last executing test programs: 9.474742044s ago: executing program 4 (id=1978): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 9.368063129s ago: executing program 3 (id=1979): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000011c0)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/163, 0xa3}], 0x3, &(0x7f0000000600)=""/26, 0x1a}, 0x497df65e}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/233, 0xe9}], 0x2, &(0x7f0000000840)=""/247, 0xf7}, 0x5}, {{&(0x7f0000000940)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f0000000a80)=""/222, 0xde}, {&(0x7f0000000b80)=""/164, 0xa4}], 0x4}, 0x9}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/40, 0x28}, {&(0x7f0000000d40)=""/109, 0x6d}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/114, 0x72}], 0x5, &(0x7f0000000f80)=""/108, 0x6c}, 0x9}, {{&(0x7f0000001000)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/139, 0x8b}], 0x1, &(0x7f0000001180)=""/63, 0x3f}, 0x74}], 0x5, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x9}) pipe2$watch_queue(&(0x7f0000000100), 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) unshare(0x24060400) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "d023ae68491e59847e9133fd6e141329556dfab4725369fd6db53719745dcd410da862b3e8d9a1427be563c8ce17207bf59b69e2facd3d0f0ff646056cc725c3", 0x1e}, 0x48, 0xfffffffffffffff9) 8.428732049s ago: executing program 4 (id=1981): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32}}) 8.096132518s ago: executing program 4 (id=1983): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="db89", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf2514000000080007000100000005000b000100000005000b00000000000800110050eb00000800060006"], 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000000101040000000000000000020000001c001880080002400000000008000240000000010800030000000000040001800800084000001119"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xf6a, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000041d000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="f3f76d0eb9800000c00f3235000800000f300f23a8c4c37d392e2364f419f90fe7bd0c00000066ba4200ec8fe830cda300580000880f78cc", 0x38}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) eventfd(0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x7fff, @private1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x1, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xb8, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="bf76f357b57004d02d4bed5fdb6849399e1fd8d34a92606acb315170604c26f8e00cac461a87fee1886e79bdec946464d6a5e1c0be9ea3d9bfb72da62b658cc29e54abf5e9af29922c8c6ec23550b2c0fd6c68f7fc2c1de8bb68050189343d6d51c40673312ca4153be4ff181adc39469f47c8a188f02b2a1da41bf8dfbb6a80f87205a56c09575730", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="db89", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf2514000000080007000100000005000b000100000005000b00000000000800110050eb00000800060006"], 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x14) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000000101040000000000000000020000001c001880080002400000000008000240000000010800030000000000040001800800084000001119"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xf6a, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000041d000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="f3f76d0eb9800000c00f3235000800000f300f23a8c4c37d392e2364f419f90fe7bd0c00000066ba4200ec8fe830cda300580000880f78cc", 0x38}], 0x1, 0x27, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) eventfd(0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x7fff, @private1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x1, 0x4010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xb8, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="bf76f357b57004d02d4bed5fdb6849399e1fd8d34a92606acb315170604c26f8e00cac461a87fee1886e79bdec946464d6a5e1c0be9ea3d9bfb72da62b658cc29e54abf5e9af29922c8c6ec23550b2c0fd6c68f7fc2c1de8bb68050189343d6d51c40673312ca4153be4ff181adc39469f47c8a188f02b2a1da41bf8dfbb6a80f87205a56c09575730", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) 7.433857614s ago: executing program 4 (id=1985): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ede000/0x2000)=nil, 0x2000, 0x0, 0x85, 0x4000) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) syz_io_uring_complete(0x0) sendfile(r4, r4, 0x0, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007329c5ad5fdcaa41844dd311efe5696c1af48007f19196a2455c2214c4425908c2e485061828a480", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100050100000000000000000200000000000000020000000c000c4000000000"], 0x30}}, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x18, 0x2, {}, {0x3}, {0xf4ef}, {0xffffffff, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}) 6.314570119s ago: executing program 2 (id=1988): syz_open_dev$sndmidi(&(0x7f0000000000), 0x9, 0x200081) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 6.196311793s ago: executing program 3 (id=1989): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x4000, 0x0, 0x940a, 0x1000007}) (async) fcntl$addseals(r0, 0x409, 0xb) r1 = syz_clone(0x8008080, &(0x7f0000000080)="5c21736e2e70c2da09b17ccd9d11d3fb879d3739ea307cd3f748777c4e78ad7bc14ebbee67d2edd25ca7c158b2d6bad00c468f9a3bfc6a2659ed886e11f87990c0bc00001c8ddc2ab7c1", 0x4a, &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000300)="8df7f5bbb1887bd13ea8263d1a521cda12e60678956039b4f4a8e4271c26b42078a1a8624670f6ed571e7fc6838eaac4ea6fb4d43aa964d6ae3d6688bbbf8e8da66cdee1b30fa4411bd280c51e53c3b64b890b8666a368b4bf1a0b2272f324c2df12189e1249c953d002ee7c38de01ea105f0c5189c51cc7e8540ac9e6abbf8bd04f47ed7f35a8b4e20837c79fde3d28bb070028a3de2e8c9765a3ae0b7a7c2db3622b0dea8170e5a1a7469294a1") fcntl$lock(r0, 0x5, &(0x7f00000003c0)={0x2, 0x3, 0xfffffffffffffff9, 0x6, r1}) 6.008153474s ago: executing program 2 (id=1990): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x0, 0x1000, 0x62}, 0x2c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) lseek(r1, 0x10001, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000001880)={0x9, 0x625, 0x380000000, 0x2, 0x2, 0xa7ef, 0x80, 0x8}, &(0x7f00000018c0)={0x5, 0x10b, 0x4b1, 0x9, 0x5, 0x100000001, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000001a00)={0x0}) dup(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x82841, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r5, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0x800003, 0xffffffffffffffff, 0x2000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x4, 0x400000000, 0xb, 0x7fffffff, 0x4}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.605373639s ago: executing program 3 (id=1992): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x4000, 0x1000, &(0x7f0000b31000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) (async) fchdir(r0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) (async) inotify_init() (async) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa000032a) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x4000, 0x1000, &(0x7f0000b31000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) (async) 5.212241792s ago: executing program 1 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x410, 0x11, 0x148, 0x0, 0x0, 0x410, 0x2a8, 0x2a8, 0x410, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0xe, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x10}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x40a, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x47}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-512\x00'}}}]}, 0x13c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x47}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-512\x00'}}}]}, 0x13c}}, 0x0) 5.201260658s ago: executing program 3 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x800}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000000440)=0x0) clock_gettime(0x1, &(0x7f0000002b80)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000005480)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/135, 0x87}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000002b40)=""/49, 0x31}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/116, 0x74}, {&(0x7f0000000940)=""/47, 0x2f}], 0x9, &(0x7f0000000a40)=""/147, 0xfffffffffffffd8a}, 0x9}, {{&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b80)=""/103, 0x67}, {&(0x7f0000000c00)=""/114, 0x72}, {&(0x7f0000000c80)=""/34, 0x22}, {&(0x7f0000000cc0)=""/180, 0xb4}, {&(0x7f0000000d80)=""/119, 0x77}, {&(0x7f0000000e00)=""/220, 0xdc}], 0x6, &(0x7f0000000f80)=""/201, 0xc9}, 0x8}, {{0xfffffffffffffffd, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/69, 0x45}], 0x1}}, {{&(0x7f0000001140)=@alg, 0x80, &(0x7f0000002740)=[{&(0x7f00000011c0)=""/113, 0x71}, {&(0x7f0000001240)=""/185, 0xba}, {&(0x7f0000001300)=""/110, 0x6e}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/165, 0xa5}, {&(0x7f0000002440)=""/249, 0xf9}, {&(0x7f0000002540)=""/159, 0x9f}, {&(0x7f0000002600)=""/100, 0x64}, {&(0x7f0000002680)=""/190, 0xbe}], 0x9, &(0x7f0000002800)=""/189, 0xbd}, 0x4}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/153, 0x99}], 0x2, &(0x7f0000002a40)=""/66, 0x42}, 0x6}, {{&(0x7f0000002ac0)=@alg, 0x80, &(0x7f0000002d80)=[{&(0x7f0000005740)=""/151, 0x97}, {&(0x7f0000002c00)=""/99, 0x63}, {&(0x7f0000002c80)=""/244, 0xf4}], 0x3, &(0x7f0000002dc0)=""/154, 0x9a}, 0x1700cf3a}, {{&(0x7f0000002e80)=@nfc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002f00)=""/54, 0x36}], 0x1, &(0x7f0000002f80)=""/37, 0x25}, 0x1}, {{&(0x7f0000002fc0)=@nfc, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003040)=""/115, 0x73}, {&(0x7f00000030c0)=""/126, 0x7e}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/27, 0x1b}, {&(0x7f00000031c0)=""/36, 0x24}, {&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/76, 0x4c}, {&(0x7f0000004340)=""/77, 0x4d}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0xa}, 0xc0cf}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000005800)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="adcad43d34709d405f0530c2acb60102030109fa110001000000000904000000f2a7cc00"], 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TCXONC(r10, 0x540a, 0x3) syz_usb_control_io$hid(r9, 0x0, 0x0) close(r7) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) 5.070184904s ago: executing program 1 (id=1996): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x8c60, 0x10000, 0x8000000}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sync() 4.560249677s ago: executing program 1 (id=1997): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x64}}, 0xfe0f000000000000) 4.553520623s ago: executing program 2 (id=1998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 4.40718154s ago: executing program 1 (id=1999): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r1 = syz_io_uring_setup(0x2438, &(0x7f0000000000)={0x0, 0x55ee, 0x2, 0x3, 0x14e}, &(0x7f0000000080), &(0x7f0000000140)) pread64(r1, 0x0, 0x0, 0x7) (async) pread64(r1, 0x0, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.292190751s ago: executing program 2 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x10) fcntl$addseals(r0, 0x409, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x27) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r8, &(0x7f0000000240)='./file1\x00') 4.227191456s ago: executing program 4 (id=2001): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x2, @sliced={0xb5e9, [0x4, 0x8, 0x7, 0x9, 0x6, 0x5, 0x8000, 0x101, 0x4007, 0x2, 0x6, 0x0, 0x3, 0x19, 0x2, 0x4, 0x5e4d, 0x7ff, 0x7ffc, 0xffff, 0x3, 0x7, 0x6, 0x864e, 0x7ff, 0x40, 0x4, 0x2, 0xfffd, 0xfc00, 0x9, 0x2, 0x8, 0xf801, 0x8, 0x5, 0xed, 0x9, 0x0, 0x7, 0x3, 0x4, 0x2, 0x3, 0x42, 0x9, 0x2], 0x3}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r6, r4) write$binfmt_aout(r6, &(0x7f0000000b40)={{0xcc, 0x4, 0xa6, 0x13a, 0xf6, 0x5c, 0x8c, 0x10001}, "49f41875d907f95e8756f16192e4ed2dff7be29d91a78eaf881ddda25de3b29d3d396350106e6cfc16adece6450ff6732cb7ee6df5bcf31c610d543de1c6f6cbbc1ac276eb5d05a9adef347dabdedee97f6d3defd96e8193ed8402662df01906865ed06fd4e5cb423329b7cb49fe00fa76a10d42d737c942f11db155a73351d774dabc6324f9bc425ecac915ab1b08f68a8609a610f78019d87d0ec7e8c5cad45223ddfe75f5dd4ff1cacd4aaabd97f363bc25978dca3aa28d30830f3c8bfdfe7ab23f0968f4bbda77c2458976e7ab82bd926ec522f0515888e6b3c3005898ce01453388", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x804) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}}, 0x0) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 3.969153283s ago: executing program 1 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x814) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x400800, 0x4) fchmodat(r7, &(0x7f0000000340)='./file0\x00', 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r10 = getpid() ptrace(0x10, r10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = socket$inet(0x2, 0x2, 0x2000200) setsockopt$inet_msfilter(r11, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r12 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20088814}, 0x4004801) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) 3.206038336s ago: executing program 1 (id=2003): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) personality(0xeaffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.0123734s ago: executing program 0 (id=2004): r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='name', &(0x7f0000000200)='\x00\x00\x00P\x00\x006\xba\xe9\xda+ \xc3\xe1\xd4\xb9?\xa4\xdc\xfb\x15\xb6\xe9&\x04&\'C<\t\xac\xd2\x14#\xdf\x0e\x93j&\xa8\x898\xc4U\xb8\x19\xc3\xa3{\x96\x1e\x1c\x03(W\xb0il:\xefDF\xa3\xf2\xfd\xe7y@\xd7\x8bNo~\xa9t\ta!\'P,\xaf\n\xecy\xca\x01\xe9R Fh\xc1\xc4\xe8\x94\xb2\xa7|\xf14>\x12\xcd\x1b\xde\xc9\x17X4h^[\xf7:\x83\xc6\xb7\xfa\xb2\x8a\x8e\x94\xd1\xa8\xc5\xd3\xd5Mh\xba\xf1\x179P\xb9aQZy\xa4\xb4\x8dX\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a18300000000000000000500000008000300441e67"], 0x28}}, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x2800000, &(0x7f0000000280)={{'fd', 0x3d, r3}}, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5}) socket$netlink(0x10, 0x3, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=r6], 0x28}}, 0x0) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000180)={0x20, r5, 0x1, 0x0, &(0x7f0000000600)=[{}]}) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0x3, "650ea6b4f1e393fcd80861b0657a0d91854d5332f5d98187640cad0ff820719b"}) 2.477465033s ago: executing program 0 (id=2005): r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x0, 0xa, 0x12, @mcast2, @empty, 0x8, 0x40, 0x5, 0x10001}}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(r0) 2.340293643s ago: executing program 0 (id=2006): syz_emit_ethernet(0x86, &(0x7f0000001f80)={@local, @random="1ab900", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b70bff", 0x4c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}, 0x0) r0 = syz_io_uring_setup(0x49e2, &(0x7f0000000000)={0x0, 0xd113, 0x2000, 0x0, 0x18b}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x66b5, &(0x7f0000000100)={0x0, 0x1e9f, 0x200, 0x0, 0xaf, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) 2.183527073s ago: executing program 0 (id=2007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r2}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/11, 0xb, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x16, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.444545398s ago: executing program 3 (id=2008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef0479bb", 0x9c}], 0x1}, 0x4000) (async) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) (async) close(r3) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}}) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/100, 0x64}], 0x3}, 0x1) 1.053759605s ago: executing program 3 (id=2009): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r1, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0001800c000280050001000000"], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x4, 0x0, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0xfffffffe}, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x3, 0x4000, 0x0, &(0x7f0000000040)}], 0x1}) read$alg(r7, &(0x7f0000000e80)=""/4096, 0x1000) sendmsg$nl_route(r6, 0x0, 0x40010) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x5, @mcast1, 0x1}, 0x1c) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x5}}, 0x20) 780.470945ms ago: executing program 4 (id=2010): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x6}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munlock(&(0x7f0000525000/0x3000)=nil, 0x3000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006013724308f0000418e014000", 0x59}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) 507.865181ms ago: executing program 0 (id=2011): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x6, 0x1) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000648000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x600000000000000) 244.635518ms ago: executing program 2 (id=2012): socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x3cc, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xd}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3a0, 0x2, [@TCA_U32_SEL={0x394, 0x5, {0xa, 0xc, 0x5, 0x4, 0xbd, 0x3, 0x0, 0xd5, [{0x3, 0x4, 0x2, 0x6}, {0x400, 0x100, 0x80000000, 0x5}, {0x3, 0x3578403, 0xe81, 0x2}, {0x0, 0x7fffffff, 0x101, 0x6}, {0x8, 0xd, 0x100, 0x200}, {0xde, 0x15, 0x7f, 0x7fff}, {0x200, 0x0, 0x3, 0x2}, {0x8, 0x9, 0x5, 0x100}, {0x8000, 0x9, 0x1, 0x10}, {0xffff, 0x7, 0x58}, {0x7, 0xc, 0xfffffff9, 0x4}, {0x1, 0x4, 0x2, 0x2}, {0x8, 0x7, 0xce, 0x1}, {0x4, 0xfff, 0x3, 0x3}, {0x800, 0x9, 0x2, 0x8}, {0x10, 0x80, 0x625, 0x10000}, {0x8, 0x5, 0xca9, 0xa8}, {0x8, 0x2, 0xffffc7b9, 0xe919}, {0xaff, 0x9, 0x4, 0x2c}, {0x7d7, 0xf, 0x2, 0xfffffcb8}, {0x1, 0xf7, 0x1, 0xfff}, {0x401, 0x5, 0x800000, 0x3fd}, {0x4, 0x3, 0x3, 0xfffffff8}, {0xa, 0x2, 0x4, 0x40000}, {0x2, 0xfffffff8, 0x8000, 0x9}, {0x2, 0x200, 0x8, 0x3}, {0x5, 0x9, 0x56, 0x5}, {0x4, 0x0, 0x81, 0x4}, {0x6, 0x7, 0x10001, 0x2}, {0x401, 0xfffffff7, 0xb, 0x6}, {0x10, 0x8001, 0x1, 0xffffffff}, {0x5, 0x7, 0x3, 0xe}, {0x3, 0x3ff, 0xf8, 0x3}, {0x800, 0x80000000, 0x3, 0x80}, {0x1584, 0xf, 0x4, 0x8a8}, {0xffff, 0x1, 0x8, 0x200}, {0x2, 0x4, 0x1, 0xffffffff}, {0x1, 0x0, 0x80000001, 0x586c}, {0x3, 0x0, 0x4, 0x80000001}, {0x8, 0x9, 0xf00c, 0x10}, {0x9, 0x4d, 0x2, 0x81}, {0x2, 0x2, 0x7f, 0x9}, {0x0, 0x8, 0x5, 0x7fff}, {0x40000, 0x7fff, 0xffffffff, 0xf4c}, {0x6, 0x6, 0x4221}, {0x2, 0xf, 0x5, 0x5}, {0x2, 0x1, 0x7, 0x7}, {0x64d, 0x5, 0x2}, {0x1ff, 0x9, 0x5, 0xfffff5bd}, {0x2, 0x8001, 0x9, 0xd2}, {0x9, 0x1, 0x81, 0x10001}, {0x9, 0xffff, 0x350d39c2, 0x40}, {0xa, 0x5, 0xfffffffc, 0x9}, {0x6, 0x3, 0x8000, 0x9}, {0x2, 0x10, 0x9, 0x8000}, {0x4, 0x0, 0x9, 0x3ff}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x10}}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) 200.347508ms ago: executing program 0 (id=2013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfec9, 0x8, 0xfffffffe, 0x3d4}, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f00000000c0)=0x400, 0x0, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000100)) mmap$snddsp(&(0x7f00000cd000/0x3000)=nil, 0x3000, 0x300000c, 0x11, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000141000000180017000000210000000065"], 0x34}}, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) r9 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x5b}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0x15, r10, 0xc, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 0s ago: executing program 2 (id=2014): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mber: 230 but max is 0 [ 533.532277][ T838] usb 3-1: config 0 has no interface number 0 [ 533.547031][ T838] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 533.568977][ T838] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 533.583669][ T838] usb 3-1: config 0 interface 230 has no altsetting 0 [ 533.646607][ T838] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 533.656053][ T838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.664780][ T838] usb 3-1: Product: syz [ 533.670594][ T838] usb 3-1: Manufacturer: syz [ 533.736594][ T838] usb 3-1: SerialNumber: syz [ 533.754374][ T838] usb 3-1: config 0 descriptor?? [ 533.764207][T11889] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.772276][T11889] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.785920][ T838] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 533.834727][ T838] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 534.958999][ T10] usb 4-1: USB disconnect, device number 102 [ 535.463487][ T5921] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 535.473593][ T5922] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 535.623365][ T5922] usb 1-1: device descriptor read/64, error -71 [ 535.635353][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.653335][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.679726][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.713490][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.868782][ T5922] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 536.051339][ T5922] usb 1-1: device descriptor read/64, error -71 [ 536.090282][ T838] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 536.214494][ T5922] usb usb1-port1: attempt power cycle [ 536.225203][ T838] usb 3-1: USB disconnect, device number 104 [ 536.233301][ T5921] usb 2-1: usb_control_msg returned -32 [ 536.245604][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 536.297591][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.334971][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.563424][ T838] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 536.594934][ T5922] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 536.634162][ T5922] usb 1-1: device descriptor read/8, error -71 [ 536.726759][ T838] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 536.765958][ T838] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 536.816674][ T838] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.852904][ T838] usb 3-1: config 1 interface 0 has no altsetting 0 [ 536.879590][ T838] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 536.889383][ T5922] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 536.901636][ T838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.915686][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 536.918382][ T838] usb 3-1: Product: syz [ 536.932542][ T5922] usb 1-1: device descriptor read/8, error -71 [ 536.939132][ T838] usb 3-1: Manufacturer: syz [ 536.944240][ T838] usb 3-1: SerialNumber: syz [ 536.969443][T11933] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 537.054407][ T5922] usb usb1-port1: unable to enumerate USB device [ 537.249250][T11937] team0 (unregistering): Port device team_slave_0 removed [ 537.270535][T11937] team0 (unregistering): Port device team_slave_1 removed [ 537.311772][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 537.337368][ T838] usbhid 3-1:1.0: can't add hid device: -71 [ 537.345005][ T838] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 537.371297][ T838] usb 3-1: USB disconnect, device number 105 [ 537.972415][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.994302][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.038480][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.051382][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.234963][ T10] usb 2-1: USB disconnect, device number 99 [ 538.510563][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.535142][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.542658][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.672478][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.692764][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.700639][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.708560][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.716219][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.734164][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.741627][T11976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.803502][ T838] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 539.015531][ T838] usb 1-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 539.032219][ T838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.042140][ T838] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 539.059947][ T838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 539.082767][ T838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.103247][ T838] usb 1-1: SerialNumber: syz [ 539.152179][ T838] usb 1-1: 0:2 : does not exist [ 539.348824][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 539.358031][T11984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1658'. [ 539.398978][ T838] usb 1-1: USB disconnect, device number 103 [ 539.703429][ T10] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 539.855104][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 539.866311][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 539.894077][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 539.938479][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 539.948634][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.958837][ T10] usb 3-1: Product: syz [ 539.963104][ T10] usb 3-1: Manufacturer: syz [ 540.038979][ T10] usb 3-1: SerialNumber: syz [ 540.078092][ T30] kauditd_printk_skb: 1221 callbacks suppressed [ 540.078114][ T30] audit: type=1326 audit(1749583243.631:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 540.144649][ T10] usb 3-1: config 0 descriptor?? [ 540.161438][T11988] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 540.202469][ T30] audit: type=1326 audit(1749583243.631:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 540.232873][T11988] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 540.344729][ T10] usb 3-1: ucan: probing device on interface #0 [ 540.526084][ T10] usb 3-1: ucan: could not read protocol version, ret=0 [ 540.590105][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 540.612563][ T30] audit: type=1326 audit(1749583243.631:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 540.712750][ T30] audit: type=1326 audit(1749583243.631:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 540.737757][ T5921] usb 3-1: USB disconnect, device number 106 [ 540.898475][ T30] audit: type=1326 audit(1749583243.631:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 541.065367][T12001] xt_connbytes: Forcing CT accounting to be enabled [ 541.072298][T12001] Cannot find add_set index 0 as target [ 541.084244][ T30] audit: type=1326 audit(1749583243.631:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 541.147213][ T30] audit: type=1326 audit(1749583243.631:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 541.288149][ T30] audit: type=1326 audit(1749583243.631:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 541.446566][ T30] audit: type=1326 audit(1749583243.631:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 541.460345][T12006] fuse: Unknown parameter 'root\ode' [ 541.679660][ T30] audit: type=1326 audit(1749583243.631:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 542.123298][ T838] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 542.273442][ T838] usb 2-1: Using ep0 maxpacket: 8 [ 542.287857][ T838] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 542.323579][ T838] usb 2-1: config 0 has no interface number 0 [ 542.358699][ T838] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 542.363361][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 542.369363][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.418391][ T838] usb 2-1: Product: syz [ 542.424926][ T838] usb 2-1: Manufacturer: syz [ 542.441260][ T838] usb 2-1: SerialNumber: syz [ 542.491775][ T838] usb 2-1: config 0 descriptor?? [ 542.528370][ T838] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 542.548108][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 542.576008][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 542.640817][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 542.663291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 542.671609][ T9] usb 3-1: Product: syz [ 542.687737][ T9] usb 3-1: Manufacturer: syz [ 542.692419][ T9] usb 3-1: SerialNumber: syz [ 542.731979][ T9] usb 3-1: config 0 descriptor?? [ 542.734470][T12013] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 542.845022][T12022] picdev_write: 25 callbacks suppressed [ 542.845045][T12022] kvm: pic: non byte write [ 543.006165][ T5922] usb 3-1: USB disconnect, device number 107 [ 543.067541][ T838] gspca_sn9c20x: Write register 1000 failed -110 [ 543.126419][ T838] gspca_sn9c20x: Device initialization failed [ 543.132784][ T838] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -110 [ 543.214567][ T838] usb 2-1: USB disconnect, device number 100 [ 543.524347][T12041] No such timeout policy "syz1" [ 543.705790][T12038] sctp: [Deprecated]: syz.4.1673 (pid 12038) Use of int in maxseg socket option. [ 543.705790][T12038] Use struct sctp_assoc_value instead [ 544.212155][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.237463][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.246960][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.261748][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.271240][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.285684][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.298865][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 544.534373][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 544.543806][T12062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'. [ 544.665027][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 545.753338][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 545.903301][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 546.151595][ T9] usb 4-1: config 10 has an invalid descriptor of length 255, skipping remainder of the config [ 546.162261][ T9] usb 4-1: config 10 has 0 interfaces, different from the descriptor's value: 1 [ 546.188280][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 546.199487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.209510][ T9] usb 4-1: Product: syz [ 546.215274][ T9] usb 4-1: Manufacturer: syz [ 546.220232][ T9] usb 4-1: SerialNumber: syz [ 546.744546][ T9] usb 4-1: USB disconnect, device number 103 [ 547.238062][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 547.478844][ T9] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 547.487393][ T9] usb 4-1: config 0 has no interface number 0 [ 547.502044][ T9] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 547.533360][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.555061][ T9] usb 4-1: config 0 descriptor?? [ 547.859927][ T24] usb 4-1: USB disconnect, device number 104 [ 548.834998][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 548.835020][ T30] audit: type=1326 audit(1749583252.421:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 548.882032][ T30] audit: type=1326 audit(1749583252.421:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 548.917014][ T30] audit: type=1326 audit(1749583252.421:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 548.943629][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 548.961636][ T30] audit: type=1326 audit(1749583252.451:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 548.986889][ T30] audit: type=1326 audit(1749583252.461:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.012491][ T30] audit: type=1326 audit(1749583252.461:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.038225][ T30] audit: type=1326 audit(1749583252.461:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.060838][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.071184][ T30] audit: type=1326 audit(1749583252.461:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.094064][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.100954][ T30] audit: type=1326 audit(1749583252.461:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.124630][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 549.126151][ T30] audit: type=1326 audit(1749583252.461:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 549.131971][ T24] usb 4-1: config 7 has an invalid interface number: 154 but max is 0 [ 549.188727][ T24] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 549.200527][ T24] usb 4-1: config 7 has no interface number 0 [ 549.206921][ T24] usb 4-1: config 7 interface 154 altsetting 9 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 549.222051][ T24] usb 4-1: config 7 interface 154 altsetting 9 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.234081][ T24] usb 4-1: config 7 interface 154 altsetting 9 endpoint 0x83 has invalid wMaxPacketSize 0 [ 549.247126][ T24] usb 4-1: config 7 interface 154 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.261453][ T24] usb 4-1: config 7 interface 154 has no altsetting 0 [ 549.285266][ T24] usb 4-1: New USB device found, idVendor=0438, idProduct=b002, bcdDevice=4d.27 [ 549.298236][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.307020][ T24] usb 4-1: Product: syz [ 549.311341][ T24] usb 4-1: Manufacturer: syz [ 549.320793][ T24] usb 4-1: SerialNumber: syz [ 549.577459][ T24] em28xx 4-1:7.154: New device syz syz @ 480 Mbps (0438:b002, interface 154, class 154) [ 549.589484][ T24] em28xx 4-1:7.154: Audio interface 154 found (Vendor Class) [ 549.793391][ T5922] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 549.834937][ T24] em28xx 4-1:7.154: unknown em28xx chip ID (0) [ 549.857990][ T24] em28xx 4-1:7.154: Config register raw data: 0xfffffffb [ 549.881473][ T24] em28xx 4-1:7.154: AC97 chip type couldn't be determined [ 549.931205][ T24] em28xx 4-1:7.154: No AC97 audio processor [ 549.962834][ T24] usb 4-1: USB disconnect, device number 105 [ 550.013277][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 550.022963][ T5922] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.078168][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 550.100650][ T5922] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 550.122137][T12141] netlink: 'syz.4.1706': attribute type 11 has an invalid length. [ 550.131773][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.171904][ T5922] usb 2-1: config 0 descriptor?? [ 550.381043][T12125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.686371][ T5922] elecom 0003:056E:00FD.0012: unknown main item tag 0x0 [ 550.696078][ T5922] elecom 0003:056E:00FD.0012: unknown main item tag 0x0 [ 550.723993][ T5922] elecom 0003:056E:00FD.0012: unknown main item tag 0x0 [ 550.749986][ T5922] elecom 0003:056E:00FD.0012: unknown main item tag 0x0 [ 550.767889][ T5922] elecom 0003:056E:00FD.0012: unknown main item tag 0x0 [ 550.845653][T12151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.886824][ T5922] elecom 0003:056E:00FD.0012: hidraw0: USB HID v8.00 Device [HID 056e:00fd] on usb-dummy_hcd.1-1/input0 [ 551.168041][ T5922] usb 2-1: USB disconnect, device number 101 [ 551.268660][T12155] fido_id[12155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 552.303323][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 552.503502][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 552.528840][ T9] usb 2-1: config index 0 descriptor too short (expected 157, got 156) [ 552.583095][ T9] usb 2-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 552.673284][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 552.708611][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.728859][ T9] usb 2-1: New USB device strings: Mfr=1, Product=255, SerialNumber=7 [ 552.765361][ T9] usb 2-1: Product: syz [ 552.769685][ T9] usb 2-1: Manufacturer: syz [ 552.783939][ T9] usb 2-1: SerialNumber: syz [ 553.034444][ T9] usb 2-1: USB disconnect, device number 102 [ 553.038425][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.103921][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.130414][T12184] __nla_validate_parse: 59 callbacks suppressed [ 553.130437][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 554.013609][ T9] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 554.163483][ T9] usb 1-1: device descriptor read/64, error -71 [ 554.423519][ T9] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 554.573712][ T9] usb 1-1: device descriptor read/64, error -71 [ 554.590621][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 554.685906][ T9] usb usb1-port1: attempt power cycle [ 554.728475][T12214] vlan0: entered promiscuous mode [ 554.774339][T12214] ip6gretap0: entered promiscuous mode [ 554.794409][T12214] bridge0: port 3(vlan0) entered blocking state [ 554.818235][T12214] bridge0: port 3(vlan0) entered disabled state [ 554.841794][T12220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1729'. [ 554.851592][T12214] vlan0: entered allmulticast mode [ 554.857349][T12214] ip6gretap0: entered allmulticast mode [ 554.908952][T12220] vlan3: entered allmulticast mode [ 555.153843][ T9] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 555.188016][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.198526][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.248405][T12225] netlink: 'syz.4.1728': attribute type 12 has an invalid length. [ 555.268087][ T9] usb 1-1: device descriptor read/8, error -71 [ 555.395386][T12227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.414158][T12225] delete_channel: no stack [ 555.553409][ T9] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 555.577091][ T9] usb 1-1: device descriptor read/8, error -71 [ 555.698424][ T9] usb usb1-port1: unable to enumerate USB device [ 556.053607][ T5922] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 556.203839][ T5922] usb 4-1: device descriptor read/64, error -71 [ 556.627351][ T5922] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 556.773371][ T5922] usb 4-1: device descriptor read/64, error -71 [ 556.917189][ T5922] usb usb4-port1: attempt power cycle [ 557.273379][ T5922] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 557.294623][ T5922] usb 4-1: device descriptor read/8, error -71 [ 557.363085][T12253] netlink: 'syz.2.1739': attribute type 21 has an invalid length. [ 557.428033][T12253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1739'. [ 557.439581][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 557.543427][ T5922] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 557.569134][ T5922] usb 4-1: device descriptor read/8, error -71 [ 557.605815][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.667198][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.693465][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 557.715358][ T5922] usb usb4-port1: unable to enumerate USB device [ 557.744284][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.815047][ T9] usb 2-1: config 0 descriptor?? [ 558.015197][T12263] sit0: entered promiscuous mode [ 558.048973][T12263] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 558.113358][T12263] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1742'. [ 558.253076][ T9] cm6533_jd 0003:0D8C:0022.0013: No inputs registered, leaving [ 558.306799][ T9] cm6533_jd 0003:0D8C:0022.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 558.430134][T12270] FAULT_INJECTION: forcing a failure. [ 558.430134][T12270] name failslab, interval 1, probability 0, space 0, times 0 [ 558.452742][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.2.1744 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 558.452775][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.452787][T12270] Call Trace: [ 558.452795][T12270] [ 558.452804][T12270] dump_stack_lvl+0x189/0x250 [ 558.452841][T12270] ? __pfx____ratelimit+0x10/0x10 [ 558.452871][T12270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.452901][T12270] ? __pfx__printk+0x10/0x10 [ 558.452929][T12270] ? __pfx___might_resched+0x10/0x10 [ 558.452957][T12270] ? fs_reclaim_acquire+0x7d/0x100 [ 558.452987][T12270] should_fail_ex+0x414/0x560 [ 558.453019][T12270] should_failslab+0xa8/0x100 [ 558.453042][T12270] __kmalloc_noprof+0xcb/0x4f0 [ 558.453062][T12270] ? video_usercopy+0x18f/0x14f0 [ 558.453090][T12270] video_usercopy+0x18f/0x14f0 [ 558.453121][T12270] ? __pfx___video_do_ioctl+0x10/0x10 [ 558.453141][T12270] ? __pfx_video_usercopy+0x10/0x10 [ 558.453179][T12270] ? __fget_files+0x2a/0x420 [ 558.453204][T12270] ? __fget_files+0x2a/0x420 [ 558.453225][T12270] ? __fget_files+0x3a0/0x420 [ 558.453249][T12270] v4l2_ioctl+0x18a/0x1e0 [ 558.453271][T12270] ? __pfx_v4l2_ioctl+0x10/0x10 [ 558.453290][T12270] __se_sys_ioctl+0xf9/0x170 [ 558.453319][T12270] do_syscall_64+0xfa/0x3b0 [ 558.453336][T12270] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.453365][T12270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.453385][T12270] ? clear_bhb_loop+0x60/0xb0 [ 558.453409][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.453429][T12270] RIP: 0033:0x7f0c31f8e929 [ 558.453448][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.453467][T12270] RSP: 002b:00007f0c32d58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.453490][T12270] RAX: ffffffffffffffda RBX: 00007f0c321b5fa0 RCX: 00007f0c31f8e929 [ 558.453503][T12270] RDX: 0000200000000240 RSI: 00000000c0d05640 RDI: 0000000000000004 [ 558.453516][T12270] RBP: 00007f0c32d58090 R08: 0000000000000000 R09: 0000000000000000 [ 558.453528][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.453541][T12270] R13: 0000000000000000 R14: 00007f0c321b5fa0 R15: 00007f0c322dfa28 [ 558.453573][T12270] [ 558.518976][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.760595][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.781758][ T5922] usb 2-1: USB disconnect, device number 103 [ 559.411504][T12282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.583724][T11870] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 559.759863][T12290] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 559.839342][T12290] bridge_slave_0: left allmulticast mode [ 559.849991][T12290] bridge_slave_0: left promiscuous mode [ 559.857358][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.887883][T12290] bridge_slave_1: left allmulticast mode [ 559.896314][T12290] bridge_slave_1: left promiscuous mode [ 559.903808][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.942884][T12295] tipc: Failed to remove unknown binding: 66,1,1/0:1902938983/1902938985 [ 559.964956][T12290] bond0: (slave bond_slave_0): Releasing backup interface [ 559.965251][T12295] tipc: Failed to remove unknown binding: 66,1,1/0:1902938983/1902938985 [ 559.982157][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 560.005947][T11870] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 560.010382][T12290] bond0: (slave bond_slave_1): Releasing backup interface [ 560.071874][T12290] team0: Port device team_slave_0 removed [ 560.079313][T11870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.097219][T12295] tipc: Failed to remove unknown binding: 66,1,1/0:1902938983/1902938985 [ 560.113046][T11870] usb 1-1: Product: syz [ 560.138135][T11870] usb 1-1: Manufacturer: syz [ 560.176112][T11870] usb 1-1: SerialNumber: syz [ 560.183530][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 560.191807][T12290] team0: Port device team_slave_1 removed [ 560.199819][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.215612][T11870] usb 1-1: config 0 descriptor?? [ 560.225085][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.237743][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.245553][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 560.267297][T11870] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 560.281248][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.290929][T11870] usb 1-1: Detected FT233HP [ 560.300482][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.338008][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.345978][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.420723][ T9] usb 3-1: config 0 descriptor?? [ 560.437647][T12298] netlink: 'syz.4.1753': attribute type 4 has an invalid length. [ 560.459794][T12290] bond1: (slave gretap0): Releasing active interface [ 560.500535][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.512146][ T9] hub 3-1:0.0: USB hub found [ 560.517892][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.793410][ T9] hub 3-1:0.0: 1 port detected [ 561.343410][ T5845] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 561.554970][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 561.572044][T12316] netlink: 'syz.4.1757': attribute type 2 has an invalid length. [ 561.588456][ T5845] usb 2-1: config 0 has an invalid interface number: 14 but max is 1 [ 561.596246][T12316] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1757'. [ 561.621219][ T5845] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.718937][ T5845] usb 2-1: config 0 has no interface number 0 [ 561.772808][ T5845] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 561.792319][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.812349][ T5845] usb 2-1: Product: syz [ 561.835112][ T5845] usb 2-1: Manufacturer: syz [ 561.869459][ T9] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 561.878254][ T9] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 561.938615][ T24] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 561.971229][ T5845] usb 2-1: SerialNumber: syz [ 562.031505][ T5845] usb 2-1: config 0 descriptor?? [ 562.055805][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 562.061996][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 562.083986][ T24] usb 4-1: device descriptor read/64, error -71 [ 562.136392][ T5845] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 562.186037][ T5845] usb 2-1: setting power ON [ 562.208530][ T5845] dvb-usb: bulk message failed: -22 (2/0) [ 562.224044][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.234864][ T5845] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 562.244825][ T5845] usb 2-1: media controller created [ 562.282824][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.325015][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.365931][ T24] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 562.375367][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.421272][ T5845] usb 2-1: digital interface selection failed (-22) [ 562.431929][ T5845] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 562.445943][ T5845] usb 2-1: setting power OFF [ 562.451805][ T5845] dvb-usb: bulk message failed: -22 (2/0) [ 562.517157][ T5845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 562.539523][T11870] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 562.546637][ T5845] (NULL device *): no alternate interface [ 562.547141][T11870] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 562.586476][ T10] usb 3-1: USB disconnect, device number 108 [ 562.615525][T11870] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 562.645957][T11870] usb 1-1: USB disconnect, device number 108 [ 562.662713][ T24] usb 4-1: device descriptor read/64, error -71 [ 562.662773][ T5845] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 562.682234][T11870] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 562.700950][T11870] ftdi_sio 1-1:0.0: device disconnected [ 562.741754][ T5845] usb 2-1: USB disconnect, device number 104 [ 562.783600][ T24] usb usb4-port1: attempt power cycle [ 562.989878][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.029299][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.153479][ T24] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 563.219910][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.226584][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.238977][ T24] usb 4-1: device descriptor read/8, error -71 [ 563.298400][ T5845] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 563.373101][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 563.373122][ T30] audit: type=1326 audit(1749583266.951:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.434967][ T30] audit: type=1326 audit(1749583266.991:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.475538][ T30] audit: type=1326 audit(1749583266.991:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcf78e929 code=0x7ffc0000 [ 563.502424][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.514142][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.558091][ T5845] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 563.561151][ T24] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 563.567380][ T30] audit: type=1326 audit(1749583266.991:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.567435][ T30] audit: type=1326 audit(1749583266.991:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.567482][ T30] audit: type=1326 audit(1749583266.991:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.567527][ T30] audit: type=1326 audit(1749583266.991:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.675786][ T24] usb 4-1: device descriptor read/8, error -71 [ 563.685664][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.737369][ T5845] usb 2-1: config 0 descriptor?? [ 563.766290][ T30] audit: type=1326 audit(1749583266.991:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.789700][ T30] audit: type=1326 audit(1749583266.991:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.794022][ T24] usb usb4-port1: unable to enumerate USB device [ 563.832230][ T30] audit: type=1326 audit(1749583266.991:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcbcf72ab19 code=0x7ffc0000 [ 563.909229][T12344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.927239][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1766'. [ 563.971817][T12344] tipc: Started in network mode [ 563.995742][T12344] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 564.043727][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.062176][T12344] tipc: Enabling of bearer rejected, failed to enable media [ 564.094761][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.169807][ T5845] corsair 0003:1B1C:1B34.0014: reserved main item tag 0xd [ 564.343344][ T5845] corsair 0003:1B1C:1B34.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0 [ 564.476263][ T5922] usb 2-1: USB disconnect, device number 105 [ 565.225008][T12359] bridge0: port 1(ipvlan2) entered blocking state [ 565.233880][T12359] bridge0: port 1(ipvlan2) entered disabled state [ 565.247408][T12359] ipvlan2: entered allmulticast mode [ 565.253319][T12359] bridge0: entered allmulticast mode [ 565.293241][T12359] ipvlan2: left allmulticast mode [ 565.298831][T12359] bridge0: left allmulticast mode [ 565.315388][ T5922] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 565.484084][ T5922] usb 4-1: device descriptor read/64, error -71 [ 565.733392][ T5922] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 565.763406][ T838] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 565.773504][ T5845] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 565.863480][ T5922] usb 4-1: device descriptor read/64, error -71 [ 565.925491][ T5845] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 565.926605][ T838] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 565.953525][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.963530][ T838] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 565.974418][ T5922] usb usb4-port1: attempt power cycle [ 565.974627][ T5845] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 565.996436][ T838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.005388][ T5845] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 566.005419][ T5845] usb 3-1: Manufacturer: syz [ 566.020316][ T5845] usb 3-1: config 0 descriptor?? [ 566.039047][ T838] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.048762][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.062551][ T838] usb 1-1: Product: syz [ 566.079416][ T838] usb 1-1: Manufacturer: syz [ 566.099629][ T838] usb 1-1: SerialNumber: syz [ 566.184772][ T5845] rc_core: IR keymap rc-hauppauge not found [ 566.190871][ T5845] Registered IR keymap rc-empty [ 566.204993][ T5845] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 566.228618][ T5845] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 566.324426][ T5922] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 566.364165][ T5922] usb 4-1: device descriptor read/8, error -71 [ 566.393586][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 566.421776][ T838] usb 1-1: 0:2 : does not exist [ 566.468021][ T838] usb 1-1: USB disconnect, device number 109 [ 566.512022][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.541776][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.557638][ T5845] usb 3-1: USB disconnect, device number 109 [ 566.567042][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.597844][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.602569][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.613261][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.666599][ T5922] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 566.681320][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.691587][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.703721][ T5922] usb 4-1: device descriptor read/8, error -71 [ 566.715412][ T24] usb 2-1: config 0 descriptor?? [ 566.737118][T12376] FAULT_INJECTION: forcing a failure. [ 566.737118][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 566.751133][T12376] CPU: 1 UID: 0 PID: 12376 Comm: syz.4.1775 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 566.751162][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.751174][T12376] Call Trace: [ 566.751188][T12376] [ 566.751197][T12376] dump_stack_lvl+0x189/0x250 [ 566.751235][T12376] ? __pfx____ratelimit+0x10/0x10 [ 566.751266][T12376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.751296][T12376] ? __pfx__printk+0x10/0x10 [ 566.751326][T12376] ? __pfx___might_resched+0x10/0x10 [ 566.751356][T12376] ? fs_reclaim_acquire+0x7d/0x100 [ 566.751387][T12376] should_fail_ex+0x414/0x560 [ 566.751419][T12376] should_failslab+0xa8/0x100 [ 566.751444][T12376] __kmalloc_noprof+0xcb/0x4f0 [ 566.751463][T12376] ? snd_pcm_hw_refine+0x967/0x1640 [ 566.751495][T12376] snd_pcm_hw_refine+0x967/0x1640 [ 566.751540][T12376] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 566.751577][T12376] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 566.751644][T12376] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 566.751676][T12376] snd_pcm_hw_params+0x549/0x1c90 [ 566.751711][T12376] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.751747][T12376] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 566.751790][T12376] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 566.751868][T12376] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 566.751893][T12376] ? snd_pcm_oss_write+0x28f/0x11a0 [ 566.751914][T12376] ? aa_file_perm+0x3e7/0xed0 [ 566.751942][T12376] snd_pcm_oss_write+0x2fb/0x11a0 [ 566.751971][T12376] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 566.751990][T12376] ? bpf_lsm_file_permission+0x9/0x20 [ 566.752006][T12376] ? security_file_permission+0x75/0x290 [ 566.752020][T12376] ? rw_verify_area+0x258/0x650 [ 566.752037][T12376] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 566.752055][T12376] vfs_write+0x27e/0xa90 [ 566.752078][T12376] ? __pfx_vfs_write+0x10/0x10 [ 566.752097][T12376] ? __fget_files+0x2a/0x420 [ 566.752112][T12376] ? __fget_files+0x2a/0x420 [ 566.752124][T12376] ? __fget_files+0x3a0/0x420 [ 566.752135][T12376] ? __fget_files+0x2a/0x420 [ 566.752154][T12376] ksys_write+0x145/0x250 [ 566.752167][T12376] ? __pfx_ksys_write+0x10/0x10 [ 566.752181][T12376] ? do_syscall_64+0xbe/0x3b0 [ 566.752195][T12376] do_syscall_64+0xfa/0x3b0 [ 566.752205][T12376] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.752222][T12376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.752234][T12376] ? clear_bhb_loop+0x60/0xb0 [ 566.752249][T12376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.752260][T12376] RIP: 0033:0x7f801818e929 [ 566.752273][T12376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.752283][T12376] RSP: 002b:00007f8015fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.752298][T12376] RAX: ffffffffffffffda RBX: 00007f80183b6080 RCX: 00007f801818e929 [ 566.752307][T12376] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 000000000000000a [ 566.752316][T12376] RBP: 00007f8015fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 566.752326][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.752333][T12376] R13: 0000000000000000 R14: 00007f80183b6080 R15: 00007f80184dfa28 [ 566.752352][T12376] [ 567.071586][ T5922] usb usb4-port1: unable to enumerate USB device [ 567.150776][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 567.425468][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 567.431744][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 567.447651][ T24] usb 2-1: USB disconnect, device number 106 [ 567.663442][T12390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1779' sets config #0 [ 567.675773][T12390] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1779' sets config #1 [ 567.821638][T12393] netlink: 'syz.0.1778': attribute type 5 has an invalid length. [ 568.248810][T12407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.260249][T12407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.463409][ T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 568.633269][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 568.640877][ T24] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.659360][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 568.676015][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 568.686997][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.717158][ T24] usb 4-1: config 0 descriptor?? [ 568.753390][ T5845] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 568.925981][ T5845] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 568.934693][ T5845] usb 1-1: config 4 has no interface number 0 [ 568.940857][ T5845] usb 1-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 568.981670][ T5845] usb 1-1: config 4 interface 196 has no altsetting 0 [ 569.005354][ T5845] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 569.014996][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.025790][ T5845] usb 1-1: Product: syz [ 569.030011][ T5845] usb 1-1: Manufacturer: syz [ 569.055186][ T5845] usb 1-1: SerialNumber: syz [ 569.077742][T12420] FAULT_INJECTION: forcing a failure. [ 569.077742][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 569.097179][T12411] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 569.124690][T12420] CPU: 1 UID: 0 PID: 12420 Comm: syz.1.1787 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 569.124726][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.124739][T12420] Call Trace: [ 569.124748][T12420] [ 569.124758][T12420] dump_stack_lvl+0x189/0x250 [ 569.124794][T12420] ? __pfx____ratelimit+0x10/0x10 [ 569.124834][T12420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.124864][T12420] ? __pfx__printk+0x10/0x10 [ 569.124893][T12420] ? __pfx___might_resched+0x10/0x10 [ 569.124921][T12420] ? fs_reclaim_acquire+0x7d/0x100 [ 569.124949][T12420] should_fail_ex+0x414/0x560 [ 569.124979][T12420] should_failslab+0xa8/0x100 [ 569.125003][T12420] __kmalloc_noprof+0xcb/0x4f0 [ 569.125022][T12420] ? snd_pcm_hw_refine+0x967/0x1640 [ 569.125050][T12420] snd_pcm_hw_refine+0x967/0x1640 [ 569.125091][T12420] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 569.125168][T12420] snd_pcm_hw_param_first+0x3e9/0xaf0 [ 569.125190][T12420] ? trace_hw_mask_param+0x8a/0x200 [ 569.125224][T12420] snd_pcm_hw_params+0x549/0x1c90 [ 569.125263][T12420] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.125298][T12420] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 569.125343][T12420] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 569.125413][T12420] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 569.125442][T12420] ? snd_pcm_oss_write+0x28f/0x11a0 [ 569.125476][T12420] ? aa_file_perm+0x3e7/0xed0 [ 569.125524][T12420] snd_pcm_oss_write+0x2fb/0x11a0 [ 569.125574][T12420] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 569.125605][T12420] ? bpf_lsm_file_permission+0x9/0x20 [ 569.125631][T12420] ? security_file_permission+0x75/0x290 [ 569.125654][T12420] ? rw_verify_area+0x258/0x650 [ 569.125683][T12420] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 569.125712][T12420] vfs_write+0x27e/0xa90 [ 569.125752][T12420] ? __pfx_vfs_write+0x10/0x10 [ 569.125785][T12420] ? __fget_files+0x2a/0x420 [ 569.125810][T12420] ? __fget_files+0x2a/0x420 [ 569.125840][T12420] ? __fget_files+0x3a0/0x420 [ 569.125861][T12420] ? __fget_files+0x2a/0x420 [ 569.125894][T12420] ksys_write+0x145/0x250 [ 569.125916][T12420] ? __pfx_ksys_write+0x10/0x10 [ 569.125931][T12420] ? rcu_is_watching+0x15/0xb0 [ 569.125967][T12420] ? do_syscall_64+0xbe/0x3b0 [ 569.125991][T12420] do_syscall_64+0xfa/0x3b0 [ 569.125993][ T5845] keyspan 1-1:4.196: Keyspan 1 port adapter converter detected [ 569.126010][T12420] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.126038][T12420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.126055][T12420] ? clear_bhb_loop+0x60/0xb0 [ 569.126077][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.126095][T12420] RIP: 0033:0x7fedc438e929 [ 569.126114][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.126131][T12420] RSP: 002b:00007fedc5238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.126152][T12420] RAX: ffffffffffffffda RBX: 00007fedc45b6080 RCX: 00007fedc438e929 [ 569.126166][T12420] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 000000000000000a [ 569.126178][T12420] RBP: 00007fedc5238090 R08: 0000000000000000 R09: 0000000000000000 [ 569.126190][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.126202][T12420] R13: 0000000000000000 R14: 00007fedc45b6080 R15: 00007fedc46dfa28 [ 569.126232][T12420] [ 569.130211][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.159113][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 84 [ 569.180524][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.485550][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 81 [ 569.493789][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 1 [ 569.501677][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 2 [ 569.509632][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 83 [ 569.517742][ T5845] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 3 [ 569.564254][ T5845] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 569.588374][ T5845] usb 1-1: USB disconnect, device number 110 [ 569.599086][ T5845] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 569.675476][ T5845] keyspan 1-1:4.196: device disconnected [ 569.696039][ T24] logitech 0003:046D:C219.0015: unknown main item tag 0x2 [ 569.721808][ T24] logitech 0003:046D:C219.0015: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.3-1/input0 [ 569.765669][ T24] logitech 0003:046D:C219.0015: no inputs found [ 569.807749][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 569.807770][ T30] audit: type=1326 audit(1749583273.391:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 569.870339][ T30] audit: type=1326 audit(1749583273.431:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 569.893777][ T5922] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 569.895112][ T30] audit: type=1326 audit(1749583273.431:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 569.915405][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.953797][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.967645][ T30] audit: type=1326 audit(1749583273.431:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.001651][T12432] kvm: user requested TSC rate below hardware speed [ 570.012175][T12432] kvm: user requested TSC rate below hardware speed [ 570.019834][ T30] audit: type=1326 audit(1749583273.431:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.045664][ T30] audit: type=1326 audit(1749583273.431:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.068802][ T30] audit: type=1326 audit(1749583273.431:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.092189][ T30] audit: type=1326 audit(1749583273.431:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.118544][ T30] audit: type=1326 audit(1749583273.431:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.123737][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 570.145065][ T30] audit: type=1326 audit(1749583273.431:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12427 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 570.195315][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 570.210079][ T5922] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 570.219711][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.247744][ T5922] usb 3-1: Product: syz [ 570.252072][ T5922] usb 3-1: Manufacturer: syz [ 570.273257][ T5922] usb 3-1: SerialNumber: syz [ 570.281618][ T5922] usb 3-1: config 0 descriptor?? [ 570.671078][T12441] netlink: 'syz.4.1794': attribute type 5 has an invalid length. [ 570.680422][T12441] netlink: 139380 bytes leftover after parsing attributes in process `syz.4.1794'. [ 570.704181][ T5922] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 570.728357][ T5922] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 570.880360][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.908901][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.926080][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.938037][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.165936][T11870] usb 4-1: USB disconnect, device number 118 [ 571.623670][T11870] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 571.681472][T12460] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1799' sets config #0 [ 571.692189][T12460] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1799' sets config #1 [ 571.825048][T11870] usb 4-1: device descriptor read/64, error -71 [ 571.874197][ T5845] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 572.048890][ T5845] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 572.058606][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.072198][ T5845] usb 2-1: config 0 has no interface number 0 [ 572.079935][ T5845] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 572.110374][T11870] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 572.127228][ T5845] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.156390][ T5845] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 572.168003][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.177567][ T5845] usb 2-1: Product: syz [ 572.181963][ T5845] usb 2-1: Manufacturer: syz [ 572.187726][ T5845] usb 2-1: SerialNumber: syz [ 572.198009][ T5845] usb 2-1: config 0 descriptor?? [ 572.253431][T11870] usb 4-1: device descriptor read/64, error -71 [ 572.363788][T11870] usb usb4-port1: attempt power cycle [ 572.468907][T12458] ptrace attach of "./syz-executor exec"[5848] was attempted by ""[12458] [ 572.483965][ T5845] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 572.542151][ T5845] usb 2-1: USB disconnect, device number 107 [ 572.562253][T12469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.640206][ T10] usb 3-1: USB disconnect, device number 110 [ 572.713306][T11870] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 572.764295][T11870] usb 4-1: device descriptor read/8, error -71 [ 572.774727][T12473] netlink: 'syz.2.1802': attribute type 2 has an invalid length. [ 572.784629][T12473] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1802'. [ 573.013493][T11870] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 573.054054][T11870] usb 4-1: device descriptor read/8, error -71 [ 573.166464][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 573.200135][T11870] usb usb4-port1: unable to enumerate USB device [ 573.367152][ T10] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 573.383446][ T10] usb 3-1: config 0 has no interface number 0 [ 573.403360][ T10] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 573.422819][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.443241][ T10] usb 3-1: Product: syz [ 573.447475][ T10] usb 3-1: Manufacturer: syz [ 573.452105][ T10] usb 3-1: SerialNumber: syz [ 573.483673][ T10] usb 3-1: config 0 descriptor?? [ 573.501387][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 573.512638][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 573.518682][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 573.528550][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 573.539104][ T10] usb 3-1: media controller created [ 573.547750][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.573313][ T838] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 573.579279][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 573.601154][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 573.713459][ T838] usb 1-1: device descriptor read/64, error -71 [ 573.715870][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.766888][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.770266][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.780623][ T10] rc_core: IR keymap rc-dtt200u not found [ 573.790100][ T10] Registered IR keymap rc-empty [ 573.801387][ T10] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 573.804466][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.836440][ T10] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46 [ 573.863849][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 573.891213][ T10] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 573.947320][ T10] usb 3-1: USB disconnect, device number 111 [ 573.963576][ T838] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 574.044129][ T10] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 574.153314][ T838] usb 1-1: device descriptor read/64, error -71 [ 574.277163][ T838] usb usb1-port1: attempt power cycle [ 574.493327][ T5922] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 574.501448][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.522480][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.658416][ T838] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 574.682221][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.691277][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 574.704928][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.724166][ T838] usb 1-1: device descriptor read/8, error -71 [ 574.751059][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 574.769518][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.781347][ T5922] usb 2-1: Product: syz [ 574.795761][ T5922] usb 2-1: Manufacturer: syz [ 574.823553][ T5922] usb 2-1: SerialNumber: syz [ 574.854593][ T5922] usb 2-1: config 0 descriptor?? [ 574.983276][ T838] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 575.064123][ T838] usb 1-1: device descriptor read/8, error -71 [ 575.090793][ T5922] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 575.183790][ T838] usb usb1-port1: unable to enumerate USB device [ 575.222363][T12505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1812'. [ 575.694813][ T5922] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 577.193325][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 577.310402][ T5922] usb 2-1: USB disconnect, device number 108 [ 577.367339][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.414788][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.452341][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.523433][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.572092][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.631390][ T10] usb 4-1: config 0 descriptor?? [ 577.923792][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.932835][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.108849][ T10] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 578.123390][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 578.155847][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 578.305910][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 578.330072][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 578.339946][ T9] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 578.370540][ T9] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 578.403282][ T9] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.471507][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 578.553530][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.562661][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.602723][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.623262][ T9] usb 2-1: Product: syz [ 578.628816][ T9] usb 2-1: Manufacturer: syz [ 578.644284][ T9] usb 2-1: SerialNumber: syz [ 578.666291][T12531] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 578.693525][T12531] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 578.701885][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.792883][T12525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.848461][T12525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.937272][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 578.976552][ T9] usb 2-1: USB disconnect, device number 109 [ 579.025307][ T10] usb 4-1: USB disconnect, device number 123 [ 580.594028][T12574] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1831' sets config #0 [ 580.606410][T12574] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1831' sets config #1 [ 583.173311][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 583.346232][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.359831][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.418117][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 583.433403][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 583.455245][ T10] usb 3-1: SerialNumber: syz [ 583.697674][ T10] usb 3-1: 0:2 : does not exist [ 583.759933][ T10] usb 3-1: USB disconnect, device number 112 [ 583.875464][T12612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.692000][ T838] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 584.716384][T12618] input: syz0 as /devices/virtual/input/input47 [ 584.891645][T12623] openvswitch: netlink: Message has 24 unknown bytes. [ 584.928794][ T838] usb 2-1: Using ep0 maxpacket: 8 [ 584.943757][T12623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.947572][ T838] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 584.993228][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.001470][ T838] usb 2-1: Product: syz [ 585.033350][ T838] usb 2-1: Manufacturer: syz [ 585.038122][ T838] usb 2-1: SerialNumber: syz [ 585.068596][ T838] usb 2-1: config 0 descriptor?? [ 585.302745][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.324558][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.353680][ T838] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 585.533337][T11870] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 585.683732][T11870] usb 4-1: Using ep0 maxpacket: 8 [ 585.691056][T11870] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.712722][T11870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 585.733019][T11870] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 585.751644][T11870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.760712][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.771263][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.787439][T11870] usb 4-1: config 0 descriptor?? [ 586.615106][T12648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 586.937153][ T5922] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 587.174992][ T5922] usb 3-1: config index 0 descriptor too short (expected 65321, got 72) [ 587.193116][ T5922] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 587.200013][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.211059][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.224592][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.233538][ T5922] usb 3-1: Product: syz [ 587.237963][ T5922] usb 3-1: Manufacturer: syz [ 587.242978][ T5922] usb 3-1: SerialNumber: syz [ 587.327765][ T838] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 587.450979][ T838] usb 2-1: USB disconnect, device number 110 [ 587.487801][ T5922] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 587.589212][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 588.273428][T11870] usbhid 4-1:0.0: can't add hid device: -71 [ 588.279531][T11870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 588.304531][T11870] usb 4-1: USB disconnect, device number 124 [ 588.496832][ T838] usb 3-1: USB disconnect, device number 113 [ 588.640875][T12664] netlink: 'syz.1.1854': attribute type 13 has an invalid length. [ 588.695123][ T30] kauditd_printk_skb: 1182 callbacks suppressed [ 588.695145][ T30] audit: type=1326 audit(1749583292.271:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c31f8e929 code=0x7ffc0000 [ 588.724442][T11870] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 588.820433][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 588.863436][ T24] ath9k_htc: Failed to initialize the device [ 588.881000][ T838] usb 3-1: ath9k_htc: USB layer deinitialized [ 588.901936][ T30] audit: type=1326 audit(1749583292.271:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c31f2ab19 code=0x7ffc0000 [ 589.039319][T11870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 589.071589][T11870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.222050][T11870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.233465][ T30] audit: type=1326 audit(1749583292.271:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c31f2ab19 code=0x7ffc0000 [ 589.247545][T11870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.282960][ T30] audit: type=1326 audit(1749583292.271:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c31f8e929 code=0x7ffc0000 [ 589.360246][ T30] audit: type=1326 audit(1749583292.271:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c31f8e929 code=0x7ffc0000 [ 589.451837][ T30] audit: type=1326 audit(1749583292.271:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c31f2ab19 code=0x7ffc0000 [ 589.474303][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.561602][ T30] audit: type=1326 audit(1749583292.281:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c31f8e929 code=0x7ffc0000 [ 589.629725][T12664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.782492][T11870] usb 4-1: GET_CAPABILITIES returned 0 [ 589.789473][T11870] usbtmc 4-1:16.0: can't read capabilities [ 589.806598][ T30] audit: type=1326 audit(1749583292.281:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c31f2ab19 code=0x7ffc0000 [ 589.973392][ T838] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 590.005399][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.021400][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.039149][ T30] audit: type=1326 audit(1749583292.281:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c31f2ab19 code=0x7ffc0000 [ 590.061541][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.089795][T11870] usb 4-1: USB disconnect, device number 125 [ 590.137701][ T30] audit: type=1326 audit(1749583292.281:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c31f8e929 code=0x7ffc0000 [ 590.192552][ T838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.242750][ T838] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 590.309028][ T838] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 590.343554][ T838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.364773][ T838] usb 1-1: config 0 descriptor?? [ 590.383033][ T838] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 590.396567][ T838] dvb-usb: bulk message failed: -22 (3/0) [ 590.466355][ T838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 590.529781][ T838] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 590.544422][ T838] usb 1-1: media controller created [ 590.561772][ T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.663120][ T838] dvb-usb: bulk message failed: -22 (6/0) [ 590.673657][ T838] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 590.768567][ T838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input48 [ 590.884942][ T838] dvb-usb: schedule remote query interval to 150 msecs. [ 590.933517][ T838] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 591.002123][ T838] usb 1-1: USB disconnect, device number 115 [ 591.126023][ T838] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 591.230472][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 591.761654][T12691] program syz.3.1862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.243900][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.269804][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.313522][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.329521][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.433321][ T838] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 592.593254][ T838] usb 3-1: Using ep0 maxpacket: 8 [ 592.601538][ T838] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 592.613824][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 592.625858][ T838] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.639638][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.651603][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.678454][ T838] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 592.687906][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 592.710281][ T838] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.740111][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.772963][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.821955][ T838] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 592.830516][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 592.843223][ T838] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 592.857586][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 592.876467][ T838] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 592.914606][ T838] usb 3-1: string descriptor 0 read error: -22 [ 592.921174][ T838] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 592.941229][ T838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.008243][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 593.059519][ T838] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 593.229169][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 593.412343][ T24] usb 4-1: device descriptor read/64, error -71 [ 593.430264][T11870] usb 3-1: USB disconnect, device number 114 [ 593.673322][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 593.743337][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 593.823454][ T24] usb 4-1: device descriptor read/64, error -71 [ 593.923446][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 593.957257][ T24] usb usb4-port1: attempt power cycle [ 593.970216][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.030355][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.065488][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 594.117843][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 594.152120][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.185447][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 594.223312][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.242428][ T10] usb 2-1: Manufacturer: syz [ 594.377323][ T10] usb 2-1: config 0 descriptor?? [ 594.383414][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 594.443029][ T24] usb 4-1: device descriptor read/8, error -71 [ 594.695473][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 594.813387][ T838] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 594.853632][ T24] usb 4-1: device descriptor read/8, error -71 [ 594.883788][ T10] rc_core: IR keymap rc-hauppauge not found [ 594.891134][ T10] Registered IR keymap rc-empty [ 594.903672][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 594.965019][ T24] usb usb4-port1: unable to enumerate USB device [ 594.973628][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.034232][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 595.058597][ T838] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.070063][ T838] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 595.120998][ T838] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.130974][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 595.160982][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.203151][T12740] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 595.243027][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.243675][ T838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.273886][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.303964][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.343442][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.403572][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.530279][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.617368][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.653495][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.689711][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.723389][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 595.756187][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 595.843477][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 595.923772][ T10] usb 2-1: USB disconnect, device number 111 [ 597.037024][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.092416][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.143429][ T30] kauditd_printk_skb: 793 callbacks suppressed [ 597.143455][ T30] audit: type=1326 audit(1749583300.711:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12749 comm="syz.1.1880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x0 [ 598.995394][ T838] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 599.133527][ T838] usb 1-1: device descriptor read/64, error -71 [ 599.168682][ T10] usb 3-1: USB disconnect, device number 115 [ 599.423816][ T838] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 599.583382][ T838] usb 1-1: device descriptor read/64, error -71 [ 599.693763][ T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 599.833535][ T838] usb usb1-port1: attempt power cycle [ 599.874437][ T5922] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 599.882381][ T24] usb 4-1: device descriptor read/64, error -71 [ 599.933784][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 600.036680][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.055431][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.084246][ T5922] usb 3-1: device descriptor read/64, error -71 [ 600.094648][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 600.106370][ T10] usb 2-1: config 6 has an invalid interface number: 66 but max is 0 [ 600.117262][ T10] usb 2-1: config 6 has no interface number 0 [ 600.126418][ T10] usb 2-1: config 6 interface 66 has no altsetting 0 [ 600.138202][ T24] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 600.138223][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 600.164773][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.176122][ T10] usb 2-1: Product: syz [ 600.180445][ T10] usb 2-1: Manufacturer: syz [ 600.187847][ T10] usb 2-1: SerialNumber: syz [ 600.306757][ T24] usb 4-1: device descriptor read/64, error -71 [ 600.361762][ T5922] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 600.418109][T12784] fuse: Bad value for 'fd' [ 600.447328][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.473825][ T24] usb usb4-port1: attempt power cycle [ 600.492862][ T10] snd-usb-audio 2-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 600.526801][ T10] usb 2-1: USB disconnect, device number 112 [ 600.533553][ T5922] usb 3-1: device descriptor read/64, error -71 [ 600.654802][ T5922] usb usb3-port1: attempt power cycle [ 600.913357][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 600.952045][ T24] usb 4-1: device descriptor read/8, error -71 [ 601.123260][ T5922] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 601.192197][ T5922] usb 3-1: device descriptor read/8, error -71 [ 601.202081][ T30] audit: type=1326 audit(1749583304.781:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.233458][ T24] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 601.254002][ T24] usb 4-1: device descriptor read/8, error -71 [ 601.374374][ T24] usb usb4-port1: unable to enumerate USB device [ 601.377389][ T30] audit: type=1326 audit(1749583304.781:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.433319][ T5922] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 601.448216][ T30] audit: type=1326 audit(1749583304.781:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 601.472906][ T5922] usb 3-1: device descriptor read/8, error -71 [ 601.511045][ T30] audit: type=1326 audit(1749583304.781:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.572544][ T30] audit: type=1326 audit(1749583304.781:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.630267][ T30] audit: type=1326 audit(1749583304.781:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 601.683883][ T30] audit: type=1326 audit(1749583304.781:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.713634][ T5922] usb usb3-port1: unable to enumerate USB device [ 601.740826][ T30] audit: type=1326 audit(1749583304.781:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 601.908146][ T30] audit: type=1326 audit(1749583304.781:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f801812ab19 code=0x7ffc0000 [ 602.300984][T12802] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1893' sets config #0 [ 602.324049][T12802] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1893' sets config #1 [ 602.696160][T12812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.752339][T12817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1897'. [ 602.789068][T12816] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 602.833409][T12816] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 602.841996][T12816] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 602.951461][T12819] ip6gretap2: entered promiscuous mode [ 602.985652][T12819] ip6gretap2: entered allmulticast mode [ 603.334154][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 603.349546][ T30] audit: type=1326 audit(1749583306.911:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 603.389464][ T30] audit: type=1326 audit(1749583306.911:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 603.485085][ T30] audit: type=1326 audit(1749583306.911:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.224001][ T30] audit: type=1326 audit(1749583306.911:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.273017][ T30] audit: type=1326 audit(1749583306.911:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.304642][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 604.366564][ T30] audit: type=1326 audit(1749583306.911:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.426838][ T30] audit: type=1326 audit(1749583306.911:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.453263][ T5845] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 604.483408][ T30] audit: type=1326 audit(1749583306.911:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 604.493397][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 604.505979][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.549181][ T10] usb 4-1: too many configurations: 231, using maximum allowed: 8 [ 604.559305][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 604.567108][ T10] usb 4-1: can't read configurations, error -61 [ 604.573716][T11870] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 604.593306][ T5845] usb 1-1: device descriptor read/64, error -71 [ 604.713580][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 604.726346][T11870] usb 3-1: Using ep0 maxpacket: 16 [ 604.739288][T11870] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 604.769112][T11870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.798920][T11870] usb 3-1: Product: syz [ 604.818936][T11870] usb 3-1: Manufacturer: syz [ 604.823982][T11870] usb 3-1: SerialNumber: syz [ 604.833547][ T5845] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 604.848191][T11870] r8152-cfgselector 3-1: Unknown version 0x0000 [ 604.856898][T11870] r8152-cfgselector 3-1: config 0 descriptor?? [ 604.873348][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 604.903438][ T10] usb 4-1: too many configurations: 231, using maximum allowed: 8 [ 604.917450][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 604.930483][ T10] usb 4-1: can't read configurations, error -61 [ 604.941132][ T10] usb usb4-port1: attempt power cycle [ 604.983393][ T5845] usb 1-1: device descriptor read/64, error -71 [ 605.144449][ T5845] usb usb1-port1: attempt power cycle [ 605.191972][T11870] r8152-cfgselector 3-1: Unknown version 0x0000 [ 605.207807][T11870] r8152-cfgselector 3-1: bad CDC descriptors [ 605.221073][T11870] r8152-cfgselector 3-1: USB disconnect, device number 120 [ 605.283594][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 605.319267][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 605.334791][ T10] usb 4-1: too many configurations: 231, using maximum allowed: 8 [ 605.349116][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 605.357464][ T10] usb 4-1: can't read configurations, error -61 [ 605.436632][ T30] audit: type=1326 audit(1749583309.021:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 605.459235][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.483304][ T30] audit: type=1326 audit(1749583309.051:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.4.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801818e929 code=0x7ffc0000 [ 605.507182][ T5845] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 605.516082][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 605.539931][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.549744][ T5845] usb 1-1: device descriptor read/8, error -71 [ 605.556091][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 605.561946][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.570595][ T10] usb 4-1: too many configurations: 231, using maximum allowed: 8 [ 605.579132][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.589734][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 605.597803][ T10] usb 4-1: can't read configurations, error -61 [ 605.604928][ T10] usb usb4-port1: unable to enumerate USB device [ 605.607322][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.643584][ T5922] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 605.706439][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 605.707388][T12850] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1908'. [ 605.804369][ T5845] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 605.814347][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 605.816201][ T5922] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 605.816260][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.816293][ T5922] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.816310][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.816327][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.817198][ T5922] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 605.817236][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.817254][ T5922] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.817270][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.817311][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.818308][ T5922] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 605.818339][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 605.818356][ T5922] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.818372][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.818388][ T5922] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.820940][ T5922] usb 2-1: string descriptor 0 read error: -22 [ 605.821030][ T5922] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 605.821046][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.824156][ T5845] usb 1-1: device descriptor read/8, error -71 [ 605.832721][ T5922] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 605.941919][ T5845] usb usb1-port1: unable to enumerate USB device [ 606.075898][ T24] usb 2-1: USB disconnect, device number 113 [ 606.176759][T12857] usb usb8: usbfs: process 12857 (syz.2.1910) did not claim interface 0 before use [ 606.433320][ T5845] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 606.593541][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 606.616987][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.634646][ T5845] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 606.644137][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.652261][ T5845] usb 3-1: Product: syz [ 606.657464][ T5845] usb 3-1: Manufacturer: syz [ 606.662075][ T5845] usb 3-1: SerialNumber: syz [ 606.727297][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'. [ 606.747648][T12859] vlan2: entered promiscuous mode [ 606.771616][T12859] ip6gretap0: entered promiscuous mode [ 606.775593][ T5845] usb 3-1: config 0 descriptor?? [ 606.784365][T12859] bridge0: port 1(vlan2) entered blocking state [ 606.798197][T12859] bridge0: port 1(vlan2) entered disabled state [ 606.805856][T12859] vlan2: entered allmulticast mode [ 606.811262][T12859] ip6gretap0: entered allmulticast mode [ 607.476753][T12876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 607.528785][T12876] vlan3: entered allmulticast mode [ 607.756495][ T5922] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 608.043332][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 608.056154][ T5922] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 608.064847][ T5922] usb 1-1: config 179 has no interface number 0 [ 608.098976][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 608.167126][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 608.222548][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 608.297541][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 608.358137][ T5922] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 608.439922][ T5922] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 608.493438][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.549478][T12878] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 608.819570][ T5922] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 608.991493][ T10] usb 1-1: USB disconnect, device number 123 [ 608.991524][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 609.006101][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 609.014692][ T10] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 609.429978][ T838] usb 3-1: USB disconnect, device number 121 [ 609.880337][T12904] xt_hashlimit: invalid rate [ 609.896359][T12904] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1925'. [ 609.933573][ T838] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 610.128594][ T838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.160864][ T838] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.160941][ T838] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 610.160968][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.166968][ T838] usb 3-1: config 0 descriptor?? [ 610.171239][ T838] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 610.171444][ T838] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 610.342969][T12912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.520342][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 610.520362][ T30] audit: type=1326 audit(1749583314.101:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 610.597605][ T30] audit: type=1326 audit(1749583314.141:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 610.700577][ T30] audit: type=1326 audit(1749583314.141:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedc438d290 code=0x7ffc0000 [ 610.822933][ T30] audit: type=1326 audit(1749583314.151:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 610.885016][ T30] audit: type=1326 audit(1749583314.151:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 610.989286][ T30] audit: type=1326 audit(1749583314.151:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 611.099865][ T30] audit: type=1326 audit(1749583314.151:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 611.224203][ T30] audit: type=1326 audit(1749583314.151:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 611.317459][ T30] audit: type=1326 audit(1749583314.151:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 611.344916][ T30] audit: type=1326 audit(1749583314.151:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc438e929 code=0x7ffc0000 [ 611.570922][T11870] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 611.583345][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 611.628191][T11870] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 611.764525][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 611.775956][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 611.798054][ T10] usb 4-1: config 179 has no interface number 0 [ 611.827351][T12948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.850058][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 611.895266][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 611.906873][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 611.981279][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 612.082960][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 612.108146][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 612.410369][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.478785][T12933] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 612.739145][T11870] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input52 [ 612.931380][ T24] usb 4-1: USB disconnect, device number 12 [ 612.931410][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 612.946256][ T24] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 613.063278][T11870] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 613.213439][T11870] usb 1-1: Using ep0 maxpacket: 32 [ 613.225504][T11870] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 613.234297][T11870] usb 1-1: config 0 has no interface number 0 [ 613.247179][T11870] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 613.288828][T11870] usb 1-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 613.305485][T11870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.333304][T11870] usb 1-1: Product: syz [ 613.346169][T11870] usb 1-1: Manufacturer: syz [ 613.359061][T11870] usb 1-1: SerialNumber: syz [ 613.387518][T11870] usb 1-1: config 0 descriptor?? [ 613.401339][T12955] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 613.424019][T11870] ftdi_sio 1-1:0.151: FTDI USB Serial Device converter detected [ 613.458723][T11870] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 614.088087][ T5845] usb 3-1: USB disconnect, device number 122 [ 614.173373][T11870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 614.373268][T11870] usb 4-1: Using ep0 maxpacket: 8 [ 614.383416][T11870] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 614.393392][T11870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.401531][T11870] usb 4-1: Product: syz [ 614.407704][T11870] usb 4-1: Manufacturer: syz [ 614.427331][T11870] usb 4-1: SerialNumber: syz [ 614.450004][T11870] usb 4-1: config 0 descriptor?? [ 614.472935][T11870] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 614.901991][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.917927][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.789714][ T838] usb 1-1: USB disconnect, device number 124 [ 615.817547][ T838] ftdi_sio 1-1:0.151: device disconnected [ 616.027145][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 616.037089][T12987] netlink: 'syz.4.1950': attribute type 6 has an invalid length. [ 616.398654][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 617.094221][T11870] usb 4-1: USB disconnect, device number 13 [ 617.641970][T11870] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 617.678498][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 617.793349][T11870] usb 3-1: Using ep0 maxpacket: 8 [ 617.800943][T11870] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 617.818484][T11870] usb 3-1: config 179 has no interface number 0 [ 617.875877][T11870] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 617.915355][T11870] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 618.000530][T11870] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.086191][T11870] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 618.277909][T11870] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 618.331695][T11870] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 618.368440][T11870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.513778][T13011] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 618.588647][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'. [ 618.598772][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 618.960278][ T5898] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input53 [ 619.161775][ T838] usb 3-1: USB disconnect, device number 123 [ 619.161885][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 619.176766][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 619.181135][ T838] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 619.372538][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 619.438914][T13041] syz_tun: entered promiscuous mode [ 619.450259][T13041] macvtap1: entered promiscuous mode [ 619.460046][T13041] macvtap1: entered allmulticast mode [ 619.469555][T13041] syz_tun: entered allmulticast mode [ 619.496711][T13042] syz_tun: left allmulticast mode [ 619.523709][T13042] syz_tun: left promiscuous mode [ 620.316559][ T5898] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 620.492640][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.529781][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.549722][T13065] delete_channel: no stack [ 620.564741][T11870] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 620.600270][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.610549][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.628349][ T5898] usb 2-1: Product: syz [ 620.639524][ T5898] usb 2-1: Manufacturer: syz [ 620.688693][ T5898] usb 2-1: SerialNumber: syz [ 620.734380][T11870] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 620.752141][T11870] usb 3-1: config 0 has no interface number 0 [ 620.780279][T11870] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 620.796112][T11870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.811851][T11870] usb 3-1: Product: syz [ 620.821135][T11870] usb 3-1: Manufacturer: syz [ 620.836655][T11870] usb 3-1: SerialNumber: syz [ 620.844383][ T5898] cdc_mbim 2-1:1.0: skipping garbage [ 620.926757][T11870] usb 3-1: config 0 descriptor?? [ 620.935974][T11870] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 620.945647][T11870] usb 3-1: Detected SIO [ 620.953985][T11870] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 621.047286][T13049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 621.786495][T13049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 621.794940][ T5898] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 621.802978][ T5898] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 621.822499][ T5898] wwan wwan0: port wwan0mbim0 attached [ 621.906847][ T5898] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 66:77:1a:a1:66:1b [ 622.022806][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.050692][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.687207][ T5898] usb 2-1: USB disconnect, device number 114 [ 622.704983][ T5898] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 622.933770][ T5898] wwan wwan0: port wwan0mbim0 disconnected [ 623.340773][ T24] usb 3-1: USB disconnect, device number 124 [ 623.341359][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.363291][T11870] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 623.396865][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.397204][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 623.454127][ T24] ftdi_sio 3-1:0.23: device disconnected [ 623.482785][T13079] 1ªX: left allmulticast mode [ 623.537649][T11870] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 623.547014][T11870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.560044][T11870] usb 1-1: config 0 has no interface number 0 [ 623.566677][T11870] usb 1-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.584100][T11870] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 623.593811][T11870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.601937][T11870] usb 1-1: Product: syz [ 623.606761][T11870] usb 1-1: Manufacturer: syz [ 623.611398][T11870] usb 1-1: SerialNumber: syz [ 623.622038][T11870] r8152-cfgselector 1-1: Unknown version 0x0000 [ 623.628774][T11870] r8152-cfgselector 1-1: config 0 descriptor?? [ 623.703324][ T838] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 623.823351][ T24] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 623.855226][ T838] usb 2-1: config 147 has an invalid interface number: 68 but max is 1 [ 623.872465][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.881908][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.920417][ T838] usb 2-1: config 147 has an invalid interface number: 226 but max is 1 [ 623.929615][ T838] usb 2-1: config 147 contains an unexpected descriptor of type 0x2, skipping [ 623.951804][ T838] usb 2-1: config 147 has an invalid descriptor of length 244, skipping remainder of the config [ 623.973387][ T24] usb 3-1: device descriptor read/64, error -71 [ 623.979846][ T838] usb 2-1: config 147 has no interface number 0 [ 623.993775][ T838] usb 2-1: config 147 has no interface number 1 [ 624.010552][ T838] usb 2-1: config 147 interface 68 altsetting 3 has an endpoint descriptor with address 0x18, changing to 0x8 [ 624.068198][ T838] usb 2-1: config 147 interface 68 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 624.100101][ T838] usb 2-1: config 147 interface 226 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 624.180544][ T838] usb 2-1: config 147 interface 226 altsetting 7 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 624.223355][ T838] usb 2-1: config 147 interface 226 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 624.253909][ T24] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 624.276963][ T838] usb 2-1: config 147 interface 68 has no altsetting 0 [ 624.305394][ T838] usb 2-1: config 147 interface 226 has no altsetting 0 [ 624.337361][ T838] usb 2-1: New USB device found, idVendor=07b8, idProduct=8179, bcdDevice=cd.b8 [ 624.347719][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.357654][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.367794][ T838] usb 2-1: Product: syz [ 624.372036][ T838] usb 2-1: Manufacturer: syz [ 624.377405][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.377497][T11870] r8152 1-1:0.129: Expected endpoints are not found [ 624.403004][ T24] usb 3-1: device descriptor read/64, error -71 [ 624.413680][T11870] r8152-cfgselector 1-1: USB disconnect, device number 125 [ 624.428646][ T838] usb 2-1: SerialNumber: syz [ 624.533724][ T24] usb usb3-port1: attempt power cycle [ 624.664600][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.671151][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.720313][T13094] netlink: 'syz.3.1979': attribute type 13 has an invalid length. [ 624.738502][ T838] usb 2-1: USB disconnect, device number 115 [ 624.884347][ T24] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 624.916243][ T24] usb 3-1: device descriptor read/8, error -71 [ 624.992391][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.999693][T13094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.007603][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.014998][T13094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.041936][T13094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.095198][ T5922] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 625.163461][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 625.206173][ T24] usb 3-1: device descriptor read/8, error -71 [ 625.309648][T13102] Â: renamed from pim6reg1 [ 625.336250][ T24] usb usb3-port1: unable to enumerate USB device [ 625.686821][T13109] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1983'. [ 625.696881][T13109] openvswitch: netlink: Flow key attr not present in new flow. [ 625.724616][T13109] openvswitch: netlink: Duplicate or invalid key (type 0). [ 625.746305][T13109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.044008][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 626.224032][ T24] usb 2-1: config 0 has no interfaces? [ 626.240655][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.251048][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.261951][ T24] usb 2-1: Product: syz [ 626.267744][ T24] usb 2-1: Manufacturer: syz [ 626.280924][ T24] usb 2-1: SerialNumber: syz [ 626.301685][ T24] usb 2-1: config 0 descriptor?? [ 626.333400][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.366129][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.541144][T13120] ipt_REJECT: TCP_RESET invalid for non-tcp [ 626.607853][ T838] usb 2-1: USB disconnect, device number 116 [ 626.743965][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.753094][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.785327][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 627.690463][ T5898] IPVS: starting estimator thread 0... [ 627.803271][T13134] IPVS: using max 27 ests per chain, 64800 per kthread [ 627.933430][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 628.098292][ T24] usb 3-1: config 0 has no interfaces? [ 628.109163][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 628.137163][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 628.158341][ T24] usb 3-1: Product: syz [ 628.166854][ T24] usb 3-1: Manufacturer: syz [ 628.189130][ T24] usb 3-1: config 0 descriptor?? [ 628.496987][ T5845] usb 3-1: USB disconnect, device number 3 [ 628.873518][ T5922] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 629.033549][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 629.048196][ T5922] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 629.058119][ T5922] usb 1-1: config 179 has no interface number 0 [ 629.071065][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 629.096259][ T5845] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 629.104195][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 629.121368][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 629.141618][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 629.175723][ T5922] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 629.191753][ T5922] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 629.211744][ T5922] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 629.221556][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.244747][T13155] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 629.247516][ T5845] usb 4-1: device descriptor read/64, error -71 [ 629.413972][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 629.534528][ T5845] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 629.584330][ T5922] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input54 [ 629.653281][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.663762][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.685666][ T5845] usb 4-1: device descriptor read/64, error -71 [ 629.770047][ T5922] usb 1-1: USB disconnect, device number 127 [ 629.776126][T11870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 629.779932][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 629.779991][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 629.794086][ T5845] usb usb4-port1: attempt power cycle [ 629.832055][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 629.936646][ T5922] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 630.014791][T11870] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 630.028256][T11870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.039203][T11870] usb 3-1: Product: syz [ 630.048856][T11870] usb 3-1: Manufacturer: syz [ 630.053909][T11870] usb 3-1: SerialNumber: syz [ 630.064698][T11870] usb 3-1: config 0 descriptor?? [ 630.153379][ T5845] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 630.174495][ T5845] usb 4-1: device descriptor read/8, error -71 [ 630.211377][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 630.285456][T11870] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 630.424421][ T5845] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 630.444558][ T5845] usb 4-1: device descriptor read/8, error -71 [ 630.553797][ T5845] usb usb4-port1: unable to enumerate USB device [ 630.962969][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 631.016147][T13187] fuse: Invalid rootmode [ 631.028849][T13186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.153620][ T5845] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 631.169325][T13189] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 631.219654][T13189] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 631.343392][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 631.360400][ T5845] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 631.378450][ T5845] usb 2-1: config 0 has no interface number 0 [ 631.385763][ T5845] usb 2-1: config 0 interface 184 has no altsetting 0 [ 631.408268][ T5845] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 631.423115][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.439477][ T5845] usb 2-1: Product: syz [ 631.444945][ T5845] usb 2-1: Manufacturer: syz [ 631.451198][ T5845] usb 2-1: SerialNumber: syz [ 631.469255][ T5845] usb 2-1: config 0 descriptor?? [ 631.504409][ T5845] smsc75xx v1.0.0 [ 631.517263][ T5845] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 631.777569][ T5845] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 633.128333][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 633.299486][ T838] usb 3-1: USB disconnect, device number 4 [ 633.383986][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.399566][ T24] usb 4-1: config 0 has no interface number 0 [ 633.467934][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 633.526489][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.581833][T13220] program syz.0.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.604424][ T24] usb 4-1: config 0 descriptor?? [ 633.623451][ T31] INFO: task kworker/0:2:980 blocked for more than 143 seconds. [ 633.646354][ T24] usb 4-1: selecting invalid altsetting 1 [ 633.651741][ T31] Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 [ 633.652525][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 633.701682][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.756214][ T31] task:kworker/0:2 state:D stack:13864 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 633.763302][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 633.828935][ T31] Workqueue: usb_hub_wq hub_event [ 633.859319][ T31] Call Trace: [ 633.869822][ T31] [ 633.879958][ T31] __schedule+0x16f5/0x4d00 [ 633.888741][ T31] ? __device_attach_driver+0x2ce/0x530 [ 633.908256][ T31] ? bus_for_each_drv+0x251/0x2e0 [ 633.928067][ T31] ? device_add+0x7b6/0xb50 [ 633.943560][ T31] ? usb_new_device+0xa39/0x16c0 [ 633.966001][ T31] ? kthread+0x70e/0x8a0 [ 633.980580][ T31] ? ret_from_fork+0x3fc/0x770 [ 633.999119][ T31] ? schedule+0x165/0x360 [ 634.017029][ T31] ? __lock_acquire+0xab9/0xd20 [ 634.033309][ T838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 634.035724][ T31] ? __pfx___schedule+0x10/0x10 [ 634.082406][ T31] ? schedule+0x91/0x360 [ 634.098517][ T31] schedule+0x165/0x360 [ 634.105973][ T24] DVB: Unable to find symbol cx22700_attach() [ 634.114480][ T31] schedule_timeout+0x9a/0x270 [ 634.134064][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 634.158565][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.183535][ T838] usb 3-1: Using ep0 maxpacket: 8 [ 634.195706][ T838] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 634.250502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.273284][ T838] usb 3-1: config 179 has no interface number 0 [ 634.282697][ T31] ? wait_for_completion+0x267/0x5d0 [ 634.308061][ T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 634.320003][ T31] wait_for_completion+0x2bf/0x5d0 [ 634.356734][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 634.367806][ T24] DVB: Unable to find symbol tda10046_attach() [ 634.383201][ T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 634.395098][ T31] i2c_del_adapter+0x581/0x6e0 [ 634.400033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.410645][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 634.423690][ T5922] usb 2-1: USB disconnect, device number 117 [ 634.451908][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 634.462496][ T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.477055][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 634.482182][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 634.487344][ T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 634.499436][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 634.509441][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 634.515707][ T838] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 634.529230][ T31] usb_probe_interface+0x641/0xbc0 [ 634.540806][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 634.553225][ T838] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 634.562638][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.571030][ T31] really_probe+0x26a/0x9a0 [ 634.576170][ T31] __driver_probe_device+0x18c/0x2f0 [ 634.581569][ T31] driver_probe_device+0x4f/0x430 [ 634.603219][ T31] __device_attach_driver+0x2ce/0x530 [ 634.608753][ T31] bus_for_each_drv+0x251/0x2e0 [ 634.617779][T13224] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 634.623224][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 634.654652][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 634.660550][ T31] __device_attach+0x2b8/0x400 [ 634.668689][ T31] ? __pfx___device_attach+0x10/0x10 [ 634.674340][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 634.679790][ T31] bus_probe_device+0x185/0x260 [ 634.684977][ T31] device_add+0x7b6/0xb50 [ 634.689567][ T31] usb_set_configuration+0x1a87/0x20e0 [ 634.695423][ T31] usb_generic_driver_probe+0x8d/0x150 [ 634.701421][ T31] usb_probe_device+0x1c1/0x390 [ 634.706568][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 634.712460][ T31] really_probe+0x26a/0x9a0 [ 634.717292][ T31] __driver_probe_device+0x18c/0x2f0 [ 634.722831][ T31] driver_probe_device+0x4f/0x430 [ 634.728440][ T31] __device_attach_driver+0x2ce/0x530 [ 634.734561][ T31] bus_for_each_drv+0x251/0x2e0 [ 634.739841][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 634.746314][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 634.752223][ T31] __device_attach+0x2b8/0x400 [ 634.757426][ T31] ? __pfx___device_attach+0x10/0x10 [ 634.763899][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 634.769448][ T31] bus_probe_device+0x185/0x260 [ 634.774649][ T31] device_add+0x7b6/0xb50 [ 634.779239][ T31] usb_new_device+0xa39/0x16c0 [ 634.784804][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 634.790532][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.796527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.801989][ T31] hub_event+0x2941/0x4a00 [ 634.807089][ T31] ? __pfx_hub_event+0x10/0x10 [ 634.812094][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 634.818986][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.826385][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 634.832388][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 634.846883][ T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input55 [ 634.859956][ T31] process_scheduled_works+0xae1/0x17b0 [ 634.870453][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.883405][ T31] worker_thread+0x8a0/0xda0 [ 634.888314][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.898707][ T31] ? __kthread_parkme+0x7b/0x200 [ 634.904607][ T31] kthread+0x70e/0x8a0 [ 634.908936][ T31] ? __pfx_worker_thread+0x10/0x10 [ 634.915409][ T31] ? __pfx_kthread+0x10/0x10 [ 634.920736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.927060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.932577][ T31] ? __pfx_kthread+0x10/0x10 [ 634.938246][ T31] ret_from_fork+0x3fc/0x770 [ 634.943113][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 634.949483][ T31] ? __switch_to_asm+0x39/0x70 [ 634.954972][ T31] ? __switch_to_asm+0x33/0x70 [ 634.960041][ T31] ? __pfx_kthread+0x10/0x10 [ 634.965782][ T31] ret_from_fork_asm+0x1a/0x30 [ 634.970794][ T31] [ 634.975251][ T31] [ 634.975251][ T31] Showing all locks held in the system: [ 634.987120][ T31] 3 locks held by kworker/u8:0/12: [ 635.009828][ T31] 1 lock held by khungtaskd/31: [ 635.015648][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 635.026579][ T31] 5 locks held by kworker/0:2/980: [ 635.031941][ T31] #0: ffff888021ea0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.041436][T11870] usb 3-1: USB disconnect, device number 5 [ 635.043738][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 635.058310][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 635.066842][T11870] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 635.074819][ T31] #1: ffffc900036dfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.106738][ T31] #2: ffff888028424198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 635.121281][ T31] #3: ffff888063c1d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 635.131296][ T31] #4: ffff888057cf3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 635.141565][ T31] 7 locks held by kworker/u8:5/1088: [ 635.147436][ T31] 1 lock held by acpid/5193: [ 635.152252][ T31] #0: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 635.173574][ T31] 2 locks held by getty/5601: [ 635.178344][ T31] #0: ffff88814d3580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 635.189118][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 635.199886][ T31] 4 locks held by udevd/6270: [ 635.206809][ T31] #0: ffff888011baf540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 635.218247][ T31] #1: ffff888057fb2088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 635.229506][ T31] #2: ffff8880590a73c8 (kn->active#21){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 635.241435][ T31] #3: ffff888063c1d198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 635.252516][ T31] 6 locks held by kworker/0:4/11870: [ 635.260190][ T31] #0: ffff888021ea0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 635.274215][ T31] #1: ffffc90003c77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 635.286839][ T31] #2: ffff8881437ff198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 635.302922][ T31] #3: ffff888028148198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 635.312778][ T31] #4: ffff8880223d3160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 635.327137][ T31] #5: ffffffff8ef93ae8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x5e0 [ 635.338190][ T31] 2 locks held by syz.0.2013/13226: [ 635.346753][ T31] 2 locks held by dhcpcd/13231: [ 635.351756][ T31] #0: ffff888024498258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 635.362309][ T31] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 635.377181][ T31] [ 635.379619][ T31] ============================================= [ 635.379619][ T31] [ 635.431213][ T31] NMI backtrace for cpu 1 [ 635.431237][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 635.431262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.431280][ T31] Call Trace: [ 635.431288][ T31] [ 635.431298][ T31] dump_stack_lvl+0x189/0x250 [ 635.431333][ T31] ? __wake_up_klogd+0xd9/0x110 [ 635.431360][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.431390][ T31] ? __pfx__printk+0x10/0x10 [ 635.431427][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 635.431466][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 635.431489][ T31] ? _printk+0xcf/0x120 [ 635.431515][ T31] ? __pfx__printk+0x10/0x10 [ 635.431539][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 635.431568][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 635.431597][ T31] watchdog+0xfee/0x1030 [ 635.431626][ T31] ? watchdog+0x1de/0x1030 [ 635.431669][ T31] kthread+0x70e/0x8a0 [ 635.431695][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.431720][ T31] ? __pfx_kthread+0x10/0x10 [ 635.431745][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.431773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.431800][ T31] ? __pfx_kthread+0x10/0x10 [ 635.431824][ T31] ret_from_fork+0x3fc/0x770 [ 635.431862][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 635.431897][ T31] ? __switch_to_asm+0x39/0x70 [ 635.431915][ T31] ? __switch_to_asm+0x33/0x70 [ 635.431933][ T31] ? __pfx_kthread+0x10/0x10 [ 635.431957][ T31] ret_from_fork_asm+0x1a/0x30 [ 635.431995][ T31] [ 635.432027][ T31] Sending NMI from CPU 1 to CPUs 0: [ 635.596765][ C0] NMI backtrace for cpu 0 [ 635.596785][ C0] CPU: 0 UID: 0 PID: 13226 Comm: syz.0.2013 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 635.596806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.596817][ C0] RIP: 0010:check_preemption_disabled+0x59/0x120 [ 635.596841][ C0] Code: 8b 0d db bd 36 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 b7 02 00 cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 e0 9c 92 41 [ 635.596856][ C0] RSP: 0018:ffffc9000b03f398 EFLAGS: 00000046 [ 635.596873][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000000 [ 635.596886][ C0] RDX: 0000000000000000 RSI: ffffffff8d994afa RDI: ffffffff8be28300 [ 635.596897][ C0] RBP: ffffffff81729de5 R08: 0000000000000000 R09: 0000000000000000 [ 635.596916][ C0] R10: ffffc9000b03f598 R11: ffffffff81acf990 R12: 0000000000000002 [ 635.596928][ C0] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 635.596939][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 635.596953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.596965][ C0] CR2: 000055a61b654630 CR3: 0000000077d8e000 CR4: 00000000003526f0 [ 635.596982][ C0] Call Trace: [ 635.596989][ C0] [ 635.596999][ C0] ? unwind_next_frame+0xa5/0x2390 [ 635.597023][ C0] lock_acquire+0xe7/0x360 [ 635.597047][ C0] ? unwind_next_frame+0xa5/0x2390 [ 635.597068][ C0] ? kfree+0x18e/0x440 [ 635.597091][ C0] ? unwind_next_frame+0xa5/0x2390 [ 635.597113][ C0] unwind_next_frame+0xc2/0x2390 [ 635.597134][ C0] ? unwind_next_frame+0xa5/0x2390 [ 635.597158][ C0] ? unwind_next_frame+0xa5/0x2390 [ 635.597180][ C0] ? __kasan_slab_free+0x62/0x70 [ 635.597197][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 635.597215][ C0] arch_stack_walk+0x11c/0x150 [ 635.597233][ C0] ? kfree+0x18e/0x440 [ 635.597256][ C0] stack_trace_save+0x9c/0xe0 [ 635.597273][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 635.597294][ C0] ? __lock_acquire+0xab9/0xd20 [ 635.597314][ C0] kasan_save_track+0x3e/0x80 [ 635.597335][ C0] ? kasan_save_track+0x3e/0x80 [ 635.597355][ C0] ? kasan_save_free_info+0x46/0x50 [ 635.597374][ C0] ? __kasan_slab_free+0x62/0x70 [ 635.597387][ C0] ? kfree+0x18e/0x440 [ 635.597430][ C0] kasan_save_free_info+0x46/0x50 [ 635.597448][ C0] __kasan_slab_free+0x62/0x70 [ 635.597462][ C0] ? kvm_put_kvm+0x1d2/0x1650 [ 635.597484][ C0] kfree+0x18e/0x440 [ 635.597504][ C0] ? _raw_spin_unlock+0x28/0x50 [ 635.597527][ C0] kvm_put_kvm+0x1d2/0x1650 [ 635.597547][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 635.597568][ C0] ? evm_file_release+0x101/0x1e0 [ 635.597590][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 635.597611][ C0] kvm_vm_release+0x43/0x50 [ 635.597632][ C0] __fput+0x44c/0xa70 [ 635.597655][ C0] task_work_run+0x1d1/0x260 [ 635.597682][ C0] ? __pfx_task_work_run+0x10/0x10 [ 635.597705][ C0] do_exit+0x6ad/0x22e0 [ 635.597728][ C0] ? __pfx_do_exit+0x10/0x10 [ 635.597745][ C0] ? proc_coredump_connector+0x172/0x4b0 [ 635.597769][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 635.597796][ C0] do_group_exit+0x21c/0x2d0 [ 635.597814][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.597837][ C0] get_signal+0x1286/0x1340 [ 635.597867][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 635.597891][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 635.597982][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 635.598008][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 635.598032][ C0] irqentry_exit_to_user_mode+0x81/0x120 [ 635.598055][ C0] exc_page_fault+0x9f/0xf0 [ 635.598078][ C0] asm_exc_page_fault+0x26/0x30 [ 635.598093][ C0] RIP: 0033:0x7fcbcf78e929 [ 635.598106][ C0] Code: Unable to access opcode bytes at 0x7fcbcf78e8ff. [ 635.598115][ C0] RSP: 002b:00007fcbd067afe8 EFLAGS: 00010246 [ 635.598129][ C0] RAX: 0000000000000000 RBX: 00007fcbcf9b5fa0 RCX: 00007fcbcf78e929 [ 635.598140][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.598150][ C0] RBP: 00007fcbcf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 635.598160][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.598170][ C0] R13: 0000000000000000 R14: 00007fcbcf9b5fa0 R15: 00007fcbcfadfa28 [ 635.598189][ C0] [ 635.608971][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 635.608993][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 635.609018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.609030][ T31] Call Trace: [ 635.609041][ T31] [ 635.609050][ T31] dump_stack_lvl+0x99/0x250 [ 635.609093][ T31] ? __asan_memcpy+0x40/0x70 [ 635.609145][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.609181][ T31] ? __pfx__printk+0x10/0x10 [ 635.609214][ T31] panic+0x2db/0x790 [ 635.609246][ T31] ? __pfx_panic+0x10/0x10 [ 635.609271][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 635.609293][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 635.609316][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 635.609341][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 635.609372][ T31] watchdog+0x102d/0x1030 [ 635.609400][ T31] ? watchdog+0x1de/0x1030 [ 635.609431][ T31] kthread+0x70e/0x8a0 [ 635.609456][ T31] ? __pfx_watchdog+0x10/0x10 [ 635.609480][ T31] ? __pfx_kthread+0x10/0x10 [ 635.609503][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.609529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.609554][ T31] ? __pfx_kthread+0x10/0x10 [ 635.609576][ T31] ret_from_fork+0x3fc/0x770 [ 635.609605][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 635.609636][ T31] ? __switch_to_asm+0x39/0x70 [ 635.609655][ T31] ? __switch_to_asm+0x33/0x70 [ 635.609673][ T31] ? __pfx_kthread+0x10/0x10 [ 635.609695][ T31] ret_from_fork_asm+0x1a/0x30 [ 635.609729][ T31] [ 636.177966][ T31] Kernel Offset: disabled [ 636.182294][ T31] Rebooting in 86400 seconds..