][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.932727][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.932755][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.936679][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.940006][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.944063][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.944084][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.944382][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.944401][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.944621][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.944640][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.944827][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.944839][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.945101][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.945126][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.945386][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.945412][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.967652][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.967993][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 141.971640][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.971678][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.971965][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.971987][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.972396][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.972430][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.972819][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.972842][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.973100][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.973136][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.995491][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.995527][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.995741][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.995761][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.996099][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.996121][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.996361][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.996376][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.996592][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.996613][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 141.996826][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 141.996834][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.002507][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.002847][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.003136][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.003495][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.003761][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.015319][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.015348][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.015647][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.015667][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.015892][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.015912][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.016129][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.016167][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.016425][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.016448][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.024923][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.025284][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.030776][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.031058][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.031333][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.031639][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.031880][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.032157][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.032421][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.032697][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.032922][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.033038][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.033146][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.033419][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.033668][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.036649][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.036677][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.036910][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.036924][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.037146][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.037168][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.037411][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.037440][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.037765][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.037781][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.038030][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.038051][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.053388][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.053411][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.053734][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.053755][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.054006][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.054036][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.054305][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.054326][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.054551][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.054572][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.054788][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.064874][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.065163][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.065396][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.065623][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.065989][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.089495][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.090337][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.090370][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.090591][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.090611][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.090808][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.090840][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.105259][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.105535][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.105863][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.106193][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.106453][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.107149][ T6597] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 142.122026][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.122063][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.122330][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.122357][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.122582][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.122608][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.125553][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.125584][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.125833][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.125861][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.126553][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.126819][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.127088][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.127354][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.127687][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.150965][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.151003][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.151401][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.151428][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.151656][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.151677][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.151916][ T6592] binder: BINDER_SET_CONTEXT_MGR already set [ 142.151944][ T6592] binder: 6589:6592 ioctl 4018620d 200000000340 returned -16 [ 142.160640][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.161080][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.161333][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.161580][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.161807][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.162055][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212209][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212324][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212415][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212514][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212606][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212704][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212793][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212876][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.212980][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.213069][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.213157][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.213246][ T6594] binder: 6589:6594 ioctl c0306201 0 returned -14 [ 142.569183][ T6597] team0 (unregistering): Port device team_slave_0 removed [ 142.740226][ T6597] team0 (unregistering): Port device team_slave_1 removed [ 142.770642][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 142.772299][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.772595][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.772924][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.772971][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.773272][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.773319][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.773663][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.773755][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.774149][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.774198][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.774525][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.774573][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.774899][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.774947][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.775283][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.775328][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.775740][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.775789][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.776129][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 142.776169][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 142.812394][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.812458][ T5714] usb 4-1: USB disconnect, device number 20 [ 143.648899][ T5714] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.654443][ T6609] netlink: 164 bytes leftover after parsing attributes in process `syz.0.232'. [ 143.798364][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 143.798885][ T5714] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 143.799988][ T5714] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 143.800033][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.800057][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.800092][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.868124][ T5698] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 143.878685][ T5714] usb 2-1: config 0 descriptor?? [ 143.998359][ T5698] usb 5-1: device descriptor read/64, error -71 [ 144.238331][ T5698] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 144.378579][ T5698] usb 5-1: device descriptor read/64, error -71 [ 144.489631][ T5698] usb usb5-port1: attempt power cycle [ 144.720741][ T5714] usbhid 2-1:0.0: can't add hid device: -71 [ 144.720850][ T5714] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.744027][ T5714] usb 2-1: USB disconnect, device number 21 [ 144.828392][ T5698] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 144.852703][ T5698] usb 5-1: device descriptor read/8, error -71 [ 145.088357][ T3216] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 145.088398][ T5698] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 145.119016][ T5698] usb 5-1: device descriptor read/8, error -71 [ 145.230010][ T5698] usb usb5-port1: unable to enumerate USB device [ 145.246585][ T3216] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 145.254688][ T3216] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.254768][ T3216] usb 4-1: config 0 has no interface number 0 [ 145.254918][ T3216] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.254985][ T3216] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.255094][ T3216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.265944][ T3216] usb 4-1: config 0 descriptor?? [ 145.650702][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.767513][ T6627] ip6tnl1: entered promiscuous mode [ 145.775623][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.789670][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.808431][ T3216] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 145.809041][ T25] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 145.814163][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.814190][ T25] usb 2-1: Product: syz [ 145.814206][ T25] usb 2-1: Manufacturer: syz [ 145.814222][ T25] usb 2-1: SerialNumber: syz [ 145.814352][ T3216] hid_prodikeys: hid-prodikeys: failed to find output report [ 145.814352][ T3216] [ 145.898936][ T25] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 145.919089][ T25] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 145.997624][ T5758] usb 4-1: USB disconnect, device number 21 [ 146.157949][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.159596][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.178350][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 146.215786][ T6640] netlink: 'syz.1.241': attribute type 29 has an invalid length. [ 146.329729][ T25] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 146.330731][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.330753][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.330779][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.333201][ T25] usb 1-1: config 0 descriptor?? [ 146.835166][ T25] hid_parser_main: 19 callbacks suppressed [ 146.835192][ T25] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 146.835225][ T25] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 146.835253][ T25] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 146.835282][ T25] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 146.835309][ T25] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 146.902788][ T25] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 147.026675][ T25] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 0 [ 147.026708][ T25] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 147.026772][ T25] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 147.026787][ T25] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 147.066567][ T25] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 147.162508][ T25] usb 2-1: USB disconnect, device number 22 [ 147.178781][ T25] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 147.179472][ T25] qcserial 2-1:1.0: device disconnected [ 147.230584][ T5758] usb 1-1: USB disconnect, device number 26 [ 147.244428][ T3216] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 147.389193][ T3216] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.390272][ T3216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.392465][ T3216] usb 5-1: config 0 descriptor?? [ 147.596016][ T3216] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 147.924597][ T3216] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 147.924637][ T3216] [drm] Initialized udl on minor 1 [ 148.034697][ T6652] loop7: detected capacity change from 0 to 16384 [ 148.489721][ T5714] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 148.621112][ T5714] usb 4-1: device descriptor read/64, error -71 [ 148.698909][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 148.717419][ T3216] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 148.770044][ T3216] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 148.831449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 148.839722][ T3216] usb 5-1: USB disconnect, device number 32 [ 148.850095][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 148.858931][ T5714] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 148.893903][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 148.901089][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.943413][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.943441][ T25] usb 1-1: Product: syz [ 148.943456][ T25] usb 1-1: Manufacturer: 紿텵餃ᇧ꼡ል曔魛㢡盙鷣贯ᰊ굣쏛ඨ✋߭ἦ荲䤚鿀廰岹뫴阋흮冃덄墻ᲀҴ鐚ᅕ◗䳽禤⣬╤寫曕駯뭟湷᭫𓪃Ᵽﻊ庰㟮苑룔闬讆㬫啛䰳䷬褤 [ 148.943483][ T25] usb 1-1: SerialNumber: syz [ 148.998632][ T5714] usb 4-1: device descriptor read/64, error -71 [ 149.108799][ T5714] usb usb4-port1: attempt power cycle [ 149.276820][ T25] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 149.448387][ T5714] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 149.472587][ T5714] usb 4-1: device descriptor read/8, error -71 [ 149.486023][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 149.511502][ T25] usb 1-1: USB disconnect, device number 27 [ 149.565919][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.721137][ T5714] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 149.738013][ T6689] TCP: TCP_TX_DELAY enabled [ 149.741168][ T6689] x_tables: duplicate underflow at hook 1 [ 149.741930][ T5714] usb 4-1: device descriptor read/8, error -71 [ 149.849550][ T5714] usb usb4-port1: unable to enumerate USB device [ 150.349530][ T5714] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 150.500993][ T5714] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 150.502278][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.502331][ T5714] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.502497][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.945485][ T5714] ttusb_dec_send_command: command bulk message failed: error -71 [ 150.946978][ T5714] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -71 [ 150.974464][ T5714] usb 1-1: USB disconnect, device number 28 [ 151.683920][ T6713] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 152.611831][ T6720] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.880597][ T6713] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.207377][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 153.207409][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 153.207429][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.274'. [ 153.394090][ T6744] UHID_CREATE from different security context by process 217 (syz.0.277), this is not allowed. [ 153.453170][ T6733] [ 153.455555][ T6733] ====================================================== [ 153.462591][ T6733] WARNING: possible circular locking dependency detected [ 153.469629][ T6733] syzkaller #0 Not tainted [ 153.474083][ T6733] ------------------------------------------------------ [ 153.481121][ T6733] syz.4.273/6733 is trying to acquire lock: [ 153.487074][ T6733] ffff88805444e1e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 153.498608][ T6733] [ 153.498608][ T6733] but task is already holding lock: [ 153.506003][ T6733] ffff88805444f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 153.515017][ T6733] [ 153.515017][ T6733] which lock already depends on the new lock. [ 153.515017][ T6733] [ 153.525574][ T6733] [ 153.525574][ T6733] the existing dependency chain (in reverse order) is: [ 153.534605][ T6733] [ 153.534605][ T6733] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 153.542361][ T6733] lock_sock_nested+0x41/0x100 [ 153.547667][ T6733] smc_listen_out+0xd4/0x3d0 [ 153.552822][ T6733] smc_listen_work+0x81d/0x1410 [ 153.558218][ T6733] process_scheduled_works+0xc3d/0x1630 [ 153.564335][ T6733] worker_thread+0xa47/0xfb0 [ 153.569481][ T6733] kthread+0x38b/0x480 [ 153.574097][ T6733] ret_from_fork+0x514/0xb70 [ 153.579233][ T6733] ret_from_fork_asm+0x1a/0x30 [ 153.584538][ T6733] [ 153.584538][ T6733] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 153.594718][ T6733] __lock_acquire+0x164c/0x2de0 [ 153.600113][ T6733] lock_acquire+0x115/0x350 [ 153.605162][ T6733] __flush_work+0x74c/0xca0 [ 153.610228][ T6733] __cancel_work_sync+0xbf/0x110 [ 153.615892][ T6733] smc_clcsock_release+0x60/0xf0 [ 153.621373][ T6733] __smc_release+0x64e/0x7c0 [ 153.626569][ T6733] smc_close_non_accepted+0xd5/0x1f0 [ 153.632390][ T6733] smc_close_active+0xb30/0xf20 [ 153.637773][ T6733] __smc_release+0x9c/0x7c0 [ 153.642822][ T6733] smc_release+0x2c5/0x550 [ 153.647793][ T6733] __sock_release+0xa0/0x1f0 [ 153.652928][ T6733] sock_close+0x1c/0x30 [ 153.657631][ T6733] __fput+0x418/0xa50 [ 153.662159][ T6733] task_work_run+0x1d9/0x270 [ 153.667287][ T6733] exit_to_user_mode_loop+0x204/0x770 [ 153.673214][ T6733] do_syscall_64+0x328/0x520 [ 153.678430][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.684858][ T6733] [ 153.684858][ T6733] other info that might help us debug this: [ 153.684858][ T6733] [ 153.695094][ T6733] Possible unsafe locking scenario: [ 153.695094][ T6733] [ 153.702554][ T6733] CPU0 CPU1 [ 153.707932][ T6733] ---- ---- [ 153.713326][ T6733] lock(sk_lock-AF_SMC/1); [ 153.717876][ T6733] lock((work_completion)(&new_smc->smc_listen_work)); [ 153.727360][ T6733] lock(sk_lock-AF_SMC/1); [ 153.734418][ T6733] lock((work_completion)(&new_smc->smc_listen_work)); [ 153.741381][ T6733] [ 153.741381][ T6733] *** DEADLOCK *** [ 153.741381][ T6733] [ 153.749572][ T6733] locks held by syz.4.273/6733: 3, last CPU#1: [ 153.755741][ T6733] #0: ffff8880581c9940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 153.758513][ T5758] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 153.773839][ T6733] #1: ffff88805444f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 153.783277][ T6733] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 153.792531][ T6733] [ 153.792531][ T6733] stack backtrace: [ 153.798430][ T6733] CPU: 1 UID: 0 PID: 6733 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(full) [ 153.807665][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.817734][ T6733] Call Trace: [ 153.821038][ T6733] [ 153.823989][ T6733] dump_stack_lvl+0xe8/0x150 [ 153.828602][ T6733] print_circular_bug+0x2e2/0x300 [ 153.833648][ T6733] check_noncircular+0x12f/0x150 [ 153.838602][ T6733] __lock_acquire+0x164c/0x2de0 [ 153.843474][ T6733] ? __pfx___schedule+0x10/0x10 [ 153.848338][ T6733] ? irqentry_exit+0x218/0x910 [ 153.853149][ T6733] ? irqentry_exit+0x218/0x910 [ 153.857958][ T6733] ? trace_irq_disable+0x3b/0x140 [ 153.863027][ T6733] lock_acquire+0x115/0x350 [ 153.867571][ T6733] ? __flush_work+0x101/0xca0 [ 153.872292][ T6733] ? preempt_schedule_thunk+0x16/0x40 [ 153.877702][ T6733] ? __flush_work+0x101/0xca0 [ 153.882410][ T6733] __flush_work+0x74c/0xca0 [ 153.886961][ T6733] ? __flush_work+0x101/0xca0 [ 153.891706][ T6733] ? __flush_work+0x101/0xca0 [ 153.896410][ T6733] ? __pfx___flush_work+0x10/0x10 [ 153.901455][ T6733] ? __pfx_wq_barrier_func+0x10/0x10 [ 153.906771][ T6733] ? __cancel_work_sync+0x5c/0x110 [ 153.911911][ T6733] __cancel_work_sync+0xbf/0x110 [ 153.916875][ T6733] smc_clcsock_release+0x60/0xf0 [ 153.921832][ T6733] __smc_release+0x64e/0x7c0 [ 153.926445][ T6733] smc_close_non_accepted+0xd5/0x1f0 [ 153.931738][ T6733] smc_close_active+0xb30/0xf20 [ 153.936601][ T6733] ? __pfx_sock_def_readable+0x10/0x10 [ 153.942135][ T6733] __smc_release+0x9c/0x7c0 [ 153.946666][ T6733] ? __local_bh_enable_ip+0xd6/0x140 [ 153.951989][ T6733] smc_release+0x2c5/0x550 [ 153.956465][ T6733] __sock_release+0xa0/0x1f0 [ 153.961118][ T6733] ? __pfx_sock_close+0x10/0x10 [ 153.966096][ T6733] sock_close+0x1c/0x30 [ 153.970283][ T6733] __fput+0x418/0xa50 [ 153.974300][ T6733] task_work_run+0x1d9/0x270 [ 153.978939][ T6733] ? __pfx_task_work_run+0x10/0x10 [ 153.984067][ T6733] exit_to_user_mode_loop+0x204/0x770 [ 153.989450][ T6733] ? rcu_is_watching+0x16/0xb0 [ 153.994255][ T6733] do_syscall_64+0x328/0x520 [ 153.998865][ T6733] ? trace_irq_disable+0x3b/0x140 [ 154.003899][ T6733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.009999][ T6733] ? clear_bhb_loop+0x70/0xc0 [ 154.012519][ T5758] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 154.015007][ T5758] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 154.015068][ T5758] usb 1-1: config 1 has no interface number 0 [ 154.015162][ T5758] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 154.025050][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.025106][ T5758] usb 1-1: Product: syz [ 154.025144][ T5758] usb 1-1: Manufacturer: syz [ 154.025185][ T5758] usb 1-1: SerialNumber: syz [ 154.068750][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.074662][ T6733] RIP: 0033:0x7f6cbd19e159 [ 154.079089][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.098732][ T6733] RSP: 002b:00007f6cbd54fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.107159][ T6733] RAX: 0000000000000000 RBX: 00007f6cbd54fc90 RCX: 00007f6cbd19e159 [ 154.115146][ T6733] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 154.123152][ T6733] RBP: 0000000000025601 R08: 0000000000000001 R09: 0000000000000000 [ 154.131140][ T6733] R10: 0000001b32d20000 R11: 0000000000000246 R12: 00007f6cbd54fcd0 [ 154.139122][ T6733] R13: 00007f6cbd42609c R14: 000000000002572d R15: 00007f6cbd426090 [ 154.147134][ T6733] [ 154.153541][ T6747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.156343][ T5758] usb 1-1: Error in usbnet_get_endpoints (-22) [ 154.356888][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.357133][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.357778][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.358022][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.397438][ T9] usb 1-1: USB disconnect, device number 29 [ 158.429504][ T5823] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)