last executing test programs: 1m51.813179223s ago: executing program 1 (id=1915): syz_emit_ethernet(0x6e, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}, {0x2, 0x1, "fef4b66989e6"}]}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00000001040000aa"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8930, &(0x7f0000000b00)={'veth0_virt_wifi\x00', @ifru_data=0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x51, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x237, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4c, 0x8, 0x80, 0x20, 0x3}, 0xdf, &(0x7f0000000340)={0x5, 0xf, 0xdf, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x2, 0x8001}, @generic={0xcc, 0x10, 0xa, "56846f55ff953ae360ccb53902af070f4b46dcba817c56f108b8b04ee44a2f8570d8831f1b1235be7c603cf9e87fd5b9b62f0001b21d8eb68d0b270eb9062707b4d48c7d47b0a4967bc490fcc99a7bc7109a06b902316ecd12ad003ec8fa7420d893cb1d192301c8dd63a38d62d153d63849b9a76b4ac893feed175e4aed731b5d61f85253030eab7a90e5bcef1f9573c52f3fc0f955497b88d35afdc9be3d73c8f1c1f502d23c63021cd7541e74d73ec691805bd818d3cec8bc05f05d42cb4dd91fbf4161559cf068"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x4, 0x1}]}, 0x1, [{0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="158a4300"/21]}]}) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x0, "ac2b76e6"}, @local=@item_012={0x2, 0x2, 0x2, "d967"}, @global=@item_4={0x3, 0x1, 0x1, "24dbfc93"}]}}, 0x0}, 0x0) 1m49.770382371s ago: executing program 1 (id=1921): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x204000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) listen(r3, 0xfffffff7) 1m48.741593363s ago: executing program 1 (id=1926): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000007c0)={'nicvf0\x00', 0x2}) (async, rerun: 64) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000014c0)={0xb, 0x5, 0xf1}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009602"]) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xca, 0x7f93c20a1c013c4f, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0xaa, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x3c3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x0, 0x37}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0xf7, 0x38}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7, 0x1c, 0xcd, 0x20, 0x40}, 0x33, &(0x7f00000000c0)={0x5, 0xf, 0x33, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x4, 0xff, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x7, 0xf000, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x764}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xa, 0x8}]}, 0xa, [{0x8a, &(0x7f00000001c0)=@string={0x8a, 0x3, "9cd6d47458c65d1e5a03bf99c2080c3f9bcd20d5af1ee75204e01f2554c0f353df6fa2465b3111d4c1f359c69b710f2c9d04d314c3ff04ec523377c6042f6ca7f91cc4737a79539afcb13da066adf26f6b15979d5eda0a2a45d6859162a2a1957d929c51727b9e2987cd238f9ce2da6ebc0eca0dfef35d7ca016113acec4fd4ad2466268d91aaf22"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x405}}, {0x9b, &(0x7f0000000280)=@string={0x9b, 0x3, "d380321782e504480d8764c9224e6c1058b961f7d23eba136012a080d7e4985fbaa328c2d0a6db0a1ed486c78905f827eb6135831c4308e38cb9d91dfcc9977cb8763451e5fc721c2bbd302f9e37e4317fa1925a86f388cd5b116d63f38fc931e05ed45bd786a7848ea1cbde29f5a47a68afcd4b27669eca8ff97918dc81b877ad80c5f12c2768b848120969d293b7105d03c0f659c3e92e7c"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x406}}, {0xde, &(0x7f0000000340)=@string={0xde, 0x3, "1505f57cf5e15e83745df7f594cd89129abcf10e624d13ef04bd4aec55ea70a0ee8b00775eaaea94d48174affcfcd708b0c269de617c4dec8dec54f69fc206996be6f678621e3fd5530d7211e66b04a97b6e80e583d49f676222dce0d9e98c649d0b409ba885f2f30fe91ccb858a2d5e7be2e8f870ca0b25c8f21184eb0faf1f2e0b4951a76c3805c4df47296391fd2461a4e7a9cdab38f5233eeaefbf522d290042334d99be60c1e97e0dad94d08de5b4c260b6c9a6fd22a4fee181a2e54c55b149a1ff0c27fc3263056509a6758ef92645d8bee71b9f5320a19233"}}, {0x81, &(0x7f0000000440)=@string={0x81, 0x3, "fad29ebd7ec4a6fb53e85d07065ac4579bf89286f5f30e274bb1789060c1f8bee7917f28abdef954e075678c6b45815d6b15c87dc12a5384bf975ed0eff4fc6e208139699878638cdb92bf451b478efaf14a9a3967b62a2fa2a1495f1ae42a0c91e18e322270a0ccfc8e9b52d1d4da5a5e3fbd14d32d6b7257e187d5e56ff0"}}, {0x88, &(0x7f0000000500)=@string={0x88, 0x3, "b34147607fe7505b523d26614f49e0015678625e2481b92a609458a45168795b126ba1a35b8f62f767aed8a7fc2fd8ed8947a6c1d3aa552856ef7ac577b5227791a983c769a153c9da014f59553c8ad80d3439444a3ce12dc7e70fcab80a6e3d2d702071100e3a3b03dc1e936c5c0211ada8d417fb651fadce385f9f0250f7936ee3285819c8"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x441}}, {0x61, &(0x7f0000000600)=@string={0x61, 0x3, "9cc17093d0a1d43c5740c0c9b72450b72492460c7c301923bb47ec46b5ed90960fd2891d1256c560c61c0804f0a46a48a05348283aff0d9e3a1b620dea1133e3b055e44553403f0a0d73b663aa93ac43d088bde7b2ff4c1f113deef6bf5d44"}}, {0x57, &(0x7f0000000800)=@string={0x57, 0x3, "4ec6596b0ce9df4fda359f7357a1c96a4c76545ef80aadeebd4894fca34505ab6b3c3acbf32bb262c6a88becea4de4d2d47db60168451a0d30c9f5a8fff98df7512f25fd0019bf9d7591f62c5f9ab434e590c02c00"}}]}) (rerun: 64) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000700)={0x1, 0xbf, 0xfffffc00, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000000940)=']]*-#-\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000ac0)={0x40, 0x31, 0x4, "e2d8d1e6"}, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m47.410720737s ago: executing program 1 (id=1938): r0 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x6, 0x440302) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0xb853, r0, 0x83000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x0, 0x3, 0x5}, 0x200}}, 0x18) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000040)) 1m47.124806224s ago: executing program 1 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r2, 0x0, 0x0, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x5c}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x44000) 1m46.739929643s ago: executing program 1 (id=1947): eventfd(0xffffffff) eventfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x1b0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x4c, 0x4d, 0x70, 0x20, 0x41e, 0x3f19, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0xbd, 0xb, 0x1, 0xff, 0xb2, 0x3b, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}}], [{{0x9, 0x5, 0xd, 0xd, 0x3ff, 0x3, 0x5, 0x64}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 1m31.359451765s ago: executing program 32 (id=1947): eventfd(0xffffffff) eventfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x1b0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x4c, 0x4d, 0x70, 0x20, 0x41e, 0x3f19, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0xbd, 0xb, 0x1, 0xff, 0xb2, 0x3b, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}}], [{{0x9, 0x5, 0xd, 0xd, 0x3ff, 0x3, 0x5, 0x64}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 11.069668814s ago: executing program 4 (id=2287): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2c, 0x1, 0x3, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x3032344d}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x15, 0x803, 0xb) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x34325842, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x0, 0x7}}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c00000010000104fcffffff0000000000000000", @ANYRES32=r7], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) pread64(r3, 0x0, 0x0, 0xfffffffffffffff7) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x600000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b25a6e404c05c10687be000000010902"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000e0603060000797a3000000000050001000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) syz_usb_connect(0x5d1a4c77b69467be, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5b, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) write$proc_mixer(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Cap'], 0x86) 10.006521234s ago: executing program 2 (id=2292): r0 = syz_usb_connect(0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403", @ANYRESHEX], 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x88840, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4, 0x8, 0x30}, &(0x7f0000000040)=0xc) io_setup(0xfb, &(0x7f0000000140)=0x0) r6 = socket(0x15, 0x5, 0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x2000000, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000200)="13", 0x1}]) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x80}, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0xffffffffffffff7f}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 7.094447531s ago: executing program 3 (id=2299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xda}, @TCA_ROUTE4_TO={0x8, 0x2, 0xbc}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f3c0000000c0a01020000000000000000010000000900020073797a3200000000100003800c0000800400018004000a80090001007379080000000000000000001000010000000000000000000000000a018c6a8d24f0a9d80a46fd849236d8c1bdfc9ad2eeb5000000"], 0xc0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)={0x4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) read(r7, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x1e0, 0xf8, 0x1e0, 0x0, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "23d6eb5c3e1597414aab894c685206260c91f9e86793623b5db1828eb179"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf8}}, {{@ipv6={@empty, @private1, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x4, @ipv4=@rand_addr=0x64010100, 0x4e23}}}, {{@ipv6={@private0, @mcast2, [], [], 'tunl0\x00', 'macvlan0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) fcntl$setpipe(r4, 0x407, 0x4) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000000)=0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000001440)=@ethtool_dump={0x3f, 0x2c1, 0x7}}) close_range(r6, 0xffffffffffffffff, 0x0) 6.874941099s ago: executing program 4 (id=2300): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @quote}], 0x38) (async) r2 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0x1, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x3b677000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x80000011}) (async) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, 0x0, 0x0) (async) close_range(r0, r8, 0x2) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff00e7406d04230807000102030109025200010000"], 0x0) (async) ptrace(0x10, r9) (async) r10 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r10, 0x0, 0x0) (async) ptrace$setregs(0xd, r9, 0x0, 0x0) ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$dri(&(0x7f0000001100), 0x1, 0x0) 6.840497449s ago: executing program 2 (id=2301): r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xabd6, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x19, 0x0, 0x5, 0x1, 0x0, 0x41, 0x0, 0x0, {0x2, r3}}) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0x9e, 0x7e, ""/126}, &(0x7f00000001c0)=0x9e, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 6.630052295s ago: executing program 4 (id=2303): socket(0x840000000002, 0x3, 0x100) (async) r0 = socket(0x840000000002, 0x3, 0x100) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) r3 = syz_open_pts(r1, 0x604000) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/209) (async) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/209) ioctl$TIOCCBRK(r2, 0x5428) getsockopt$inet_pktinfo(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0x19, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa5e0}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x2, 0x5, 0x4, 0x4}, 0x10, 0x107c2, 0xffffffffffffffff, 0x2, &(0x7f00000013c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001400)=[{0x0, 0x4, 0x2, 0x6}, {0x4, 0x2, 0x8, 0x8}], 0x10, 0x2, @void, @value}, 0x94) close_range(r4, r1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="647e2c39b8e541fae03a17ee2f68b2024b67a11d6437a162d9", @ANYRESDEC, @ANYRES64=r0], 0x0) 6.5803674s ago: executing program 2 (id=2304): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x1, 0x11c000, 0x1}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x83}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6.03453828s ago: executing program 2 (id=2306): r0 = socket(0x2, 0x3, 0xff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x30) 5.79698054s ago: executing program 2 (id=2307): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xbe, 0xc6, 0x31, 0x8, 0x15c2, 0x44, 0xc450, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xdb, 0x4, 0xc0, 0xe6, [{{0x9, 0x4, 0x6d, 0x4, 0x0, 0x49, 0x3, 0x18, 0x5}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0xfffffffffffffffb) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdcfa"], 0xdd12}], 0x1}, 0x20040051) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x4, 0x460, [0x200000000200, 0x0, 0x0, 0x200000000230, 0x200000000444], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x50, 0xa00, 'vcan0\x00', 'batadv_slave_0\x00', 'pim6reg1\x00', 'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x9e, 0xd6, 0x106, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}, {0x5, 0x1, 0x7, 'ip_vti0\x00', 'virt_wifi0\x00', 'macvtap0\x00', 'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xf73bf1d54b96d7b1, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x18, 0x0, 0x9, 'ip6_vti0\x00', 'hsr0\x00', 'bond_slave_1\x00', 'veth0_vlan\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="7524d1fa8ea6", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x9, 0x80f3, 'ip6gre0\x00', 'batadv_slave_0\x00', 'nr0\x00', 'nr0\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0x4d8) 5.374879975s ago: executing program 0 (id=2310): prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/75) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/200) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/99) r0 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x78a5b000) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/4096) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001380)=@urb_type_control={0x2, {0xc}, 0x9, 0x47, &(0x7f0000001240)={0x60, 0x14, 0x8001, 0xfff9, 0x2}, 0x8, 0x3, 0x8, 0x0, 0x3ff, 0xb, &(0x7f0000001280)="ba9791312937b8c49d0260eff800abd689e2b61ea8b8178caba005a2f35314db2de9cb86cfbc2d1876e80ff7798b68f4c707ddb2caeb18ac12d0a6425b5f40be6a40a444a3cdf0bee0cd08e52ffc0d3e8d4c617f003c380017290dcbd229208dec6279b70dc948229eb73ff49c6cd2f3ed398474ae21fb19bc399083f3db30c8ef01428271c42015f304ec654bafa071cefd972729bb8d25c0c1c88310186c20350479f9252642a0a98da7117cf7c5cd73c27382b2b7ac0ae9996501e4046d3c50f155add7b467ab622677831bb459ba9f8aae68e8eac50727c7c1f1b9ec"}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '}@@:@+\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '%]\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000001500)=""/237) r2 = syz_clone(0x80800000, &(0x7f0000001600)="75d0a2a9958a8bc01c539b23245864865bea186cbadf40ae43400c91a8ac0d4182edb6f7acffb9d913051d97ba2ee5bed36025e1beae8d248f9aa0b12565b4fb65fee1faf52aeb1f515c0c", 0x4b, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="f5f802d2cf25d6f626451c926bd866b5beb4b3b34915895b84e21c1b19f2be683175fd69cd8844c464412cc1868b") prlimit64(r2, 0x9, &(0x7f0000001740)={0x100000000, 0x9}, &(0x7f0000001780)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_GET_NAME(0x10, &(0x7f00000017c0)=""/202) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000018c0)={0xea3, 0x2, 0x3, 0x9, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x690c40, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000001940)={0x3, [0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1ffca, 0xfff2}, {0xc, 0x9}, {0xfff2, 0xd}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008090) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000001ac0), &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0xb7a3e68af033d297, &(0x7f0000001cc0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xa8}}], [{@flag='lazytime'}, {@smackfstransmute={'smackfstransmute', 0x3d, '%]\x00'}}]}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001e80)={&(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0xa, 0x8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000001ec0)={0x3ff, 0x0, r7}) prctl$PR_GET_NAME(0x10, &(0x7f0000001f00)=""/132) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000001fc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000002000)={0x28, 0x4, r8, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5}) prctl$PR_GET_NAME(0x10, &(0x7f0000002040)=""/16) 5.256525074s ago: executing program 0 (id=2311): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) (async, rerun: 64) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (rerun: 64) flock(r4, 0x2) (async, rerun: 32) flock(r3, 0x2) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYRESDEC=r6, @ANYBLOB="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", @ANYRESDEC=r6, @ANYRES64=r5], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) (async) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000100003050000000000000000000007"], 0x90}}, 0x0) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000005902"]) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008) (rerun: 64) 5.194588271s ago: executing program 3 (id=2312): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000040"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.780384789s ago: executing program 0 (id=2313): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sync_file_range(r0, 0x1, 0x50d9, 0x5) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sync_file_range(r0, 0x1, 0x50d9, 0x5) (async) 4.631277275s ago: executing program 0 (id=2314): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0956a2c2619510a074612b1f44c8bc34fe00", 0x12, 0x2000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7ffd, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x400000, 0x8) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x9, 0x4, 0xbe, 0x3, 0x10, 0xe, 0x0, 0xe, 0x2, 0x9, 0x7, 0xfffffffffffffffc}, {0x7, 0x80, 0x5, 0x4, 0x1, 0x5d, 0xf4, 0x3, 0x1, 0x8, 0xf, 0x5, 0xfffffffffffffff3}, {0x8, 0x80, 0xd, 0x2, 0xfb, 0x2, 0x12, 0x5, 0x45, 0x28, 0x3, 0x10}], 0x8}) 4.534436036s ago: executing program 5 (id=2315): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0) write$6lowpan_enable(r4, &(0x7f0000000200)='1', 0x0) syz_io_uring_setup(0x5864, &(0x7f00000002c0)={0x0, 0x4531, 0x40, 0x100, 0x1f9, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x52f1, 0x20eb82, 0x7a, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80000d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x4, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0xffffffff}, 0x0) socket$inet6(0xa, 0x6, 0x0) r8 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0xf9c4da748482e229) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 4.532278536s ago: executing program 3 (id=2316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x3) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x20, 0x38, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x48, [@dev={0xac, 0x14, 0x14, 0x13}, @empty]}, @timestamp={0x44, 0x4, 0x1, 0x0, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x8}}}}}}, 0x0) 3.544091157s ago: executing program 4 (id=2317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202800, 0x0) unshare(0x2040400) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000400)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) tee(r4, 0xffffffffffffffff, 0xff, 0xc) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r3, &(0x7f0000002f80)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}, 0x3d1c7a75}, {{&(0x7f0000000180)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=""/112, 0x70}, 0x1}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/181, 0xb5}, {0x0}, {&(0x7f0000000640)=""/2, 0x2}, {0x0}], 0x4}, 0x7fffffff}, {{&(0x7f0000001e40)=@pppol2tpv3, 0x80, &(0x7f0000002f40)}, 0x1}], 0x4, 0x40000071, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x110, r3, 0x21f09000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) utime(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x9}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000016c0)={'ipvlan0\x00'}) close(r2) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x42840}, 0x4) r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socketpair(0xb, 0x3, 0x9, &(0x7f0000001700)) syz_usb_control_io(r11, &(0x7f0000000680)={0x2c, &(0x7f00000003c0)={0x0, 0xa, 0x68, {0x68, 0x31, "61539e7a199e1e0bc206f2951fa8b6d5cd3b58904e47a583b75a02a2d9faca25e344977c2039f4e223b76c1748cc98fea20284fed4d3a89c817025921914624b9dd8b17c13fbd7e9e3b73138f43c8e7653afedb892a7bf2e161d6af4b009ee5e404af32c17f5"}}, &(0x7f0000000440)={0x0, 0x3, 0xce, @string={0xce, 0x3, "257d6942183a24f229a016e146235056fed946f9eb88e976b4a4985e96da1cfa8925f8f003fdebd7598a97d3b45039e7027eee79ed01ee2903dbb00031df4a52f76c332a8abab5dae64940c007c2ff185999f96d5b9832d2f93cccc720e788266dc4340e6d59d9548fd00ddc0376516deca5de1c28e4ef311f8d5da1723b6f6898f3652ce2c912c8469a9e52b4c7a67c474a48711cd75de18b09d56a22a8c5eef8940cac8a2901fa1268ccf22117a9a7c12ef1ff8b5179a2507472fd21bfba000b2005e69c24e31caa80582c"}}, &(0x7f0000000540)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xba, 0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0x0, 0x8, [0xff000f, 0x3f0f]}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x843, 0xf00, 0x99e, [0xcf, 0x50, 0x0, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x80, 0x1e, 0x6, [0xf]}, @ptm_cap={0x3}, @generic={0x9c, 0x10, 0x1, "7b567c82a3685e9cc43572d4078027be02567d32b8bc1fdb247826173d41fd6b5db5b69332a957434db6ce115425a34ae97fef41d4e78f86f77639f5b896fc08a06e150e96cc03a847c51033d87cf1df40bfe5d9a4c3b0c703588c0e951d35b3f096c5adc10cd82f2c2b84a3a7df38b7435b3a579208c5805223f23b82dafa046e83c970a389bf7b438517aaf5099aabd2f5e27efc76b73794"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x10, 0xff, "98a8a7f3", "62c41f37"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x96, 0x80, 0x6, 0xe, 0xc2, 0x8c, 0xfb}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x5, 0xcc, "e953458222c81ec8d2d9731dbde09e7bc00e0f3f7b8197a26c831f8f58ba93af167c10c4f7cf972eafa1cfa00e4729c44267c62a79b57807f6241a4574bccba15c714fd23c337fd55c6ef598deb95117e3a700ca5899bfbdd4930a4ac4ae1db65f5608e9da0528501a09429e9aa42eb779e5514edac8fe6bf5da883e4c5d9857f39fc19729a9ce7bf916a501f77244675b5d79a5ea636ecd7394af0f23d63ada1597ab47a89533b68a77f7379472d20235686226714a89e56498c4c8eb7e79f3cf0bd4f840826f707141b9cd"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x200, 0x44}}, &(0x7f0000001740)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0xb, 0x2, "5415"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "fd64"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}}) 3.355469445s ago: executing program 3 (id=2318): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYRESHEX]) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (rerun: 64) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.141269543s ago: executing program 3 (id=2319): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x701800, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="c162a5721c15df641c928eaafcd4c6c1d6af9ae4a29e99046e754a1d049150ee32dc162254f3ce1f3cf3a3fc1c7e195e85dc09d51b3126440d66a647f54d5521be4c6f1635c81845903d8c5701f43f9ee8fd78d893e576c53f", 0x59}, {&(0x7f00000009c0)="4ea3982069836dc48f8e7d8dbdd545408dd3f37ec261e1292c", 0x19}], 0x2, 0x0, 0x0, 0x80}, 0x20000080) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109023b00010102f407090400070202060006052406000005240001800d246780d95f0000090005008109058202ff070604030905030200020403ea100be8625d2ab8f69821959cd039c4e9bac6d057fed100"/112], &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x88, 0x48, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x78, 0x0, r4, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.020881296s ago: executing program 5 (id=2320): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01af5010001307000000000000000064010100000000080000000000000000ac141411eaffffffffffffff000000000000000000000000a45613190000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ff020000000000000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 2.949497894s ago: executing program 5 (id=2321): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006, 0x3}]}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0x40485404, &(0x7f0000000180)={{0x1, 0x3, 0x1, 0x0, 0xfffffffc}, 0x2, 0x19c}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x6, 0x4, 0x0, 0x2, 0x0, 0x8, 0x0, 0xff, 0x3, 0x0, 0xfffffffe}}) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000040)=0xcd24, 0x4) r7 = fsmount(r3, 0x1, 0x0) fchdir(r7) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f00009cb000/0x3000)=nil, 0x3000, 0x8, 0x50, r8, 0x2000) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3, 0x10000) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlockall() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)) 2.650470346s ago: executing program 2 (id=2322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000180)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x9, {r1}, {}, 0xb, 0x9}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0x8) r5 = getpgrp(r1) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108, 0x1705}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x20}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) 2.342269756s ago: executing program 5 (id=2323): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000180)='THAWED\x00', 0x7) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) 1.727994746s ago: executing program 3 (id=2324): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000001140)={0x0, 0x3d, &(0x7f00000006c0)=[{&(0x7f0000001100)="c110bc99fed6fa82", 0x6802}], 0x1}, 0x20000000) r6 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0xa) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xfffe) read$dsp(r6, &(0x7f0000000140)=""/60, 0xffffffcc) 1.486326742s ago: executing program 0 (id=2325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6af", 0x86}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831692ec6b873fd77d10d2dad93fe6c91c512642975ee56e49f55095952b3f13d13c8fccc2410378f6469a8e1e04d3a9642f5ee714672c9de817233992c0ad8234921cc929670b81833cc694046c8121c16872b4b6474893f3ec6e9457f81f43c48214fbe7ebe", 0xf5}], 0x6}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d73", 0x54}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bcba1cfc884267", 0x9d}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642083e6a1f24ae56a85b1ca9402e1f325ef41aab6a213a4", 0x90}], 0x4}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="f1fe87d3f07a0f4e1872abb176d0a3b4dea27ffd153c0d676fdbf05234025661aba8363a1420de37dc3a92d94028f72cde615167c94c40813bb51adea5de879491c7e6fcc9d568df0bf9064ee441379320a9bb27a85c4e709da86d0fccaf89ccb2c69030e993571da17d0d0de8234ddb923e2f44d6"}], 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x0, 0x0, 0x1, 0xe2b}}, @ip_ttl={{0x0, 0x0, 0x2, 0x5}}]}}], 0x2, 0xc0) syz_open_dev$sndctrl(&(0x7f0000000700), 0x2, 0x440080) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000380)=0x3ffffe, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local, 0x1}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846009000000c879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) close_range(r1, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r3], 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481341ba7060fc01000000060000004895abea7f867388faee3333e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66fa", 0x20c8, 0x11, 0x0, 0xfffffffffffffec5) 1.016532947s ago: executing program 5 (id=2326): r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xabd6, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x19, 0x0, 0x5, 0x1, 0x0, 0x41, 0x0, 0x0, {0x2, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x145, 0x0, 0x0) 928.98079ms ago: executing program 5 (id=2327): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 202.678976ms ago: executing program 4 (id=2328): r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') 100.259804ms ago: executing program 4 (id=2329): unshare(0x40020000) (async) unshare(0x40020000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000240)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x636c, 0xc5d1, 0x27, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000002c0)="ff004000", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000002c0)="ff004000", 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x1, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f00000000c0)=0x80, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f00000000c0)=0x80, 0x0, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6(0xa, 0x6, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffff, 0x4000}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1b, 0x3, 0x1, 0x1b}) 0s ago: executing program 0 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babca1005c001680580001"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) kernel console output (not intermixed with test programs): using dummy_hcd [ 524.144259][ T9897] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 524.238331][ T9903] usb 2-1: Using ep0 maxpacket: 32 [ 524.258369][ T9903] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 524.307094][ T9903] usb 2-1: config 0 has no interface number 0 [ 524.313410][ T9903] usb 2-1: config 0 interface 184 has no altsetting 0 [ 524.328143][ T9897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.338850][ T9897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 524.353143][ T9897] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.363604][ T9903] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 524.373051][ T9897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.383187][ T9897] usb 1-1: Product: syz [ 524.387843][ T9903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.391908][ T9897] usb 1-1: Manufacturer: syz [ 524.405827][ T9903] usb 2-1: Product: syz [ 524.410268][ T9903] usb 2-1: Manufacturer: syz [ 524.415246][ T9897] usb 1-1: SerialNumber: syz [ 524.417436][ T9903] usb 2-1: SerialNumber: syz [ 524.434247][ T1773] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 524.452585][ T9903] usb 2-1: config 0 descriptor?? [ 524.459493][ T9897] usb 1-1: config 0 descriptor?? [ 524.491850][ T9903] smsc75xx v1.0.0 [ 524.669670][ T1773] usb 5-1: config 0 has no interfaces? [ 524.765548][ T9897] usb 1-1: USB disconnect, device number 126 [ 524.777224][ T1773] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 524.792563][ T1773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.803155][ T1773] usb 5-1: Product: syz [ 524.811331][ T1773] usb 5-1: Manufacturer: syz [ 524.826935][ T1773] usb 5-1: SerialNumber: syz [ 524.861500][ T1773] usb 5-1: config 0 descriptor?? [ 524.996429][ T9903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 525.015759][ T9903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 525.039152][ T9903] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 525.060679][ T6691] udevd[6691]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.080657][ T9903] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 525.104700][ T9903] usb 2-1: USB disconnect, device number 109 [ 525.167640][T12268] 8021q: VLANs not supported on sit0 [ 525.492398][T12274] vlan0: entered promiscuous mode [ 525.533627][T12274] bridge0: entered promiscuous mode [ 525.577439][T12274] vlan0: entered allmulticast mode [ 525.602563][T12274] bridge0: entered allmulticast mode [ 525.911460][ T1773] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 526.115968][ T1773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.169530][ T1773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.180260][T12292] fuse: Bad value for 'fd' [ 526.214205][ T1773] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 526.251680][ T1773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.335433][ T9897] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 526.346898][ T1773] usb 1-1: config 0 descriptor?? [ 526.534085][ T9897] usb 2-1: Using ep0 maxpacket: 32 [ 526.548333][ T9897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.605913][ T9897] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 526.667375][ T9897] usb 2-1: config 2 has no interface number 0 [ 526.753886][ T9897] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 526.810910][ T9897] usb 2-1: config 2 interface 189 has no altsetting 0 [ 526.827731][ T9897] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 526.842475][ T1773] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 526.850046][ T9897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.864038][ T9897] usb 2-1: Product: syz [ 526.868344][ T1773] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 526.876346][ T9897] usb 2-1: Manufacturer: syz [ 526.881167][ T1773] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 526.888956][ T9897] usb 2-1: SerialNumber: syz [ 526.906003][ T1773] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 526.941253][ T1773] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 526.963819][ T1773] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 527.731038][ T1773] playstation 0003:054C:0DF2.0022: Failed to retrieve feature with reportID 9: -71 [ 527.740835][ T1773] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense pairing info: -71 [ 527.755432][ T1773] playstation 0003:054C:0DF2.0022: Failed to get MAC address from DualSense [ 527.767484][ T1773] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 527.778896][ T1773] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -71 [ 527.797326][ T1773] usb 1-1: USB disconnect, device number 127 [ 528.026383][ T1773] usb 5-1: USB disconnect, device number 4 [ 528.514287][ T1773] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 528.614070][ T9911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 528.784189][ T9911] usb 1-1: Using ep0 maxpacket: 16 [ 528.789559][ T1773] usb 5-1: config 0 has no interfaces? [ 528.837732][ T9911] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 528.866638][ T1773] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 528.892267][ T9911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.920085][ T1773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.943760][ T9911] usb 1-1: Product: syz [ 528.959493][ T1773] usb 5-1: Product: syz [ 528.963785][ T1773] usb 5-1: Manufacturer: syz [ 528.968623][ T9911] usb 1-1: Manufacturer: syz [ 528.979920][ T9911] usb 1-1: SerialNumber: syz [ 528.992500][ T1773] usb 5-1: SerialNumber: syz [ 529.004178][ T9911] usb 1-1: config 0 descriptor?? [ 529.015286][ T1773] usb 5-1: config 0 descriptor?? [ 529.104577][ T5895] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 529.225147][ T9911] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 529.233846][ T9911] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 529.253863][ T9911] usb 1-1: USB disconnect, device number 2 [ 529.274070][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 529.293400][ T5895] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 529.306991][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.323636][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.337425][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.346543][ T5895] usb 4-1: Product: syz [ 529.351010][ T5895] usb 4-1: Manufacturer: syz [ 529.362552][ T5895] usb 4-1: SerialNumber: syz [ 530.264221][ T9911] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 530.444332][ T9911] usb 1-1: Using ep0 maxpacket: 8 [ 530.463129][ T9911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.478577][ T9911] usb 1-1: config 0 has no interfaces? [ 530.484717][ T9911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.495264][ T9911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.510014][ T9911] usb 1-1: config 0 descriptor?? [ 531.471502][ T9911] usb 5-1: USB disconnect, device number 5 [ 531.692008][ T5895] usb 4-1: 0:2 : does not exist [ 531.742461][ T5895] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 531.769354][ T5895] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 531.792353][ T5895] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 531.822126][ T5895] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 531.859852][ T5895] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 531.878508][ T5895] usb 4-1: USB disconnect, device number 120 [ 531.884788][ T9911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 532.035180][ T9897] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 532.044782][ T9897] usb 2-1: 189:2 : does not exist [ 532.084069][ T9911] usb 5-1: Using ep0 maxpacket: 16 [ 532.111836][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.149615][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.195404][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.219052][ T9911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 532.241344][ T9911] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 532.259248][ T9911] usb 5-1: can't read configurations, error -71 [ 532.272021][T12339] xt_hashlimit: size too large, truncated to 1048576 [ 532.848246][ T9897] usb 1-1: USB disconnect, device number 3 [ 532.865517][ T9892] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 533.114984][ T9892] usb 4-1: Using ep0 maxpacket: 32 [ 533.141512][ T9892] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 533.194026][ T9892] usb 4-1: config 0 has no interface number 0 [ 533.224765][ T9892] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 533.269370][ T9892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.292449][ T9892] usb 4-1: Product: syz [ 533.302735][ T9892] usb 4-1: Manufacturer: syz [ 533.378348][ T9892] usb 4-1: SerialNumber: syz [ 533.426630][ T9892] usb 4-1: config 0 descriptor?? [ 533.466235][ T9892] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 533.826212][ T9892] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 533.839425][ T9892] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 534.078277][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 534.210268][T12376] xt_hashlimit: invalid rate [ 534.663733][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.688106][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.336269][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 535.494109][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 535.511781][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.532362][ T5895] usb 1-1: config 0 has no interfaces? [ 535.545317][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.574317][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.599347][ T5895] usb 1-1: config 0 descriptor?? [ 535.788684][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 535.797208][ T9892] usb 4-1: USB disconnect, device number 121 [ 535.856943][ T9892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 535.954416][ T9892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 536.015168][ T9892] quatech2 4-1:0.51: device disconnected [ 536.924119][ T9911] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 537.064175][ T9911] usb 5-1: device descriptor read/64, error -71 [ 537.364169][ T9911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 537.439366][T12415] FAULT_INJECTION: forcing a failure. [ 537.439366][T12415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.484893][T12415] CPU: 1 UID: 0 PID: 12415 Comm: syz.3.1985 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 537.484925][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.484940][T12415] Call Trace: [ 537.484949][T12415] [ 537.484958][T12415] dump_stack_lvl+0x241/0x360 [ 537.484999][T12415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.485030][T12415] ? __pfx__printk+0x10/0x10 [ 537.485084][T12415] should_fail_ex+0x424/0x570 [ 537.485113][T12415] _copy_from_user+0x2d/0xb0 [ 537.485145][T12415] input_event_from_user+0x211/0x510 [ 537.485175][T12415] ? __pfx_input_event_from_user+0x10/0x10 [ 537.485203][T12415] ? input_inject_event+0xd9/0x360 [ 537.485237][T12415] evdev_write+0x4c4/0x7d0 [ 537.485270][T12415] ? __pfx_evdev_write+0x10/0x10 [ 537.485294][T12415] ? bpf_lsm_file_permission+0x9/0x10 [ 537.485320][T12415] ? rw_verify_area+0x246/0x630 [ 537.485343][T12415] ? __pfx_evdev_write+0x10/0x10 [ 537.485373][T12415] vfs_write+0x2bc/0xd10 [ 537.485411][T12415] ? __pfx_vfs_write+0x10/0x10 [ 537.485437][T12415] ? __fget_files+0x2a/0x420 [ 537.485456][T12415] ? __fget_files+0x2a/0x420 [ 537.485477][T12415] ? __fget_files+0x39d/0x420 [ 537.485495][T12415] ? __fget_files+0x2a/0x420 [ 537.485524][T12415] ksys_write+0x19d/0x2d0 [ 537.485552][T12415] ? __pfx_ksys_write+0x10/0x10 [ 537.485583][T12415] ? do_syscall_64+0xb6/0x230 [ 537.485613][T12415] do_syscall_64+0xf3/0x230 [ 537.485639][T12415] ? clear_bhb_loop+0x45/0xa0 [ 537.485665][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.485686][T12415] RIP: 0033:0x7fa9fab8d169 [ 537.485705][T12415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.485724][T12415] RSP: 002b:00007fa9fb920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.485752][T12415] RAX: ffffffffffffffda RBX: 00007fa9fada5fa0 RCX: 00007fa9fab8d169 [ 537.485768][T12415] RDX: 0000000000002778 RSI: 0000200000000040 RDI: 0000000000000003 [ 537.485782][T12415] RBP: 00007fa9fb920090 R08: 0000000000000000 R09: 0000000000000000 [ 537.485796][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.485808][T12415] R13: 0000000000000000 R14: 00007fa9fada5fa0 R15: 00007fa9faecfa28 [ 537.485840][T12415] [ 537.718849][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.984187][ T9911] usb 5-1: device descriptor read/64, error -71 [ 538.024519][ T5895] usb 1-1: USB disconnect, device number 4 [ 538.102964][ T9911] usb usb5-port1: attempt power cycle [ 538.226286][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 538.226308][ T30] audit: type=1326 audit(1744241901.807:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.273271][ T30] audit: type=1326 audit(1744241901.807:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.295772][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.303491][T12420] netlink: 'syz.2.1988': attribute type 3 has an invalid length. [ 538.329655][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'. [ 538.414858][ T30] audit: type=1326 audit(1744241901.837:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.484278][ T9911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 538.542231][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 538.544793][ T30] audit: type=1326 audit(1744241901.837:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.575159][T12425] tipc: Started in network mode [ 538.586027][T12425] tipc: Node identity 48000008, cluster identity 5 [ 538.599660][T12425] tipc: Node number set to 1207959560 [ 538.626520][ T9911] usb 5-1: device descriptor read/8, error -71 [ 538.637522][ T30] audit: type=1326 audit(1744241901.837:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.664106][ T30] audit: type=1326 audit(1744241901.837:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.690472][ T30] audit: type=1326 audit(1744241901.837:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.712925][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.739814][ T30] audit: type=1326 audit(1744241901.837:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.797339][ T30] audit: type=1326 audit(1744241901.837:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.821717][ T30] audit: type=1326 audit(1744241901.837:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12419 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 538.894366][ T9911] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 538.919822][ T9911] usb 5-1: device descriptor read/8, error -71 [ 539.034609][ T9911] usb usb5-port1: unable to enumerate USB device [ 539.372231][T12444] FAULT_INJECTION: forcing a failure. [ 539.372231][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.444077][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.3.1996 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 539.444110][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 539.444123][T12444] Call Trace: [ 539.444133][T12444] [ 539.444143][T12444] dump_stack_lvl+0x241/0x360 [ 539.444184][T12444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.444216][T12444] ? __pfx__printk+0x10/0x10 [ 539.444259][T12444] should_fail_ex+0x424/0x570 [ 539.444289][T12444] _copy_from_user+0x2d/0xb0 [ 539.444321][T12444] input_event_from_user+0x211/0x510 [ 539.444351][T12444] ? __pfx_input_event_from_user+0x10/0x10 [ 539.444379][T12444] ? input_inject_event+0xd9/0x360 [ 539.444413][T12444] evdev_write+0x4c4/0x7d0 [ 539.444446][T12444] ? __pfx_evdev_write+0x10/0x10 [ 539.444470][T12444] ? bpf_lsm_file_permission+0x9/0x10 [ 539.444497][T12444] ? rw_verify_area+0x246/0x630 [ 539.444520][T12444] ? __pfx_evdev_write+0x10/0x10 [ 539.444543][T12444] vfs_write+0x2bc/0xd10 [ 539.444581][T12444] ? __pfx_vfs_write+0x10/0x10 [ 539.444606][T12444] ? __fget_files+0x2a/0x420 [ 539.444625][T12444] ? __fget_files+0x2a/0x420 [ 539.444647][T12444] ? __fget_files+0x39d/0x420 [ 539.444665][T12444] ? __fget_files+0x2a/0x420 [ 539.444694][T12444] ksys_write+0x19d/0x2d0 [ 539.444722][T12444] ? __pfx_ksys_write+0x10/0x10 [ 539.444753][T12444] ? do_syscall_64+0xb6/0x230 [ 539.444784][T12444] do_syscall_64+0xf3/0x230 [ 539.444810][T12444] ? clear_bhb_loop+0x45/0xa0 [ 539.444836][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.444857][T12444] RIP: 0033:0x7fa9fab8d169 [ 539.444875][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.444893][T12444] RSP: 002b:00007fa9fb920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.444917][T12444] RAX: ffffffffffffffda RBX: 00007fa9fada5fa0 RCX: 00007fa9fab8d169 [ 539.444940][T12444] RDX: 0000000000002778 RSI: 0000200000000040 RDI: 0000000000000003 [ 539.444954][T12444] RBP: 00007fa9fb920090 R08: 0000000000000000 R09: 0000000000000000 [ 539.444968][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.444981][T12444] R13: 0000000000000000 R14: 00007fa9fada5fa0 R15: 00007fa9faecfa28 [ 539.445014][T12444] [ 540.424086][ T9903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 540.444308][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 540.624122][ T9903] usb 5-1: Using ep0 maxpacket: 16 [ 540.637885][ T9903] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 540.655277][ T9903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.681070][ T9903] usb 5-1: Product: syz [ 540.692798][ T9903] usb 5-1: Manufacturer: syz [ 540.704098][ T9903] usb 5-1: SerialNumber: syz [ 540.736276][ T9903] r8152-cfgselector 5-1: Unknown version 0x0000 [ 540.749635][ T9903] r8152-cfgselector 5-1: config 0 descriptor?? [ 542.185668][ T9897] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 542.303149][T11223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.321803][T11223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.330390][T11223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.349353][T11223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.357071][T11223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 542.370525][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.374218][ T9897] usb 4-1: Using ep0 maxpacket: 32 [ 542.384228][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.409301][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.416628][ T9897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.430462][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.438328][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 542.505901][ T9897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.660065][ T9897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 542.724857][ T9897] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 542.768067][ T9897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.816953][ T9897] usb 4-1: config 0 descriptor?? [ 543.241465][T12476] chnl_net:caif_netlink_parms(): no params data found [ 543.299542][ T9903] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 543.398843][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.451684][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.936885][ T9897] usbhid 4-1:0.0: can't add hid device: -71 [ 543.963367][ T9897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 544.014725][ T9897] usb 4-1: USB disconnect, device number 122 [ 544.205520][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.212815][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.234388][T12476] bridge_slave_0: entered allmulticast mode [ 544.254171][T12476] bridge_slave_0: entered promiscuous mode [ 544.278254][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.295920][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.303231][T12476] bridge_slave_1: entered allmulticast mode [ 544.354194][T12476] bridge_slave_1: entered promiscuous mode [ 544.464401][T11223] Bluetooth: hci5: command tx timeout [ 544.677079][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.720816][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.971635][T12476] team0: Port device team_slave_0 added [ 544.995078][T12506] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 545.002612][T12506] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2016'. [ 545.078954][T12476] team0: Port device team_slave_1 added [ 545.144367][ T9903] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 545.304078][ T9903] usb 5-1: Using ep0 maxpacket: 16 [ 545.317124][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.329314][ T9903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 545.344628][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.384494][ T9903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 545.426273][ T9903] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 545.439710][ T9903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.454271][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.474112][ T9903] usb 5-1: Product: syz [ 545.478466][ T9903] usb 5-1: Manufacturer: syz [ 545.483104][ T9903] usb 5-1: SerialNumber: syz [ 545.497508][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.507378][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.544256][ T9903] usb 5-1: config 0 descriptor?? [ 545.562762][ T9903] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 545.592202][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.624112][ T9911] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 545.768725][ T9903] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 545.776012][ T9903] quatech2 5-1:0.0: probe with driver quatech2 failed with error -90 [ 545.804205][ T9911] usb 4-1: Using ep0 maxpacket: 8 [ 545.827312][ T9911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.840933][ T9911] usb 4-1: config 0 has no interfaces? [ 545.851062][ T9911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.875622][ T9911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.929562][ T9911] usb 4-1: config 0 descriptor?? [ 545.978253][T12476] hsr_slave_0: entered promiscuous mode [ 545.991409][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.004631][T12476] hsr_slave_1: entered promiscuous mode [ 546.041589][T12476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.053685][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.092137][T12476] Cannot create hsr debugfs directory [ 546.096328][ T9911] usb 5-1: USB disconnect, device number 13 [ 546.554631][ T5855] Bluetooth: hci5: command tx timeout [ 546.874821][T12521] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 546.976383][T12476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.046049][T12476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.175674][T12476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.265848][T12476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.374083][ T9897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 547.534697][ T9897] usb 1-1: Using ep0 maxpacket: 8 [ 547.598588][ T9897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 547.622705][ T9897] usb 1-1: can't read configurations, error -61 [ 547.708245][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.754626][ T9897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 547.770850][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.814730][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.821960][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.892463][T12530] batadv_slave_1: entered promiscuous mode [ 547.934121][ T9897] usb 1-1: Using ep0 maxpacket: 8 [ 547.956302][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.963512][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.982318][ T9897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 547.994474][ T9897] usb 1-1: can't read configurations, error -61 [ 548.009918][ T9897] usb usb1-port1: attempt power cycle [ 548.213133][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.278051][ T9892] usb 4-1: USB disconnect, device number 123 [ 548.354197][ T9897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 548.417493][ T9897] usb 1-1: Using ep0 maxpacket: 8 [ 548.458374][T12476] veth0_vlan: entered promiscuous mode [ 548.489000][ T9897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 548.517101][T12476] veth1_vlan: entered promiscuous mode [ 548.522811][ T9897] usb 1-1: can't read configurations, error -61 [ 548.585719][T12476] veth0_macvtap: entered promiscuous mode [ 548.604215][ T9911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 548.607064][T12476] veth1_macvtap: entered promiscuous mode [ 548.624277][ T5855] Bluetooth: hci5: command tx timeout [ 548.664083][ T9897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 548.677424][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.697580][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.714999][ T9897] usb 1-1: Using ep0 maxpacket: 8 [ 548.750043][ T9897] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 548.762078][T12476] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.771096][ T9897] usb 1-1: can't read configurations, error -61 [ 548.779753][ T9911] usb 5-1: Using ep0 maxpacket: 32 [ 548.787149][ T9897] usb usb1-port1: unable to enumerate USB device [ 548.798750][ T9911] usb 5-1: too many configurations: 146, using maximum allowed: 8 [ 548.837331][T12476] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.855815][ T9911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 548.873550][ T9911] usb 5-1: can't read configurations, error -61 [ 548.898719][T12476] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.916323][T12545] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 548.930917][T12476] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.959461][T12545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.014955][ T9911] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 549.168220][ T9911] usb 5-1: Using ep0 maxpacket: 32 [ 549.168888][ T9911] usb 5-1: too many configurations: 146, using maximum allowed: 8 [ 549.170680][ T9911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 549.170719][ T9911] usb 5-1: can't read configurations, error -61 [ 549.170965][ T9911] usb usb5-port1: attempt power cycle [ 549.249532][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.249597][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.457973][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.457994][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.544172][ T9911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 549.642380][ T9911] usb 5-1: Using ep0 maxpacket: 32 [ 549.682557][ T9911] usb 5-1: too many configurations: 146, using maximum allowed: 8 [ 550.045361][ T9911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 550.053257][ T9911] usb 5-1: can't read configurations, error -61 [ 550.244975][ T9911] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 550.294868][ T9911] usb 5-1: Using ep0 maxpacket: 32 [ 550.312747][ T9911] usb 5-1: too many configurations: 146, using maximum allowed: 8 [ 550.470976][ T9911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 550.542658][ T9911] usb 5-1: can't read configurations, error -61 [ 550.599624][ T9911] usb usb5-port1: unable to enumerate USB device [ 550.704374][ T5855] Bluetooth: hci5: command tx timeout [ 550.856048][T12561] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 550.929938][T12561] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2031'. [ 550.986373][T12561] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 551.059959][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 551.571807][T12570] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 551.604054][ T9892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 551.611180][T12570] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 551.775436][ T9892] usb 1-1: no configurations [ 551.780577][ T9892] usb 1-1: can't read configurations, error -22 [ 552.094185][ T9892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 552.269606][ T9892] usb 1-1: no configurations [ 552.304365][ T9892] usb 1-1: can't read configurations, error -22 [ 552.348940][ T9892] usb usb1-port1: attempt power cycle [ 552.746007][T12578] dvmrp0: entered allmulticast mode [ 552.773227][ T9892] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 552.795413][ T9892] usb 1-1: no configurations [ 552.800079][ T9892] usb 1-1: can't read configurations, error -22 [ 552.954161][ T9892] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 553.022851][ T9892] usb 1-1: no configurations [ 553.044080][ T9892] usb 1-1: can't read configurations, error -22 [ 553.074155][ T9897] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 553.102736][ T9892] usb usb1-port1: unable to enumerate USB device [ 553.278553][ T9897] usb 5-1: Using ep0 maxpacket: 8 [ 553.346587][ T9897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.460174][ T9897] usb 5-1: config 0 has no interfaces? [ 553.584832][ T9897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 553.594175][ T9897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.617461][ T9897] usb 5-1: config 0 descriptor?? [ 555.004072][ T9897] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 555.164095][ T9897] usb 1-1: Using ep0 maxpacket: 16 [ 555.178037][ T9897] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 555.188265][ T9897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.230480][ T9897] usb 1-1: Product: syz [ 555.248269][ T9897] usb 1-1: Manufacturer: syz [ 555.261219][ T9897] usb 1-1: SerialNumber: syz [ 555.290283][ T9897] r8152-cfgselector 1-1: Unknown version 0x0000 [ 555.296778][ T9897] r8152-cfgselector 1-1: config 0 descriptor?? [ 555.590913][ T9903] usb 5-1: USB disconnect, device number 18 [ 555.717259][ T9897] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 556.039655][T12617] netlink: 'syz.4.2045': attribute type 32 has an invalid length. [ 556.424290][ T9897] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 556.608287][ T9897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 556.713662][ T9897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 556.820220][ T9897] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 556.849601][ T9897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.951251][ T9897] usb 4-1: Product: syz [ 557.017624][ T9897] usb 4-1: Manufacturer: syz [ 557.036904][ T9897] usb 4-1: SerialNumber: syz [ 557.073697][T12626] netlink: 'syz.0.2050': attribute type 29 has an invalid length. [ 557.087920][ T9897] usb 4-1: config 0 descriptor?? [ 557.114254][T12626] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2050'. [ 557.128512][ T9897] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 557.344051][ T9911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 557.376958][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.440463][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.546530][ T24] usb 4-1: USB disconnect, device number 124 [ 557.574062][ T9911] usb 6-1: Using ep0 maxpacket: 8 [ 557.654116][ T9911] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 557.693744][ T9911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.721755][ T9911] usb 6-1: Product: syz [ 557.730316][T12646] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2056'. [ 557.740020][ T9911] usb 6-1: Manufacturer: syz [ 557.756797][ T9911] usb 6-1: SerialNumber: syz [ 557.813883][ T9911] usb 6-1: config 0 descriptor?? [ 558.028431][ T9911] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 558.034557][ T9892] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 558.224604][ T9892] usb 5-1: Using ep0 maxpacket: 8 [ 558.243169][ T9892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.280819][ T9892] usb 5-1: config 0 has no interfaces? [ 558.310862][ T9892] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 558.351904][ T9892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.404339][ T9903] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 558.412719][ T9892] usb 5-1: config 0 descriptor?? [ 558.574086][ T9903] usb 1-1: Using ep0 maxpacket: 32 [ 558.602340][ T9903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.637144][ T9903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.693119][ T9903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 558.749817][ T9903] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 558.787556][ T9903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.828172][ T9903] usb 1-1: config 0 descriptor?? [ 559.347650][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.385594][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.476939][ T9903] usbhid 1-1:0.0: can't add hid device: -71 [ 559.504557][ T9903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 559.527096][ T9903] usb 1-1: USB disconnect, device number 14 [ 559.672277][ T9911] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 559.844125][ T9892] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 560.005160][ T9892] usb 4-1: Using ep0 maxpacket: 16 [ 560.034787][ T9892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 560.069732][ T9892] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 560.095279][ T9892] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 560.115183][ T9892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.137510][ T9892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.150143][ T9892] usb 4-1: Product: syz [ 560.159821][ T9892] usb 4-1: Manufacturer: syz [ 560.165993][ T9892] usb 4-1: SerialNumber: syz [ 560.397772][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.429020][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.459208][ T9892] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 560.489396][ T9892] cdc_ncm 4-1:1.0: bind() failure [ 560.507294][ T9892] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 560.524583][ T9892] cdc_ncm 4-1:1.1: bind() failure [ 560.541609][ T9892] usb 4-1: USB disconnect, device number 125 [ 560.738359][ T9911] usb 5-1: USB disconnect, device number 19 [ 560.761117][ T9892] usb 6-1: USB disconnect, device number 2 [ 561.231314][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2066'. [ 561.252221][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2066'. [ 561.294655][ T9911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 561.328180][ T9897] usb 2-1: USB disconnect, device number 110 [ 561.486509][ T9911] usb 5-1: Using ep0 maxpacket: 8 [ 561.520482][ T9911] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 561.601337][ T9911] usb 5-1: config 0 has no interface number 0 [ 561.636929][ T9911] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.763508][ T9911] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 561.844287][ T1773] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 561.863842][ T9911] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 561.919798][ T9911] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.982879][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.039405][ T9911] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 562.094056][ T1773] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 562.129839][ T9911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.198416][ T1110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.214325][ T1773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.222643][ T9911] usb 5-1: Product: syz [ 562.242409][ T9911] usb 5-1: Manufacturer: syz [ 562.259493][ T1773] usb 6-1: config 0 descriptor?? [ 562.269376][ T9911] usb 5-1: SerialNumber: syz [ 562.305215][ T9911] usb 5-1: config 0 descriptor?? [ 562.320203][ T1773] gspca_main: spca508-2.14.0 probing 8086:0110 [ 562.451014][ T1110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.491205][ T1773] gspca_spca508: reg_read err -32 [ 562.512037][ T1773] gspca_spca508: reg_read err -32 [ 562.526481][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.538208][ T1773] gspca_spca508: reg_read err -32 [ 562.563595][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.583893][ T9911] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 562.667320][ T1110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.831745][T12673] netlink: 'syz.4.2064': attribute type 10 has an invalid length. [ 562.858703][ T1773] gspca_spca508: reg_read err -71 [ 562.899625][ T1773] gspca_spca508: reg write: error -71 [ 562.913004][T12673] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.942828][ T1773] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 562.992781][T12673] bond0: (slave team0): Enslaving as an active interface with an up link [ 563.104757][ T1773] usb 6-1: USB disconnect, device number 3 [ 563.155004][ C1] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 563.172036][ T9903] usb 5-1: USB disconnect, device number 20 [ 563.824145][ T9904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 563.994097][ T9904] usb 6-1: Using ep0 maxpacket: 32 [ 564.016673][ T9904] usb 6-1: unable to get BOS descriptor or descriptor too short [ 564.056121][ T9904] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 564.065524][ T9904] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 564.099600][ T9904] usb 6-1: config 255 has no interface number 0 [ 564.134195][ T9904] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 564.201731][ T9904] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.247483][ T9904] usb 6-1: config 255 interface 81 has no altsetting 0 [ 564.272110][ T9904] usb 6-1: string descriptor 0 read error: -22 [ 564.284377][ T9904] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 564.297353][ T9904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.367390][ T9904] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input66 [ 564.432729][ C0] usbtouchscreen 6-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 564.700076][ C0] usbtouchscreen 6-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 564.714855][ T1773] usb 6-1: USB disconnect, device number 4 [ 564.789548][ T1110] dvmrp0 (unregistering): left allmulticast mode [ 565.040949][T12737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2079'. [ 565.205633][ T1110] bond0 (unregistering): Released all slaves [ 565.528022][ T1110] bond1 (unregistering): Released all slaves [ 565.551623][T12728] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 566.594508][ T9903] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 566.715767][ T1110] hsr_slave_0: left promiscuous mode [ 566.728941][ T1110] hsr_slave_1: left promiscuous mode [ 566.771983][ T1110] batadv0: left promiscuous mode [ 566.774123][ T9904] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 566.786769][ T1110] veth1_macvtap: left promiscuous mode [ 566.792942][ T1110] veth0_macvtap: left promiscuous mode [ 566.804124][ T9903] usb 4-1: Using ep0 maxpacket: 8 [ 566.805064][ T1110] veth1_vlan: left promiscuous mode [ 566.819519][ T1110] veth0_vlan: left promiscuous mode [ 566.825496][ T9903] usb 4-1: config 1 has an invalid interface number: 221 but max is 0 [ 566.834263][ T9911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 566.842403][ T9903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.865124][ T9903] usb 4-1: config 1 has no interface number 0 [ 566.871366][ T9903] usb 4-1: config 1 interface 221 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.909286][ T9903] usb 4-1: config 1 interface 221 has no altsetting 0 [ 566.929157][ T9903] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 566.943769][ T9903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.964277][ T9903] usb 4-1: Product: syz [ 566.972247][ T9903] usb 4-1: Manufacturer: syz [ 566.982839][ T9903] usb 4-1: SerialNumber: syz [ 566.987901][ T9904] usb 6-1: Using ep0 maxpacket: 8 [ 567.005266][ T9911] usb 1-1: Using ep0 maxpacket: 16 [ 567.023167][ T9904] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 567.040021][ T9903] usbhid 4-1:1.221: couldn't find an input interrupt endpoint [ 567.043205][ T9911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.061873][ T9904] usb 6-1: config 0 has no interface number 0 [ 567.092665][ T9904] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 567.099203][ T9911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.130964][ T9904] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 567.158711][ T9904] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 567.159003][ T9911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.170702][ T9904] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.196193][ T9904] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 567.205786][ T9904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.213827][ T9904] usb 6-1: Product: syz [ 567.218953][ T9904] usb 6-1: Manufacturer: syz [ 567.223627][ T9904] usb 6-1: SerialNumber: syz [ 567.228975][ T9911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.239351][ T9904] usb 6-1: config 0 descriptor?? [ 567.257591][ T9911] usb 1-1: Product: syz [ 567.261833][ T9911] usb 1-1: Manufacturer: syz [ 567.281535][ T9911] usb 1-1: SerialNumber: syz [ 567.378498][ T9903] usb 4-1: USB disconnect, device number 126 [ 567.467075][ T9904] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 567.522683][ T9911] usb 1-1: invalid UAC_HEADER (v1) [ 567.609831][ T9911] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 567.631469][ T9911] usb 1-1: USB disconnect, device number 15 [ 567.678909][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.700577][T12787] netlink: 'syz.5.2085': attribute type 10 has an invalid length. [ 568.149127][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.155658][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.264139][ T9903] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 568.437659][ T9903] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 568.460090][ T9903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 568.474052][ T9903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 7 [ 568.491049][ T9903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1024 [ 568.524053][ T9903] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.558008][ T9903] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 568.568498][ T9903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.583557][ T9903] usb 4-1: config 0 descriptor?? [ 569.133358][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.160160][T12787] bond0: (slave team0): Enslaving as an active interface with an up link [ 569.170452][T12818] netlink: 'syz.0.2092': attribute type 2 has an invalid length. [ 569.179654][T12819] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 569.288268][ T9903] usb 6-1: USB disconnect, device number 5 [ 569.649408][T12834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.666122][T12834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.805917][ T9903] usb 4-1: USB disconnect, device number 127 [ 569.880639][ T9911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 570.074209][ T9911] usb 5-1: Using ep0 maxpacket: 16 [ 570.098344][ T9911] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 570.125608][T12848] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 570.136717][ T9911] usb 5-1: config 0 has no interface number 0 [ 570.189979][ T9911] usb 5-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=2a.c4 [ 570.222951][ T9911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.354293][ T9911] usb 5-1: Product: syz [ 570.414308][ T9911] usb 5-1: Manufacturer: syz [ 570.425794][ T9911] usb 5-1: SerialNumber: syz [ 570.440694][ T9911] usb 5-1: config 0 descriptor?? [ 570.463818][ T9911] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 570.661800][ T9911] gspca_sonixj: reg_w1 err -71 [ 570.678352][ T9911] sonixj 5-1:0.128: probe with driver sonixj failed with error -71 [ 570.716023][ T9911] usb 5-1: USB disconnect, device number 21 [ 571.444995][T12871] FAULT_INJECTION: forcing a failure. [ 571.444995][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 571.466117][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.0.2104 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 571.466151][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 571.466166][T12871] Call Trace: [ 571.466175][T12871] [ 571.466185][T12871] dump_stack_lvl+0x241/0x360 [ 571.466226][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.466257][T12871] ? __pfx__printk+0x10/0x10 [ 571.466292][T12871] ? __pfx___might_resched+0x10/0x10 [ 571.466323][T12871] should_fail_ex+0x424/0x570 [ 571.466351][T12871] should_failslab+0xac/0x100 [ 571.466383][T12871] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 571.466415][T12871] ? __alloc_skb+0x1c2/0x480 [ 571.466440][T12871] __alloc_skb+0x1c2/0x480 [ 571.466477][T12871] ? __pfx___alloc_skb+0x10/0x10 [ 571.466500][T12871] ? netlink_autobind+0xd6/0x2f0 [ 571.466530][T12871] ? netlink_autobind+0x2b0/0x2f0 [ 571.466566][T12871] netlink_sendmsg+0x638/0xcd0 [ 571.466610][T12871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.466646][T12871] ? aa_sock_msg_perm+0x91/0x160 [ 571.466682][T12871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.466710][T12871] __sock_sendmsg+0x221/0x270 [ 571.466742][T12871] ____sys_sendmsg+0x523/0x860 [ 571.466775][T12871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.466795][T12871] ? __fget_files+0x2a/0x420 [ 571.466825][T12871] ? __fget_files+0x2a/0x420 [ 571.466855][T12871] __sys_sendmsg+0x271/0x360 [ 571.466884][T12871] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.466970][T12871] ? do_syscall_64+0xb6/0x230 [ 571.467001][T12871] do_syscall_64+0xf3/0x230 [ 571.467028][T12871] ? clear_bhb_loop+0x45/0xa0 [ 571.467054][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.467075][T12871] RIP: 0033:0x7fbe9f98d169 [ 571.467094][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.467113][T12871] RSP: 002b:00007fbea0814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.467136][T12871] RAX: ffffffffffffffda RBX: 00007fbe9fba5fa0 RCX: 00007fbe9f98d169 [ 571.467152][T12871] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 571.467167][T12871] RBP: 00007fbea0814090 R08: 0000000000000000 R09: 0000000000000000 [ 571.467181][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.467194][T12871] R13: 0000000000000000 R14: 00007fbe9fba5fa0 R15: 00007fbe9fccfa28 [ 571.467227][T12871] [ 571.710106][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.606117][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 572.797615][ T24] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 572.820732][ T24] usb 1-1: config 0 has no interface number 0 [ 572.843163][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 572.858712][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.880853][ T24] usb 1-1: config 0 descriptor?? [ 572.921942][ T24] cp210x 1-1:0.35: cp210x converter detected [ 573.333764][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 573.560500][T12927] FAULT_INJECTION: forcing a failure. [ 573.560500][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.599512][ T9911] usb 1-1: USB disconnect, device number 16 [ 573.617317][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.3.2115 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 573.617350][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.617363][T12927] Call Trace: [ 573.617372][T12927] [ 573.617381][T12927] dump_stack_lvl+0x241/0x360 [ 573.617420][T12927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.617450][T12927] ? __pfx__printk+0x10/0x10 [ 573.617492][T12927] should_fail_ex+0x424/0x570 [ 573.617521][T12927] _copy_from_user+0x2d/0xb0 [ 573.617553][T12927] copy_msghdr_from_user+0xb3/0x580 [ 573.617588][T12927] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 573.617615][T12927] ? __fget_files+0x2a/0x420 [ 573.617639][T12927] ? __fget_files+0x2a/0x420 [ 573.617668][T12927] do_recvmmsg+0x3bf/0xab0 [ 573.617705][T12927] ? __pfx_do_recvmmsg+0x10/0x10 [ 573.617758][T12927] ? rcu_read_lock_any_held+0xbb/0x160 [ 573.617789][T12927] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 573.617822][T12927] ? vfs_write+0xb29/0xd10 [ 573.617856][T12927] ? ksys_write+0x24e/0x2d0 [ 573.617884][T12927] ? __mutex_unlock_slowpath+0x229/0x800 [ 573.617921][T12927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.617946][T12927] ? __fget_files+0x2a/0x420 [ 573.617981][T12927] __x64_sys_recvmmsg+0x1ab/0x260 [ 573.618008][T12927] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 573.618039][T12927] ? do_syscall_64+0xb6/0x230 [ 573.618068][T12927] do_syscall_64+0xf3/0x230 [ 573.618093][T12927] ? clear_bhb_loop+0x45/0xa0 [ 573.618118][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.618142][T12927] RIP: 0033:0x7fa9fab8d169 [ 573.618160][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.618177][T12927] RSP: 002b:00007fa9fb920038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 573.618200][T12927] RAX: ffffffffffffffda RBX: 00007fa9fada5fa0 RCX: 00007fa9fab8d169 [ 573.618215][T12927] RDX: 0000000000000047 RSI: 0000200000000b00 RDI: 0000000000000003 [ 573.618229][T12927] RBP: 00007fa9fb920090 R08: 0000000000000000 R09: 0000000000000000 [ 573.618242][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.618256][T12927] R13: 0000000000000000 R14: 00007fa9fada5fa0 R15: 00007fa9faecfa28 [ 573.618289][T12927] [ 573.849656][ T9911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 573.959910][ T9911] cp210x 1-1:0.35: device disconnected [ 574.080347][T12935] [U]  [ 574.245291][T12940] x_tables: duplicate entry at hook 1 [ 574.474375][ T9903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 574.566373][T12948] fuse: Unknown parameter 'N̗qaÎ'0x0000000000000000' [ 574.594260][ T9904] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 574.690602][ T9903] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 574.690637][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.692946][ T9903] usb 6-1: config 0 descriptor?? [ 574.728263][ T9903] cp210x 6-1:0.0: cp210x converter detected [ 574.752632][ T9904] usb 4-1: Using ep0 maxpacket: 32 [ 574.755517][ T9904] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 574.755548][ T9904] usb 4-1: config 0 has no interface number 0 [ 574.786269][ T9904] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 574.786331][ T9904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.786354][ T9904] usb 4-1: Product: syz [ 574.786371][ T9904] usb 4-1: Manufacturer: syz [ 574.786387][ T9904] usb 4-1: SerialNumber: syz [ 574.796711][ T9904] usb 4-1: config 0 descriptor?? [ 574.811023][ T9904] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 575.041786][ T9904] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 575.080451][ T9904] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 575.340675][ T9903] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 575.441732][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 575.450196][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2121'. [ 575.514060][ T1773] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 575.553780][ T9903] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 575.564179][ T9904] usb 4-1: USB disconnect, device number 2 [ 575.605966][ T9903] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 575.635911][ T9904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 575.675481][ T9903] usb 6-1: cp210x converter now attached to ttyUSB2 [ 575.689860][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 575.742070][ T9904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 575.838606][ T9904] quatech2 4-1:0.51: device disconnected [ 576.061305][ T1773] usb 5-1: config 128 has no interfaces? [ 576.076435][T12938] netlink: 'syz.5.2117': attribute type 27 has an invalid length. [ 576.381711][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.389353][T12938] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.458453][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.470484][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.679616][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2122'. [ 576.711020][ T1773] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 576.729943][ T1773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.758134][ T1773] usb 5-1: Product: syz [ 576.791497][ T1773] usb 5-1: Manufacturer: syz [ 576.804909][ T1773] usb 5-1: SerialNumber: syz [ 576.841519][T12982] fuse: Unknown parameter ' ' [ 577.088860][T12938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.155184][T12938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.458809][T12938] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.481051][T12938] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.501538][T12938] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.519203][T12938] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.543476][T12938] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 577.747677][ T9901] usb 6-1: USB disconnect, device number 6 [ 577.756443][ T9901] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 577.781167][ T9901] cp210x 6-1:0.0: device disconnected [ 577.910789][ T1773] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 578.224459][ T9901] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 578.292588][T12996] FAULT_INJECTION: forcing a failure. [ 578.292588][T12996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.319316][ T1773] usb 1-1: config 0 has no interfaces? [ 578.335677][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.2.2126 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 578.335711][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 578.335725][T12996] Call Trace: [ 578.335734][T12996] [ 578.335748][T12996] dump_stack_lvl+0x241/0x360 [ 578.335789][T12996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.335820][T12996] ? __pfx__printk+0x10/0x10 [ 578.335862][T12996] should_fail_ex+0x424/0x570 [ 578.335891][T12996] _copy_to_user+0x31/0xb0 [ 578.335925][T12996] simple_read_from_buffer+0xc4/0x170 [ 578.335963][T12996] proc_fail_nth_read+0x1ef/0x260 [ 578.335988][T12996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.336014][T12996] ? rw_verify_area+0x246/0x630 [ 578.336037][T12996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.336063][T12996] vfs_read+0x21f/0xb90 [ 578.336094][T12996] ? __pfx___mutex_lock+0x10/0x10 [ 578.336122][T12996] ? __pfx_vfs_read+0x10/0x10 [ 578.336150][T12996] ? __fget_files+0x2a/0x420 [ 578.336172][T12996] ? __fget_files+0x39d/0x420 [ 578.336191][T12996] ? __fget_files+0x2a/0x420 [ 578.336221][T12996] ksys_read+0x19d/0x2d0 [ 578.336249][T12996] ? __pfx_ksys_read+0x10/0x10 [ 578.336281][T12996] ? do_syscall_64+0xb6/0x230 [ 578.336311][T12996] do_syscall_64+0xf3/0x230 [ 578.336345][T12996] ? clear_bhb_loop+0x45/0xa0 [ 578.336372][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.336393][T12996] RIP: 0033:0x7f04bad8bb7c [ 578.336413][T12996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 578.336431][T12996] RSP: 002b:00007f04b8bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.336454][T12996] RAX: ffffffffffffffda RBX: 00007f04bafa5fa0 RCX: 00007f04bad8bb7c [ 578.336471][T12996] RDX: 000000000000000f RSI: 00007f04b8bf60a0 RDI: 0000000000000004 [ 578.336485][T12996] RBP: 00007f04b8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.336499][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.336512][T12996] R13: 0000000000000000 R14: 00007f04bafa5fa0 R15: 00007f04bb0cfa28 [ 578.336545][T12996] [ 578.553938][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.595051][ T1773] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 578.607693][ T1773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.616827][ T1773] usb 1-1: Product: syz [ 578.621013][ T1773] usb 1-1: Manufacturer: syz [ 578.625812][ T1773] usb 1-1: SerialNumber: syz [ 578.635706][ T1773] usb 1-1: config 0 descriptor?? [ 578.644068][ T9901] usb 6-1: Using ep0 maxpacket: 16 [ 578.677347][ T9901] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 578.687492][ T9901] usb 6-1: can't read configurations, error -22 [ 578.968183][ T9901] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 579.113153][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2127'. [ 579.134350][ T9901] usb 6-1: Using ep0 maxpacket: 16 [ 579.201523][ T9901] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 579.214205][ T9901] usb 6-1: can't read configurations, error -22 [ 579.225619][ T9901] usb usb6-port1: attempt power cycle [ 579.584167][ T9901] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 579.626726][ T9901] usb 6-1: Using ep0 maxpacket: 16 [ 579.639823][ T9901] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 579.656115][ T9901] usb 6-1: can't read configurations, error -22 [ 579.794162][ T9901] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 579.830963][ T9901] usb 6-1: Using ep0 maxpacket: 16 [ 579.847585][ T9901] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 579.862817][ T9901] usb 6-1: can't read configurations, error -22 [ 579.871590][ T9901] usb usb6-port1: unable to enumerate USB device [ 580.738425][T13029] FAULT_INJECTION: forcing a failure. [ 580.738425][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 580.755508][T13029] CPU: 1 UID: 0 PID: 13029 Comm: syz.2.2129 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 580.755540][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.755554][T13029] Call Trace: [ 580.755563][T13029] [ 580.755573][T13029] dump_stack_lvl+0x241/0x360 [ 580.755614][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.755646][T13029] ? __pfx__printk+0x10/0x10 [ 580.755680][T13029] ? __pfx___might_resched+0x10/0x10 [ 580.755711][T13029] should_fail_ex+0x424/0x570 [ 580.755739][T13029] should_failslab+0xac/0x100 [ 580.755770][T13029] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 580.755802][T13029] ? __alloc_skb+0x1c2/0x480 [ 580.755826][T13029] __alloc_skb+0x1c2/0x480 [ 580.755851][T13029] ? __pfx___alloc_skb+0x10/0x10 [ 580.755870][T13029] ? netlink_ack_tlv_len+0x6e/0x200 [ 580.755894][T13029] netlink_ack+0x147/0xa70 [ 580.755913][T13029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.755933][T13029] ? __lock_acquire+0xad5/0xd80 [ 580.755961][T13029] netlink_rcv_skb+0x296/0x480 [ 580.755983][T13029] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.756005][T13029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.756039][T13029] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.756062][T13029] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.756085][T13029] netlink_unicast+0x7f8/0x9a0 [ 580.756111][T13029] ? __pfx_netlink_unicast+0x10/0x10 [ 580.756131][T13029] ? skb_put+0x114/0x1f0 [ 580.756156][T13029] netlink_sendmsg+0x8c3/0xcd0 [ 580.756187][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.756212][T13029] ? aa_sock_msg_perm+0x91/0x160 [ 580.756237][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.756257][T13029] __sock_sendmsg+0x221/0x270 [ 580.756280][T13029] ____sys_sendmsg+0x523/0x860 [ 580.756303][T13029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.756318][T13029] ? __fget_files+0x2a/0x420 [ 580.756334][T13029] ? __fget_files+0x2a/0x420 [ 580.756355][T13029] __sys_sendmsg+0x271/0x360 [ 580.756375][T13029] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.756429][T13029] ? do_syscall_64+0xb6/0x230 [ 580.756450][T13029] do_syscall_64+0xf3/0x230 [ 580.756469][T13029] ? clear_bhb_loop+0x45/0xa0 [ 580.756487][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.756503][T13029] RIP: 0033:0x7f04bad8d169 [ 580.756517][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.756533][T13029] RSP: 002b:00007f04b8b74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.756550][T13029] RAX: ffffffffffffffda RBX: 00007f04bafa6080 RCX: 00007f04bad8d169 [ 580.756561][T13029] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 580.756571][T13029] RBP: 00007f04b8b74090 R08: 0000000000000000 R09: 0000000000000000 [ 580.756581][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.756590][T13029] R13: 0000000000000000 R14: 00007f04bafa6080 R15: 00007f04bb0cfa28 [ 580.756612][T13029] [ 581.049932][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.090216][ T1773] usb 5-1: USB disconnect, device number 22 [ 581.194226][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 581.350624][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 581.361229][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.373122][ T24] usb 4-1: Product: syz [ 581.377644][ T24] usb 4-1: Manufacturer: syz [ 581.383010][ T24] usb 4-1: SerialNumber: syz [ 581.403440][ T24] usb 4-1: config 0 descriptor?? [ 581.485161][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 581.485184][ T30] audit: type=1326 audit(1744241945.057:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.4.2130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f229c58d169 code=0x0 [ 581.551716][T13040] geneve1: mtu less than device minimum [ 581.639064][ T30] audit: type=1326 audit(1744241945.217:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13036 comm="syz.5.2131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x10000 [ 581.842159][ T24] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 581.862166][ T24] airspy 4-1:0.0: Could not detect board [ 581.884546][T13046] netlink: 'syz.2.2132': attribute type 15 has an invalid length. [ 581.897646][ T24] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 581.938377][ T24] usb 4-1: USB disconnect, device number 3 [ 581.944474][T13046] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2132'. [ 582.414517][ T24] usb 1-1: USB disconnect, device number 17 [ 582.675993][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.915022][T13056] netlink: 'syz.2.2134': attribute type 29 has an invalid length. [ 582.962259][T13056] netlink: 'syz.2.2134': attribute type 29 has an invalid length. [ 582.992692][T13056] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2134'. [ 583.612018][T13082] fuse: Unknown parameter 'ro' [ 584.044154][ T9901] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 584.213999][ T9901] usb 5-1: Using ep0 maxpacket: 8 [ 584.229322][ T9901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.275466][ T9901] usb 5-1: config 0 has no interfaces? [ 584.303367][ T9901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.344129][ T9901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.386352][ T9901] usb 5-1: config 0 descriptor?? [ 584.629921][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 585.400987][T13106] netlink: 'syz.0.2145': attribute type 10 has an invalid length. [ 585.430763][T13106] bridge0: port 1(syz_tun) entered disabled state [ 585.511365][T13106] bridge0: port 1(syz_tun) entered blocking state [ 585.518131][T13106] bridge0: port 1(syz_tun) entered forwarding state [ 585.558515][T13106] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 586.696655][ T9901] usb 5-1: USB disconnect, device number 23 [ 587.115065][ T9901] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 587.245169][ T9903] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 587.295438][ T9901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.367755][ T9901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.454036][ T9903] usb 1-1: Using ep0 maxpacket: 32 [ 587.512145][ T9903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 587.524085][ T9901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.544049][ T9903] usb 1-1: can't read configurations, error -61 [ 587.556587][ T9901] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 587.577973][ T9901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.608341][ T9901] usb 5-1: config 0 descriptor?? [ 587.684166][ T9903] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 587.874178][ T9903] usb 1-1: Using ep0 maxpacket: 32 [ 587.897490][ T9903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 587.927762][ T9903] usb 1-1: can't read configurations, error -61 [ 587.968301][ T9903] usb usb1-port1: attempt power cycle [ 588.036971][ T9901] usbhid 5-1:0.0: can't add hid device: -71 [ 588.043052][ T9901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 588.104731][ T9901] usb 5-1: USB disconnect, device number 24 [ 588.355915][ T9903] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 588.405018][ T9903] usb 1-1: Using ep0 maxpacket: 32 [ 588.435936][ T9903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 588.443585][ T9903] usb 1-1: can't read configurations, error -61 [ 588.615481][ T9903] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 588.655955][ T9903] usb 1-1: Using ep0 maxpacket: 32 [ 588.668847][ T9903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 588.680863][ T9903] usb 1-1: can't read configurations, error -61 [ 588.691538][ T9903] usb usb1-port1: unable to enumerate USB device [ 588.744276][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 588.909118][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 588.944204][ T9903] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 588.962379][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.984075][ T1773] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 588.994066][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 589.020891][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 589.033486][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 589.046647][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 589.058971][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 589.069442][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.085896][ T24] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 589.095202][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.103196][ T24] usb 4-1: Product: syz [ 589.108098][ T24] usb 4-1: Manufacturer: syz [ 589.112708][ T24] usb 4-1: SerialNumber: syz [ 589.128455][ T24] usb 4-1: config 0 descriptor?? [ 589.134704][T13157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 589.153172][ T24] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 589.158796][ T9903] usb 6-1: config 0 has no interfaces? [ 589.173474][ T9903] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 589.177306][ T1773] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 589.188838][ T9903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.199756][ T9903] usb 6-1: Product: syz [ 589.211066][ T9903] usb 6-1: Manufacturer: syz [ 589.215947][ T9903] usb 6-1: SerialNumber: syz [ 589.219184][ T1773] usb 5-1: config 179 has no interface number 0 [ 589.227746][ T24] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 589.230118][ T9903] usb 6-1: config 0 descriptor?? [ 589.268951][ T1773] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 589.336617][ T1773] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 589.369849][ T1773] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 589.383905][ T24] usb 4-1: USB disconnect, device number 4 [ 589.392672][ T1773] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 589.405657][ T1773] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 589.421410][ T24] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 589.437654][ T24] iuu_phoenix 4-1:0.0: device disconnected [ 589.446683][ T1773] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 589.477862][ T1773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.503101][T13168] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 589.524516][ T1773] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 589.561276][ T1773] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 589.716227][T13168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.737673][T13168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.760736][ T24] usb 5-1: USB disconnect, device number 25 [ 590.184305][ T9903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.347733][ T9903] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 590.370035][ T9903] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 590.409221][ T9903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 590.430195][ T9903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 590.446533][T13180] FAULT_INJECTION: forcing a failure. [ 590.446533][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.460358][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.4.2160 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 590.460392][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 590.460407][T13180] Call Trace: [ 590.460420][T13180] [ 590.460430][T13180] dump_stack_lvl+0x241/0x360 [ 590.460472][T13180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.460504][T13180] ? __pfx__printk+0x10/0x10 [ 590.460547][T13180] should_fail_ex+0x424/0x570 [ 590.460575][T13180] _copy_from_user+0x2d/0xb0 [ 590.460606][T13180] kstrtouint_from_user+0xce/0x1a0 [ 590.460634][T13180] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 590.460664][T13180] ? __lock_acquire+0xad5/0xd80 [ 590.460700][T13180] proc_fail_nth_write+0xac/0x2d0 [ 590.460724][T13180] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 590.460756][T13180] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 590.460786][T13180] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 590.460811][T13180] vfs_write+0x2bc/0xd10 [ 590.460842][T13180] ? fdget_pos+0x247/0x310 [ 590.460867][T13180] ? __pfx_vfs_write+0x10/0x10 [ 590.460895][T13180] ? __fget_files+0x2a/0x420 [ 590.460917][T13180] ? __fget_files+0x39d/0x420 [ 590.460935][T13180] ? __fget_files+0x2a/0x420 [ 590.460966][T13180] ksys_write+0x19d/0x2d0 [ 590.460992][T13180] ? __pfx_ksys_write+0x10/0x10 [ 590.461062][T13180] ? do_syscall_64+0xb6/0x230 [ 590.461095][T13180] do_syscall_64+0xf3/0x230 [ 590.461122][T13180] ? clear_bhb_loop+0x45/0xa0 [ 590.461149][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.461171][T13180] RIP: 0033:0x7f229c58bc1f [ 590.461190][T13180] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 590.461209][T13180] RSP: 002b:00007f229d38d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 590.461233][T13180] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f229c58bc1f [ 590.461249][T13180] RDX: 0000000000000001 RSI: 00007f229d38d0a0 RDI: 000000000000000b [ 590.461275][T13180] RBP: 00007f229d38d090 R08: 0000000000000000 R09: 0000000000000000 [ 590.461289][T13180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 590.461302][T13180] R13: 0000000000000000 R14: 00007f229c7a5fa0 R15: 00007f229c8cfa28 [ 590.461335][T13180] [ 590.686624][ T9903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 590.714648][ T9903] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.723767][ T9903] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.732649][ T9903] usb 4-1: Product: syz [ 590.737366][ T9903] usb 4-1: Manufacturer: syz [ 590.783194][ T9903] cdc_wdm 4-1:1.0: skipping garbage [ 590.790262][ T9903] cdc_wdm 4-1:1.0: skipping garbage [ 590.797936][ T9903] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 590.832165][ T9903] cdc_wdm 4-1:1.0: Unknown control protocol [ 591.194153][ T9903] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 591.384346][ T9903] usb 5-1: Using ep0 maxpacket: 16 [ 591.399954][ T9903] usb 5-1: config 2 has an invalid interface number: 172 but max is 0 [ 591.414152][ T9903] usb 5-1: config 2 has no interface number 0 [ 591.420788][ T9903] usb 5-1: config 2 interface 172 has no altsetting 0 [ 591.438403][ T9903] usb 5-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=62.11 [ 591.452998][ T9903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.464089][ T9903] usb 5-1: Product: syz [ 591.468729][ T9903] usb 5-1: Manufacturer: syz [ 591.473782][ T9903] usb 5-1: SerialNumber: syz [ 591.524624][ C0] wdm_int_callback: 64 callbacks suppressed [ 591.524653][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 591.535364][ T24] usb 4-1: USB disconnect, device number 5 [ 591.537163][ C0] wdm_int_callback: 64 callbacks suppressed [ 591.537184][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 591.555055][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 591.617600][ T9904] usb 6-1: USB disconnect, device number 11 [ 591.707347][ T9903] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 591.744513][ T9903] usb 5-1: USB disconnect, device number 26 [ 592.074436][ T9904] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 592.224243][ T9904] usb 6-1: device descriptor read/64, error -71 [ 592.464391][ T9904] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 592.477374][T13219] gtp0: entered promiscuous mode [ 592.482563][T13219] gtp0: entered allmulticast mode [ 592.624088][ T9904] usb 6-1: device descriptor read/64, error -71 [ 592.694298][ T9903] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 592.757207][ T9904] usb usb6-port1: attempt power cycle [ 592.895884][ T9903] usb 1-1: Using ep0 maxpacket: 8 [ 592.917735][T13233] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2173'. [ 592.928302][ T9903] usb 1-1: config 1 interface 0 altsetting 115 bulk endpoint 0x1 has invalid maxpacket 64 [ 592.959293][ T9903] usb 1-1: config 1 interface 0 altsetting 115 bulk endpoint 0x82 has invalid maxpacket 64 [ 592.996631][ T9903] usb 1-1: config 1 interface 0 has no altsetting 0 [ 593.017042][ T9903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 593.047083][ T9903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.074740][ T9903] usb 1-1: Product: syz [ 593.084005][ T9903] usb 1-1: Manufacturer: syz [ 593.088662][ T9903] usb 1-1: SerialNumber: syz [ 593.120367][T13214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 593.130202][ T9904] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 593.153292][T13214] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 593.185221][ T9904] usb 6-1: device descriptor read/8, error -71 [ 593.392412][ T9903] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 115 proto 1 vid 0x0525 pid 0xA4A8 [ 593.418923][ T9903] usb 1-1: USB disconnect, device number 22 [ 593.450195][ T9903] usblp0: removed [ 593.464466][ T9904] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 593.507646][ T9904] usb 6-1: device descriptor read/8, error -71 [ 593.624566][ T9904] usb usb6-port1: unable to enumerate USB device [ 593.666133][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 593.683046][T13243] vlan2: entered allmulticast mode [ 593.690908][T13243] vlan0: entered allmulticast mode [ 593.699301][T13243] veth0_vlan: entered allmulticast mode [ 594.422932][T13272] syzkaller1: entered promiscuous mode [ 594.429560][T13272] syzkaller1: entered allmulticast mode [ 594.577918][T13275] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2184'. [ 595.184389][ T9904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 595.286757][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 595.388596][ T9904] usb 5-1: Using ep0 maxpacket: 32 [ 595.401129][ T9904] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 100, changing to 10 [ 595.427497][ T9904] usb 5-1: config 1 interface 0 has no altsetting 0 [ 595.449314][ T9904] usb 5-1: New USB device found, idVendor=046d, idProduct=c094, bcdDevice= 0.40 [ 595.460280][ T9904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.473497][ T9904] usb 5-1: Product: ࡠ [ 595.480224][ T9904] usb 5-1: Manufacturer: 藳㭸烍㺞㾖怬魈巠臂怣㔀㼙鍆✺䋄ᙛ壁ਗ缱됗齛퍞빨胋磈ሲ욥鴘ꚺ┮ [ 595.498002][ T9904] usb 5-1: SerialNumber: ᢨ೬⟲䳾Ｕ셣偱Я領屛㾖㡄隅鄝౗씗ꨵ⚆౾⒒赦짨俜辳։絎횐ᠲ腱䃁梭纲螺鮡僛⇢亄㯈꽍Ꞡฤ퀃흧딵밄㳳췓宗綄뒨벥絼ꘞඍ暟쁝度Ⴞ닖ᮧ멎疞붻쫤轁Ӽ凯ꤸ灅ࡥ떇⢅f셍䥇ꉙꪶ诶ຘ貊е丄먉 [ 595.604165][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 595.612532][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.621718][ T24] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 595.638363][ T24] usb 6-1: config 2 has no interface number 0 [ 595.651718][ T24] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 595.680373][ T24] usb 6-1: config 2 interface 189 has no altsetting 0 [ 595.709610][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 595.732487][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.758459][ T24] usb 6-1: Product: syz [ 595.771633][ T24] usb 6-1: Manufacturer: syz [ 595.782785][ T24] usb 6-1: SerialNumber: syz [ 595.897346][ T9904] usbhid 5-1:1.0: can't add hid device: -71 [ 595.925985][ T9904] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 596.000500][ T9904] usb 5-1: USB disconnect, device number 27 [ 598.172989][ T24] usb 6-1: unknown interface protocol 0x3b, assuming v1 [ 598.230823][ T24] usb 6-1: 189:2 : does not exist [ 598.387640][ T24] usb 6-1: USB disconnect, device number 16 [ 598.678897][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.844254][ T1773] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 598.993991][ T1773] usb 5-1: Using ep0 maxpacket: 8 [ 599.001643][ T1773] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 599.012865][ T1773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.034120][ T1773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 599.054615][ T1773] usb 5-1: config 0 has no interface number 0 [ 599.066763][ T1773] usb 5-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 599.078293][ T1773] usb 5-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 599.092160][ T1773] usb 5-1: config 0 interface 1 has no altsetting 0 [ 599.099190][ T1773] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 599.109241][ T1773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.122663][ T1773] usb 5-1: config 0 descriptor?? [ 599.135090][ T1773] usb 5-1: selecting invalid altsetting 0 [ 599.380831][ T1773] usb 5-1: USB disconnect, device number 28 [ 599.555471][T13362] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 599.584614][T13362] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2196'. [ 600.256353][ T30] audit: type=1326 audit(1744241963.837:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.0.2204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fbe9f98d169 code=0x0 [ 601.031495][T13416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2206'. [ 601.062276][T13415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.670976][T13432] use of bytesused == 0 is deprecated and will be removed in the future, [ 601.718589][T13432] use the actual size instead. [ 603.465922][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.997577][ T9904] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 604.134191][ T9904] usb 5-1: device descriptor read/64, error -71 [ 604.354169][ T9901] psmouse serio4: Failed to reset mouse on : -5 [ 604.385202][ T9904] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 604.536971][ T9904] usb 5-1: device descriptor read/64, error -71 [ 604.543333][ T9903] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 604.674575][ T9904] usb usb5-port1: attempt power cycle [ 604.721269][ T9903] usb 4-1: Using ep0 maxpacket: 8 [ 604.745313][ T9903] usb 4-1: config 162 has an invalid interface number: 253 but max is 0 [ 604.764030][ T9903] usb 4-1: config 162 has no interface number 0 [ 604.771803][ T9903] usb 4-1: config 162 interface 253 has no altsetting 0 [ 604.782459][ T9903] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 604.792822][ T9903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.801399][ T9903] usb 4-1: Product: syz [ 604.806018][ T9903] usb 4-1: Manufacturer: syz [ 604.810675][ T9903] usb 4-1: SerialNumber: syz [ 605.025069][ T9904] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 605.274071][ T9892] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 605.284244][ T9904] usb 5-1: device descriptor read/8, error -71 [ 605.404398][ T9903] go7007 4-1:162.253: probe with driver go7007 failed with error -12 [ 605.461321][ T9903] usb 4-1: USB disconnect, device number 6 [ 605.524171][ T9904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 605.583802][ T9904] usb 5-1: device descriptor read/8, error -71 [ 605.598440][ T9892] usb 1-1: Using ep0 maxpacket: 8 [ 605.715298][ T9904] usb usb5-port1: unable to enumerate USB device [ 605.865979][ T9892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 605.878441][ T9892] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 605.888183][ T9892] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 605.901734][ T9892] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 605.911789][ T9892] usb 1-1: config 8 has no interface number 0 [ 605.925158][ T9892] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 605.937320][ T9892] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 605.949636][ T9892] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 605.961851][ T9892] usb 1-1: config 8 interface 24 has no altsetting 0 [ 606.021589][ T9892] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 606.051324][ T9892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.070446][ T9892] usb 1-1: Product: syz [ 606.088927][ T9892] usb 1-1: Manufacturer: syz [ 606.105036][ T9892] usb 1-1: SerialNumber: syz [ 606.432018][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.460243][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.152881][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 607.162474][T13517] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2226'. [ 608.078649][ T1773] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 608.164020][ T9901] misc userio: Buffer overflowed, userio client isn't keeping up [ 608.269880][ T1773] usb 5-1: config 0 has no interfaces? [ 608.290781][ T1773] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 608.300181][ T1773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.308861][ T1773] usb 5-1: Product: syz [ 608.313411][ T1773] usb 5-1: Manufacturer: syz [ 608.318891][ T1773] usb 5-1: SerialNumber: syz [ 608.333318][ T1773] usb 5-1: config 0 descriptor?? [ 608.785791][ T9892] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 608.838466][ T9892] vmk80xx 1-1:8.24: probe with driver vmk80xx failed with error -22 [ 608.874211][ T9892] usb 1-1: USB disconnect, device number 23 [ 608.894420][ T1773] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 609.076783][ T1773] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 609.097555][ T1773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.132303][ T1773] usb 6-1: config 0 descriptor?? [ 609.159441][ T1773] cp210x 6-1:0.0: cp210x converter detected [ 609.254646][ T9901] input: PS/2 Generic Mouse as /devices/serio4/input/input67 [ 609.325746][ T9892] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 609.361445][ T1773] usb 6-1: cp210x converter now attached to ttyUSB0 [ 609.486433][ T9892] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 609.500297][ T9892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.512202][ T9892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.522619][ T9901] psmouse serio4: Failed to enable mouse on [ 609.534775][ T9892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 609.552236][ T9892] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 609.562299][ T9892] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 609.562458][T13530] netlink: 'syz.5.2231': attribute type 27 has an invalid length. [ 609.570978][ T9892] usb 1-1: Manufacturer: syz [ 609.597698][ T9892] usb 1-1: config 0 descriptor?? [ 609.626757][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'. [ 609.644965][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 609.664889][T13530] netlink: 'syz.5.2231': attribute type 3 has an invalid length. [ 609.693471][T13530] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2231'. [ 609.739415][ T9901] usb 6-1: USB disconnect, device number 17 [ 609.778409][ T9901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 609.826338][ T9901] cp210x 6-1:0.0: device disconnected [ 610.036010][ T9892] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 610.052423][ T9892] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 610.087659][ T9892] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 610.971570][ T1773] usb 5-1: USB disconnect, device number 33 [ 611.237698][T13562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'. [ 611.702857][T13539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.858706][ T30] audit: type=1326 audit(1744241975.437:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.4.2244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f229c58d169 code=0x0 [ 611.971615][ T24] usb 1-1: USB disconnect, device number 24 [ 612.102019][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 612.154253][ T1773] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 612.329158][ T1773] usb 5-1: config 0 has no interfaces? [ 612.346651][ T1773] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 612.366242][ T1773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.433638][ T1773] usb 5-1: Product: syz [ 612.464137][ T1773] usb 5-1: Manufacturer: syz [ 612.480047][ T1773] usb 5-1: SerialNumber: syz [ 612.505226][ T1773] usb 5-1: config 0 descriptor?? [ 613.084054][ T1773] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 613.235869][ T1773] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 613.244843][ T1773] usb 6-1: config 0 has no interface number 0 [ 613.253165][ T1773] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 613.262442][ T1773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.270864][ T1773] usb 6-1: Product: syz [ 613.275528][ T1773] usb 6-1: Manufacturer: syz [ 613.280136][ T1773] usb 6-1: SerialNumber: syz [ 613.294673][ T1773] usb 6-1: config 0 descriptor?? [ 613.518861][ T1773] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 613.529959][ T1773] usb 6-1: No valid video chain found. [ 613.541594][ T1773] usb 6-1: USB disconnect, device number 18 [ 613.590524][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.607478][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.824174][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 613.986551][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 613.997214][ T24] usb 4-1: config 0 has no interface number 0 [ 614.003358][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 614.013634][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 614.028453][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.048128][ T24] usb 4-1: Product: syz [ 614.053792][ T24] usb 4-1: Manufacturer: syz [ 614.062331][ T24] usb 4-1: SerialNumber: syz [ 614.075122][ T24] usb 4-1: config 0 descriptor?? [ 614.287135][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.314215][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.346280][T13606] sctp: [Deprecated]: syz.3.2253 (pid 13606) Use of int in max_burst socket option. [ 614.346280][T13606] Use struct sctp_assoc_value instead [ 614.391872][ T24] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 614.433375][ T24] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 614.525317][ T24] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 614.576403][ T24] usb 4-1: USB disconnect, device number 7 [ 614.597890][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2258'. [ 614.962118][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 615.120291][ T30] audit: type=1326 audit(1744241978.697:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.212487][ T9892] usb 5-1: USB disconnect, device number 34 [ 615.224472][ T30] audit: type=1326 audit(1744241978.697:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.299066][ T30] audit: type=1326 audit(1744241978.727:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.336309][ T30] audit: type=1326 audit(1744241978.727:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.361407][ T30] audit: type=1326 audit(1744241978.727:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.384166][ T30] audit: type=1326 audit(1744241978.727:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.407426][ T30] audit: type=1326 audit(1744241978.727:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.432886][ T30] audit: type=1326 audit(1744241978.727:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.460843][ T30] audit: type=1326 audit(1744241978.727:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13629 comm="syz.5.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bb8d169 code=0x7ffc0000 [ 615.652402][T13646] batadv_slave_1: entered promiscuous mode [ 616.876488][T13658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 617.870780][T13676] netlink: 'syz.2.2278': attribute type 21 has an invalid length. [ 617.887458][T13676] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2278'. [ 618.035018][ T9901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 618.094029][ T9892] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 618.214978][T11223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.228035][T11223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.237728][T11223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.246000][ T9901] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 618.256285][ T9892] usb 1-1: Using ep0 maxpacket: 32 [ 618.263602][T11223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.275569][T11223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.277891][ T9901] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 618.339627][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.348065][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.357791][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.366651][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.375222][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.409921][ T9892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.416853][ T9901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.427970][ T9892] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 618.437319][ T9901] usb 4-1: Product: syz [ 618.441772][ T9892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.453100][ T9901] usb 4-1: Manufacturer: syz [ 618.458131][ T9901] usb 4-1: SerialNumber: syz [ 618.465627][ T9892] usb 1-1: config 0 descriptor?? [ 618.491299][ T9901] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 618.886684][ T9892] cypress 0003:04B4:BCA1.0024: unknown main item tag 0x0 [ 618.911487][ T9892] cypress 0003:04B4:BCA1.0024: unknown main item tag 0x0 [ 619.049150][ T9892] cypress 0003:04B4:BCA1.0024: hidraw0: USB HID v0.01 Device [HID 04b4:bca1] on usb-dummy_hcd.0-1/input0 [ 619.127367][ T9901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 619.192938][ T9901] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 619.265857][ T9901] usb 4-1: media controller created [ 619.283550][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 619.452032][T13675] hsr0: left allmulticast mode [ 619.461277][T13675] hsr_slave_0: left allmulticast mode [ 619.511504][T13675] hsr_slave_1: left allmulticast mode [ 619.521431][T13675] hsr0: left promiscuous mode [ 619.537409][ T9901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.592815][T13675] bridge0: port 2(hsr0) entered disabled state [ 619.613784][T13675] syz_tun: left allmulticast mode [ 619.624132][T13675] syz_tun: left promiscuous mode [ 619.630539][T13675] bridge0: port 1(syz_tun) entered disabled state [ 619.647277][T13692] netlink: 'syz.4.2281': attribute type 5 has an invalid length. [ 619.718557][T13675] bond0: (slave bridge0): Releasing backup interface [ 619.795355][ T9901] usb 4-1: USB disconnect, device number 8 [ 619.909053][T13679] chnl_net:caif_netlink_parms(): no params data found [ 619.944314][ T9903] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 620.103642][T13679] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.111955][T13679] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.130409][ T9903] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 620.143711][T13679] bridge_slave_0: entered allmulticast mode [ 620.152876][ T9903] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 620.166770][T13679] bridge_slave_0: entered promiscuous mode [ 620.179247][ T9903] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 620.190954][T13679] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.203040][ T9903] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 620.218010][T13679] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.225578][T13679] bridge_slave_1: entered allmulticast mode [ 620.231538][ T9903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 620.246849][T13679] bridge_slave_1: entered promiscuous mode [ 620.252718][ T9903] usb 5-1: config 0 has no interface number 0 [ 620.268160][ T9903] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.286547][ T9903] usb 5-1: config 0 interface 2 has no altsetting 0 [ 620.297563][ T9903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.318249][ T9903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.339641][ T9903] usb 5-1: Product: syz [ 620.353549][ T9903] usb 5-1: Manufacturer: syz [ 620.354683][T13679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.370896][ T9903] usb 5-1: SerialNumber: syz [ 620.372923][T13679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.397549][ T9903] usb 5-1: config 0 descriptor?? [ 620.449890][T13679] team0: Port device team_slave_0 added [ 620.462751][T13679] team0: Port device team_slave_1 added [ 620.468554][T11223] Bluetooth: hci1: command tx timeout [ 620.532884][T13679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.563521][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.596782][T13679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.610509][T13679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.619097][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.654087][T13679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.701620][ T9903] usb 5-1: USB disconnect, device number 35 [ 620.788199][T13679] hsr_slave_0: entered promiscuous mode [ 620.795734][T13679] hsr_slave_1: entered promiscuous mode [ 620.802107][T13679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.810288][T13679] Cannot create hsr debugfs directory [ 620.968500][ T24] usb 1-1: USB disconnect, device number 25 [ 621.570262][T13679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 621.599143][T13679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 621.620798][T13679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.652385][T13679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.698335][T13720] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2287'. [ 621.944314][T13679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.021880][T13679] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.024126][ T9901] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 622.040220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.048570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.103773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.110961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.214399][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 622.238653][T13679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.259487][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 622.324682][ T1773] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 622.348626][T13679] veth0_vlan: entered promiscuous mode [ 622.369923][T13679] veth1_vlan: entered promiscuous mode [ 622.497994][T13679] veth0_macvtap: entered promiscuous mode [ 622.509113][ T1773] usb 1-1: config 68 has an invalid interface number: 220 but max is 0 [ 622.545188][ T1773] usb 1-1: config 68 has no interface number 0 [ 622.545991][T11223] Bluetooth: hci1: command tx timeout [ 622.564536][ T9911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 622.573635][ T9901] usb 5-1: config 0 has no interfaces? [ 622.586342][ T9901] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 622.594459][T13679] veth1_macvtap: entered promiscuous mode [ 622.600278][ T9901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.611238][ T1773] usb 1-1: config 68 interface 220 has no altsetting 0 [ 622.627379][ T9901] usb 5-1: config 0 descriptor?? [ 622.646432][ T1773] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 622.680622][T13679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.689800][ T1773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.709909][ T1773] usb 1-1: Product: syz [ 622.721373][ T1773] usb 1-1: Manufacturer: syz [ 622.733424][ T1773] usb 1-1: SerialNumber: syz [ 622.738644][T13679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.752950][T13679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.762447][T13679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.764075][ T9911] usb 4-1: Using ep0 maxpacket: 8 [ 622.777200][T13679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.791188][T13679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.854280][ T9911] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 622.966163][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.990801][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.036908][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.050298][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.063254][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.098201][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.144808][ T9911] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 623.164871][ T9911] usb 4-1: config 0 has no interface number 0 [ 623.171121][ T9911] usb 4-1: config 0 interface 30 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.184859][ T9911] usb 4-1: config 0 interface 30 has no altsetting 0 [ 623.196019][ T9911] usb 4-1: New USB device found, idVendor=12d1, idProduct=c35f, bcdDevice=c2.2c [ 623.205385][ T9911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.213491][ T9911] usb 4-1: Product: syz [ 623.218258][ T9911] usb 4-1: Manufacturer: syz [ 623.223339][ T9911] usb 4-1: SerialNumber: syz [ 623.234647][ T9911] usb 4-1: config 0 descriptor?? [ 623.472329][ T9911] option 4-1:0.30: GSM modem (1-port) converter detected [ 623.564275][ T9911] usb 4-1: USB disconnect, device number 9 [ 623.646824][ T9911] option 4-1:0.30: device disconnected [ 624.118983][T13741] vivid-000: ================= START STATUS ================= [ 624.142620][ T1773] gspca_main: spca501-2.14.0 probing 0497:c001 [ 624.162934][T13741] vivid-000: Radio HW Seek Mode: Bounded [ 624.173088][ T1773] gspca_spca501: reg write: error -71 [ 624.184566][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2295'. [ 624.201206][ T1773] spca501 1-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 624.211417][T13741] vivid-000: Radio Programmable HW Seek: false [ 624.240165][T13741] vivid-000: RDS Rx I/O Mode: Block I/O [ 624.258886][ T1773] spca501 1-1:68.220: probe with driver spca501 failed with error -22 [ 624.298769][T13741] vivid-000: Generate RBDS Instead of RDS: false [ 624.354101][ T1773] usb 1-1: USB disconnect, device number 26 [ 624.374669][T13741] vivid-000: RDS Reception: true [ 624.409646][T13741] vivid-000: RDS Program Type: 0 inactive [ 624.442029][T13741] vivid-000: RDS PS Name: inactive [ 624.471764][T13741] vivid-000: RDS Radio Text: inactive [ 624.494854][T13741] vivid-000: RDS Traffic Announcement: false inactive [ 624.513024][T13741] vivid-000: RDS Traffic Program: false inactive [ 624.601649][T13741] vivid-000: RDS Music: false inactive [ 624.608695][T13741] vivid-000: ================== END STATUS ================== [ 624.624267][T11223] Bluetooth: hci1: command tx timeout [ 625.430875][ T9911] usb 5-1: USB disconnect, device number 36 [ 625.894051][ T9901] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 626.048315][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 626.048332][ T30] audit: type=1326 audit(1744241989.627:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.097804][ T9901] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.119043][ T9901] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 626.134059][ T9903] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 626.148237][ T9901] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.164308][ T30] audit: type=1326 audit(1744241989.627:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.201765][ T9901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.227223][T13763] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 626.256161][ T9901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.264858][ T30] audit: type=1326 audit(1744241989.627:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.296868][ T30] audit: type=1326 audit(1744241989.657:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.324005][ T9903] usb 5-1: device descriptor read/64, error -71 [ 626.342043][ T30] audit: type=1326 audit(1744241989.657:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.411625][ T30] audit: type=1326 audit(1744241989.657:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f04bad8d169 code=0x7ffc0000 [ 626.530515][ T9892] usb 4-1: USB disconnect, device number 10 [ 626.574033][ T9903] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 626.704045][T11223] Bluetooth: hci1: command tx timeout [ 626.735596][ T9903] usb 5-1: device descriptor read/64, error -71 [ 626.855623][ T9903] usb usb5-port1: attempt power cycle [ 627.225257][ T9903] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 627.278758][ T9903] usb 5-1: device descriptor read/8, error -71 [ 627.544035][ T9903] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 627.574853][ T9903] usb 5-1: device descriptor read/8, error -71 [ 627.639900][T13799] bridge0: entered promiscuous mode [ 627.695811][ T9903] usb usb5-port1: unable to enumerate USB device [ 628.184278][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 628.364119][ T24] usb 1-1: device descriptor read/64, error -71 [ 628.644208][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 628.805440][ T24] usb 1-1: device descriptor read/64, error -71 [ 628.949085][ T24] usb usb1-port1: attempt power cycle [ 629.304060][ T9901] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 629.334160][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 629.374879][ T24] usb 1-1: device descriptor read/8, error -71 [ 629.478102][ T9901] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 629.492463][ T9901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.518154][ T9901] usb 5-1: Product: syz [ 629.522656][ T9901] usb 5-1: Manufacturer: syz [ 629.532055][ T9901] usb 5-1: SerialNumber: syz [ 629.556761][ T9901] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 629.590896][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.597615][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.604292][ T9911] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 629.613661][ T9903] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 629.634431][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 629.668318][ T24] usb 1-1: device descriptor read/8, error -71 [ 629.801463][ T9911] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 629.809127][ T24] usb usb1-port1: unable to enumerate USB device [ 629.820061][ T9911] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 629.833753][ T9911] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 629.847566][ T9911] usb 4-1: config 1 interface 0 has no altsetting 0 [ 629.859192][ T9911] usb 4-1: string descriptor 0 read error: -22 [ 629.874734][ T9911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.905856][ T9911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.932085][T13838] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 629.953352][T13838] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 629.973750][ T9911] usb 4-1: bad CDC descriptors [ 630.163298][T13847] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 630.175477][ T24] usb 4-1: USB disconnect, device number 11 [ 630.444088][ T9892] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 630.607119][ T9892] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 630.618341][ T9892] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 630.630090][ T9892] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 630.645990][ T9892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.656479][ T9892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 630.664648][ T9892] usb 6-1: SerialNumber: syz [ 630.704177][ T9903] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 630.711825][ T9903] ath9k_htc: Failed to initialize the device [ 630.760453][ T9903] usb 5-1: ath9k_htc: USB layer deinitialized [ 630.879100][ T9892] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 630.904358][ T9892] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 630.940370][ T9892] usb 6-1: USB disconnect, device number 19 [ 631.014145][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 631.164086][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 631.171189][ T24] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 631.186767][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.201153][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.213266][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.223062][ T24] usb 4-1: Product: syz [ 631.227413][ T24] usb 4-1: Manufacturer: syz [ 631.232035][ T24] usb 4-1: SerialNumber: syz [ 631.314244][ T9903] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 631.477713][ T9903] usb 1-1: Using ep0 maxpacket: 16 [ 631.501140][ T9903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.513029][ T9903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.548037][ T9903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.562723][ T9903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.571458][ T9903] usb 1-1: Product: syz [ 631.580806][ T9903] usb 1-1: Manufacturer: syz [ 631.599152][ T9903] usb 1-1: SerialNumber: syz [ 631.844034][ T9892] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 631.996362][ T9911] usb 5-1: USB disconnect, device number 41 [ 632.009690][ T9892] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.034382][ T9892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 632.046884][ T9892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 632.059790][ T9892] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.076251][ T9892] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 632.085681][ T9892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.095898][ T9892] usb 6-1: Product: syz [ 632.100192][ T9892] usb 6-1: Manufacturer: syz [ 632.104982][ T9892] usb 6-1: SerialNumber: syz [ 632.126123][ T9892] usb 6-1: config 0 descriptor?? [ 632.133204][T13855] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 632.208178][ T9892] rc_core: IR keymap rc-imon-rsc not found [ 632.216172][ T9892] Registered IR keymap rc-empty [ 632.222983][ T9892] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 632.235030][ T9892] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 632.378751][ T9911] usb 6-1: USB disconnect, device number 20 [ 632.557111][T13867] [ 632.559532][T13867] ===================================== [ 632.565085][T13867] WARNING: bad unlock balance detected! [ 632.570680][T13867] 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 Not tainted [ 632.577809][T13867] ------------------------------------- [ 632.583378][T13867] syz.0.2330/13867 is trying to release lock (&dev_instance_lock_key) at: [ 632.591905][T13867] [] do_setlink+0xc26/0x43a0 [ 632.598107][T13867] but there are no more locks to release! [ 632.603830][T13867] [ 632.603830][T13867] other info that might help us debug this: [ 632.611899][T13867] 1 lock held by syz.0.2330/13867: [ 632.617019][T13867] #0: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 632.626112][T13867] [ 632.626112][T13867] stack backtrace: [ 632.632025][T13867] CPU: 1 UID: 0 PID: 13867 Comm: syz.0.2330 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 632.632046][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 632.632056][T13867] Call Trace: [ 632.632063][T13867] [ 632.632070][T13867] dump_stack_lvl+0x241/0x360 [ 632.632098][T13867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.632120][T13867] ? __pfx__printk+0x10/0x10 [ 632.632141][T13867] ? print_lock+0x171/0x1a0 [ 632.632161][T13867] ? do_setlink+0xc26/0x43a0 [ 632.632184][T13867] print_unlock_imbalance_bug+0x185/0x1a0 [ 632.632222][T13867] lock_release+0x1ed/0x3e0 [ 632.632238][T13867] ? do_setlink+0xc26/0x43a0 [ 632.632261][T13867] ? do_setlink+0xc26/0x43a0 [ 632.632283][T13867] __mutex_unlock_slowpath+0xee/0x800 [ 632.632303][T13867] ? rcu_is_watching+0x15/0xb0 [ 632.632322][T13867] ? do_trace_netlink_extack+0x8b/0x1f0 [ 632.632341][T13867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.632360][T13867] ? finish_task_switch+0x1e5/0x870 [ 632.632373][T13867] ? lockdep_hardirqs_on+0x9d/0x150 [ 632.632391][T13867] ? __pfx_validate_linkmsg+0x10/0x10 [ 632.632409][T13867] ? rcu_is_watching+0x15/0xb0 [ 632.632432][T13867] do_setlink+0xc26/0x43a0 [ 632.632468][T13867] ? stack_trace_save+0x11a/0x1d0 [ 632.632502][T13867] ? __lock_acquire+0xad5/0xd80 [ 632.632526][T13867] ? do_raw_spin_lock+0x151/0x370 [ 632.632556][T13867] ? __pfx_do_setlink+0x10/0x10 [ 632.632582][T13867] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 632.632598][T13867] ? lockdep_hardirqs_on+0x9d/0x150 [ 632.632615][T13867] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 632.632630][T13867] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 632.632647][T13867] ? rcu_is_watching+0x15/0xb0 [ 632.632667][T13867] ? __mutex_lock+0xbe3/0x10c0 [ 632.632688][T13867] ? __mutex_lock+0x5f3/0x10c0 [ 632.632707][T13867] ? rtnl_newlink+0xd68/0x1fe0 [ 632.632727][T13867] ? __pfx___mutex_lock+0x10/0x10 [ 632.632747][T13867] ? nla_strscpy+0x102/0x180 [ 632.632766][T13867] ? full_name_hash+0x93/0xe0 [ 632.632783][T13867] rtnl_newlink+0x17e2/0x1fe0 [ 632.632803][T13867] ? stack_depot_save_flags+0x44/0x940 [ 632.632823][T13867] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.632843][T13867] ? __netlink_deliver_tap+0x561/0x7f0 [ 632.632878][T13867] ? kasan_quarantine_put+0xdc/0x230 [ 632.632895][T13867] ? lockdep_hardirqs_on+0x9d/0x150 [ 632.632912][T13867] ? nlmon_xmit+0xaf/0x100 [ 632.632944][T13867] ? __local_bh_enable_ip+0x168/0x200 [ 632.632959][T13867] ? lockdep_hardirqs_on+0x9d/0x150 [ 632.632978][T13867] ? aa_get_newest_label+0x101/0x6f0 [ 632.633004][T13867] ? irqentry_exit+0x63/0x90 [ 632.633019][T13867] ? lockdep_hardirqs_on+0x9d/0x150 [ 632.633038][T13867] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.633059][T13867] ? rcu_read_unlock+0x16/0xa0 [ 632.633077][T13867] ? rtnetlink_rcv_msg+0x7fc/0xd70 [ 632.633098][T13867] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.633119][T13867] rtnetlink_rcv_msg+0x80f/0xd70 [ 632.633139][T13867] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 632.633161][T13867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.633185][T13867] ? ref_tracker_free+0x63e/0x7e0 [ 632.633203][T13867] netlink_rcv_skb+0x208/0x480 [ 632.633225][T13867] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.633246][T13867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.633272][T13867] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.633293][T13867] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.633315][T13867] netlink_unicast+0x7f8/0x9a0 [ 632.633336][T13867] ? __pfx_netlink_unicast+0x10/0x10 [ 632.633355][T13867] ? skb_put+0x114/0x1f0 [ 632.633371][T13867] netlink_sendmsg+0x8c3/0xcd0 [ 632.633396][T13867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.633419][T13867] ? aa_sock_msg_perm+0x91/0x160 [ 632.633441][T13867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.633461][T13867] __sock_sendmsg+0x221/0x270 [ 632.633483][T13867] ____sys_sendmsg+0x523/0x860 [ 632.633501][T13867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.633515][T13867] ? __fget_files+0x2a/0x420 [ 632.633530][T13867] ? __fget_files+0x2a/0x420 [ 632.633547][T13867] __sys_sendmsg+0x271/0x360 [ 632.633573][T13867] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.633618][T13867] ? do_syscall_64+0xb6/0x230 [ 632.633647][T13867] do_syscall_64+0xf3/0x230 [ 632.633674][T13867] ? clear_bhb_loop+0x45/0xa0 [ 632.633692][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.633709][T13867] RIP: 0033:0x7fbe9f98d169 [ 632.633723][T13867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.633736][T13867] RSP: 002b:00007fbea0814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.633753][T13867] RAX: ffffffffffffffda RBX: 00007fbe9fba5fa0 RCX: 00007fbe9f98d169 [ 632.633764][T13867] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 632.633775][T13867] RBP: 00007fbe9fa0e730 R08: 0000000000000000 R09: 0000000000000000 [ 632.633784][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.633793][T13867] R13: 0000000000000000 R14: 00007fbe9fba5fa0 R15: 00007fbe9fccfa28 [ 632.633809][T13867] [ 633.119418][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.781829][ T24] usb 4-1: 0:2 : does not exist [ 633.792945][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 633.809586][ T9903] usb 1-1: 0:2 : does not exist [ 633.814305][ T24] usb 4-1: USB disconnect, device number 12 [ 633.822118][ T9903] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 633.845183][ T9903] usb 1-1: USB disconnect, device number 31 [ 634.025680][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 634.042280][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory