last executing test programs: 19.982427501s ago: executing program 3 (id=3021): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, 0x0}, 0x280) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102387, 0x18ff3}], 0x1, 0x4, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x44}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0x801c581f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={&(0x7f0000000440)="922d5cc3", 0x4}, 0x1, 0x0, 0x0, 0x4000}, 0x2e) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0584000000000000010902240001000000000904040001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x60482, 0x0) dup(r8) 17.241834352s ago: executing program 3 (id=3030): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'gre0\x00', 0x0}) userfaultfd(0x80001) r5 = io_uring_setup(0xc8e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xf, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r7, 0x1, &(0x7f0000000000)=0xf7ea) 16.457338605s ago: executing program 3 (id=3034): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x3, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000005880)='.\x00', 0x0, 0x0) unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) r8 = memfd_create(&(0x7f00000002c0)='system.posix_acl_default\x00', 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1, r6, 0x4, r8}, 0x10) r9 = msgget$private(0x0, 0x1) msgsnd(r9, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1008, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x89030, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0xd156, 0x10100, 0x0, 0x2000}, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000000), &(0x7f0000000180)) r11 = syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) 15.339447444s ago: executing program 3 (id=3040): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) unshare(0x2a020400) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e00000000001010400000000000000000500000378000ddf0084459889803c000380060002004e230000060002004e200000060001004e220000060002004e2100000600010b1ad333ce7d6c21a576c121a66ec8fa7b568f2b801077004e230000060002004e220000060001004e2200001400d48eef8f489ab8251ad26b266d00000000000000000108000200ac1e0101080002000a010101140004000000000000000000000000000000000020001700000000077d102d9c7f1b35bef28afffffffe00000001000000400000000b00000003fffffff934001880080001400000000008000240000000050800024000000007080001400000040008000240ffffffff0800024000000001d9df89444d0a549b53d57396eb653b290bfc651e2146ab3054924c89eb5ab85e27a82be657651d4759ee3d22104d90fc54dc3010ec16639786f4d2705d44fe1d5eccd3310c2da28551f512470e1c39aea7c792e7bece2c353211bea75de7cd837b83691c35b84ae0d7c87126dc1f66392c41ec156272309be08f1afb6f9d17d681002544283d5e61396fca780000000000000000000000007b050ed3d5703aa5ec7334844c5272c64182057e212922c4293f761ddbc8f2a5a3896d046305040ceff4ed"], 0xe0}, 0x1, 0x0, 0x0, 0x4000801}, 0x8801) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 14.825045477s ago: executing program 3 (id=3041): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x80000000, 0xffff, 0x1, [0x5]}}) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="02060000020000e50000000000000000"], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7216, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c9935f2bb8007f35e9836832e07e9b571d838b29621252ce5f8cf8388f1840b1442957c8f4e8d4492900dd9645d88454b74a36ebf3b8a4a634f733317480fabd1d833e4d47098b7a74f12149d1bb3ae19d91a12013a417567f187239c3940d5f89c391eb220a9b61d2bf04b5323b079caf3c19d098bf232a4796f0ec7bb8c10474f2eea0199e09363a0ed00dd3e9f759c20ea320feb7e6911d81", @ANYRES16=r4, @ANYBLOB="0500ffffffff000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000b00000060000000cf000e0080000000080211000001080211000001505050505050000000000000000000006400000000060101010101010301010602070005750000007adc21b58f24e0ee963a73f337a51c30819317c95b2bb6a0a870aae8a88f528ea67e7bc956aced2f3c31f8e7c0473cbe05a641f71c705c076ca4b8677b270519a4970295d3adbba2ed2c6f98ee5e162c7f0cb8b5c0c05ba5e5edfe8d13eddef3995dfe1eb15498eb2b1a88ed94412d4af59625030084042a0100720603030303030371070000000000005876060000000000000004000f00080026006c09000008000c006400000004000501"], 0x110}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000dc159217e6e2ec00", @ANYRES16=r6, @ANYBLOB="0106000000000000000045000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x7ff}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r8, 0x9}, &(0x7f0000000340)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 14.352622338s ago: executing program 3 (id=3047): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0xe3, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}, @mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @acm={0x4}, @mdlm_detail={0x75, 0x24, 0x13, 0x0, "287d3c123aeac60053ad4e4102427a612f936b4ea2a0e23548bc0312c6915e9af7d8d43b7ac0ff735159d7d3b56e01866918ee059015e2540e92b262d27aec6ed0825a5339ad2379f84194f43f7cab1087bcfdfe94a96e015813e5689aaffd148dadf256c93cf46cf8e29ca178c8d53f67"}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.581038254s ago: executing program 2 (id=3050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x24020400) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000900)={0x0, 0x23, 0x102, {0x102, 0x31, "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"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x40, 0xc, 0x8e, "6db8719b9e2d1afcf881dfa87c274a2d85515f814c5658b274dd95ff9abf8e96b98cefa84bbf6550804d36e447b36d9646d56095178e214b7b56b59bca9df5aff4e337dea58922fdd36f75bdc85d6c43b8a3d6c0dfcde7616158d0f39e314398029a8fbba1fca28ff2893891f2dd4b90d8ac783a1bd3dc971ff099ffff51de27bcd154c87f6ea14070b013a27992"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c00)={0x20, 0x81, 0x2, "73be"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "780e"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, "85"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "1bbe3770"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "74b34e"}}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="66b9320a00000f3226660f2859d2f0204616f30f09622266b9800000c00f326635000800000f30f20f01d8baf80c66b8cad0848d66efbafc0ced0f07f30f21dd", 0x40}], 0x1, 0x77, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r5, 0x4018aee2, &(0x7f0000000740)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x2b}}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x20040081) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001100)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYRES16, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.085782043s ago: executing program 2 (id=3062): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@private, 0x4e20, 0x7fff, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x42) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000821000/0x4000)=nil, 0x4000, 0x9) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r8 = dup(r0) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b231a0987f70e06d038e7ff7fc6e5539b364b078b089b080f384b090890e0878f0e1ac6e7049b334d959b729a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d370f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.251705112s ago: executing program 0 (id=3068): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f00000093c0), 0x1, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000100)) syz_fuse_handle_req(r3, &(0x7f0000009900)="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", 0x2000, &(0x7f000000c140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') statx(r5, &(0x7f0000000000)='.\x00', 0x0, 0x5c00, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r6, 0x48079000) syz_genetlink_get_family_id$devlink(&(0x7f0000005400), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @loopback, @loopback}}}}}}}, 0x0) 6.952877156s ago: executing program 2 (id=3069): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0xa9080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x2, 0x41, &(0x7f0000001400)={{0x12, 0x1, 0x310, 0x23, 0xbf, 0xdd, 0x10, 0x497, 0xc001, 0x273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0xa, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0xff, 0x0, 0x58, 0x19, 0x30, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcc, 0xe5, 0xf3, 0x40, 0xb57, 0xd863, 0x2ebb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r5], 0x20}, 0x1, 0x6}, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000400)=""/4096) 5.827374826s ago: executing program 1 (id=3071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000440)=""/172, 0xac, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', '', [{}, {0x20, '/dev/hwrng\x00'}, {0x20, '/dev/hwrng\x00'}]}, 0x1d) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000872c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4.477138262s ago: executing program 1 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x5, &(0x7f0000000400)) listen(0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mq_open(&(0x7f0000000000)='-#}\x00', 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f514fd1f19a4c977360b0238700000000000000060000000800030052a15732ab9b70685ad530b92f9cd2b5dbf4be1fb2fa2333cc5a34e8b845f6c29e6ab4d749a845e3cd52e9d1a17d19345fba17822232", @ANYRES32=r4, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) dup2(r2, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff0700"/17], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x82}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) 4.352633487s ago: executing program 2 (id=3074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000ec0)=""/224, 0xe0}, {&(0x7f0000000fc0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/228, 0xe4}], 0xf}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) (fail_nth: 1) 3.908001135s ago: executing program 0 (id=3077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 5) 3.201211334s ago: executing program 0 (id=3079): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000000000000010000002000100", @ANYRES16, @ANYRES16=r2], 0x34, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) fanotify_init(0x0, 0x0) unshare(0x0) fanotify_mark(r4, 0x1, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000008280)=[{&(0x7f0000006100)}], 0x1, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "0af1784c4756434308e123c352fe741eb5aabe375a28c9b40be3ffc10e22cc89b3e00a725dfb89db7302d61e0d78f8a02fd4db020432f7550a8664579f66160e", 0x21}, 0x48, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000180)='G', 0x1, 0x8001, 0x0, 0x0) add_key$keyring(&(0x7f00000021c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) shutdown(r7, 0x1) 3.200718975s ago: executing program 4 (id=3080): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x6b33, 0x0, 0x2}, 0x0, 0x0) r1 = syz_io_uring_setup(0x49, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/162, 0xa2}], 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000001740)={0x4, 0x1, @start={0x5, 0x3}}) syz_open_dev$usbfs(&(0x7f00000002c0), 0x1, 0x1c7802) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e00000024000280140005000000000000000000000000000000000105001600020000000400120008000400010081"], 0x60}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000200)=0x1) 3.139500407s ago: executing program 2 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x252f, &(0x7f0000000280)={0x0, 0x0, 0x542, 0x2, 0xfffffffe}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x29) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) r3 = socket$inet6(0xa, 0x6, 0xfe) r4 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x20000002}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffe4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0x3) sendto$inet6(r3, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES8=r2, @ANYRESHEX], 0xffdc) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000d7f0a0000000000001d000000010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195}, 0x21) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x3, 0x0, 0x203}}, 0x20}}, 0x8001) 2.79500714s ago: executing program 4 (id=3082): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500ff8505000000bf0900000000000055090100000000009500000000000000b702000000000000012af0ff00000000d609080000000000db9af0ff51000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.545053305s ago: executing program 4 (id=3083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x401) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x75}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="9e685760794f93d5148a96de6f79285dad5de4da19e0a4d207b64f033a3f27c70bc955fd751f9e1f13a2c61d47163cd62da5d4028d64286690bb810329051eac173b0970dbfa8ecfff2a81d9662ee2", 0x4f}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/5}, 0x20) 2.264895449s ago: executing program 1 (id=3084): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4080, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_TESTDATA={0x21, 0x45, "99c78fb3b24c6f3bb44b34ec6c4e1b63bb46a3a28d4208f3cb4941b919"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54000}, 0x4000090) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8cc1}, 0x10) (async) poll(&(0x7f0000000340)=[{r0, 0x2080}], 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xffffffff00000001) (async) r4 = socket$kcm(0x29, 0x7, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000003c0), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8002, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4880) (async) close(r4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) (async) statx(r1, &(0x7f0000000700)='./file0\x00', 0x100, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r1, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x800, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8c0005, &(0x7f0000000980)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x454b88eee2c57439}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@fsmagic={'fsmagic', 0x3d, 0xb5a}}, {@uid_gt={'uid>', r8}}]}}, 0x0, 0x0, &(0x7f0000000ac0)="1d18b5d30e4bec25184d5c423eb8dd08f60557e1b6fd9934229e4d31d7d845d78376978492ae42cbaf66400e743604b47a4ad21d8b610a9a0b28cea4b0135bee468370848d69537eca60d7d382e5292cd15652808cd3d4a493e9b89c8575372dd387b5de77706d88baffcc0db6529d640fa65e514a5e469f7e9a672c8215c4c275171633641fc89ce77c0b56531f225b821c77faba94f9147e0cfb8fbf43704cff1daacfb6a4433b41de755bbd8d55fa89d16d80127379c1ba478c2cf2efac8a21f4cf70687d98089747ea2840f68ee620d755ce966ea71a303f8c5f9fd059f53214ac575c8cfe6349721aa1") r9 = socket$inet_sctp(0x2, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x7fff, 0x4, 0x7, 0x7fffffff, 0x4, 0x3, 0x2}, &(0x7f0000000c80)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000cc0)=@assoc_value={r10, 0x2}, &(0x7f0000000d00)=0x8) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000d40)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_open_dev$sg(&(0x7f0000000d80), 0x3, 0x41) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x840) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r12 = syz_io_uring_complete(0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x30, r12, 0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x3, 0xffffff80, 0x1, 0x70, 0xffffffffffffffff, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0xb}, 0x48) (async) lstat(&(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0)) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r12, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20004000) 1.66448523s ago: executing program 1 (id=3085): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40004}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) 1.640021189s ago: executing program 2 (id=3086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x1, 0x8, 0x7}, 0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x25c}}, 0x8000) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x44, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7872ac05d8c"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000653272107205410024d5010203010902120001000000000904000000c169dd00"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.524905238s ago: executing program 0 (id=3087): r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x3, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 1.157212641s ago: executing program 1 (id=3088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 6) 1.154162077s ago: executing program 0 (id=3089): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x20323159}}) r1 = io_uring_setup(0x17c3, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0}) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x0, 0x2}, 0x48) r5 = getegid() socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0}, &(0x7f0000000080)=0x39) keyctl$chown(0x4, 0x0, r7, r5) fchown(r2, 0xee00, 0x0) (async) fchown(r2, 0xee00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x15, 0x0, 0x0, 0x10001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x15, 0x0, 0x0, 0x10001}]}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r8}, 0x20) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) (async) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000000)=':.%:\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000000)=':.%:\x00', 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r10, 0x891c, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x7ffff000) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) listen(r13, 0x7ffc) recvmmsg(r12, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000a00)=""/209, 0xd1}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000280)=""/14, 0xe}, {0x0}, {&(0x7f00000004c0)=""/142, 0x8e}, {0x0}, {&(0x7f0000002b00)=""/4124, 0x101c}, {&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000b00)=""/219, 0xdb}], 0xc}, 0x7fff}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/129, 0x81}], 0x1, &(0x7f0000000900)=""/216, 0xd8}, 0x7}], 0x2, 0x10001, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 938.124224ms ago: executing program 4 (id=3090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x144, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private0, @in6=@private1}, {@in6=@private1, 0x0, 0x33}, @in=@empty}, 0x0, 0xfdfffefe}, [@algo_auth_trunc={0x4c, 0x14, {{'streebog256-generic\x00'}}}]}, 0x144}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x2, {0x7a, 0x0, 0x0, 0x0, 0x404c9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x20040000) (async) syz_emit_ethernet(0x6a, &(0x7f0000001480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) mkdir(0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4100, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) chdir(0x0) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000200)={0x20, 0x9, 0x8c, {0x8c, 0x9, "62ae362440210bf7af009a24f3d1adb12e3e66f1ab409e0d3329ffeff98dcb5e7e1be2bad072260ef549af295786b8ed586909c0df0426b0e61c2e4678190dbf6b1e9dafc9de98bec8a449c547e58c789ef18562bd71e0a7afbf546e8ab25eda5988b4806232f39a01480a793167d21f1a013ee018ff314d23021228ede54783135bb53e7bf9ff8ae8d1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000002c0)={0x0, 0x22, 0x1d, {[@main=@item_012={0x1, 0x0, 0xc, "fa"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0xc, "f564b4dc"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x4, "290abe73"}, @global=@item_4={0x3, 0x1, 0x4, "82dd1d22"}, @global=@item_4={0x3, 0x1, 0x0, "7ac66447"}, @local=@item_4={0x3, 0x2, 0x1, "4d7a8dcc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x3, 0x1, {0x22, 0xc62}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x15, 0x14, "102530876c365baf4aa671f656e5d20d479b60fa"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0xc7, "b713619bd338f7dc9a9dab7860a12feb132424b0c9a5fdc5a57bcc03e487cb08fce19a94d028bb201c2a314f89705fb7d0daf33e4a9abceea50560727651d7557a150dfe096490c1ea91d7887c5be12204630ec14112a71898cab3caaa649af2e5176b85012abeeff34d5fa47a0ab69831c3c96a40b4d01c209a8b0218771642aedf1950b0ac62d145d003473bbd24f8a751d0f8ff4232db2dbfbf45eeb0727609650151e6a12d3ed3e16dc2f763f3791629064230c3e15d16731d53c17937079acc1bbd393e8e"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}}) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000007cc684f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002"], 0x210) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000401) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201080000000040e70430000000000000010902240001000000000904000001030000000921000000012207000905810300000000004a45e2a2c3d38da127aff15e1341144da4c9b8f31da832"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 682.009117ms ago: executing program 0 (id=3091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$inet6(0xa, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a40b0b96fac48f87aafa230000000000800054000000021280011800a0001006d61746368000000180002800400030008000240000000eb0800024000000000140000001000010000000000000000000000000a"], 0xac}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/40, 0x28, 0xb76) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x117}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b", 0x30}, {&(0x7f00000003c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c", 0x21}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a3", 0x39}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6", 0xa4}, {&(0x7f00000002c0)}, {&(0x7f0000000540)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe", 0xc5}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59e", 0xe2}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)}], 0x5}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 189.167502ms ago: executing program 4 (id=3092): r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c0001801400030000000000000000f5000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 183.650555ms ago: executing program 1 (id=3093): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 8) io_uring_setup(0x67d2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) 0s ago: executing program 4 (id=3094): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1001) r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xf6, 0x40, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/134, 0x86}], 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000480)={0x2, [0x7fff, 0x5, 0xe], [{0x3, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xa19, 0x5}, {0x9, 0x9, 0x0, 0x1}, {0xc10, 0xd683, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x1e46, 0x3, 0x0, 0x1}, {0x6d52, 0x92f, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1, 0x1}, {0xfffffe00, 0x5, 0x0, 0x1, 0x1, 0x1}], 0x3}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fa}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)="c4", 0x1}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r7 = dup(r6) faccessat2(r7, &(0x7f00000000c0)='./mnt\x00', 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="120000001a0035", 0x7) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): ice number 34 [ 937.191773][T14419] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 937.226112][T14419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.254745][T14419] usb 2-1: Product: syz [ 937.261261][T14419] usb 2-1: Manufacturer: syz [ 937.261750][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 937.289932][T14419] usb 2-1: SerialNumber: syz [ 937.314860][T14419] usb 2-1: config 0 descriptor?? [ 937.343293][T14419] usb 2-1: selecting invalid altsetting 3 [ 937.359301][T14419] comedi comedi0: could not set alternate setting 3 in high speed [ 937.376399][T14419] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 937.397759][T14419] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 937.666253][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 937.878647][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.890204][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 937.912085][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.937901][ T9] usb 3-1: Product: syz [ 937.954973][ T9] usb 3-1: Manufacturer: syz [ 937.960048][T10215] usb 4-1: device descriptor read/64, error -71 [ 937.974458][ T9] usb 3-1: SerialNumber: syz [ 937.991877][ T9] usb 3-1: config 0 descriptor?? [ 938.020123][ T9] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 938.035820][ T9] usbtest 3-1:0.0: probe with driver usbtest failed with error -22 [ 938.203924][ T48] usb 2-1: USB disconnect, device number 15 [ 938.260786][T10215] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 938.282981][T10215] usb 4-1: device reset changed ep0 maxpacket size! [ 938.306322][ T8] usb 4-1: USB disconnect, device number 2 [ 938.368856][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.484377][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.521390][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 938.563542][ T48] usb 3-1: USB disconnect, device number 12 [ 938.748482][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 938.781182][T18523] fuse: Bad value for 'group_id' [ 938.806790][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.810061][T18523] fuse: Bad value for 'group_id' [ 938.822690][ T8] usb 4-1: config 0 descriptor?? [ 939.084310][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.111437][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.142299][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.160550][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.182057][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.197098][T18526] netlink: 'syz.4.2799': attribute type 29 has an invalid length. [ 939.503140][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 939.592548][ T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 939.635792][ T8] [drm] Initialized udl on minor 2 [ 939.656644][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 939.687196][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 939.717637][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 939.759600][ T8] usb 4-1: USB disconnect, device number 3 [ 939.769053][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 939.813997][T18538] fuse: Bad value for 'group_id' [ 939.830529][T18538] fuse: Bad value for 'group_id' [ 939.976223][ T48] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 940.180134][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 940.229542][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 940.287782][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 940.318725][ T48] usb 3-1: New USB device found, idVendor=7b97, idProduct=c002, bcdDevice= 2.73 [ 940.344415][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.371157][ T48] usb 3-1: Product: syz [ 940.394344][ T48] usb 3-1: Manufacturer: syz [ 940.414374][ T48] usb 3-1: SerialNumber: syz [ 940.446799][ T48] usb 3-1: config 0 descriptor?? [ 940.668305][T18532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.784459][T18532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.178120][T18561] fuse: Bad value for 'group_id' [ 941.186245][T18533] bond0: (slave bond_slave_1): Releasing backup interface [ 941.204086][T18561] fuse: Bad value for 'group_id' [ 941.498396][ T48] usb 3-1: USB disconnect, device number 13 [ 941.849004][T18570] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 941.910996][T18571] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 941.947439][T18570] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 941.979860][T18570] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 942.016921][T18570] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 942.059831][T18570] netlink: 'syz.0.2811': attribute type 29 has an invalid length. [ 942.395967][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 942.456509][T10215] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 942.600788][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.620782][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 942.639497][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.667432][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.700580][ T8] usb 2-1: config 0 descriptor?? [ 942.719186][T10215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.780749][T10215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.837493][T10215] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 942.870670][T10215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.893181][T10215] usb 5-1: config 0 descriptor?? [ 943.114348][T18596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.154053][T18596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.162705][ T8] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max [ 943.182133][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 943.242571][ T8] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 943.292512][ T8] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 943.377238][T10215] usbhid 5-1:0.0: can't add hid device: -71 [ 943.383294][T10215] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 943.469784][T10215] usb 5-1: USB disconnect, device number 20 [ 943.733822][T18612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.815953][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 943.849968][ T48] usb 2-1: USB disconnect, device number 16 [ 943.946015][T18615] fuse: Bad value for 'group_id' [ 943.951200][T18615] fuse: Bad value for 'group_id' [ 944.142084][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.192251][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.222702][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.252311][ T8] usb 4-1: Product: syz [ 944.273480][ T8] usb 4-1: Manufacturer: syz [ 944.286900][ T8] usb 4-1: SerialNumber: syz [ 944.568688][T18604] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2822'. [ 944.618486][T18604] netlink: 'syz.3.2822': attribute type 12 has an invalid length. [ 944.636807][T18604] netlink: 'syz.3.2822': attribute type 29 has an invalid length. [ 944.644697][T18604] netlink: 'syz.3.2822': attribute type 2 has an invalid length. [ 944.676379][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 944.676398][ T29] audit: type=1326 audit(1724986442.829:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.1.2827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x0 [ 944.684159][T18604] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2822'. [ 944.817332][T18625] netlink: 'syz.2.2826': attribute type 29 has an invalid length. [ 945.040041][T18639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2831'. [ 945.067898][ T29] audit: type=1326 audit(1724986443.219:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.2.2831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcea8379ef9 code=0x0 [ 945.716880][ T8] cdc_ncm 4-1:1.0: failed to get mac address [ 945.747290][ T8] cdc_ncm 4-1:1.0: bind() failure [ 945.774325][ T8] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 945.792944][ T8] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 945.824051][ T8] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 945.858172][ T8] usb 4-1: USB disconnect, device number 4 [ 946.256085][T14419] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 946.285902][T10215] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 946.293597][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 946.458319][T14419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.474158][T14419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.485986][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 946.496541][T14419] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 946.507663][T10215] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 946.517574][T14419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.524713][T10215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.539742][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.567852][T10215] usb 5-1: config 0 descriptor?? [ 946.569706][T14419] usb 2-1: config 0 descriptor?? [ 946.587876][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.659800][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 946.670053][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.707286][ T9] usb 1-1: config 0 descriptor?? [ 946.847908][T18664] fuse: Bad value for 'group_id' [ 946.866780][T18664] fuse: Bad value for 'group_id' [ 947.057899][T14419] magicmouse 0003:05AC:0269.0047: item fetching failed at offset 6/7 [ 947.087556][T14419] magicmouse 0003:05AC:0269.0047: magicmouse hid parse failed [ 947.095453][T14419] magicmouse 0003:05AC:0269.0047: probe with driver magicmouse failed with error -22 [ 947.190787][ T9] aquacomputer_d5next 0003:0C70:F012.0048: unknown main item tag 0x0 [ 947.201663][ T9] aquacomputer_d5next 0003:0C70:F012.0048: unknown main item tag 0x0 [ 947.249095][ T9] aquacomputer_d5next 0003:0C70:F012.0048: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.0-1/input0 [ 947.341714][T18671] validate_nla: 5 callbacks suppressed [ 947.341736][T18671] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.408601][T18671] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.441194][ T9] usb 1-1: USB disconnect, device number 35 [ 947.443813][T18671] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.485144][T10215] [drm:udl_init] *ERROR* Selecting channel failed [ 947.525261][T18674] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.582911][T10215] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 947.603273][T18671] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.624848][T10215] [drm] Initialized udl on minor 2 [ 947.685850][T10215] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.716644][T18702] netlink: 'syz.2.2840': attribute type 29 has an invalid length. [ 947.766042][T10215] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 947.815859][ T5285] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.912410][ T5285] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.965561][T10215] usb 5-1: USB disconnect, device number 21 [ 948.018473][ T5285] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 948.155772][T18720] netlink: 'syz.3.2841': attribute type 29 has an invalid length. [ 948.226003][ T9] usb 2-1: USB disconnect, device number 17 [ 948.301898][T18720] netlink: 'syz.3.2841': attribute type 29 has an invalid length. [ 948.369561][T18721] netlink: 'syz.3.2841': attribute type 29 has an invalid length. [ 948.402854][T18720] netlink: 'syz.3.2841': attribute type 29 has an invalid length. [ 948.537933][T18732] ip6tnl0: entered promiscuous mode [ 948.554416][T18732] vlan2: entered promiscuous mode [ 948.560513][T18732] vlan2: entered allmulticast mode [ 948.574211][T18732] ip6tnl0: entered allmulticast mode [ 948.583154][T18732] ip6tnl0: left allmulticast mode [ 948.593226][T18732] ip6tnl0: left promiscuous mode [ 948.906095][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 949.098523][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 949.122439][ T9] usb 2-1: Dual-Role OTG device on HNP port [ 949.128963][ T9] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 949.141062][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.150616][ T9] usb 2-1: Product: syz [ 949.154985][ T9] usb 2-1: Manufacturer: syz [ 949.161173][ T9] usb 2-1: SerialNumber: syz [ 949.187137][ T9] usb 2-1: config 0 descriptor?? [ 949.221830][ T9] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 949.465598][T15605] usb 2-1: USB disconnect, device number 18 [ 949.560678][T18749] fuse: Bad value for 'group_id' [ 949.567725][T18749] fuse: Bad value for 'group_id' [ 949.706043][T14419] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 949.727649][T18752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.905857][T14419] usb 4-1: Using ep0 maxpacket: 8 [ 949.923165][T14419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.938098][T14419] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 949.951746][T14419] usb 4-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 949.961957][T14419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.980922][T14419] usb 4-1: config 0 descriptor?? [ 950.001861][T14419] rndis_host 4-1:0.0: invalid descriptor buffer length [ 950.013682][T14419] usb 4-1: bad CDC descriptors [ 950.024206][T14419] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 950.305451][ T58] usb 4-1: USB disconnect, device number 5 [ 950.365631][T18758] syz.1.2853: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 950.388640][T18758] CPU: 0 UID: 0 PID: 18758 Comm: syz.1.2853 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 950.399469][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 950.409554][T18758] Call Trace: [ 950.412845][T18758] [ 950.415788][T18758] dump_stack_lvl+0x241/0x360 [ 950.420493][T18758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.425711][T18758] ? __pfx__printk+0x10/0x10 [ 950.430344][T18758] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 950.436790][T18758] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 950.443311][T18758] warn_alloc+0x278/0x410 [ 950.447660][T18758] ? stack_depot_save_flags+0x29/0x830 [ 950.453137][T18758] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 950.459214][T18758] ? __pfx_warn_alloc+0x10/0x10 [ 950.464082][T18758] ? kasan_save_track+0x3f/0x80 [ 950.468950][T18758] ? __kasan_kmalloc+0x98/0xb0 [ 950.473729][T18758] ? xsk_setsockopt+0x598/0x950 [ 950.478593][T18758] ? do_sock_setsockopt+0x3af/0x720 [ 950.483805][T18758] ? __sys_setsockopt+0x1ae/0x250 [ 950.488839][T18758] ? __x64_sys_setsockopt+0xb5/0xd0 [ 950.494135][T18758] ? do_syscall_64+0xf3/0x230 [ 950.498821][T18758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.504909][T18758] __vmalloc_node_range_noprof+0x126/0x1400 [ 950.510843][T18758] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 950.517195][T18758] ? __kasan_kmalloc+0x98/0xb0 [ 950.521974][T18758] ? xskq_create+0x54/0x170 [ 950.526499][T18758] vmalloc_user_noprof+0x74/0x80 [ 950.531532][T18758] ? xskq_create+0xb6/0x170 [ 950.536076][T18758] xskq_create+0xb6/0x170 [ 950.540430][T18758] xsk_init_queue+0xa1/0x100 [ 950.545040][T18758] xsk_setsockopt+0x598/0x950 [ 950.549744][T18758] ? __pfx_xsk_setsockopt+0x10/0x10 [ 950.554967][T18758] ? __pfx_lock_acquire+0x10/0x10 [ 950.560010][T18758] ? aa_sock_opt_perm+0x79/0x120 [ 950.564965][T18758] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 950.570540][T18758] ? security_socket_setsockopt+0x87/0xb0 [ 950.576281][T18758] ? __pfx_xsk_setsockopt+0x10/0x10 [ 950.581498][T18758] do_sock_setsockopt+0x3af/0x720 [ 950.586546][T18758] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 950.592115][T18758] ? __fget_files+0x29/0x470 [ 950.596720][T18758] ? __fget_files+0x3f6/0x470 [ 950.601420][T18758] __sys_setsockopt+0x1ae/0x250 [ 950.606291][T18758] __x64_sys_setsockopt+0xb5/0xd0 [ 950.611330][T18758] do_syscall_64+0xf3/0x230 [ 950.615843][T18758] ? clear_bhb_loop+0x35/0x90 [ 950.620534][T18758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.626476][T18758] RIP: 0033:0x7f5f58379ef9 [ 950.630904][T18758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.650528][T18758] RSP: 002b:00007f5f59141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 950.658959][T18758] RAX: ffffffffffffffda RBX: 00007f5f58515f80 RCX: 00007f5f58379ef9 [ 950.666943][T18758] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 950.674919][T18758] RBP: 00007f5f583e793e R08: 0000000000000020 R09: 0000000000000000 [ 950.683157][T18758] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 950.691140][T18758] R13: 0000000000000000 R14: 00007f5f58515f80 R15: 00007f5f5863fa28 [ 950.699151][T18758] [ 950.738020][T18759] input: syz0 as /devices/virtual/input/input60 [ 950.774087][T18758] Mem-Info: [ 950.785111][T18758] active_anon:6404 inactive_anon:0 isolated_anon:0 [ 950.785111][T18758] active_file:20613 inactive_file:38646 isolated_file:0 [ 950.785111][T18758] unevictable:767 dirty:239 writeback:0 [ 950.785111][T18758] slab_reclaimable:9814 slab_unreclaimable:102180 [ 950.785111][T18758] mapped:22532 shmem:1837 pagetables:951 [ 950.785111][T18758] sec_pagetables:0 bounce:0 [ 950.785111][T18758] kernel_misc_reclaimable:0 [ 950.785111][T18758] free:1352468 free_pcp:914 free_cma:0 [ 950.897092][T18758] Node 0 active_anon:25812kB inactive_anon:0kB active_file:82188kB inactive_file:154508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89964kB dirty:956kB writeback:0kB shmem:5812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no [ 950.954236][T18758] Node 1 active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:264kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 951.077979][T18758] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.131614][T18758] lowmem_reserve[]: 0 2561 2562 0 0 [ 951.178602][T18758] Node 0 DMA32 free:1442944kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:25664kB inactive_anon:0kB active_file:82188kB inactive_file:153176kB unevictable:1536kB writepending:964kB present:3129332kB managed:2651236kB mlocked:0kB bounce:0kB free_pcp:1748kB local_pcp:924kB free_cma:0kB [ 951.231514][T18758] lowmem_reserve[]: 0 0 1 0 0 [ 951.251949][T18758] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 951.335064][T18758] lowmem_reserve[]: 0 0 0 0 0 [ 951.378129][T18758] Node 1 Normal free:3953000kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:504kB free_cma:0kB [ 951.411226][T18758] lowmem_reserve[]: 0 0 0 0 0 [ 951.438524][T18758] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 951.453021][T18758] Node 0 DMA32: 645*4kB (UM) 1181*8kB (UME) 853*16kB (UME) 586*32kB (UME) 301*64kB (UME) 173*128kB (UME) 376*256kB (UM) 198*512kB (UME) 85*1024kB (UM) 22*2048kB (UME) 251*4096kB (UM) = 1443660kB [ 951.483397][T18758] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 951.501547][T18758] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 12*16kB (UM) 8*32kB (UM) 18*64kB (UM) 12*128kB (UM) 7*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 6*2048kB (UM) 959*4096kB (M) = 3953000kB [ 951.532620][T18758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 951.544424][T18758] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 951.561810][T18758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 951.572491][T18758] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 951.588481][T18758] 61096 total pagecache pages [ 951.594735][T18758] 0 pages in swap cache [ 951.602833][T18758] Free swap = 124528kB [ 951.609753][T18758] Total swap = 124996kB [ 951.613466][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 951.620849][T18758] 2097051 pages RAM [ 951.630664][T18758] 0 pages HighMem/MovableOnly [ 951.644447][T18758] 402776 pages reserved [ 951.652122][T18758] 0 pages cma reserved [ 951.795965][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 951.805767][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 951.826860][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.843768][ T9] usb 3-1: config 0 has no interface number 0 [ 951.880324][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 951.900769][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.918446][ T9] usb 3-1: Product: syz [ 951.925190][ T9] usb 3-1: Manufacturer: syz [ 951.941730][ T9] usb 3-1: SerialNumber: syz [ 951.962438][ T9] usb 3-1: config 0 descriptor?? [ 952.020095][T18789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.194323][ T48] usb 3-1: USB disconnect, device number 14 [ 952.488555][T18797] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 952.550601][T18800] validate_nla: 20 callbacks suppressed [ 952.550619][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 952.596056][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 952.640546][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 952.687851][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 952.714833][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 952.741249][T18800] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 953.411922][T18819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 953.441633][T18819] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 953.535831][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 953.575517][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 953.746114][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 953.773644][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 953.820214][ T9] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 953.845658][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.854237][ T9] usb 4-1: Product: syz [ 953.875525][ T9] usb 4-1: Manufacturer: syz [ 953.890494][ T9] usb 4-1: SerialNumber: syz [ 953.920675][ T9] usb 4-1: config 0 descriptor?? [ 953.935917][ T5288] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 953.947091][T10215] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 953.961896][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 953.976643][ T9] em28xx 4-1:0.0: Video interface 0 found: bulk [ 954.005873][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 954.157219][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 954.165586][T10215] usb 2-1: Using ep0 maxpacket: 32 [ 954.190223][ T5288] usb 1-1: no configurations [ 954.211780][ T58] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 954.216320][T10215] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 954.230825][ T5288] usb 1-1: can't read configurations, error -22 [ 954.235222][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.290919][T10215] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 954.300821][T10215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.300876][ T58] usb 5-1: config 0 has no interface number 0 [ 954.308918][T10215] usb 2-1: Product: syz [ 954.308940][T10215] usb 2-1: Manufacturer: syz [ 954.308958][T10215] usb 2-1: SerialNumber: syz [ 954.346603][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 954.363243][ T58] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 954.383692][ T58] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.401699][ T58] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 954.413939][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.426098][ T5288] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 954.432198][ T58] usb 5-1: Product: syz [ 954.441542][ T58] usb 5-1: Manufacturer: syz [ 954.455459][ T58] usb 5-1: SerialNumber: syz [ 954.498032][ T58] usb 5-1: config 0 descriptor?? [ 954.516136][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 954.553792][T10215] cdc_ncm 2-1:1.0: bind() failure [ 954.559549][ T9] em28xx 4-1:0.0: board has no eeprom [ 954.587655][T10215] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 954.599286][T10215] cdc_ncm 2-1:1.1: bind() failure [ 954.621469][ T29] audit: type=1326 audit(1724986452.749:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 954.623820][T10215] usb 2-1: USB disconnect, device number 19 [ 954.651227][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 954.681211][ T9] em28xx 4-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 954.692119][ T5288] usb 1-1: no configurations [ 954.697421][ T5288] usb 1-1: can't read configurations, error -22 [ 954.715984][ T29] audit: type=1326 audit(1724986452.749:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 954.716784][ T9] em28xx 4-1:0.0: analog set to bulk mode. [ 954.749300][ T5288] usb usb1-port1: attempt power cycle [ 954.764161][ T5285] em28xx 4-1:0.0: Registering V4L2 extension [ 954.818279][ T29] audit: type=1326 audit(1724986452.749:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 954.842296][ T9] usb 4-1: USB disconnect, device number 6 [ 954.897128][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 954.922443][ T29] audit: type=1326 audit(1724986452.749:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.013813][ T29] audit: type=1326 audit(1724986452.749:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.045927][ T5285] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 955.052827][ T48] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 955.093613][ T29] audit: type=1326 audit(1724986452.749:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.177876][ T29] audit: type=1326 audit(1724986452.749:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.205834][ T5288] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 955.232593][ T5285] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 955.248364][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 955.265811][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 955.269098][ T1171] usb 5-1: USB disconnect, device number 22 [ 955.282672][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 59391, setting to 1024 [ 955.294611][ T5288] usb 1-1: no configurations [ 955.310554][ T29] audit: type=1326 audit(1724986452.749:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.338501][ T5288] usb 1-1: can't read configurations, error -22 [ 955.362803][ T48] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 955.395364][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.413750][ T29] audit: type=1326 audit(1724986452.749:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.433905][ T5285] DVB: Unable to find symbol xc2028_attach() [ 955.446609][ T48] usb 3-1: Product: syz [ 955.451211][ T48] usb 3-1: Manufacturer: syz [ 955.457382][ T48] usb 3-1: SerialNumber: syz [ 955.463289][ T29] audit: type=1326 audit(1724986452.759:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18820 comm="syz.1.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f58379ef9 code=0x7ff00000 [ 955.486752][ T48] usb 3-1: config 0 descriptor?? [ 955.495439][T18832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 955.502235][ T5285] tuner: 1-0061: Tuner has no way to set tv freq [ 955.521877][ T5285] em28xx 4-1:0.0: Config register raw data: 0xffffffed [ 955.537290][ T5285] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 955.548614][ T48] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 955.558173][ T5288] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 955.576053][ T48] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 955.576910][ T5285] em28xx 4-1:0.0: No AC97 audio processor [ 955.614845][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 955.614990][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 955.637952][ T5285] tuner: 1-0061: Tuner has no way to set tv freq [ 955.646899][ T5288] usb 1-1: no configurations [ 955.665740][ T5288] usb 1-1: can't read configurations, error -22 [ 955.683760][ T5288] usb usb1-port1: unable to enumerate USB device [ 955.691966][ T5285] em28xx 4-1:0.0: Registered radio device as radio32 [ 955.712715][ T5285] usb 4-1: Decoder not found [ 955.717998][ T5285] em28xx 4-1:0.0: failed to create media graph [ 955.724381][ T5285] em28xx 4-1:0.0: V4L2 device radio32 deregistered [ 955.739104][ T5285] em28xx 4-1:0.0: V4L2 device video71 deregistered [ 955.760898][ T5285] em28xx 4-1:0.0: Registering input extension [ 955.771499][ T5288] usb 3-1: USB disconnect, device number 15 [ 955.792032][ T9] em28xx 4-1:0.0: Closing input extension [ 955.829828][ T9] em28xx 4-1:0.0: Freeing device [ 956.878274][T18864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.056865][ T5288] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 957.255826][ T5285] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 957.263501][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 957.278713][ T5288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.320451][ T5288] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 957.344155][ T5288] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 957.362424][ T5288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.383378][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.395327][ T5288] usb 1-1: SerialNumber: syz [ 957.420800][T18862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 957.444934][ T5288] cdc_acm 1-1:1.0: skipping garbage [ 957.475800][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 957.489021][ T5285] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 957.505760][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.569123][ T5285] usb 2-1: config 0 descriptor?? [ 957.727687][T18875] Option 'Gÿ÷ dÎ' to dns_resolver key: bad/missing value [ 957.814525][ T5285] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 957.894560][ T5288] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 957.933895][ T5288] usb 1-1: USB disconnect, device number 40 [ 958.026209][ T5285] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 958.059495][ T5285] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 958.074713][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 958.091718][ T5285] asix 2-1:0.0: probe with driver asix failed with error -61 [ 958.160446][ T5285] usb 2-1: USB disconnect, device number 20 [ 958.288407][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 958.340657][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.396687][ T9] usb 3-1: config 0 descriptor?? [ 958.742059][T18888] misc userio: Begin command sent, but we're already running [ 958.806171][T18888] misc userio: Begin command sent, but we're already running [ 958.813701][T18889] misc userio: Begin command sent, but we're already running [ 958.887814][T18888] misc userio: Begin command sent, but we're already running [ 958.910576][T18888] misc userio: Begin command sent, but we're already running [ 958.933069][T18888] misc userio: Begin command sent, but we're already running [ 958.955195][T18888] misc userio: Begin command sent, but we're already running [ 958.978365][T18888] misc userio: Begin command sent, but we're already running [ 959.003817][T18888] misc userio: Begin command sent, but we're already running [ 959.028302][T18888] misc userio: Begin command sent, but we're already running [ 959.056126][T18888] misc userio: Begin command sent, but we're already running [ 959.074588][T18888] misc userio: Begin command sent, but we're already running [ 959.092701][T18888] misc userio: Begin command sent, but we're already running [ 959.110767][T18888] misc userio: Begin command sent, but we're already running [ 959.130664][T18888] misc userio: Begin command sent, but we're already running [ 959.152916][T18888] misc userio: Begin command sent, but we're already running [ 959.169308][T18888] misc userio: Begin command sent, but we're already running [ 959.192801][T18888] misc userio: Begin command sent, but we're already running [ 959.209251][T18888] misc userio: Begin command sent, but we're already running [ 959.218268][ T5288] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 959.290826][T18888] misc userio: Begin command sent, but we're already running [ 959.355922][T18888] misc userio: Begin command sent, but we're already running [ 959.399224][T18888] misc userio: Begin command sent, but we're already running [ 959.449353][T18888] misc userio: Begin command sent, but we're already running [ 959.466124][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 959.475868][T18888] misc userio: Begin command sent, but we're already running [ 959.497844][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 959.513396][ T5288] usb 5-1: no configurations [ 959.525988][ T5288] usb 5-1: can't read configurations, error -22 [ 959.569375][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 959.580729][ T9] [drm] Initialized udl on minor 2 [ 959.588870][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.606732][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 959.652632][ T1171] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.663082][ T9] usb 3-1: USB disconnect, device number 16 [ 959.680432][ T1171] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 959.717310][ T5288] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 959.835338][T18905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2899'. [ 959.915856][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 959.932263][ T5288] usb 5-1: no configurations [ 959.948320][ T5288] usb 5-1: can't read configurations, error -22 [ 959.976378][ T5288] usb usb5-port1: attempt power cycle [ 960.049074][T18909] netlink: 'syz.1.2902': attribute type 2 has an invalid length. [ 960.128361][T18913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.435886][ T5288] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 960.497615][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 960.508475][ T5288] usb 5-1: no configurations [ 960.513316][ T5288] usb 5-1: can't read configurations, error -22 [ 960.531520][ T58] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 960.645938][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 960.685815][ T5288] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 960.715822][ T48] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 960.719439][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 960.730774][ T58] usb 1-1: config 52 has an invalid descriptor of length 131, skipping remainder of the config [ 960.752138][ T5288] usb 5-1: no configurations [ 960.757040][ T58] usb 1-1: config 52 has 0 interfaces, different from the descriptor's value: 27 [ 960.767444][ T5288] usb 5-1: can't read configurations, error -22 [ 960.793007][ T5288] usb usb5-port1: unable to enumerate USB device [ 960.795409][ T58] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 960.816503][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.824744][ T58] usb 1-1: Product: syz [ 960.840986][ T58] usb 1-1: Manufacturer: syz [ 960.860645][ T58] usb 1-1: SerialNumber: syz [ 960.881684][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 960.885813][ T48] usb 2-1: device descriptor read/64, error -71 [ 960.898864][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.926709][ T9] usb 3-1: config 0 descriptor?? [ 961.117746][T18919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2905'. [ 961.207950][ T48] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 961.259741][ T58] usb 1-1: USB disconnect, device number 41 [ 961.352198][T18928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.375873][ T48] usb 2-1: device descriptor read/64, error -71 [ 961.516425][ T48] usb usb2-port1: attempt power cycle [ 961.665907][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 961.708135][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 961.714892][ T9] [drm] Initialized udl on minor 2 [ 961.753060][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 961.783129][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 961.807886][ T5288] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 961.830479][ T9] usb 3-1: USB disconnect, device number 17 [ 961.861051][ T5288] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 961.935869][ T48] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 961.990872][ T48] usb 2-1: device descriptor read/8, error -71 [ 962.256073][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 962.297166][ T48] usb 2-1: device descriptor read/8, error -71 [ 962.427156][ T48] usb usb2-port1: unable to enumerate USB device [ 962.737663][T18958] netlink: 'syz.3.2917': attribute type 29 has an invalid length. [ 962.766720][T18958] netlink: 'syz.3.2917': attribute type 29 has an invalid length. [ 962.794235][T18958] netlink: 'syz.3.2917': attribute type 29 has an invalid length. [ 962.805845][T18958] netlink: 'syz.3.2917': attribute type 29 has an invalid length. [ 962.816575][T18958] netlink: 'syz.3.2917': attribute type 29 has an invalid length. [ 962.825951][ T48] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 963.028088][ T48] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 963.034355][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2920'. [ 963.049468][T18967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.071259][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2920'. [ 963.119140][ T48] usb 3-1: config 0 has no interface number 0 [ 963.151298][ T48] usb 3-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=18.e6 [ 963.175192][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.190239][ T48] usb 3-1: config 0 descriptor?? [ 963.201567][ T48] sierra 3-1:0.120: Sierra USB modem converter detected [ 963.426135][ T48] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 963.483863][ T48] usb 3-1: USB disconnect, device number 18 [ 963.517123][ T48] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 963.533246][ T48] sierra 3-1:0.120: device disconnected [ 963.715955][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 963.809506][T18978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2923'. [ 963.921404][ T9] usb 5-1: config index 0 descriptor too short (expected 32795, got 27) [ 963.973220][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 964.001169][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 964.054225][ T9] usb 5-1: config index 1 descriptor too short (expected 32795, got 27) [ 964.108351][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 964.143084][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 964.183595][ T9] usb 5-1: config index 2 descriptor too short (expected 32795, got 27) [ 964.205167][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 964.246025][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 964.309929][ T9] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=2e.3a [ 964.362983][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.415958][ T9] usb 5-1: Product: syz [ 964.420186][ T9] usb 5-1: Manufacturer: syz [ 964.424817][ T9] usb 5-1: SerialNumber: syz [ 964.484012][ T9] usb 5-1: config 0 descriptor?? [ 964.513400][ T9] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 964.536004][ T9] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 964.652339][T19001] netlink: 'syz.0.2930': attribute type 29 has an invalid length. [ 964.673199][T19001] netlink: 'syz.0.2930': attribute type 29 has an invalid length. [ 964.683128][T19001] netlink: 'syz.0.2930': attribute type 29 has an invalid length. [ 964.693830][T19001] netlink: 'syz.0.2930': attribute type 29 has an invalid length. [ 964.715808][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 964.767123][T15605] usb 5-1: USB disconnect, device number 27 [ 964.947936][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 964.985615][ T48] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 965.006674][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 965.026628][ T48] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 965.046398][T19014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 965.053716][T19014] IPv6: NLM_F_CREATE should be set when creating new route [ 965.078175][ T48] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 965.098414][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.116364][ T48] usb 3-1: Product: syz [ 965.121767][ T48] usb 3-1: Manufacturer: syz [ 965.130877][ T48] usb 3-1: SerialNumber: syz [ 965.143530][ T48] usb 3-1: config 0 descriptor?? [ 965.378910][T19028] validate_nla: 1 callbacks suppressed [ 965.378932][T19028] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 965.394593][T19028] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 965.403914][T19028] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 965.416476][T19028] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 965.425034][T19028] netlink: 'syz.0.2942': attribute type 29 has an invalid length. [ 965.455884][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 965.507156][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 965.527443][ T5288] usb 3-1: USB disconnect, device number 19 [ 965.669211][ T8] usb 4-1: config 0 has an invalid interface number: 220 but max is 0 [ 965.675898][ T48] usb 2-1: device descriptor read/64, error -71 [ 965.678115][ T8] usb 4-1: config 0 has no interface number 0 [ 965.693933][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=59.61 [ 965.703552][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.728024][ T8] usb 4-1: config 0 descriptor?? [ 965.739702][ T8] imon 4-1:0.220: unable to register, err -19 [ 965.945424][T19035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.963281][T19035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.965923][ T48] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 965.985479][ T8] usb 4-1: USB disconnect, device number 7 [ 966.156047][ T48] usb 2-1: device descriptor read/64, error -71 [ 966.287287][ T48] usb usb2-port1: attempt power cycle [ 966.700167][T19049] IPv6: sit2: Disabled Multicast RS [ 966.717105][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 966.717125][ T29] audit: type=1326 audit(1724986464.869:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 966.718185][ T48] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 966.768104][ T29] audit: type=1326 audit(1724986464.869:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 966.833570][ T29] audit: type=1326 audit(1724986464.869:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 966.839891][T19054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.869798][ T29] audit: type=1326 audit(1724986464.869:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 966.873062][ T48] usb 2-1: device descriptor read/8, error -71 [ 966.983892][ T29] audit: type=1326 audit(1724986464.909:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.015475][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 967.035083][ T29] audit: type=1326 audit(1724986464.909:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.109810][ T29] audit: type=1326 audit(1724986464.919:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.171220][ T29] audit: type=1326 audit(1724986464.939:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.220195][ T29] audit: type=1326 audit(1724986464.939:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.243620][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 967.281520][ T29] audit: type=1326 audit(1724986464.939:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa539b79ef9 code=0x7ffc0000 [ 967.316149][ T48] usb 2-1: device descriptor read/8, error -71 [ 967.436222][ T48] usb usb2-port1: unable to enumerate USB device [ 967.696029][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 967.866723][ T5288] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 967.885814][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 967.921553][ T48] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 967.949763][ T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 968.011955][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.021476][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.035152][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 968.044152][ T9] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 968.054242][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 968.063537][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 968.068869][ T9] usb 3-1: can't read configurations, error -71 [ 968.077253][ T5288] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 968.087546][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.099407][ T5288] usb 4-1: config 0 descriptor?? [ 968.113314][ T48] usb 5-1: not running at top speed; connect to a high speed hub [ 968.122784][ T48] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 968.135952][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 968.136078][ T48] usb 5-1: config 1 interface 0 has no altsetting 0 [ 968.152298][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 968.154254][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 968.162888][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.180070][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.189398][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 968.199447][ T48] usb 5-1: Product: 䕘ὒè–ቶ釜崯í–꿼篆脃儛賔ê•ç¨µÐ¾âŒµà¼´ï•à¬’⭊쿾娫ä–呺í겓’跱嫅냱梯㰅ᇓ๜쓯雞é°á’놽ꘃ娬펪瀷墢蟒佈紽軒ﱒä§í”¿ï‚³é©»ç‹¾â´ªå·µîœ¹ç¼å¾™ë‚°æ¿ê§¹ï¼›æ ˆç°¸ì‰†ä‚·æ—½é¤»ìº”鄌爵Ù匬麖ꗣê·çŸ•ê•¥ [ 968.200543][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.235162][ T48] usb 5-1: Manufacturer: Э [ 968.236330][ T8] usb 1-1: Product: syz [ 968.243982][ T8] usb 1-1: Manufacturer: syz [ 968.249529][ T8] usb 1-1: SerialNumber: syz [ 968.252518][ T48] usb 5-1: SerialNumber: 㑂⼓ìŒâ‹‹ï—¬è‘›ï›ˆá žè§«êŽ£é©«è¼ë™œá·¦é±à²Šä–šé‰¢ê­·ë°ªá„Žíž¬ïœ°ï‰½á­îšä–³å£…킛刹䶇䕒蟨í”봅쎷깺梨퀉门ì›×£æ²¦ÛµãŠ–䫉㖴ӻᨡ얬㡉ᵻ莫ã›ç‡˜ë¹â¶›í¼ã”›è·°î€á‡™æ ¬Ï»ä¢šæžŸè¸–ëŒè¶Ÿê°–é¦è‹½ç’‚ã…✯ךּ炟ì•èœœâœ„࠘쬋ᄅ祼燸ᩊ袶쵖균䀆屠죙㒥ߵ◹ꖮ퀩蠨 [ 968.309857][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 968.311697][T19082] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 968.320068][ T8] usb 1-1: config 0 descriptor?? [ 968.342410][ T8] mcba_usb 1-1:0.0: Can't find endpoints [ 968.583044][T19079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.611159][T19079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.770133][T19089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.828218][T19089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.944296][ T48] usbhid 5-1:1.0: can't add hid device: -71 [ 968.968795][ T48] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 969.014232][ T48] usb 5-1: USB disconnect, device number 28 [ 969.028330][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 969.106579][ T8] usb 1-1: USB disconnect, device number 42 [ 969.566179][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 969.748013][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.771125][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 969.804589][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.827532][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.854569][ T9] usb 3-1: config 0 descriptor?? [ 969.980587][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.034851][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.264698][T19111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 970.278738][ T9] plantronics 0003:047F:FFFF.0049: ignoring exceeding usage max [ 970.333973][ T9] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 970.395324][ T9] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 970.796072][T15605] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 970.844503][T19119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 970.927003][ T1171] usb 3-1: USB disconnect, device number 22 [ 970.997602][T15605] usb 2-1: Using ep0 maxpacket: 16 [ 971.026845][T15605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.051552][T15605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.087221][T15605] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 971.096622][T15605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.108462][T15605] usb 2-1: config 0 descriptor?? [ 971.227770][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 971.324402][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 971.346114][ T5288] asix 4-1:0.0: probe with driver asix failed with error -71 [ 971.404097][ T5288] usb 4-1: USB disconnect, device number 8 [ 971.561437][T15605] usbhid 2-1:0.0: can't add hid device: -71 [ 971.582599][T15605] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 971.631829][T15605] usb 2-1: USB disconnect, device number 29 [ 971.815842][ T5288] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 971.974246][T19135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2973'. [ 971.975813][ T58] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 972.034221][ T5288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 972.053497][ T5288] usb 4-1: not running at top speed; connect to a high speed hub [ 972.094189][ T5288] usb 4-1: config 0 interface 0 has no altsetting 0 [ 972.167774][ T5288] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 972.203716][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.229692][ T5288] usb 4-1: Product: syz [ 972.241922][ T5288] usb 4-1: Manufacturer: syz [ 972.244876][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 972.274765][ T5288] usb 4-1: SerialNumber: syz [ 972.281991][ T58] usb 1-1: not running at top speed; connect to a high speed hub [ 972.301046][ T5288] usb 4-1: config 0 descriptor?? [ 972.351497][ T58] usb 1-1: config 0 interface 0 has no altsetting 0 [ 972.382260][ T58] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 972.405481][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.446594][ T58] usb 1-1: Product: syz [ 972.470524][ T58] usb 1-1: Manufacturer: syz [ 972.494053][ T58] usb 1-1: SerialNumber: syz [ 972.528193][ T58] usb 1-1: config 0 descriptor?? [ 972.578243][T19123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.667620][T19123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.819688][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.953368][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.193983][T19162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.385901][ T1171] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 973.512089][ T5288] gspca_main: spca501-2.14.0 probing 0497:c001 [ 973.574456][ T5288] gspca_spca501: reg write: error -71 [ 973.594736][ T5288] spca501 4-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 973.606161][ T1171] usb 2-1: Using ep0 maxpacket: 16 [ 973.625567][ T5288] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 973.646216][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 973.667878][ T5288] usb 4-1: USB disconnect, device number 9 [ 973.684746][ T1171] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 973.704695][ T58] gspca_main: spca501-2.14.0 probing 0497:c001 [ 973.724268][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.757479][ T58] gspca_spca501: reg write: error -71 [ 973.767376][ T1171] usb 2-1: Product: syz [ 973.771627][ T1171] usb 2-1: Manufacturer: syz [ 973.795889][ T1171] usb 2-1: SerialNumber: syz [ 973.800901][ T58] spca501 1-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 973.822860][ T1171] usb 2-1: config 0 descriptor?? [ 973.835070][ T58] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 973.869888][ T1171] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 973.917877][ T58] usb 1-1: USB disconnect, device number 43 [ 974.456420][ T1171] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 974.656681][ T1171] usb 5-1: Using ep0 maxpacket: 16 [ 974.665936][ T58] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 974.682878][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.704673][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.719097][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 974.766560][ T1171] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 974.796114][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.828840][ T1171] usb 5-1: config 0 descriptor?? [ 974.868013][ T58] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 974.898636][ T58] usb 3-1: config 0 interface 0 has no altsetting 0 [ 974.926382][ T58] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 974.952543][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.967664][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 974.982966][ T58] usb 3-1: Product: syz [ 975.002301][ T58] usb 3-1: Manufacturer: syz [ 975.018212][ T58] usb 3-1: SerialNumber: syz [ 975.026442][ T5288] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 975.058595][ T58] usb 3-1: config 0 descriptor?? [ 975.094932][ T58] usb 3-1: selecting invalid altsetting 0 [ 975.196510][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.241942][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.334969][ T5288] usb 1-1: Using ep0 maxpacket: 8 [ 975.373721][ T5288] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 975.407078][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.427058][ T5288] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 975.446093][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.466446][ T5288] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 975.504955][ T8] usb 4-1: config 0 descriptor?? [ 975.513031][ T5288] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 975.554651][ T5288] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.606245][ T5288] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 975.678442][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.797187][ T1171] usbhid 5-1:0.0: can't add hid device: -71 [ 975.814944][ T1171] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 975.858228][ T1171] usb 5-1: USB disconnect, device number 29 [ 975.876777][ T58] usb 2-1: USB disconnect, device number 30 [ 975.943385][ T5288] usb 1-1: usb_control_msg returned -32 [ 975.964405][ T5288] usbtmc 1-1:16.0: can't read capabilities [ 975.980785][ T8] plantronics 0003:047F:FFFF.004A: ignoring exceeding usage max [ 976.015217][ T8] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 976.057626][ T8] plantronics 0003:047F:FFFF.004A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 976.116705][T19185] FAULT_INJECTION: forcing a failure. [ 976.116705][T19185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.153412][T19185] CPU: 1 UID: 0 PID: 19185 Comm: syz.1.2986 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 976.164249][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 976.174354][T19185] Call Trace: [ 976.177657][T19185] [ 976.180591][T19185] dump_stack_lvl+0x241/0x360 [ 976.185301][T19185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.190548][T19185] ? __pfx__printk+0x10/0x10 [ 976.195185][T19185] ? get_sigframe+0x566/0x700 [ 976.199909][T19185] ? __pfx_lock_release+0x10/0x10 [ 976.204989][T19185] should_fail_ex+0x3b0/0x4e0 [ 976.209713][T19185] _copy_to_user+0x2f/0xb0 [ 976.214166][T19185] copy_siginfo_to_user+0x24/0xa0 [ 976.219219][T19185] x64_setup_rt_frame+0x75d/0xcc0 [ 976.224271][T19185] ? lockdep_hardirqs_on+0x99/0x150 [ 976.229503][T19185] ? _raw_spin_unlock_irq+0x2e/0x50 [ 976.234747][T19185] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 976.240339][T19185] arch_do_signal_or_restart+0x458/0x860 [ 976.245998][T19185] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 976.252190][T19185] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 976.258196][T19185] ? syscall_exit_to_user_mode+0xa3/0x370 [ 976.263936][T19185] syscall_exit_to_user_mode+0xc9/0x370 [ 976.269517][T19185] do_syscall_64+0x100/0x230 [ 976.274122][T19185] ? clear_bhb_loop+0x35/0x90 [ 976.278838][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.284950][T19185] RIP: 0033:0x7f5f58379ef7 [ 976.289401][T19185] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 976.309021][T19185] RSP: 002b:00007f5f59141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 976.317446][T19185] RAX: 0000000000000000 RBX: 00007f5f58515f80 RCX: 00007f5f58379ef9 [ 976.325423][T19185] RDX: 0000000000002020 RSI: 00000000200002c0 RDI: 0000000000000006 [ 976.333428][T19185] RBP: 00007f5f59141090 R08: 0000000000000000 R09: 0000000000000000 [ 976.341420][T19185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.349402][T19185] R13: 0000000000000000 R14: 00007f5f58515f80 R15: 00007f5f5863fa28 [ 976.357395][T19185] [ 976.728158][T19192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 976.793119][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 976.845565][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 976.875537][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 976.896731][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 976.920484][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 976.947225][T19194] netlink: 'syz.4.2989': attribute type 29 has an invalid length. [ 977.418414][ T1171] usb 3-1: USB disconnect, device number 23 [ 977.599825][ T9] usb 1-1: USB disconnect, device number 44 [ 977.688761][T19201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.833126][ T5288] usb 4-1: USB disconnect, device number 10 [ 978.116091][ T1171] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 978.127285][T19215] Invalid option length (0) for dns_resolver key [ 978.285986][ T1171] usb 3-1: device descriptor read/64, error -71 [ 978.355863][T14419] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 978.415913][ T48] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 978.423667][ T5288] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 978.576271][ T1171] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 978.588678][T14419] usb 1-1: unable to get BOS descriptor or descriptor too short [ 978.599695][T14419] usb 1-1: not running at top speed; connect to a high speed hub [ 978.617964][ T5288] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 978.625058][T14419] usb 1-1: config 0 interface 0 has no altsetting 0 [ 978.646032][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.646354][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 978.676195][ T5288] usb 4-1: config 0 descriptor?? [ 978.677876][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.707709][T14419] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 978.725790][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.736703][T14419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.746233][T14419] usb 1-1: Product: syz [ 978.751313][T14419] usb 1-1: Manufacturer: syz [ 978.760012][ T48] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 978.769337][ T58] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 978.778239][T14419] usb 1-1: SerialNumber: syz [ 978.778252][ T1171] usb 3-1: device descriptor read/64, error -71 [ 978.793102][ T48] usb 2-1: New USB device strings: Mfr=0, Product=245, SerialNumber=255 [ 978.805776][ T48] usb 2-1: Product: syz [ 978.814305][T14419] usb 1-1: config 0 descriptor?? [ 978.819708][ T48] usb 2-1: SerialNumber: syz [ 978.833557][ T48] usb 2-1: config 0 descriptor?? [ 978.896297][ T1171] usb usb3-port1: attempt power cycle [ 978.965962][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 978.990581][ T58] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 979.038760][T19212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.042786][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.093603][T19212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.102799][ T58] usb 5-1: Product: syz [ 979.129307][ T58] usb 5-1: Manufacturer: syz [ 979.154009][ T58] usb 5-1: SerialNumber: syz [ 979.195399][ T58] usb 5-1: config 0 descriptor?? [ 979.241635][ T58] as10x_usb: device has been detected [ 979.260650][ T58] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 979.355488][ T58] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 979.365823][ T1171] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 979.392254][ T58] as10x_usb: error during firmware upload part1 [ 979.426342][ T1171] usb 3-1: device descriptor read/8, error -71 [ 979.444318][ T58] Registered device Sky IT Digital Key (green led) [ 979.457370][T19219] random: crng reseeded on system resumption [ 979.653504][T14419] gspca_main: spca501-2.14.0 probing 0497:c001 [ 979.682960][T14419] gspca_spca501: reg write: error -71 [ 979.701361][T14419] spca501 1-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 979.724001][T14419] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 979.757739][T14419] usb 1-1: USB disconnect, device number 45 [ 979.765821][ T1171] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 979.826757][ T1171] usb 3-1: device descriptor read/8, error -71 [ 979.986573][ T1171] usb usb3-port1: unable to enumerate USB device [ 980.148142][ T5288] [drm:udl_init] *ERROR* Selecting channel failed [ 980.193947][ T5288] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 980.226683][ T5288] [drm] Initialized udl on minor 2 [ 980.250070][ T5288] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 980.275646][ T5288] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 980.302527][ T1171] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 980.319716][ T5288] usb 4-1: USB disconnect, device number 11 [ 980.336051][ T1171] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 980.722234][T19222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.803152][T19222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.953030][ T1171] usb 5-1: USB disconnect, device number 30 [ 981.051998][ T1171] Unregistered device Sky IT Digital Key (green led) [ 981.058739][ T1171] as10x_usb: device has been disconnected [ 981.126671][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 981.143168][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 981.161458][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 981.212180][ T48] usb 2-1: USB disconnect, device number 31 [ 981.318093][T19236] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 981.332833][T19236] dvmrp1: linktype set to 6 [ 981.862286][T19250] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3007'. [ 981.969766][ T1171] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 982.076053][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 982.167010][ T1171] usb 2-1: Using ep0 maxpacket: 8 [ 982.173867][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 982.214119][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.280724][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.303100][ T1171] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 982.315963][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.342721][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 982.356470][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.370572][ T1171] usb 2-1: config 0 descriptor?? [ 982.376279][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.397635][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.421562][ T9] usb 5-1: config 0 descriptor?? [ 982.635890][ T5301] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 982.828866][ T1171] logitech 0003:046D:C20E.004B: rdesc size test failed for formula gp [ 982.862772][ T9] plantronics 0003:047F:FFFF.004C: ignoring exceeding usage max [ 982.877829][ T1171] logitech 0003:046D:C20E.004B: unbalanced delimiter at end of report description [ 982.886628][ T5301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 982.918537][ T5301] usb 3-1: not running at top speed; connect to a high speed hub [ 982.938491][ T1171] logitech 0003:046D:C20E.004B: parse failed [ 982.948077][ T9] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 982.966254][ T1171] logitech 0003:046D:C20E.004B: probe with driver logitech failed with error -22 [ 982.986358][ T5301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 982.999713][ T9] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 983.042930][ T9] usb 2-1: USB disconnect, device number 32 [ 983.118404][ T5301] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 983.155859][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.175780][ T5301] usb 3-1: Product: syz [ 983.186297][ T5301] usb 3-1: Manufacturer: syz [ 983.206214][ T5301] usb 3-1: SerialNumber: syz [ 983.237190][ T5301] usb 3-1: config 0 descriptor?? [ 983.460476][T19266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 983.491590][T19256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.534943][ T48] usb 5-1: USB disconnect, device number 31 [ 983.672665][T19256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.982578][ T5301] gspca_main: spca501-2.14.0 probing 0497:c001 [ 984.016691][ T5301] gspca_spca501: reg write: error -71 [ 984.032725][ T5301] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 984.055921][ T5301] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 984.088835][ T5301] usb 3-1: USB disconnect, device number 28 [ 984.659618][T19285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 984.775874][ T1171] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 984.987204][ T1171] usb 2-1: Using ep0 maxpacket: 16 [ 985.058198][ T1171] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 985.069904][T19272] dccp_close: ABORT with 32 bytes unread [ 985.081182][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.081670][ T1171] usb 2-1: Product: syz [ 985.082961][ T1171] usb 2-1: Manufacturer: syz [ 985.083142][ T1171] usb 2-1: SerialNumber: syz [ 985.087809][ T1171] usb 2-1: config 0 descriptor?? [ 985.102956][ T1171] as10x_usb: device has been detected [ 985.103730][ T1171] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 985.177050][ T1171] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 985.185202][ T1171] as10x_usb: error during firmware upload part1 [ 985.185274][ T1171] Registered device Sky IT Digital Key (green led) [ 985.316596][T19283] random: crng reseeded on system resumption [ 985.508393][ T1171] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 985.653149][T19301] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 985.696445][ T1171] usb 5-1: Using ep0 maxpacket: 32 [ 985.708152][ T1171] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 985.735797][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.764507][ T1171] usb 5-1: config 0 descriptor?? [ 985.784158][ T1171] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 985.805108][T19297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.831484][T19297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.917562][T10215] usb 2-1: USB disconnect, device number 33 [ 985.980465][T10215] Unregistered device Sky IT Digital Key (green led) [ 985.993361][T10215] as10x_usb: device has been disconnected [ 986.101016][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 986.329237][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 986.339981][ T9] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 986.356686][ T9] usb 4-1: config 0 has no interface number 0 [ 986.373106][ T9] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.448965][ T9] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.475879][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 986.505894][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.548201][ T9] usb 4-1: config 0 descriptor?? [ 986.988193][ T9] wacom 0003:056A:0084.004D: unknown main item tag 0x0 [ 987.015445][ T9] wacom 0003:056A:0084.004D: unknown main item tag 0x0 [ 987.044817][ T9] wacom 0003:056A:0084.004D: item fetching failed at offset 2/5 [ 987.138351][ T9] wacom 0003:056A:0084.004D: parse failed [ 987.166190][ T1171] gspca_vc032x: reg_w err -110 [ 987.174646][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.180746][ T9] wacom 0003:056A:0084.004D: probe with driver wacom failed with error -22 [ 987.190484][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.210796][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.223547][ T9] usb 4-1: USB disconnect, device number 12 [ 987.244046][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.277506][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.294560][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.312543][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.330227][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.368106][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.398030][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.425812][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.441234][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.467113][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.491775][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.505037][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.528309][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.554071][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.576263][ T1171] gspca_vc032x: I2c Bus Busy Wait 00 [ 987.581608][ T1171] gspca_vc032x: Unknown sensor... [ 987.630112][ T1171] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 987.759640][T19330] syz.0.3028: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 987.815365][T19330] CPU: 0 UID: 0 PID: 19330 Comm: syz.0.3028 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 987.826189][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 987.836257][T19330] Call Trace: [ 987.839544][T19330] [ 987.842477][T19330] dump_stack_lvl+0x241/0x360 [ 987.847185][T19330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.852434][T19330] ? __pfx__printk+0x10/0x10 [ 987.857048][T19330] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 987.863467][T19330] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 987.869994][T19330] warn_alloc+0x278/0x410 [ 987.874362][T19330] ? stack_depot_save_flags+0x29/0x830 [ 987.879863][T19330] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 987.885967][T19330] ? __pfx_warn_alloc+0x10/0x10 [ 987.890828][T19330] ? kasan_save_track+0x3f/0x80 [ 987.895693][T19330] ? __kasan_kmalloc+0x98/0xb0 [ 987.900498][T19330] ? xsk_setsockopt+0x598/0x950 [ 987.905352][T19330] ? do_sock_setsockopt+0x3af/0x720 [ 987.910582][T19330] ? __sys_setsockopt+0x1ae/0x250 [ 987.915614][T19330] ? __x64_sys_setsockopt+0xb5/0xd0 [ 987.920843][T19330] ? do_syscall_64+0xf3/0x230 [ 987.925540][T19330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.931617][T19330] __vmalloc_node_range_noprof+0x126/0x1400 [ 987.937539][T19330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 987.943978][T19330] ? __kasan_kmalloc+0x98/0xb0 [ 987.948752][T19330] ? xskq_create+0x54/0x170 [ 987.953269][T19330] vmalloc_user_noprof+0x74/0x80 [ 987.958231][T19330] ? xskq_create+0xb6/0x170 [ 987.962740][T19330] xskq_create+0xb6/0x170 [ 987.967081][T19330] xsk_init_queue+0xa1/0x100 [ 987.971685][T19330] xsk_setsockopt+0x598/0x950 [ 987.976370][T19330] ? __pfx_xsk_setsockopt+0x10/0x10 [ 987.981577][T19330] ? __pfx_lock_acquire+0x10/0x10 [ 987.986606][T19330] ? aa_sock_opt_perm+0x79/0x120 [ 987.991545][T19330] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 987.997121][T19330] ? security_socket_setsockopt+0x87/0xb0 [ 988.002933][T19330] ? __pfx_xsk_setsockopt+0x10/0x10 [ 988.008143][T19330] do_sock_setsockopt+0x3af/0x720 [ 988.013174][T19330] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 988.018724][T19330] ? __fget_files+0x29/0x470 [ 988.023320][T19330] ? __fget_files+0x3f6/0x470 [ 988.028010][T19330] __sys_setsockopt+0x1ae/0x250 [ 988.032875][T19330] __x64_sys_setsockopt+0xb5/0xd0 [ 988.037904][T19330] do_syscall_64+0xf3/0x230 [ 988.042422][T19330] ? clear_bhb_loop+0x35/0x90 [ 988.047210][T19330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.053153][T19330] RIP: 0033:0x7fa539b79ef9 [ 988.057580][T19330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.077304][T19330] RSP: 002b:00007fa53a87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 988.085733][T19330] RAX: ffffffffffffffda RBX: 00007fa539d15f80 RCX: 00007fa539b79ef9 [ 988.093720][T19330] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 988.101707][T19330] RBP: 00007fa539be793e R08: 0000000000000020 R09: 0000000000000000 [ 988.109684][T19330] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 988.117680][T19330] R13: 0000000000000000 R14: 00007fa539d15f80 R15: 00007fa539e3fa28 [ 988.125717][T19330] [ 988.189785][T19330] Mem-Info: [ 988.198000][T19330] active_anon:16040 inactive_anon:0 isolated_anon:0 [ 988.198000][T19330] active_file:20643 inactive_file:38659 isolated_file:0 [ 988.198000][T19330] unevictable:1769 dirty:432 writeback:0 [ 988.198000][T19330] slab_reclaimable:9731 slab_unreclaimable:102251 [ 988.198000][T19330] mapped:23522 shmem:10973 pagetables:952 [ 988.198000][T19330] sec_pagetables:0 bounce:0 [ 988.198000][T19330] kernel_misc_reclaimable:0 [ 988.198000][T19330] free:1341560 free_pcp:1720 free_cma:0 [ 988.288103][T19330] Node 0 active_anon:63088kB inactive_anon:0kB active_file:82308kB inactive_file:154568kB unevictable:5632kB isolated(anon):0kB isolated(file):0kB mapped:95768kB dirty:1748kB writeback:0kB shmem:41060kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10796kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no [ 988.368049][T19330] Node 1 active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:248kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 988.436941][T19330] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.436997][T19330] lowmem_reserve[]: 0 2561 2562 0 0 [ 988.437034][T19330] Node 0 DMA32 free:1393656kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:59744kB inactive_anon:0kB active_file:82308kB inactive_file:153240kB unevictable:5632kB writepending:1748kB present:3129332kB managed:2651236kB mlocked:4096kB bounce:0kB free_pcp:11548kB local_pcp:600kB free_cma:0kB [ 988.437081][T19330] lowmem_reserve[]: 0 0 1 0 0 [ 988.437116][T19330] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 988.437161][T19330] lowmem_reserve[]: 0 0 0 0 0 [ 988.437196][T19330] Node 1 Normal free:3953504kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.437241][T19330] lowmem_reserve[]: 0 0 0 0 0 [ 988.437276][T19330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 988.437387][T19330] Node 0 DMA32: 1242*4kB (UME) 984*8kB (UME) 345*16kB (UME) 481*32kB (UME) 377*64kB (UME) 133*128kB (UME) 343*256kB (UM) 188*512kB (UME) 84*1024kB (UM) 18*2048kB (UE) 247*4096kB (UM) = 1393560kB [ 988.437541][T19330] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 988.437661][T19330] Node 1 Normal: 10*4kB (UM) 13*8kB (UM) 21*16kB (UM) 16*32kB (UM) 18*64kB (UM) 12*128kB (UM) 7*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 6*2048kB (UM) 959*4096kB (M) = 3953504kB [ 988.437839][T19330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.437854][T19330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.437869][T19330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.437884][T19330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.437899][T19330] 69153 total pagecache pages [ 988.437909][T19330] 0 pages in swap cache [ 988.439021][T19330] Free swap = 124264kB [ 988.439103][T19330] Total swap = 124996kB [ 988.439119][T19330] 2097051 pages RAM [ 988.439129][T19330] 0 pages HighMem/MovableOnly [ 988.439141][T19330] 402776 pages reserved [ 988.439148][T19330] 0 pages cma reserved [ 989.525978][ T48] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 989.542342][T19357] netlink: 'syz.1.3036': attribute type 4 has an invalid length. [ 989.633931][T19357] dccp_invalid_packet: P.type (SYNCACK) not Data || [Data]Ack, while P.X == 0 [ 989.726764][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 989.745375][ T48] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 989.777670][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.800317][ T48] usb 3-1: Product: syz [ 989.813842][ T48] usb 3-1: Manufacturer: syz [ 989.824557][ T48] usb 3-1: SerialNumber: syz [ 989.852050][ T48] usb 3-1: config 0 descriptor?? [ 989.879902][ T48] as10x_usb: device has been detected [ 989.907141][ T48] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 989.970040][T10215] usb 5-1: USB disconnect, device number 32 [ 990.029125][ T48] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 990.086485][T19355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.098762][ T48] as10x_usb: error during firmware upload part1 [ 990.125613][ T48] Registered device Sky IT Digital Key (green led) [ 990.149094][T19355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.218799][ T48] usb 3-1: USB disconnect, device number 29 [ 990.282222][ T48] Unregistered device Sky IT Digital Key (green led) [ 990.295382][ T48] as10x_usb: device has been disconnected [ 990.729852][T19375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.246669][ T58] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 991.405899][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 991.459206][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 991.494827][ T58] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 991.531548][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.558948][ T58] usb 3-1: Product: syz [ 991.572415][ T58] usb 3-1: Manufacturer: syz [ 991.581043][ T58] usb 3-1: SerialNumber: syz [ 991.586079][ T9] usb 5-1: device descriptor read/64, error -71 [ 991.600291][ T58] usb 3-1: config 0 descriptor?? [ 991.623716][ T58] gspca_main: se401-2.14.0 probing 047d:5003 [ 991.866151][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 992.057173][ T9] usb 5-1: device descriptor read/64, error -71 [ 992.159172][ T58] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 992.182209][ T58] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 992.202205][ T9] usb usb5-port1: attempt power cycle [ 992.204209][ T58] usb 3-1: USB disconnect, device number 30 [ 992.506033][T14419] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 992.666892][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 992.745901][T14419] usb 1-1: Using ep0 maxpacket: 16 [ 992.746892][ T9] usb 5-1: device descriptor read/8, error -71 [ 992.759809][T14419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.813618][T14419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.873397][T14419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 992.884884][T14419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 992.897147][T14419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 992.907784][T14419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 992.917907][T14419] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 992.933724][T14419] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.944501][T14419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 992.953229][T14419] usb 1-1: SerialNumber: syz [ 992.982124][T14419] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 992.996804][T14419] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 993.036920][T19396] MPI: mpi too large (32768 bits) [ 993.065798][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 993.111679][ T9] usb 5-1: device descriptor read/8, error -71 [ 993.187663][T19392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.209173][T19392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.226069][ T48] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 993.237625][ T9] usb usb5-port1: unable to enumerate USB device [ 993.239240][T14419] usb 1-1: USB disconnect, device number 46 [ 993.313891][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.321508][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.415761][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 993.429177][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 993.447758][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 993.489617][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 993.533917][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 993.555803][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.576562][ T48] usb 3-1: config 0 descriptor?? [ 993.590756][T19394] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 993.606886][ T48] hub 3-1:0.0: USB hub found [ 993.856068][ T48] hub 3-1:0.0: 2 ports detected [ 993.906105][ T5288] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 994.026366][T19406] fuse: Bad value for 'group_id' [ 994.031416][T19406] fuse: Bad value for 'group_id' [ 994.109345][ T5288] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 994.160029][ T5288] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 994.204910][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.232592][ T5288] usb 2-1: config 0 descriptor?? [ 994.275446][ T5288] usb 2-1: bad CDC descriptors [ 994.580080][ T5288] usb 2-1: USB disconnect, device number 34 [ 994.856383][ T48] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 995.006050][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 995.226180][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 995.246846][ T9] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 995.263807][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.272806][ T9] usb 5-1: Product: syz [ 995.277838][ T9] usb 5-1: Manufacturer: syz [ 995.282476][ T9] usb 5-1: SerialNumber: syz [ 995.308831][ T9] usb 5-1: config 0 descriptor?? [ 995.327329][ T9] as10x_usb: device has been detected [ 995.333606][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 995.356000][ T58] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 995.364773][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 995.376700][ T9] as10x_usb: error during firmware upload part1 [ 995.383038][ T9] Registered device Sky IT Digital Key (green led) [ 995.546967][T19410] random: crng reseeded on system resumption [ 995.565826][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 995.577006][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.595739][ T58] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 995.619278][ T58] usb 1-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 995.635800][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.643893][ T58] usb 1-1: Product: syz [ 995.655779][ T58] usb 1-1: Manufacturer: syz [ 995.660440][ T58] usb 1-1: SerialNumber: syz [ 995.678620][ T58] usb 1-1: config 0 descriptor?? [ 995.861170][T19420] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 995.898156][ T58] usb 1-1: USB disconnect, device number 47 [ 995.924156][T19420] team0: Port device wlan1 added [ 995.987025][T19417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.006501][T19417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.034744][ T5301] usb 5-1: USB disconnect, device number 37 [ 996.074770][ T5301] Unregistered device Sky IT Digital Key (green led) [ 996.081375][ T5301] as10x_usb: device has been disconnected [ 996.285907][T10215] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 996.465815][T10215] usb 2-1: Using ep0 maxpacket: 16 [ 996.475131][T10215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 996.475835][ T58] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 996.497121][T10215] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 996.514026][T10215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.532616][T10215] usb 2-1: Product: syz [ 996.537659][T10215] usb 2-1: Manufacturer: syz [ 996.542294][T10215] usb 2-1: SerialNumber: syz [ 996.562568][T10215] usb 2-1: config 0 descriptor?? [ 996.685949][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 996.698672][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.725746][ T58] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 996.749029][ T58] usb 1-1: string descriptor 0 read error: -22 [ 996.755379][ T58] usb 1-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 996.779374][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.804678][ T58] usb 1-1: config 0 descriptor?? [ 997.194204][ T5301] usb 2-1: USB disconnect, device number 35 [ 997.201077][T19419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.219889][ T5301] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -19 [ 997.236782][ T5301] f81534a_ctrl 2-1:0.0: failed to enable ports: -19 [ 997.426858][ T5288] usb 3-1: USB disconnect, device number 31 [ 997.937307][T19439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.961664][T19439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.114461][ T58] usb 1-1: USB disconnect, device number 48 [ 998.198290][ T5301] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 998.409281][ T5301] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 998.452393][ T5301] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 998.489252][ T5301] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 998.530979][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.578230][T19437] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 998.628373][ T5301] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.026076][ T5288] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 999.254264][ T5288] usb 3-1: unable to get BOS descriptor or descriptor too short [ 999.292788][ T5288] usb 3-1: not running at top speed; connect to a high speed hub [ 999.325223][ T5288] usb 3-1: config 0 interface 0 has no altsetting 0 [ 999.420282][ T5288] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 999.445179][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.463828][ T5288] usb 3-1: Product: syz [ 999.470513][ T5288] usb 3-1: Manufacturer: syz [ 999.484751][ T5288] usb 3-1: SerialNumber: syz [ 999.508694][ T5288] usb 3-1: config 0 descriptor?? [ 999.792359][T19451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.830795][T19451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.334027][ T5288] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1000.372465][ T5288] gspca_spca501: reg write: error -71 [ 1000.399550][ T5288] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 1000.438620][ T5288] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 1000.481947][ T5288] usb 3-1: USB disconnect, device number 32 [ 1000.946907][T10215] usb 5-1: USB disconnect, device number 38 [ 1000.985047][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1001.279376][T19466] netlink: 'syz.2.3074': attribute type 29 has an invalid length. [ 1001.347678][T19469] netlink: 'syz.2.3074': attribute type 29 has an invalid length. [ 1001.416127][T19466] netlink: 'syz.2.3074': attribute type 29 has an invalid length. [ 1001.479026][T19469] netlink: 'syz.2.3074': attribute type 29 has an invalid length. [ 1001.557199][T19466] netlink: 'syz.2.3074': attribute type 29 has an invalid length. [ 1001.609291][T19473] FAULT_INJECTION: forcing a failure. [ 1001.609291][T19473] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.626859][T19466] FAULT_INJECTION: forcing a failure. [ 1001.626859][T19466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.660036][T19473] CPU: 0 UID: 0 PID: 19473 Comm: syz.0.3077 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1001.670889][T19473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.680983][T19473] Call Trace: [ 1001.684289][T19473] [ 1001.687246][T19473] dump_stack_lvl+0x241/0x360 [ 1001.691974][T19473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.697218][T19473] ? __pfx__printk+0x10/0x10 [ 1001.701866][T19473] ? ref_tracker_alloc+0x332/0x490 [ 1001.707027][T19473] should_fail_ex+0x3b0/0x4e0 [ 1001.711748][T19473] ? skb_clone+0x20c/0x390 [ 1001.716294][T19473] should_failslab+0xac/0x100 [ 1001.721018][T19473] ? skb_clone+0x20c/0x390 [ 1001.725558][T19473] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1001.730972][T19473] skb_clone+0x20c/0x390 [ 1001.735343][T19473] __netlink_deliver_tap+0x3cc/0x7c0 [ 1001.740685][T19473] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.745928][T19473] netlink_deliver_tap+0x19d/0x1b0 [ 1001.751084][T19473] netlink_unicast+0x7c4/0x990 [ 1001.755897][T19473] ? __pfx_netlink_unicast+0x10/0x10 [ 1001.761214][T19473] ? __virt_addr_valid+0x183/0x530 [ 1001.766365][T19473] ? __check_object_size+0x49c/0x900 [ 1001.771726][T19473] ? bpf_lsm_netlink_send+0x9/0x10 [ 1001.776892][T19473] netlink_sendmsg+0x8e4/0xcb0 [ 1001.781713][T19473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.787036][T19473] ? __import_iovec+0x536/0x820 [ 1001.791925][T19473] ? aa_sock_msg_perm+0x91/0x160 [ 1001.796898][T19473] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1001.802222][T19473] ? security_socket_sendmsg+0x87/0xb0 [ 1001.807736][T19473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.813052][T19473] __sock_sendmsg+0x221/0x270 [ 1001.817788][T19473] ____sys_sendmsg+0x525/0x7d0 [ 1001.822611][T19473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.827958][T19473] __sys_sendmsg+0x2b0/0x3a0 [ 1001.832591][T19473] ? __pfx___sys_sendmsg+0x10/0x10 [ 1001.837745][T19473] ? vfs_write+0x7c4/0xc90 [ 1001.842266][T19473] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1001.848747][T19473] ? do_syscall_64+0x100/0x230 [ 1001.853647][T19473] ? do_syscall_64+0xb6/0x230 [ 1001.858358][T19473] do_syscall_64+0xf3/0x230 [ 1001.862890][T19473] ? clear_bhb_loop+0x35/0x90 [ 1001.867623][T19473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.873712][T19473] RIP: 0033:0x7fa539b79ef9 [ 1001.878164][T19473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.897817][T19473] RSP: 002b:00007fa53a87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.906288][T19473] RAX: ffffffffffffffda RBX: 00007fa539d15f80 RCX: 00007fa539b79ef9 [ 1001.914298][T19473] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1001.922312][T19473] RBP: 00007fa53a87b090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.930337][T19473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.938427][T19473] R13: 0000000000000000 R14: 00007fa539d15f80 R15: 00007fa539e3fa28 [ 1001.946447][T19473] [ 1001.965855][T19466] CPU: 0 UID: 0 PID: 19466 Comm: syz.2.3074 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1001.976686][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.986783][T19466] Call Trace: [ 1001.990100][T19466] [ 1001.993054][T19466] dump_stack_lvl+0x241/0x360 [ 1001.997786][T19466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1002.003031][T19466] ? __pfx__printk+0x10/0x10 [ 1002.007668][T19466] ? __pfx_lock_release+0x10/0x10 [ 1002.012731][T19466] should_fail_ex+0x3b0/0x4e0 [ 1002.017462][T19466] _copy_from_user+0x2f/0xe0 [ 1002.022094][T19466] copy_msghdr_from_user+0xae/0x680 [ 1002.027343][T19466] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1002.033219][T19466] __sys_recvmsg+0x252/0x3e0 [ 1002.037860][T19466] ? __pfx___sys_recvmsg+0x10/0x10 [ 1002.043051][T19466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1002.049516][T19466] ? do_syscall_64+0x100/0x230 [ 1002.054320][T19466] ? do_syscall_64+0xb6/0x230 [ 1002.059046][T19466] do_syscall_64+0xf3/0x230 [ 1002.063574][T19466] ? clear_bhb_loop+0x35/0x90 [ 1002.068284][T19466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.074199][T19466] RIP: 0033:0x7fcea8379ef9 [ 1002.078658][T19466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.098277][T19466] RSP: 002b:00007fcea7dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1002.106704][T19466] RAX: ffffffffffffffda RBX: 00007fcea8515f80 RCX: 00007fcea8379ef9 [ 1002.114680][T19466] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 1002.122661][T19466] RBP: 00007fcea7dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.130661][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.138640][T19466] R13: 0000000000000000 R14: 00007fcea8515f80 R15: 00007fcea863fa28 [ 1002.146647][T19466] [ 1002.154082][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1002.166510][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.174997][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.183844][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.248930][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1002.271854][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.493704][T19477] netlink: 'syz.4.3080': attribute type 5 has an invalid length. [ 1002.750391][ T2509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.923136][T19492] TCP: tcp_parse_options: Illegal window scaling value 117 > 14 received [ 1002.989184][T19492] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1003.091933][T19492] warn_alloc: 2 callbacks suppressed [ 1003.091956][T19492] syz.4.3083: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1003.100028][ T2509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.148944][T19492] ,cpuset=syz4,mems_allowed=0-1 [ 1003.183506][T19492] CPU: 0 UID: 0 PID: 19492 Comm: syz.4.3083 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1003.194318][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1003.204408][T19492] Call Trace: [ 1003.207705][T19492] [ 1003.210752][T19492] dump_stack_lvl+0x241/0x360 [ 1003.215513][T19492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.220741][T19492] ? __pfx__printk+0x10/0x10 [ 1003.225352][T19492] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1003.231778][T19492] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1003.238295][T19492] warn_alloc+0x278/0x410 [ 1003.242641][T19492] ? stack_depot_save_flags+0x29/0x830 [ 1003.248115][T19492] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 1003.254192][T19492] ? __pfx_warn_alloc+0x10/0x10 [ 1003.259056][T19492] ? kasan_save_track+0x3f/0x80 [ 1003.263931][T19492] ? __kasan_kmalloc+0x98/0xb0 [ 1003.268749][T19492] ? xsk_setsockopt+0x598/0x950 [ 1003.273644][T19492] ? do_sock_setsockopt+0x3af/0x720 [ 1003.278868][T19492] ? __sys_setsockopt+0x1ae/0x250 [ 1003.283899][T19492] ? __x64_sys_setsockopt+0xb5/0xd0 [ 1003.289103][T19492] ? do_syscall_64+0xf3/0x230 [ 1003.293791][T19492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.299894][T19492] __vmalloc_node_range_noprof+0x126/0x1400 [ 1003.305820][T19492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1003.312158][T19492] ? __kasan_kmalloc+0x98/0xb0 [ 1003.316935][T19492] ? xskq_create+0x54/0x170 [ 1003.321450][T19492] vmalloc_user_noprof+0x74/0x80 [ 1003.326397][T19492] ? xskq_create+0xb6/0x170 [ 1003.330917][T19492] xskq_create+0xb6/0x170 [ 1003.335272][T19492] xsk_init_queue+0xa1/0x100 [ 1003.340347][T19492] xsk_setsockopt+0x598/0x950 [ 1003.345090][T19492] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1003.350316][T19492] ? __pfx_lock_acquire+0x10/0x10 [ 1003.355385][T19492] ? aa_sock_opt_perm+0x79/0x120 [ 1003.360382][T19492] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1003.365970][T19492] ? security_socket_setsockopt+0x87/0xb0 [ 1003.371722][T19492] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1003.376945][T19492] do_sock_setsockopt+0x3af/0x720 [ 1003.381983][T19492] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1003.387535][T19492] ? __fget_files+0x29/0x470 [ 1003.392139][T19492] ? __fget_files+0x3f6/0x470 [ 1003.396856][T19492] __sys_setsockopt+0x1ae/0x250 [ 1003.401725][T19492] __x64_sys_setsockopt+0xb5/0xd0 [ 1003.406769][T19492] do_syscall_64+0xf3/0x230 [ 1003.411293][T19492] ? clear_bhb_loop+0x35/0x90 [ 1003.415983][T19492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.421885][T19492] RIP: 0033:0x7f1c88779ef9 [ 1003.426305][T19492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.445915][T19492] RSP: 002b:00007f1c894fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1003.454331][T19492] RAX: ffffffffffffffda RBX: 00007f1c88915f80 RCX: 00007f1c88779ef9 [ 1003.462337][T19492] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1003.470308][T19492] RBP: 00007f1c887e793e R08: 0000000000000020 R09: 0000000000000000 [ 1003.478282][T19492] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1003.486259][T19492] R13: 0000000000000000 R14: 00007f1c88915f80 R15: 00007f1c88a3fa28 [ 1003.494297][T19492] [ 1003.633228][T19492] Mem-Info: [ 1003.654583][T19492] active_anon:19641 inactive_anon:0 isolated_anon:0 [ 1003.654583][T19492] active_file:20643 inactive_file:38668 isolated_file:0 [ 1003.654583][T19492] unevictable:767 dirty:334 writeback:0 [ 1003.654583][T19492] slab_reclaimable:9703 slab_unreclaimable:104968 [ 1003.654583][T19492] mapped:31385 shmem:14958 pagetables:982 [ 1003.654583][T19492] sec_pagetables:0 bounce:0 [ 1003.654583][T19492] kernel_misc_reclaimable:0 [ 1003.654583][T19492] free:1336750 free_pcp:1033 free_cma:0 [ 1003.773180][ T2509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.896527][T19492] Node 0 active_anon:79960kB inactive_anon:0kB active_file:82308kB inactive_file:154596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127292kB dirty:1332kB writeback:0kB shmem:60296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10448kB pagetables:3728kB sec_pagetables:0kB all_unreclaimable? no [ 1003.930009][T19492] Node 1 active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:248kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1003.960712][T19492] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.988078][T19492] lowmem_reserve[]: 0 2561 2562 0 0 [ 1003.994433][T19492] Node 0 DMA32 free:1378480kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:81116kB inactive_anon:0kB active_file:82308kB inactive_file:153268kB unevictable:1536kB writepending:1328kB present:3129332kB managed:2651236kB mlocked:0kB bounce:0kB free_pcp:2036kB local_pcp:1148kB free_cma:0kB [ 1004.025081][T19492] lowmem_reserve[]: 0 0 1 0 0 [ 1004.029979][T19492] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1004.097719][T19492] lowmem_reserve[]: 0 0 0 0 0 [ 1004.103707][T19492] Node 1 Normal free:3953504kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:264kB inactive_file:76kB unevictable:1532kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1004.143934][T19508] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3086'. [ 1004.153292][T19492] lowmem_reserve[]: 0 0 0 0 0 [ 1004.158995][T19492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1004.173035][T19492] Node 0 DMA32: 1297*4kB (UE) 74*8kB (UE) 297*16kB (UE) 346*32kB (UME) 25*64kB (UME) 120*128kB (UME) 328*256kB (UME) 205*512kB (UME) 91*1024kB (UM) 20*2048kB (UME) 248*4096kB (UM) = 1377444kB [ 1004.245819][T19492] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1004.285735][T19492] Node 1 Normal: 10*4kB [ 1004.287112][ T2509] bond0: (slave netdevsim0): Releasing backup interface [ 1004.311724][T19492] (UM) 13*8kB (UM) 21*16kB (UM) 16*32kB (UM) 18*64kB (UM) 12*128kB (UM) 7*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 6*2048kB (UM) 959*4096kB (M) = 3953504kB [ 1004.328233][T19492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.337879][T19492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.347280][ T54] Bluetooth: hci5: command tx timeout [ 1004.347277][T19492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.352679][T19492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.352702][T19492] 75764 total pagecache pages [ 1004.352715][T19492] 0 pages in swap cache [ 1004.352725][T19492] Free swap = 124264kB [ 1004.352736][T19492] Total swap = 124996kB [ 1004.352750][T19492] 2097051 pages RAM [ 1004.352762][T19492] 0 pages HighMem/MovableOnly [ 1004.352773][T19492] 402776 pages reserved [ 1004.352782][T19492] 0 pages cma reserved [ 1004.423117][ T2509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.646243][ T5288] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1004.717888][T19514] FAULT_INJECTION: forcing a failure. [ 1004.717888][T19514] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.786066][T19514] CPU: 1 UID: 0 PID: 19514 Comm: syz.1.3088 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1004.796900][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1004.806994][T19514] Call Trace: [ 1004.810317][T19514] [ 1004.813279][T19514] dump_stack_lvl+0x241/0x360 [ 1004.818014][T19514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.823261][T19514] ? __pfx__printk+0x10/0x10 [ 1004.827901][T19514] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1004.833917][T19514] ? __pfx___might_resched+0x10/0x10 [ 1004.835881][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 1004.839229][T19514] should_fail_ex+0x3b0/0x4e0 [ 1004.839277][T19514] should_failslab+0xac/0x100 [ 1004.854019][T19514] ? __alloc_skb+0x1c3/0x440 [ 1004.858649][T19514] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1004.864501][T19514] __alloc_skb+0x1c3/0x440 [ 1004.868953][T19514] ? __pfx___alloc_skb+0x10/0x10 [ 1004.873926][T19514] ? netlink_ack_tlv_len+0x6e/0x200 [ 1004.879145][T19514] netlink_ack+0x13f/0xa30 [ 1004.883582][T19514] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1004.889082][T19514] netlink_rcv_skb+0x262/0x430 [ 1004.893864][T19514] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1004.899343][T19514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.904667][T19514] ? netlink_deliver_tap+0x2e/0x1b0 [ 1004.909885][T19514] netlink_unicast+0x7f6/0x990 [ 1004.914670][T19514] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.919972][T19514] ? __virt_addr_valid+0x183/0x530 [ 1004.925093][T19514] ? __check_object_size+0x49c/0x900 [ 1004.930389][T19514] ? bpf_lsm_netlink_send+0x9/0x10 [ 1004.935513][T19514] netlink_sendmsg+0x8e4/0xcb0 [ 1004.940316][T19514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.945611][T19514] ? __import_iovec+0x536/0x820 [ 1004.950473][T19514] ? aa_sock_msg_perm+0x91/0x160 [ 1004.955436][T19514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1004.960733][T19514] ? security_socket_sendmsg+0x87/0xb0 [ 1004.966238][T19514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.971530][T19514] __sock_sendmsg+0x221/0x270 [ 1004.976227][T19514] ____sys_sendmsg+0x525/0x7d0 [ 1004.981049][T19514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.986365][T19514] __sys_sendmsg+0x2b0/0x3a0 [ 1004.990978][T19514] ? __pfx___sys_sendmsg+0x10/0x10 [ 1004.996092][T19514] ? vfs_write+0x7c4/0xc90 [ 1005.000570][T19514] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1005.006936][T19514] ? do_syscall_64+0x100/0x230 [ 1005.011732][T19514] ? do_syscall_64+0xb6/0x230 [ 1005.016432][T19514] do_syscall_64+0xf3/0x230 [ 1005.020947][T19514] ? clear_bhb_loop+0x35/0x90 [ 1005.025638][T19514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.031556][T19514] RIP: 0033:0x7f5f58379ef9 [ 1005.035985][T19514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.055602][T19514] RSP: 002b:00007f5f59120038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.064055][T19514] RAX: ffffffffffffffda RBX: 00007f5f58516058 RCX: 00007f5f58379ef9 [ 1005.072050][T19514] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1005.080065][T19514] RBP: 00007f5f59120090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.088053][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.096035][T19514] R13: 0000000000000001 R14: 00007f5f58516058 R15: 00007f5f5863fa28 [ 1005.104034][T19514] [ 1005.113554][ T5288] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 1005.123794][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.167282][T19478] chnl_net:caif_netlink_parms(): no params data found [ 1005.213377][ T5288] usb 3-1: Product: syz [ 1005.235071][ T5288] usb 3-1: Manufacturer: syz [ 1005.260322][ T5288] usb 3-1: SerialNumber: syz [ 1005.282682][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 1005.320696][ T5288] usb 3-1: config 0 descriptor?? [ 1005.404532][ T5288] gspca_main: conex-2.14.0 probing 0572:0041 [ 1005.505878][T14419] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1005.580018][T19478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.619048][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.649925][T19478] bridge_slave_0: entered allmulticast mode [ 1005.718316][T19478] bridge_slave_0: entered promiscuous mode [ 1005.746005][T14419] usb 2-1: Using ep0 maxpacket: 16 [ 1005.764746][T14419] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1005.818772][T19478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.825720][T14419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.853383][T19478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.871004][T14419] usb 2-1: Product: syz [ 1005.875223][T14419] usb 2-1: Manufacturer: syz [ 1005.910114][T19478] bridge_slave_1: entered allmulticast mode [ 1005.916802][ T5288] usb 3-1: USB disconnect, device number 33 [ 1005.946856][T19478] bridge_slave_1: entered promiscuous mode [ 1005.955391][T14419] usb 2-1: SerialNumber: syz [ 1005.985435][T14419] usb 2-1: config 0 descriptor?? [ 1006.027519][T14419] as10x_usb: device has been detected [ 1006.049337][T14419] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1006.109670][T19537] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1006.186666][T14419] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1006.234810][T19528] random: crng reseeded on system resumption [ 1006.241039][ T5301] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1006.257493][T14419] as10x_usb: error during firmware upload part1 [ 1006.288980][T19528] FAULT_INJECTION: forcing a failure. [ 1006.288980][T19528] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.303345][T14419] Registered device Sky IT Digital Key (green led) [ 1006.314567][T19478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.334285][T19528] CPU: 1 UID: 0 PID: 19528 Comm: syz.1.3093 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1006.345112][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1006.355206][T19528] Call Trace: [ 1006.358522][T19528] [ 1006.361495][T19528] dump_stack_lvl+0x241/0x360 [ 1006.366231][T19528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.371494][T19528] ? __pfx__printk+0x10/0x10 [ 1006.376191][T19528] should_fail_ex+0x3b0/0x4e0 [ 1006.380914][T19528] should_failslab+0xac/0x100 [ 1006.385610][T19528] ? async_schedule_node_domain+0x5c/0x110 [ 1006.391521][T19528] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1006.396825][T19528] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1006.403096][T19528] async_schedule_node_domain+0x5c/0x110 [ 1006.408750][T19528] dev_cache_fw_image+0x36d/0x3e0 [ 1006.413810][T19528] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1006.419388][T19528] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1006.425306][T19528] ? blake2s_update+0x1a5/0x280 [ 1006.430255][T19528] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1006.435823][T19528] dpm_for_each_dev+0x58/0xc0 [ 1006.440519][T19528] fw_pm_notify+0x24a/0x2f0 [ 1006.445034][T19528] ? __pfx_fw_pm_notify+0x10/0x10 [ 1006.450074][T19528] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1006.456173][T19528] ? trace_contention_end+0x3c/0x120 [ 1006.461485][T19528] ? __mutex_lock+0x2ef/0xd70 [ 1006.466179][T19528] notifier_call_chain+0x19f/0x3e0 [ 1006.471326][T19528] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 1006.477762][T19528] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1006.484802][T19528] ? __pfx___mutex_lock+0x10/0x10 [ 1006.489841][T19528] pm_notifier_call_chain_robust+0x2c/0x60 [ 1006.495672][T19528] snapshot_open+0x138/0x280 [ 1006.500280][T19528] ? __pfx_snapshot_open+0x10/0x10 [ 1006.505409][T19528] misc_open+0x313/0x390 [ 1006.509687][T19528] chrdev_open+0x5b0/0x630 [ 1006.514133][T19528] ? __pfx_chrdev_open+0x10/0x10 [ 1006.519119][T19528] ? security_file_open+0x51a/0x750 [ 1006.524353][T19528] ? __pfx_chrdev_open+0x10/0x10 [ 1006.529307][T19528] do_dentry_open+0x970/0x1440 [ 1006.534099][T19528] vfs_open+0x3e/0x330 [ 1006.538188][T19528] path_openat+0x2b3e/0x3470 [ 1006.542796][T19528] ? __pfx_stack_trace_save+0x10/0x10 [ 1006.548183][T19528] ? __lock_acquire+0x137a/0x2040 [ 1006.553240][T19528] ? __pfx_path_openat+0x10/0x10 [ 1006.558223][T19528] do_filp_open+0x235/0x490 [ 1006.562741][T19528] ? __pfx_do_filp_open+0x10/0x10 [ 1006.567797][T19528] ? _raw_spin_unlock+0x28/0x50 [ 1006.572662][T19528] ? alloc_fd+0x5a1/0x640 [ 1006.577018][T19528] do_sys_openat2+0x13e/0x1d0 [ 1006.581709][T19528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.587698][T19528] ? __pfx_do_sys_openat2+0x10/0x10 [ 1006.592909][T19528] ? __fget_files+0x3f6/0x470 [ 1006.597611][T19528] __x64_sys_openat+0x247/0x2a0 [ 1006.602479][T19528] ? __pfx___x64_sys_openat+0x10/0x10 [ 1006.607887][T19528] ? do_syscall_64+0x100/0x230 [ 1006.612664][T19528] ? do_syscall_64+0xb6/0x230 [ 1006.617353][T19528] do_syscall_64+0xf3/0x230 [ 1006.621865][T19528] ? clear_bhb_loop+0x35/0x90 [ 1006.626644][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.632556][T19528] RIP: 0033:0x7f5f58379ef9 [ 1006.636987][T19528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.656607][T19528] RSP: 002b:00007f5f59141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1006.665036][T19528] RAX: ffffffffffffffda RBX: 00007f5f58515f80 RCX: 00007f5f58379ef9 [ 1006.673020][T19528] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1006.681001][T19528] RBP: 00007f5f59141090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.688981][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.696960][T19528] R13: 0000000000000000 R14: 00007f5f58515f80 R15: 00007f5f5863fa28 [ 1006.704956][T19528] [ 1006.763388][ T54] Bluetooth: hci5: command tx timeout [ 1006.784802][T19528] [ 1006.787189][T19528] ============================================ [ 1006.793357][T19528] WARNING: possible recursive locking detected [ 1006.799531][T19528] 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 Not tainted [ 1006.806657][T19528] -------------------------------------------- [ 1006.812820][T19528] syz.1.3093/19528 is trying to acquire lock: [ 1006.818902][T19528] ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x56/0x890 [ 1006.826877][T19528] [ 1006.826877][T19528] but task is already holding lock: [ 1006.834250][T19528] ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 [ 1006.835989][ T5301] usb 5-1: device descriptor read/64, error -71 [ 1006.842535][T19528] [ 1006.842535][T19528] other info that might help us debug this: [ 1006.842547][T19528] Possible unsafe locking scenario: [ 1006.842547][T19528] [ 1006.842555][T19528] CPU0 [ 1006.842561][T19528] ---- [ 1006.842567][T19528] lock(fw_lock); [ 1006.874634][T19528] lock(fw_lock); [ 1006.878375][T19528] [ 1006.878375][T19528] *** DEADLOCK *** [ 1006.878375][T19528] [ 1006.886530][T19528] May be due to missing lock nesting notation [ 1006.886530][T19528] [ 1006.894856][T19528] 5 locks held by syz.1.3093/19528: [ 1006.900057][T19528] #0: ffffffff8f145568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1006.908521][T19528] #1: ffffffff8e7eb608 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x60/0xa0 [ 1006.918931][T19528] #2: ffffffff8e80bab0 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xac/0x1e0 [ 1006.930781][T19528] #3: ffffffff8f293008 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 [ 1006.939496][T19528] #4: ffffffff8f28e0a8 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2b/0xc0 [ 1006.948821][T19528] [ 1006.948821][T19528] stack backtrace: [ 1006.954706][T19528] CPU: 0 UID: 0 PID: 19528 Comm: syz.1.3093 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 1006.965638][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1006.975699][T19528] Call Trace: [ 1006.978981][T19528] [ 1006.981915][T19528] dump_stack_lvl+0x241/0x360 [ 1006.986611][T19528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.991820][T19528] ? print_deadlock_bug+0x479/0x620 [ 1006.997024][T19528] validate_chain+0x15d3/0x5900 [ 1007.001909][T19528] ? __pfx_validate_chain+0x10/0x10 [ 1007.007118][T19528] ? mark_lock+0x9a/0x350 [ 1007.011461][T19528] ? mark_lock+0x9a/0x350 [ 1007.015887][T19528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1007.022216][T19528] __lock_acquire+0x137a/0x2040 [ 1007.027075][T19528] lock_acquire+0x1ed/0x550 [ 1007.031580][T19528] ? assign_fw+0x56/0x890 [ 1007.035917][T19528] ? __pfx_lock_acquire+0x10/0x10 [ 1007.040946][T19528] ? kasan_save_track+0x51/0x80 [ 1007.045819][T19528] ? kasan_save_track+0x3f/0x80 [ 1007.050691][T19528] ? __pfx___might_resched+0x10/0x10 [ 1007.055995][T19528] ? _request_firmware+0xc68/0x12b0 [ 1007.061227][T19528] ? __async_dev_cache_fw_image+0xe7/0x320 [ 1007.067044][T19528] ? async_schedule_node_domain+0xdc/0x110 [ 1007.072857][T19528] ? dev_cache_fw_image+0x36d/0x3e0 [ 1007.078056][T19528] ? dpm_for_each_dev+0x58/0xc0 [ 1007.082926][T19528] ? fw_pm_notify+0x24a/0x2f0 [ 1007.087606][T19528] ? notifier_call_chain+0x19f/0x3e0 [ 1007.092896][T19528] ? blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 1007.099493][T19528] ? pm_notifier_call_chain_robust+0x2c/0x60 [ 1007.105484][T19528] ? misc_open+0x313/0x390 [ 1007.109910][T19528] ? chrdev_open+0x5b0/0x630 [ 1007.114503][T19528] ? do_dentry_open+0x970/0x1440 [ 1007.119448][T19528] ? path_openat+0x2b3e/0x3470 [ 1007.124217][T19528] __mutex_lock+0x136/0xd70 [ 1007.128739][T19528] ? assign_fw+0x56/0x890 [ 1007.133085][T19528] ? mark_lock+0x9a/0x350 [ 1007.137433][T19528] ? assign_fw+0x56/0x890 [ 1007.141763][T19528] ? __pfx___mutex_lock+0x10/0x10 [ 1007.146789][T19528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1007.152777][T19528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1007.159119][T19528] ? kasan_quarantine_put+0xdc/0x230 [ 1007.164424][T19528] assign_fw+0x56/0x890 [ 1007.168608][T19528] ? _request_firmware+0xc68/0x12b0 [ 1007.173812][T19528] ? kmem_cache_free+0x145/0x350 [ 1007.178784][T19528] _request_firmware+0xd0a/0x12b0 [ 1007.183841][T19528] ? __pfx__request_firmware+0x10/0x10 [ 1007.189320][T19528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1007.195423][T19528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1007.201761][T19528] __async_dev_cache_fw_image+0xe7/0x320 [ 1007.207404][T19528] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1007.213751][T19528] ? async_schedule_node_domain+0xa3/0x110 [ 1007.219566][T19528] ? rcu_is_watching+0x15/0xb0 [ 1007.224338][T19528] ? async_schedule_node_domain+0xa3/0x110 [ 1007.230163][T19528] ? kfree+0x4e/0x360 [ 1007.234144][T19528] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1007.240436][T19528] async_schedule_node_domain+0xdc/0x110 [ 1007.246100][T19528] dev_cache_fw_image+0x36d/0x3e0 [ 1007.251145][T19528] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1007.256715][T19528] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1007.262623][T19528] ? blake2s_update+0x1a5/0x280 [ 1007.267482][T19528] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1007.273124][T19528] dpm_for_each_dev+0x58/0xc0 [ 1007.277807][T19528] fw_pm_notify+0x24a/0x2f0 [ 1007.282321][T19528] ? __pfx_fw_pm_notify+0x10/0x10 [ 1007.287349][T19528] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1007.293426][T19528] ? trace_contention_end+0x3c/0x120 [ 1007.298715][T19528] ? __mutex_lock+0x2ef/0xd70 [ 1007.303398][T19528] notifier_call_chain+0x19f/0x3e0 [ 1007.308633][T19528] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 1007.315058][T19528] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1007.322089][T19528] ? __pfx___mutex_lock+0x10/0x10 [ 1007.327121][T19528] pm_notifier_call_chain_robust+0x2c/0x60 [ 1007.332943][T19528] snapshot_open+0x138/0x280 [ 1007.337549][T19528] ? __pfx_snapshot_open+0x10/0x10 [ 1007.342671][T19528] misc_open+0x313/0x390 [ 1007.346927][T19528] chrdev_open+0x5b0/0x630 [ 1007.351351][T19528] ? __pfx_chrdev_open+0x10/0x10 [ 1007.356299][T19528] ? security_file_open+0x51a/0x750 [ 1007.361530][T19528] ? __pfx_chrdev_open+0x10/0x10 [ 1007.366478][T19528] do_dentry_open+0x970/0x1440 [ 1007.371265][T19528] vfs_open+0x3e/0x330 [ 1007.375356][T19528] path_openat+0x2b3e/0x3470 [ 1007.379953][T19528] ? __pfx_stack_trace_save+0x10/0x10 [ 1007.385333][T19528] ? __lock_acquire+0x137a/0x2040 [ 1007.390371][T19528] ? __pfx_path_openat+0x10/0x10 [ 1007.395321][T19528] do_filp_open+0x235/0x490 [ 1007.399827][T19528] ? __pfx_do_filp_open+0x10/0x10 [ 1007.404863][T19528] ? _raw_spin_unlock+0x28/0x50 [ 1007.409809][T19528] ? alloc_fd+0x5a1/0x640 [ 1007.414146][T19528] do_sys_openat2+0x13e/0x1d0 [ 1007.418833][T19528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1007.424819][T19528] ? __pfx_do_sys_openat2+0x10/0x10 [ 1007.430023][T19528] ? __fget_files+0x3f6/0x470 [ 1007.434709][T19528] __x64_sys_openat+0x247/0x2a0 [ 1007.439572][T19528] ? __pfx___x64_sys_openat+0x10/0x10 [ 1007.444957][T19528] ? do_syscall_64+0x100/0x230 [ 1007.449737][T19528] ? do_syscall_64+0xb6/0x230 [ 1007.454428][T19528] do_syscall_64+0xf3/0x230 [ 1007.458931][T19528] ? clear_bhb_loop+0x35/0x90 [ 1007.463616][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.469514][T19528] RIP: 0033:0x7f5f58379ef9 [ 1007.473937][T19528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.493562][T19528] RSP: 002b:00007f5f59141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1007.501976][T19528] RAX: ffffffffffffffda RBX: 00007f5f58515f80 RCX: 00007f5f58379ef9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1007.509956][T19528] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1007.517932][T19528] RBP: 00007f5f59141090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.525907][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.533877][T19528] R13: 0000000000000000 R14: 00007f5f58515f80 R15: 00007f5f5863fa28 [ 1007.541861][T19528] [ 1007.705747][ T5301] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1008.836127][ T54] Bluetooth: hci5: command tx timeout [ 1010.906049][ T54] Bluetooth: hci5: command tx timeout [ 1012.906074][ T5301] usb 5-1: device descriptor read/64, error -110 [ 1013.026553][ T5301] usb usb5-port1: attempt power cycle [ 1013.436050][ T5301] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1013.466309][ T5301] usb 5-1: device descriptor read/8, error -32 [ 1013.737980][ T5301] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1013.776073][ T5301] usb 5-1: device descriptor read/8, error -32 [ 1013.895931][ T5301] usb usb5-port1: unable to enumerate USB device