last executing test programs: 10.774851884s ago: executing program 1 (id=638): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "20afe68c"}]}}, 0x0}, 0x0) 10.107527272s ago: executing program 0 (id=639): syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) 9.78241012s ago: executing program 4 (id=641): r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80800) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r4) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r6, 0x7, 0x3}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$RNDCLEARPOOL(r7, 0x5206, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 9.570946855s ago: executing program 4 (id=643): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x2}], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f000000af80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/168, 0xa8}], 0x1, &(0x7f0000000380)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001380)=@ax25={{}, [@bcast, @bcast, @null, @rose, @default, @netrom, @netrom]}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000001400)=""/90, 0x5a}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/12, 0xc}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/192, 0xc0}, {&(0x7f0000002600)=""/208, 0xd0}, {&(0x7f0000002700)=""/118, 0x76}], 0x9, &(0x7f0000002840)=""/124, 0x7c}, 0x3}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000028c0)=""/91, 0x5b}, {&(0x7f0000002940)}], 0x2}, 0x1}, {{&(0x7f00000029c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/185, 0xb9}], 0x1, &(0x7f0000002b40)=""/152, 0x98}, 0xe}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000003000)=[{&(0x7f0000002c80)=""/187, 0xbb}, {&(0x7f0000002d40)=""/35, 0x23}, {&(0x7f0000002d80)=""/94, 0x5e}, {&(0x7f0000002e00)=""/60, 0x3c}, {&(0x7f0000002e40)=""/25, 0x19}, {&(0x7f0000002e80)=""/143, 0x8f}, {&(0x7f0000002f40)=""/188, 0xbc}], 0x7}, 0x8000}, {{&(0x7f0000003080)=@tipc=@name, 0x80, &(0x7f0000003440)=[{&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/168, 0xa8}, {&(0x7f0000003240)=""/148, 0x94}, {&(0x7f0000003300)=""/145, 0x91}, {&(0x7f00000033c0)=""/91, 0x5b}], 0x5, &(0x7f00000034c0)=""/47, 0x2f}, 0x6}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003500)=""/194, 0xc2}, {&(0x7f0000003600)=""/91, 0x5b}], 0x2}, 0x7}, {{&(0x7f00000036c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000003740)=""/187, 0xbb}, {&(0x7f0000003800)=""/83, 0x53}, {&(0x7f0000003880)=""/108, 0x6c}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/134, 0x86}, {&(0x7f00000049c0)=""/32, 0x20}, {&(0x7f0000004a00)=""/170, 0xaa}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/204, 0xcc}, {&(0x7f0000005bc0)=""/137, 0x89}], 0xa, &(0x7f0000005d40)=""/165, 0xa5}, 0x1}, {{&(0x7f0000005e00)=@ax25={{0x3, @default}, [@bcast, @bcast, @null, @netrom, @rose, @rose, @remote, @bcast]}, 0x80, &(0x7f0000009f00)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/4096, 0x1000}, {&(0x7f0000007e80)=""/96, 0x60}, {&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x5, &(0x7f0000009f80)=""/4096, 0x1000}, 0x2}], 0x9, 0x2063, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) socket(0x28, 0x4, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f000000b1c0)=ANY=[@ANYBLOB="03000000040000000400000004000000000000b42c6fcf6a336ed22487ab6356f10ae45c073848ef8058a585bad62e321c7ea91aba2e13c85a3b2ff9e19faebe536234eb019203d8d4c8e04aeddd7f50887271c6c705e199b8a77d40cb781048456cc9c2251cc29f6f302119f690e785634a013adf2b5ac88108e568887b74780786f50a5308cac109995efc9488e2a5070d243287ca8207e7c97a31c2bd97673d9b0439ccf25ffef2d429eb5730aee92761", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, 0x0, &(0x7f0000000080)=""/2}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x20000001d4a31, r8, 0x0) 9.467131534s ago: executing program 3 (id=645): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x13, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f0000000680)=""/6, 0x6}], 0x5, &(0x7f0000000900)=""/136, 0x88}}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000a40)=""/145, 0x91}, 0x8}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b0000000000000600060037070000080005000000000005002a"], 0x58}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r6) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x2}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r10 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_disconnect(r10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 9.016819898s ago: executing program 1 (id=646): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfff}}]}, 0x38}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r5, 0x80111500, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x848}, 0x80) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f00000004c0)={{0xffffffffffffffff, 0x1, 0x5a7, 0x0, 0xe2d}, 0x3, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0x9, 0xfffffffffffffffb, 0x6, 0xe}) socket(0x10, 0x803, 0x0) 8.566995844s ago: executing program 1 (id=647): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000040)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0xffffffc1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080080003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) 6.90313415s ago: executing program 0 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) io_setup(0x23, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) (async) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="eee8d8791d702dd9d30672e3cb2d1630e7c2937d377dd0b4083f41f08494cdb4ac47ca08a341b98de19d1c8bf89a2e7a0abb5a5af41f3322ba019a1af1cef76739ec6ea379e6c43795c997f7f001341531cbb81ef2ad3ea89bb7c8446855af6fdea8ea5ba6e63e7aa4f473abdd8e3e", 0x6f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xdc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000093d11fc1ce5000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}}, 0x24000000) (async) io_destroy(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x29, @private=0xa010101, 0x15, 0x3, 'wlc\x00', 0x1, 0xffffffff, 0x4a}, 0x2c) (async) r7 = socket$kcm(0xa, 0x2, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000480)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x3, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 6.894213787s ago: executing program 1 (id=651): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="000106"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}}, 0x24004000) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0x4, @rand_addr=' \x01\x00', 0x400}}}, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) 6.479095623s ago: executing program 4 (id=652): socket$inet(0x10, 0xa, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1bd, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800f0bb", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r7 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000540)={'veth0_to_bridge\x00', {0x2, 0x0, @remote}}) 6.327451321s ago: executing program 3 (id=653): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x804) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6.021144534s ago: executing program 3 (id=654): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) socket$inet6(0xa, 0x3, 0x3c) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="005474b9e39a61203b983493f8a88a125d9f0700000000aa"], 0x18) r0 = syz_usb_connect$hid(0x0, 0x20, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xfd, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x58, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x38}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000002c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x79c4, 0x3a, '\xff\xff\xdd\xf0\xcd\xa2\xb9V?\x81B\xb6\xc2f\xcb\x86\f\xa8@IQ\xcd\xbd\x1f\xceM\x94\xd3\xb5\xcfv\x91]', 0x3a, '\xff\xff\xff\xff\xff\xff\xff\xff\xdc\xc8*J\xce\\q\xfc{9\xd9\xb7\x1cNA\x9b\xb2\xd2c\xf4\x97\"\xf5p\x1e\xadCu\x8b\xa4\xe1\x0fN|\x15E\xd1\x1f\xc1w\x98\xf3\x04=\x8d\x11E\xea2\xad\x1f\xaf$\xcea\x03VQ\xa5\x8f\x91ZT\x867ZA\xa3e\x9a\xa2\x98U5-\x97(P?\x88\xf7\xba 2\xe6\x83\xc6\x9a\xf5\xd3\xfdy\x00\xb2\n\xf7\xc8\x82\xbdP>\x06I\x84\x9e\xc3\xeb\t\x1a\xe5\xbfq5\x14\xd2B\xf8s\x1a\x11\xdb\xbb]\xb6F\x85\xf3\xad\x02\x8f>\x83M zG\xf1\x12\xa8\x1aT\xd2M\x1e\xc3\xb16h\xa4l9/\x88\xa3\x1f\x1c\f\xde\xfblp\xe3\x7f\xdf\xd1a\xb9\xf9\x99|\xd1\x16-\xc5\x13\x87\xa8x\x18\x9eO\x97\x8f\xd5\xb0\xa2S\x10\x0eO\xd0\x9e\a\x92\xbf`C\x12\xb15\xac7fX\xd1\x0f\xf5R!\x81SA\xbc\x83;\xe5zAu|\x91%O\xd4H\x9d\"EE\xf3_\xd4\'\xa7!39\xf9\xff\xff\xff\x055S\xd7', 0x3a, './file0'}, 0x145) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x3, 0x6, 0xb, 0x8000007}, {0x2002, 0x4, 0x2, 0x4}, {0x6, 0x2, 0x0, 0x7fff0000}]}) (async) set_tid_address(0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)={0x40, 0x8, 0x23, "274b87327a271e7f8d1593ad65f12ed8b2f591b54feafa0b4a992a6102280090e9edcb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8004, 0x0, 0xb, 0x8, 0xfffffe0000000005, 0xb, 0xffffffff}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.361749162s ago: executing program 0 (id=655): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB=',allow_othe'], 0xfb, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffecffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet(0x2, 0x3, 0x6) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 4.27205874s ago: executing program 2 (id=657): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380), 0x8) 4.270228202s ago: executing program 4 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xfe60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x50}}, 0x20000000) 4.039236004s ago: executing program 4 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc884) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="0f22d22e650f01c866b9170000000f32ba610066ed66b9920300000f3226650f01cb0f01c236f30fb872fe0f001166b800600000f30f5d4b190f21f86635030008000f23f8", 0x45}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="640000003c0001009d4e7000fedbdf2514009e00ff0100000000000000000000000000013f0018800800a700000000007f95ef8e7b21620432343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8a6406a6de911d97c42"], 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db7, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb4b, 0x9, 0x18, 0x0, 0x400003}, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r6, 0x1ff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 4.001388443s ago: executing program 2 (id=660): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40e768473cac9494) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x4, 0x4, 0x1, 0x0}, &(0x7f0000000040)=0x10) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0xb4, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e23, 0x2, @private1, 0x7fffffff}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x5f, @mcast1, 0x80}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x1, @private2, 0x7f}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904000000010100000a240104000d02020208240400000000000000010000010200000904010101010200000b240202900b08000236df0905010900040000000725010000000009040200000102000009040201", @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x0) (rerun: 32) 3.584726169s ago: executing program 0 (id=661): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="1507df25da69a040feffffffffffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x4, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f00000001c0)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000480)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000200)=""/92, 0x5c}, &(0x7f00000000c0), 0x23}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 3.023313774s ago: executing program 4 (id=662): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="4000ff130000"], 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r10, 0x0, 0x80, 0x4) read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000040)={0x800, 0xfffffffd, 0x601}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x27, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x10000, @empty, 0xf}}, 0x0, 0x6, 0x0, 0xe, 0x151, 0x57, 0x7f}, 0x9c) 2.726922936s ago: executing program 3 (id=663): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2083e609acd718ae9050f8000000000000000000"], 0x0, 0x0}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="4007020008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0xcdf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="20840200000000004230ce4462c5f45006796d47245b81503b89fe5279710bf2b6a27fc783dd265e87b79b9141f6f028b546275eb2606c4164b2d684eeffeb590346096e60fa3e9bc3768b8f3e791a4f2c02a54a0f410a1a888c0bc9f3b06fbefd62a13c7064f9b72f5d0012792cda938b349397a3a66c7695eea5798cb4cf84fe3a298a454b62f78b66"], 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r4, 0x29, 0x7a, 0x0, 0x661, 0x50, @loopback, @private1, 0x0, 0x40, 0x8, 0xfffffffe}}) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0xffffff46, 0x0, 0x7, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x6, {0x3, 0x2, 0x8, 0x10, 0xfffffffa, 0x10, {0x4, 0x80000000, 0xffffffff, 0xe, 0x7, 0xe139, 0x1, 0x2, 0x6, 0x1000, 0x8, r8, r9, 0x40000200}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = geteuid() (async) r11 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)={0x0, 0x40}, 0x18) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000400)=0x1088, 0x4) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000001240)=ANY=[@ANYBLOB="24130000100000032abd7000ffdbdf25ac14142e000000000000000000000000fe8000000000000000000000000000bb4e2000064e2300090200600004000000", @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="fe880000000000000000000000000001000004d43c000000ac1e010100000000000000000000000005000000000000000200000000000000080000000000000006000000000000000200000000000000050000000000000007000000000000000400000000000000070000000000000000000000000000000000000c000000001b000000000000001100000202000000090000002cbd70000435000008000203420000000000000014000e0000000000000000000000000000000001240009000100000000000000feffffffffffffff01800000000000000100000000000000481002006374732d6362632d6165732d6165736e6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000017c07b85da9284954032d3508aa58c1cc085f22bb2a968617e3ee2b535d8f6ad8ff0e20e6515718a82c7415130fbfb68cb3883cf64cb77950b4a52da64a22361cb7e559f5a31e674c2704d00a4e3c690fbefd13ce4019f9f61d75c055d1a5b60027fb9848463881aca40bad9ec39244b98602f08561238b9fe15213b02509d1b80e1bccf652cac089cc21ea756317d15eec76c500c02915e9191a2826acccd891dc8b281f42f220c0a467346a7f73ab15d5d67e0fe785914a19b65a415cc15833a4721bfff4f6bc0604cd57fb885f2758806d71aa089f95f7a0758f2fa93f6e91878c212d520b54e9e420cfe55b2dcbded9ce17267e28aa4740e5cd5501ca20cac2fdf9dfb94d5009f79c928ca5edd4cc6f64aa354dc2917bb5a6001ac3c6311907f50044e430a158d940500e432625ea34262f8182bad5596a1452bf8ae83b3d562617a3ba03f259b39cb371204d472de4dae447153c5cff0df8b21505e06cf00d57df51016fc496f24ee27e4d01e898fbbb3a446f5c86668656241addbcf821f117a6b4fcac41908f39d21224b7a258e77a2ad7831e2acc85a203e79f3f052f0f8f0e4234e0e3353d642494620d9568821682877c92d2b0e0d198b14b11f3ec6af02bf5506ba19503b145549208ad37f82b54619cb01c94e5fdca64c4cb0f4a6260b361f8f386f8838126d301b9e43d7d46391b0aa350d2f4c630283c2c1cb429cf50dfd7a0786e5be7c4957b9e84a9592ac05cb6e4104a0e25137086fa3f86ad6da2039a2354b84c5d6874e0b8f22fe4722b42096eb3cd7575a1b5fb5419edb272a68df0915d5ae8133fae38bec889ff67c4188080000000000000058abefca52de9abab56a854a76ba1ea5e69e38a3506023822dd6823c9ad6988f464f5d6b45f08c9bf484b84977ca77b3385d96c371427667b896fd9dd7586998b757c57768db45d1d9fc600267b45125eeb661a0f09cd4aab449fd0490bb44e8e582b0b38d7e8384d8ccf86cc8e605c439fcb79ef5b758d18ec0b82f717716a5e73b0a343b521a72c5d39d8c6c0632d7c9619ebb12771839b0eec9012bbb7c39fea5bc0c8a5558c0d3b74053a3920bf9bd731f28a97cf486568ea9224b6392166c3d2392b651ab54372ea251756209bdfbe52bff41f07ba93202af53ddb8d11a45f4a89ac059f7d4d5e48a7fe456afcd3c732e3bbc99914a6aae8ae40a578317859798b87e9378d65d18b1274baf909f16a571e514f63277e4cd26dfab77675a09f72fb8f355af678c426316419bbbcbf1a4f2a0ce3d09b748491b5a8ea2c22637ec33f825eb7e16a6de3137690e6a6d6c2a361226ac4d9896a9ed408d8805af2cbeb6361de6adeaa7fdb822f3b79f15076e126c6632c5784c3e355dce0994e094bb1cc91961072396a8c8accc929962200cca82d7e9cb4b54729cf8acab8026c71c5297acf69a6647e442a04474019d13552ddd75b2cc22eefec54d6d2e90bc19fb39cf2b68d2fb4070dfe437a0adb3a140bca548fd6a7756017d012d1bae556eef8b520b780f0ae1a28ae8664ae8ecb889cc7cfe510aa20ae313d6e2e7da718f07b5ca31ca97fb51f193496154ae3cffd02d2a64835ee61862b8937983b700420f0f47c0352fd5ac3052ecb533c672ea2cf576daa8754553c91abb715cfb710c907f1acb371d13cd1ef89d8d89864e12bf8b297567739628555fb8fdaa48c3185cf489f0c06703031bf463fbab2eeb4e656107964168dac1293953f88c46e66464da575df3cdb9fd0587ac2746bdcc3e2b7f8d0b8fc9c0ba9345a004352b51b9e584325e1cbba548b57403adfdd16edc29bd433480a04eb045e9d25b885ce620c308ba5bf837a4efe66a8d3472f3e0b9d1992f86843a60bbf99f515c4d4694efac75f8f86270304bf48eea075ff378b70dab9dc924b1c0f9aba4b5a3e384e792759656d25712dd5a4a37b769eee197e5ae305e472550ee9afb13dfacf46b1b792263e47b10d79615bab32ef58340b2e66d0f51383bdf62d75c842fa4874d0c6693c6b6d0d27d4b29de48ff12202937e43acc3cb45d8187c1580303f410a00ce5aa7709bcee3dd1afd97cab678d495e688a41097f23374bd02afba0db620638e37d1d555d46a8f41d25407aefb357388b5704a89467ab1603195f164fea6cf4b97224a4788aa6709eeccaafae6fa3987beff8aadfabb4514f35f5028cb2adfd2c935fda29e16a484c6967dd89fb9d645532306fed207183e324433997c853879cd59ab2908ea7d00984a56ce4f6b066a1b92e4ce1c4aec4a3e7ec3a958886bb950aa45794638bf9a43b4be82aa480973cbf520b099e7a00db1f97a4e511aafa921f7d5bc61921915f7ae04b7f59a70c5c35c80600000000000000e14aa3d9aea271c01bca4846c1046244ea798d7306963210c507da74872f3db52be6ec92b93f9905fd064c69d47955a16458a34ca0dc12d5dc8d1bd45634676cf62e1f8e8c6e78d2013faff8e47b2316b1d3a2d4f164d8f4f8fdd38bfbbe38e1b1d6eb2563c90a72d0dfb27a7834fbb6ed9fd6387fb4449c9a0bec20cfc5fea4c759f633bbf47078e96b46afb86d4499f0adba9efb628e9af61b91bc2b7185bc6069d0e102c82f898e62bad96e896ad16b80559592b21c62a6425a4e61634e24aaa20f47694c25ec8c699d69f77a17ea993867f662e4524dd8d735b23b3f8e0da771878ba05b447aad03404369e746adcb17d8f263cc2c4e04e0007adc8affcb3d98c6ee97b9d22ec10d5117d321267cc3413d1b91bb4d0f893f7c083f6da817e8cdfd74057b2c89e21d1ab8cfd267f41f19c784786770f84d23563a03d08d344e58c3bfc6c240f650ec65b2ea11e89662796fd274fa7dca0b3d1e12d0400052bb3821af3b842b8fc4ca7a1eb4d90637f3d20023099e9547262d613a3bd138feabfd3fe21d2a2b4e598849bdcfa842a90c55a3559b46357af80ca2927fe269e47453b4f2817980e3f73cc486d951b2ffac14c1086d5acdd81ef50ed0dc87e8812155ec494e04d7c1dac1e6c1e10ee6042bcef279a630e8caec4e2efdd31945a8c25944d0cc381eefb92c7019764ce66423f5432d76ba417dfea4a76b97a30febe0d38bb467ce75c4278d2a8044946b608f3866dedf9288d18361306bb033492c8f51e71f1085bc16baba0e61124cc7f8b09b60a4a4edca76ad7bb891418d4e95b1c5ce389280971a94ee6a0cda30c3c21697e5ccbf6644e8997eb0d8b4a800d01bfc8bebd83774924a7ccdc9e005521e74e6ba98955383e0163285eacc48ac28456e94f1969f3f024ef18e311de064b962a3a4924d729635b390739c574e4adfbf30ff07db755da0f2371538d82ce32fc3141837b9a805870ea3f91ab81627a5575a6e79e1cac8bf44123263d6973925d277cc9db7d0708605d83ed620f78e6cfd93a171cdc651b790eaf2f657ca4c019c32d22e3b13e7d65cfdc561c731eae2c7b1903a4908766def846107d5678411b3105d191622a8e34d915f9600992afe13ac9b0d2139e1ea34d285da0dc07ab379b53e7488adefb390d2a5a89979422add02e8387bd99f06b53b886002c818eff0f5407b3cd2c40001da9b3524b323278e42e5e9acc0e12172984aee717a969789ed2a4df9294e47b470f8910b1e21e3dac1f643d8115cc34dbf496db8cabdb2a372f7770eb1570ed4b5e6ad4be565dc21d39bf1b5a4ad9a0540c4c1f51a0e11a2ff2750f4402747b1dbcd77b247fe582a41de2375d8bad5c70ef5b553dac5632a82e933445ce97c994b492635d7ba43c368bff3ca180aab583dd7e9d360d9ac9629e1fafa17842160d294ff4bfb20e847d2adcb3bdea567b9c6e23ab47b246c5c489588770d8e50bea2840d1c9670f16b81e87b0f24f2846b361280ecece37803ea6d763e0a04cd3863d059f453683d0cbd850aaca69ca9e000ec1cf580de662020305ff3bd579eaa5da6200311b3f9c27ca9a74ab196eb8e2c5ae0ca8f13b360f521c57b34916482a304fa21baa726e8710c3ad3b63f0902c3d10bddd217d27f3a659a31a287093e06508bfa06606e7871aa89f7a6cbebfd3ec1c0de0fa87b73069f5a58fa8c4718b6187969f5eb290d2eebff8869d371c47ea5ae7d0565723ee4da7377f8b8d1074df8c2fd00020bd1bf7380d2845e376e287d67079a901de668fa0c66604ebe3ccbd92e381e4098dc9531bc6f57b77758760b6c2b2f2be3fc800966734065b30ab3e19b50dc217bc6cac277533fcdd362f0055aa555bb4269381fa04c7fabf75daa0c33777a58e10ba45b3a3c90c294b82b59282341540470dfecc11d947df9a7a662b34ee062a518b05b7967692b47220b657c878823670a1f96c0c9f295e37dedc25a7af48e265ffb0343fe5d1ec637077e11ba9b6d20db26e695e8c269d0dba86c6b8420fdf4d56873e074d0a83d45c766535412f55064b8ede65cbca6cdc69974e673023637be59ef4b1b391bffdf62a48af3008c7517387be528d6b088e1bc0fb0cc9ee93f333428b285d3bc059051bab18dbbb2a67dc93681312a9333ed55d5c84d6c77b2f08159b4b113fb54fe018cce494730e39803e626fc969f695226edbeb329875525db837e3e2d162dc200683476163f4cfdb0fd06d33dbc661eac173b3160997fab294ceab9572b04343494e0945126ef0aed9e5652c1b122674d2aa523432a9bd61daa279fc2fb36bf89e0162f724cbeeead39d286f6b9e9e9a6198112f77a8fe9f29ba5e5bc770119906eae475e6d9111cc71414d032b56290760726522d979de6130923b846c4ad1c7c561eb62861d1505c7669ecb6f539bece76965080cb8cc0d5f3797f2a835fa207a3e7587b5972de01e6b7fac9e9da2e45dc6449a2774e624734e9b68dfb34bb2c7ed83e471687a98cf59540dddfb0be1ddb4b7ed292a1828532e27fd159071af15b4d7f5e8ebb88fdcb1aa3d5a130b177af6c934713d1183026e8fd00863e7f7d56bc3199bc63aff4efa77f6fe1d7abbc366357821110b7030d08a32752b8e9b131ed6c27d7fe7a535914b071667cf0e62cdfed4ea02853ca90dad09390a9973b956d44e2726fbe0831d68057605eaa02531f251ed1389b0248c1253ca1cdaef01bed7cd3ae4c70993e72591b3d4ab25c3e629a03f79356d07aed10f98e381822f84b4b9274959ca234e27b87e13f0337a13414d089ecd707e2fcfc912915e00686ff1887016d763ce292a2dd62522bd7bf53304ae149230231dc89d72d5a520f61762b1bb039bccb95b110538bb5cb81d4c0d80d846d0ed79432afd4a22c2713531c7ad3e8de3050fafeacecadb2ae59589b60d2da644a8dbf7ebc53c3a76b0a16ef750a988758c682b454058e920f7a8a20aad59cffb62b1d3ce33fc8f6f346c5021e81f9fdb41f261fa1d6562806463618a4d756e014056e7a5465c14685cddab142eb782066b62a6a44c728c3187326d7f5ca44c017e5fc14b7e32380652d59b47329debc386b6f8c9cebae8c8f12a321e704de50df3f34c3f5095e808400558374f8f4a66d4c359708332ff30ac2853c7de54fd6603f1c21122ef3d9dd149aa868e0cf64c0743042689b3fc3777827a666c175a097308b3e6a12ef0b6916cc253a095bfe004717120f3f49bdd05935b3a3b2b9965cc5ff5e07d4f0982221909ae949dee4b9854180f9950e60faadb9a3ad4660b9b433da6a29303c5fca4240b106ba55a8763145aa48963df1ed376e5091ec590ade8da049325f3a49ce8e42b867b15d368cabc06e0ab2f07704ce9243e4b1337c82e701a5e0faed6129628001a00ff020000000000000000000000000001ffffffff0000000000000000000000000200060408001d000400000028001a0000000000000000000000000000000000fe8800000000000000000000000000010a00"], 0x1324}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2015e5c1fadfe7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r0) (async) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r12, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, {0x10, 0xb, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x34, 0x0, 0x2}) 2.515930916s ago: executing program 1 (id=664): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$FUSE(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000003c0)="b800048ec8baf80c66b8f689188066efbafc0cb0eeeeb8750e8ed80f79a1af3f66b9800000c00f326635004000000f30f30fae3266b96b08000066b88c4dcfdc66bab5f41cf20f3066b8416a00000f23c00f21f86635000008000f23f8bad004ed26660fc67100b0", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0x1, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd1000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x900) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x8b0, 0x0, 0x8}]}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) 2.351325254s ago: executing program 0 (id=665): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/13, 0xd}, 0x7}], 0x1, 0x2001, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @remote, [0xff, 0xff, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'virt_wifi0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x89, 0x7, 0x1, 0x8}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2.298094246s ago: executing program 0 (id=666): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r6, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="36000000100007"], 0x20) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x104}, 0x18) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.134825583s ago: executing program 2 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800dd8d3600000000000000000000000500000000"], 0x1c}}, 0x0) 2.019509912s ago: executing program 2 (id=668): syz_usb_connect(0x0, 0x130, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7f, 0x5d, 0x42, 0x8, 0x7a6, 0x986, 0x7a7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11e, 0x1, 0x0, 0x0, 0xe0, 0x24, [{{0x9, 0x4, 0x8e, 0x3, 0x7, 0xf1, 0x9, 0x77, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '&'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0xfff, 0x7f}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x8, 0x7a, 0x78}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc}]}, @generic={0xa3, 0xf, "5d6674eb6c122b69a973e673b6b9fbcdad7c1e5ecfe0461402c80e8c004d7519684504ce2fddf40f79d4515288da4565bdd63c480c866017307295e3f46ff5e81ed3d9fc1d8d9a6f04ec49d8e80dc1b39429bb7185b2d12cb7f601e3bf7dce01e57b911c03936d3f04e68bce21804c418188427531ccad9b0b2d6f8521344febb7e321d6bce687790d10a562e0f5647ae0bf27bf3a943133138ff155d8b1aa5673"}], [{{0x9, 0x5, 0x1, 0x10, 0x40, 0x99, 0xf7, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0x5, 0x4}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x6, 0x80, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x39, 0xf5, 0x33}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x2b, 0x4, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xbc, 0x7, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x0, 0x54, 0x7}}]}}]}}]}}, 0x0) 1.675873852s ago: executing program 3 (id=669): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_open_dev$vcsn(&(0x7f0000000140), 0x6c8c, 0x2ca080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f000062e000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00007ce000/0x2000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f0000f43000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000e23000/0x9000)=nil, &(0x7f0000d71000/0x6000)=nil, &(0x7f000032b000/0x2000)=nil, &(0x7f0000848000/0x1000)=nil, &(0x7f0000cd6000/0x2000)=nil, &(0x7f0000000300)="fafef8c4e83ab675371c944b2fb6cc89097462d61375eb0fbaa0fa3c3192bd205fbff3b12776078faaa6c27973a0e98ba65bc76911009319c2004cd09b7c1ae2cdb90f4fae5d146f10d52820f7d3a2027e5be2a00d108be23d9fedacd7ee46f54e864a1251103f013bf3a29daf195cc753edbd8d0089260ea16dae4f93b4b6f66a1d1918e1e1f9807e696119e55dc979fb1f4f4a1db6151363bfee1ac2e870d9f3590c615b81f4fd8ce45b740d44bb3ccf8e557f1fd6321186126605788c09d921a13ebf4ccb3f71b27f9e52bc68e0d573d6a32f6eefa864a721aeac", 0xdc, r2}, 0x68) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x10}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 390.990784ms ago: executing program 1 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x6, 0x1f, 0x6f, 0x20, 0xccd, 0x10a5, 0xeb4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xea, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xc, 0x9b}}]}}]}}, 0x0) unshare(0x66000080) unshare(0x20030500) socket$kcm(0xa, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x100) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000040)=0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 251.219773ms ago: executing program 2 (id=671): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xffffffff, "fa02c8098000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400", r5}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x7fff, '\x00', @value64=0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 167.465954ms ago: executing program 2 (id=672): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x200}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000480)}], 0x3) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000300)=[{&(0x7f0000000340)=""/65}, {&(0x7f00000000c0)=""/157}, {&(0x7f0000000180)=""/226, 0x3b}], 0x3a, 0x2, 0x80000400, 0x1) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$VT_DISALLOCATE(r4, 0x5608) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) (async) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000100), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000280)="dba0f70f719036563943d76e8d43aa15", 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x2400c080) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7, 0x1, 0x0, @loopback, @loopback}, "00186371bd6a245e"}}}}}, 0x0) 0s ago: executing program 3 (id=673): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000140)={'lo\x00', @random="02001c80eaff"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) kernel console output (not intermixed with test programs): -1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.651728][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.670671][ T5920] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.794238][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.946311][ T5920] usb 3-1: config 0 descriptor?? [ 185.954274][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 185.994197][ T5920] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 186.001480][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 186.126597][ T5920] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.165474][ T5920] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.176315][ T5920] usb 3-1: media controller created [ 186.214536][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.255021][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 186.279301][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 186.306570][ T5920] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.339475][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 186.376851][ T5920] dvb-usb: schedule remote query interval to 150 msecs. [ 186.394097][ T5920] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.430601][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 186.546849][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 186.553183][ T5920] dvb-usb: error while querying for an remote control event. [ 186.575287][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 186.624600][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.633065][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.667201][ T10] usb 4-1: Product: syz [ 186.671602][ T10] usb 4-1: Manufacturer: syz [ 186.678642][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.692331][ T10] usb 4-1: SerialNumber: syz [ 186.699678][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.724930][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 186.726117][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 186.730878][ T5920] dvb-usb: error while querying for an remote control event. [ 186.747377][ T10] usb 4-1: config 0 descriptor?? [ 186.758302][ T43] usb 3-1: USB disconnect, device number 27 [ 186.763061][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 186.794943][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 186.804269][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.818484][ T10] usb 4-1: Detected FT4233HP [ 186.850295][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.865543][ T7363] vlan2: entered promiscuous mode [ 186.874939][ T7363] veth1: entered promiscuous mode [ 186.891104][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 186.903839][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.913782][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.934029][ T24] usb 5-1: Product: syz [ 186.938371][ T24] usb 5-1: Manufacturer: syz [ 186.943047][ T24] usb 5-1: SerialNumber: syz [ 187.171218][ T24] usb 5-1: 0:2 : does not exist [ 187.180006][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 187.250780][ T24] usb 5-1: USB disconnect, device number 18 [ 187.322301][ T6831] udevd[6831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.335102][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 187.516588][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.524418][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 187.549110][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 187.554902][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.600445][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 187.615032][ T10] usb 4-1: USB disconnect, device number 27 [ 187.623572][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.634140][ T10] ftdi_sio 4-1:0.0: device disconnected [ 187.684905][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.781751][ T43] usb 2-1: config 0 descriptor?? [ 188.001091][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 188.018043][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 188.048817][ T43] usb 2-1: USB disconnect, device number 22 [ 188.155145][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 188.335074][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 188.342075][ T10] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 188.373867][ T10] usb 4-1: config 0 has no interface number 1 [ 188.407349][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 188.429579][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.451560][ T10] usb 4-1: Product: syz [ 188.459489][ T10] usb 4-1: Manufacturer: syz [ 188.466519][ T10] usb 4-1: SerialNumber: syz [ 188.483197][ T10] usb 4-1: config 0 descriptor?? [ 188.514915][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 188.695803][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 188.712859][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.740876][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 188.750238][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.764287][ T43] usb 2-1: config 0 descriptor?? [ 189.246072][ T43] kye 0003:0458:5016.0008: control desc unexpectedly large [ 189.333778][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0008/input/input12 [ 189.528744][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0008/input/input13 [ 189.609168][ T10] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 189.640899][ T43] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 189.654149][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.688168][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.704017][ T10] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -110 [ 190.115578][ T43] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 190.311258][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 190.332287][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 190.376219][ T43] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 190.419431][ T1211] usb 2-1: USB disconnect, device number 23 [ 190.457228][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.686278][ T43] usb 5-1: config 0 descriptor?? [ 190.694290][ T7408] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 190.927766][ T5838] usb 4-1: USB disconnect, device number 28 [ 191.096857][ T7418] FAULT_INJECTION: forcing a failure. [ 191.096857][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 191.115076][ T43] hid (null): report_id 57294 is invalid [ 191.168357][ T43] asus 0003:0B05:18C6.0009: collection stack underflow [ 191.185712][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 191.185746][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.185758][ T7418] Call Trace: [ 191.185766][ T7418] [ 191.185775][ T7418] dump_stack_lvl+0x189/0x250 [ 191.185800][ T7418] ? __pfx____ratelimit+0x10/0x10 [ 191.185823][ T7418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.185842][ T7418] ? __pfx__printk+0x10/0x10 [ 191.185867][ T7418] ? __lock_acquire+0xab9/0xd20 [ 191.185892][ T7418] should_fail_ex+0x414/0x560 [ 191.185920][ T7418] should_failslab+0xa8/0x100 [ 191.185939][ T7418] kmem_cache_alloc_noprof+0x74/0x6e0 [ 191.185965][ T7418] ? skb_clone+0x212/0x3a0 [ 191.185996][ T7418] skb_clone+0x212/0x3a0 [ 191.186022][ T7418] __netlink_deliver_tap+0x404/0x850 [ 191.186055][ T7418] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.186075][ T7418] netlink_deliver_tap+0x19c/0x1b0 [ 191.186096][ T7418] netlink_unicast+0x7fa/0x9e0 [ 191.186124][ T7418] ? __pfx_netlink_unicast+0x10/0x10 [ 191.186155][ T7418] ? netlink_sendmsg+0x642/0xb30 [ 191.186172][ T7418] ? skb_put+0x11b/0x210 [ 191.186197][ T7418] netlink_sendmsg+0x805/0xb30 [ 191.186229][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.186253][ T7418] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.186284][ T7418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.186301][ T7418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.186328][ T7418] __sock_sendmsg+0x219/0x270 [ 191.186366][ T7418] ____sys_sendmsg+0x52d/0x830 [ 191.186402][ T7418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.186434][ T7418] ? import_iovec+0x74/0xa0 [ 191.186459][ T7418] ___sys_sendmsg+0x21f/0x2a0 [ 191.186485][ T7418] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.186550][ T7418] ? __fget_files+0x2a/0x420 [ 191.186567][ T7418] ? __fget_files+0x3a0/0x420 [ 191.186600][ T7418] __sys_sendmmsg+0x227/0x430 [ 191.186628][ T7418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.186661][ T7418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.186707][ T7418] ? ksys_write+0x22a/0x250 [ 191.186736][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 191.186767][ T7418] __x64_sys_sendmmsg+0xa0/0xc0 [ 191.186794][ T7418] do_syscall_64+0xfa/0xfa0 [ 191.186816][ T7418] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.186839][ T7418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.186858][ T7418] ? clear_bhb_loop+0x60/0xb0 [ 191.186882][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.186901][ T7418] RIP: 0033:0x7f9f20b8eec9 [ 191.186919][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.186936][ T7418] RSP: 002b:00007f9f21955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.186957][ T7418] RAX: ffffffffffffffda RBX: 00007f9f20de5fa0 RCX: 00007f9f20b8eec9 [ 191.186971][ T7418] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 191.186985][ T7418] RBP: 00007f9f21955090 R08: 0000000000000000 R09: 0000000000000000 [ 191.186997][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.187008][ T7418] R13: 00007f9f20de6038 R14: 00007f9f20de5fa0 R15: 00007f9f20f0fa28 [ 191.187041][ T7418] [ 191.196416][ T43] asus 0003:0B05:18C6.0009: item 0 1 0 12 parsing failed [ 191.351619][ T7408] pimreg: tun_chr_ioctl cmd 1074025677 [ 191.413643][ T43] asus 0003:0B05:18C6.0009: Asus hid parse failed: -22 [ 192.079317][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.087599][ T7408] pimreg: linktype set to 0 [ 192.160551][ T43] asus 0003:0B05:18C6.0009: probe with driver asus failed with error -22 [ 192.206119][ T7435] netlink: 'syz.1.350': attribute type 13 has an invalid length. [ 192.292740][ T7433] bond3 (unregistering): Released all slaves [ 192.316868][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 192.326582][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 192.344963][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 192.363770][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 192.488305][ T7435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.513664][ T24] usb 1-1: config 1 has no interface number 0 [ 192.538236][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.566899][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 192.584613][ T5838] usb 5-1: USB disconnect, device number 19 [ 192.667787][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.737845][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.849902][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 192.905013][ T5918] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 193.044595][ T24] snd_usb_pod 1-1:1.1: invalid control EP [ 193.068921][ T24] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 193.070558][ T5918] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 193.086271][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.096174][ T5918] usb 3-1: Product: syz [ 193.101731][ T5918] usb 3-1: Manufacturer: syz [ 193.109687][ T5918] usb 3-1: SerialNumber: syz [ 193.145190][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 193.176614][ T5918] usb 3-1: config 0 descriptor?? [ 193.204479][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 193.393279][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.404098][ T5838] usb 1-1: USB disconnect, device number 23 [ 193.405410][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.639531][ T30] audit: type=1326 audit(1760223694.704:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 193.901844][ T30] audit: type=1326 audit(1760223694.704:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 193.942143][ T30] audit: type=1326 audit(1760223694.704:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.011811][ T5918] usb 3-1: Firmware: major: 228, minor: 243, hardware type: UNKNOWN (86) [ 194.051656][ T30] audit: type=1326 audit(1760223694.704:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.139792][ T30] audit: type=1326 audit(1760223694.704:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.213440][ T5918] usb 3-1: failed to fetch extended address, random address set [ 194.235317][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 194.250366][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256781][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.294962][ T30] audit: type=1326 audit(1760223694.704:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.323800][ T5918] usb 3-1: atusb_probe: initialization failed, error = -524 [ 194.332571][ T5918] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 194.355364][ T5918] usb 3-1: USB disconnect, device number 28 [ 194.362509][ T30] audit: type=1326 audit(1760223694.704:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.405267][ T30] audit: type=1326 audit(1760223694.704:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.495103][ T24] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 194.504977][ T30] audit: type=1326 audit(1760223694.704:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.535117][ T30] audit: type=1326 audit(1760223694.714:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16c38eec9 code=0x7ffc0000 [ 194.536268][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 194.846571][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.944841][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.989148][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.029553][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 195.051187][ T7474] netlink: 64 bytes leftover after parsing attributes in process `syz.2.362'. [ 195.061654][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.109373][ T7477] netlink: 180 bytes leftover after parsing attributes in process `syz.1.363'. [ 195.124623][ T24] usb 4-1: config 0 descriptor?? [ 195.324944][ T5884] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 195.433493][ T7492] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 195.476464][ T5838] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 195.495449][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 195.508171][ T5884] usb 5-1: config 0 has no interfaces? [ 195.518021][ T5884] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 195.527377][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.536156][ T5884] usb 5-1: Product: syz [ 195.541176][ T5884] usb 5-1: Manufacturer: syz [ 195.550132][ T5884] usb 5-1: SerialNumber: syz [ 195.563646][ T24] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.000A/input/input14 [ 195.576105][ T43] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 195.590204][ T5884] usb 5-1: config 0 descriptor?? [ 195.644301][ T7498] fuse: Unknown parameter 'fdßì• "' [ 195.644948][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 195.658822][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.675946][ T24] uclogic 0003:28BD:0909.000A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 195.687999][ T5838] usb 3-1: config 4 interface 0 has no altsetting 0 [ 195.690732][ T5838] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 195.725141][ T43] usb 1-1: device descriptor read/64, error -71 [ 195.738002][ T5838] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 195.754912][ T5838] usb 3-1: Manufacturer: syz [ 195.772355][ T5838] usb 3-1: SerialNumber: syz [ 195.818669][ T24] usb 5-1: USB disconnect, device number 20 [ 195.869793][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.879206][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.965016][ T43] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 196.031966][ T5838] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 196.049342][ T5838] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.060965][ T5838] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 196.070953][ T5838] usb 3-1: media controller created [ 196.135992][ T43] usb 1-1: device descriptor read/64, error -71 [ 196.148725][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.180305][ T5838] zl10353_read_register: readreg error (reg=127, ret==0) [ 196.245349][ T43] usb usb1-port1: attempt power cycle [ 196.245448][ T5838] usb 3-1: USB disconnect, device number 29 [ 196.584977][ T43] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 196.656165][ T43] usb 1-1: device descriptor read/8, error -71 [ 196.665286][ T5918] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.712260][ T7508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.826724][ T5918] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 196.837790][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.850924][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.862546][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.904936][ T43] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 196.924017][ T1211] usb 4-1: USB disconnect, device number 29 [ 196.936234][ T43] usb 1-1: device descriptor read/8, error -71 [ 196.979958][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.014526][ T5918] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.029381][ T5918] usb 5-1: Manufacturer: syz [ 197.048217][ T5918] usb 5-1: config 0 descriptor?? [ 197.093072][ T43] usb usb1-port1: unable to enumerate USB device [ 197.144499][ T7524] netlink: 'syz.2.374': attribute type 13 has an invalid length. [ 197.294400][ T7521] bond2 (unregistering): Released all slaves [ 197.563104][ T7524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.581720][ T5918] hid_parser_main: 169 callbacks suppressed [ 197.581740][ T5918] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 197.617615][ T7530] batman_adv: batadv0: Adding interface: gretap1 [ 197.662469][ T7530] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.735773][ T7530] batman_adv: batadv0: Interface activated: gretap1 [ 197.852749][ T5918] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 198.927014][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 199.205091][ T5918] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 199.378570][ T5918] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 199.398354][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.467603][ T5918] usb 4-1: config 0 has no interface number 0 [ 199.488629][ T5918] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 199.503361][ T7553] netlink: 2 bytes leftover after parsing attributes in process `syz.4.382'. [ 199.571611][ T5918] usb 4-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.621285][ T5918] usb 4-1: config 0 interface 11 has no altsetting 0 [ 199.630757][ T7553] veth3: entered promiscuous mode [ 199.662554][ T5918] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 199.685229][ T10] usb 5-1: USB disconnect, device number 21 [ 199.728040][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.797223][ T5918] usb 4-1: config 0 descriptor?? [ 199.814048][ T5918] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 199.825635][ T5918] keyspan 4-1:0.11: unsupported endpoint type 0 [ 199.833362][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 7 [ 199.902043][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 199.916953][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 199.944655][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 199.980220][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 200.005965][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 200.016201][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 200.193597][ T5918] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 200.311683][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 200.491861][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 200.525135][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 200.702049][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 200.715749][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 200.723510][ T5918] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 200.786375][ T7574] tipc: Started in network mode [ 200.791248][ T7574] tipc: Node identity 66eb9be5cc18, cluster identity 4711 [ 200.798542][ T5918] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 200.825768][ T7574] tipc: Enabled bearer , priority 0 [ 200.864985][ T5918] usb 4-1: USB disconnect, device number 30 [ 200.915960][ T5918] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 201.020839][ T7574] syzkaller0: entered promiscuous mode [ 201.434092][ T5918] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 201.494952][ T7574] syzkaller0: entered allmulticast mode [ 201.525050][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 201.608467][ T7573] tipc: Resetting bearer [ 201.754927][ T5838] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 201.763301][ T5918] keyspan 4-1:0.11: device disconnected [ 201.826843][ T7573] tipc: Disabling bearer [ 201.850113][ T7583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.967070][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.981016][ T5838] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.000304][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.280523][ T5838] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 202.290755][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.329786][ T5838] usb 3-1: Product: syz [ 202.341209][ T5838] usb 3-1: Manufacturer: syz [ 202.385513][ T7601] sctp: [Deprecated]: syz.4.390 (pid 7601) Use of int in maxseg socket option. [ 202.385513][ T7601] Use struct sctp_assoc_value instead [ 202.394393][ T5838] usb 3-1: SerialNumber: syz [ 202.425498][ T5838] usb 3-1: config 0 descriptor?? [ 202.443039][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 202.452322][ T7604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.392'. [ 202.666634][ T5838] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 202.736552][ T5838] uvcvideo 3-1:0.0: No valid video chain found. [ 202.842500][ T5838] usb 3-1: USB disconnect, device number 30 [ 203.253890][ T7613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.558078][ T7620] No such timeout policy "syz1" [ 203.746619][ T5884] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 203.906188][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 203.928034][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.949531][ T5884] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 203.978982][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.066665][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 204.104419][ T5884] usb 3-1: config 0 descriptor?? [ 204.362782][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 204.408213][ T7633] xt_connbytes: Forcing CT accounting to be enabled [ 204.430418][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.446007][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 204.454010][ T43] usb 1-1: can't read configurations, error -71 [ 204.719867][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.729661][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.944921][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.035026][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 205.041087][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 205.092757][ T5884] usb 3-1: USB disconnect, device number 31 [ 205.297667][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 205.323247][ T24] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 205.343749][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.383130][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 205.395304][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.428647][ T24] usb 2-1: Product: syz [ 205.432813][ T24] usb 2-1: Manufacturer: syz [ 205.447766][ T24] usb 2-1: SerialNumber: syz [ 205.499239][ T24] usb 2-1: config 0 descriptor?? [ 205.730002][ T7653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.738654][ T7653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.804739][ T7653] batman_adv: batadv0: Interface deactivated: gretap1 [ 205.816483][ T7653] batman_adv: batadv0: Removing interface: gretap1 [ 206.645962][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 206.652176][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 206.658358][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 206.664367][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 206.989947][ T5838] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 207.315016][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 207.338255][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.348877][ T5838] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 207.365020][ T5838] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.374994][ T5918] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 207.502556][ T5838] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.552432][ T5838] usb 3-1: config 1 interface 1 has no altsetting 0 [ 207.574909][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 207.582751][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.631520][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.643832][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.662406][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.676334][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.687358][ T5838] usb 3-1: Product: syz [ 207.703491][ T5838] usb 3-1: Manufacturer: syz [ 207.709718][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.718913][ T5838] usb 3-1: SerialNumber: syz [ 207.746905][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.764930][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.766284][ T5918] usb 1-1: config 0 descriptor?? [ 207.951118][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.284967][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.300484][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.319233][ T43] usb 5-1: Product: syz [ 208.323508][ T43] usb 5-1: Manufacturer: syz [ 208.339805][ T43] usb 5-1: SerialNumber: syz [ 208.416745][ T10] usb 2-1: USB disconnect, device number 24 [ 208.527177][ T43] usb 5-1: config 0 descriptor?? [ 208.795366][ T7695] loop4: detected capacity change from 0 to 2560 [ 208.825861][ T6006] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.075531][ T6006] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.112033][ T6006] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.153975][ T6006] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.199617][ T6006] Buffer I/O error on dev loop4, logical block 0, async page read [ 209.505075][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 209.511126][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 209.531015][ T5918] usb 1-1: USB disconnect, device number 30 [ 209.778333][ T5838] usb 3-1: USB disconnect, device number 32 [ 209.798867][ T7703] C: renamed from team_slave_0 (while UP) [ 209.852835][ T7703] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 209.863640][ T7703] netlink: 152 bytes leftover after parsing attributes in process `syz.3.416'. [ 209.873574][ T7703] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.110642][ T7708] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 210.230196][ T7713] netlink: 'syz.0.420': attribute type 29 has an invalid length. [ 210.241223][ T7713] netlink: 'syz.0.420': attribute type 29 has an invalid length. [ 210.335067][ T7717] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 210.680045][ T7726] netlink: 763 bytes leftover after parsing attributes in process `syz.1.423'. [ 210.692439][ T7726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 210.955448][ T43] usb 5-1: USB disconnect, device number 22 [ 211.657998][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 211.931498][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 212.032418][ T43] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 212.051395][ T43] usb 2-1: config 8 has no interface number 0 [ 212.204545][ T43] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 212.248728][ T43] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.260936][ T43] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 212.283292][ T43] usb 2-1: config 8 interface 39 has no altsetting 0 [ 212.330578][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 212.347383][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.356276][ T43] usb 2-1: Product: syz [ 212.360469][ T43] usb 2-1: Manufacturer: syz [ 212.379135][ T43] usb 2-1: SerialNumber: syz [ 212.946086][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 213.026149][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.039583][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.060343][ T43] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 213.079798][ T43] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 213.090987][ T43] usb 2-1: USB disconnect, device number 25 [ 213.104894][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.125229][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 213.134577][ T10] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 213.154409][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.196680][ T10] usb 4-1: config 0 descriptor?? [ 213.237684][ T43] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 213.264910][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 213.379730][ T5884] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.410177][ T5884] usb 1-1: config 0 has no interface number 0 [ 213.450268][ T5884] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.483879][ T10] usb 4-1: string descriptor 0 read error: -71 [ 213.490215][ T10] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 213.495181][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.504591][ T10] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 213.515312][ T5884] usb 1-1: Product: syz [ 213.517341][ T10] uvcvideo 4-1:0.0: No valid video chain found. [ 213.526709][ T5884] usb 1-1: Manufacturer: syz [ 213.527469][ T7768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.433'. [ 213.531965][ T5884] usb 1-1: SerialNumber: syz [ 213.542768][ T10] usb 4-1: USB disconnect, device number 31 [ 213.613326][ T5884] usb 1-1: config 0 descriptor?? [ 213.626172][ T5884] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.839295][ T5884] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.025880][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 214.045299][ T5884] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.046005][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.145514][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.214923][ T5918] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 214.227495][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 214.265485][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 214.366076][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 214.428926][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 214.456469][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.471456][ T10] usb 2-1: device descriptor read/64, error -71 [ 214.506976][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.558700][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.574005][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.629485][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 214.647028][ T5918] usb 3-1: Product: syz [ 214.651297][ T5918] usb 3-1: Manufacturer: syz [ 214.659693][ T5918] usb 3-1: SerialNumber: syz [ 214.698386][ T5918] usb 3-1: config 0 descriptor?? [ 214.719253][ T5918] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.778257][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 214.794929][ T5884] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 214.818644][ T5918] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 214.830032][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 214.947083][ T5884] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 214.956779][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.964926][ T10] usb 2-1: device descriptor read/64, error -71 [ 215.035933][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 215.085144][ T10] usb usb2-port1: attempt power cycle [ 215.245049][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 215.282329][ T5884] usb 4-1: config 0 descriptor?? [ 215.364114][ T5884] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 215.381825][ T5918] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 215.389285][ T5918] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 215.445074][ T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 215.453029][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 215.671309][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 215.699080][ T5884] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 215.766073][ T10] usb 2-1: device descriptor read/8, error -71 [ 215.814078][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.848831][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.872652][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 75 [ 215.901476][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 215.909552][ T5920] usb 1-1: USB disconnect, device number 31 [ 215.920291][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 215.970287][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 215.987778][ T5920] quatech2 1-1:0.51: device disconnected [ 216.025140][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 216.102822][ T5884] gspca_cpia1: usb_control_msg 02, error -71 [ 216.116508][ T5884] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 216.174903][ T5918] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 216.183754][ T5918] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 216.188472][ T5884] usb 4-1: USB disconnect, device number 32 [ 216.252125][ T10] usb 2-1: device descriptor read/8, error -71 [ 216.361767][ T7789] delete_channel: no stack [ 216.471706][ T10] usb usb2-port1: unable to enumerate USB device [ 216.574864][ T5918] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 216.589967][ T5918] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 216.756658][ T5918] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 216.812391][ T5918] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 216.821539][ T5918] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 216.864909][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 216.881131][ T5918] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 216.940610][ T5918] usb 3-1: USB disconnect, device number 33 [ 217.055820][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 217.066219][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.084155][ T10] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 217.105331][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.114766][ T10] usb 1-1: config 1 has no interface number 1 [ 217.121498][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.138939][ T10] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 217.150808][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 217.177982][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 217.197298][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.206964][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.215278][ T10] usb 1-1: Product: syz [ 217.219523][ T10] usb 1-1: Manufacturer: syz [ 217.224128][ T10] usb 1-1: SerialNumber: syz [ 217.357331][ T7821] kvm: pic: non byte read [ 217.375208][ T7821] kvm: pic: non byte read [ 217.409263][ T7826] netlink: 'syz.2.448': attribute type 5 has an invalid length. [ 217.462083][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.472107][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.893909][ T7834] fuse: Unknown parameter 'grouæÆÀÆÀËóc¹p_id' [ 218.035095][ T5918] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 218.058805][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 218.072917][ T10] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 218.090335][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 218.116829][ T10] usb 1-1: USB disconnect, device number 32 [ 218.147639][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.225187][ T5884] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 218.234914][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 218.243187][ T5918] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 218.255788][ T5918] usb 3-1: config 0 has no interface number 0 [ 218.262448][ T5918] usb 3-1: config 0 interface 89 has no altsetting 0 [ 218.271827][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 218.281420][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.295046][ T5918] usb 3-1: Product: syz [ 218.299225][ T5918] usb 3-1: Manufacturer: syz [ 218.304033][ T5918] usb 3-1: SerialNumber: syz [ 218.321549][ T5918] usb 3-1: config 0 descriptor?? [ 218.345201][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 218.377556][ T5918] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 218.385405][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 218.388571][ T5918] em28xx 3-1:0.89: Video interface 89 found: bulk [ 218.410378][ T5884] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 218.418778][ T5884] usb 5-1: config 0 has no interface number 0 [ 218.425013][ T5884] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.0f [ 218.439412][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.451819][ T5884] usb 5-1: config 0 descriptor?? [ 218.480436][ T5884] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 218.525822][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.530021][ T5884] usb 5-1: Detected SIO [ 218.538406][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.549219][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.557480][ T5884] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 218.574871][ T9] usb 2-1: Product: syz [ 218.583550][ T9] usb 2-1: Manufacturer: syz [ 218.603602][ T9] usb 2-1: SerialNumber: syz [ 218.631340][ T9] usb 2-1: config 0 descriptor?? [ 218.679888][ T5884] usb 5-1: USB disconnect, device number 23 [ 218.749140][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 218.754620][ T5884] ftdi_sio 5-1:0.130: device disconnected [ 218.997901][ T5918] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 219.634935][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 219.699410][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 219.735554][ T7860] IPv6: sit1: Disabled Multicast RS [ 219.823165][ T7832] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 219.852901][ T9] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 219.882847][ T9] usb 5-1: config 0 has no interface number 0 [ 219.897504][ T9] usb 5-1: config 0 interface 122 has no altsetting 0 [ 219.916563][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 219.963349][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 220.003434][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.027258][ T5918] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 220.065507][ T5918] em28xx 3-1:0.89: board has no eeprom [ 220.071080][ T9] usb 5-1: Product: syz [ 220.081385][ T9] usb 5-1: Manufacturer: syz [ 220.087824][ T9] usb 5-1: SerialNumber: syz [ 220.108885][ T9] usb 5-1: config 0 descriptor?? [ 220.155020][ T5918] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 220.167995][ T5918] em28xx 3-1:0.89: analog set to bulk mode. [ 220.181680][ T5891] em28xx 3-1:0.89: Registering V4L2 extension [ 220.204441][ T5918] usb 3-1: USB disconnect, device number 34 [ 220.230727][ T5918] em28xx 3-1:0.89: Disconnecting em28xx [ 220.274258][ T5891] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 220.282001][ T5891] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 220.289514][ T5891] em28xx 3-1:0.89: No AC97 audio processor [ 220.302740][ T5891] usb 3-1: Decoder not found [ 220.312010][ T5891] em28xx 3-1:0.89: failed to create media graph [ 220.321058][ T7858] loop7: detected capacity change from 0 to 7 [ 220.335800][ T5891] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 220.350548][ T5891] em28xx 3-1:0.89: Registering snapshot button... [ 220.364257][ T5891] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input15 [ 220.416885][ T5891] em28xx 3-1:0.89: Remote control support is not available for this card. [ 220.468096][ T5918] em28xx 3-1:0.89: Closing input extension [ 220.497753][ T5918] em28xx 3-1:0.89: Deregistering snapshot button [ 220.665670][ T5918] em28xx 3-1:0.89: Freeing device [ 220.676094][ T7858] Dev loop7: unable to read RDB block 7 [ 220.681818][ T7858] loop7: unable to read partition table [ 220.688046][ T7858] loop7: partition table beyond EOD, truncated [ 220.695232][ T7858] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 220.768672][ T5884] usb 5-1: USB disconnect, device number 24 [ 220.785539][ T5884] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 220.895855][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.129290][ T43] usb 2-1: USB disconnect, device number 30 [ 221.197784][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 221.217698][ T9] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 221.229800][ T9] usb 1-1: config 0 has no interface number 0 [ 221.242163][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 221.265552][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.792433][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 221.843672][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 221.904839][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 221.910690][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 221.936978][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 222.009006][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.035755][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.064864][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 222.075175][ T5884] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.095863][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 222.108070][ T9] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.156789][ T9] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 222.194751][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.221832][ T9] usb 1-1: Product: syz [ 222.228135][ T9] usb 1-1: Manufacturer: syz [ 222.232781][ T9] usb 1-1: SerialNumber: syz [ 222.250164][ T9] usb 1-1: config 0 descriptor?? [ 222.257795][ T7871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.265880][ T7871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 222.275778][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 222.285862][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 222.306534][ T9] scsi host1: microtekX6 [ 222.427834][ T5884] usb 5-1: device descriptor read/64, error -71 [ 222.465702][ T7914] overlayfs: missing 'lowerdir' [ 222.505150][ T9] usb 1-1: USB disconnect, device number 33 [ 222.805575][ T5884] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.005229][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 223.225128][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 223.245981][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 223.308363][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 223.343722][ T7933] GUP no longer grows the stack in syz.0.474 (7933): 200000ffe000-200001000000 (200000ffa000) [ 223.358040][ T5884] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 223.360235][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) [ 223.360259][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.360271][ T7933] Call Trace: [ 223.360278][ T7933] [ 223.360286][ T7933] dump_stack_lvl+0x189/0x250 [ 223.360315][ T7933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.360334][ T7933] ? __pfx__printk+0x10/0x10 [ 223.360351][ T7933] ? find_vma+0xe7/0x160 [ 223.360389][ T7933] __get_user_pages+0x2470/0x2a00 [ 223.360447][ T7933] get_user_pages_remote+0x2f1/0xac0 [ 223.360469][ T7933] ? __pfx_mtree_load+0x10/0x10 [ 223.360500][ T7933] ? __pfx_get_user_pages_remote+0x10/0x10 [ 223.360527][ T7933] ? __access_remote_vm+0x367/0x7d0 [ 223.360557][ T7933] __access_remote_vm+0x211/0x7d0 [ 223.360591][ T7933] ? __pfx___access_remote_vm+0x10/0x10 [ 223.360622][ T7933] ? do_raw_spin_unlock+0x122/0x240 [ 223.360652][ T7933] environ_read+0x245/0x3e0 [ 223.360676][ T7933] ? __pfx_environ_read+0x10/0x10 [ 223.360697][ T7933] vfs_read+0x1fd/0xa30 [ 223.360721][ T7933] ? fdget_pos+0x247/0x320 [ 223.360743][ T7933] ? __pfx___mutex_lock+0x10/0x10 [ 223.360769][ T7933] ? __pfx_vfs_read+0x10/0x10 [ 223.360795][ T7933] ? __fget_files+0x2a/0x420 [ 223.360816][ T7933] ? __fget_files+0x3a0/0x420 [ 223.360832][ T7933] ? __fget_files+0x2a/0x420 [ 223.360858][ T7933] ksys_read+0x145/0x250 [ 223.360885][ T7933] ? __pfx_ksys_read+0x10/0x10 [ 223.360913][ T7933] ? do_syscall_64+0xbe/0xfa0 [ 223.360939][ T7933] do_syscall_64+0xfa/0xfa0 [ 223.360968][ T7933] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.360991][ T7933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.361010][ T7933] ? clear_bhb_loop+0x60/0xb0 [ 223.361032][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.361050][ T7933] RIP: 0033:0x7f9f20b8eec9 [ 223.361068][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.361084][ T7933] RSP: 002b:00007f9f21955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.361104][ T7933] RAX: ffffffffffffffda RBX: 00007f9f20de5fa0 RCX: 00007f9f20b8eec9 [ 223.361118][ T7933] RDX: 0000000000002020 RSI: 00002000000037c0 RDI: 0000000000000016 [ 223.361130][ T7933] RBP: 00007f9f20c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.361142][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.361153][ T7933] R13: 00007f9f20de6038 R14: 00007f9f20de5fa0 R15: 00007f9f20f0fa28 [ 223.361185][ T7933] [ 223.380921][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.413325][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.577915][ T7928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.646537][ T7925] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 223.704382][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 223.712689][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.791734][ T5884] usb 5-1: Product: syz [ 223.798144][ T5884] usb 5-1: Manufacturer: syz [ 223.802773][ T5884] usb 5-1: SerialNumber: syz [ 223.815227][ T5884] usb 5-1: config 0 descriptor?? [ 223.826432][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.833806][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.845995][ T5884] usb 5-1: ucan: probing device on interface #0 [ 223.887302][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 223.981697][ T9] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 224.001922][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 224.014332][ T9] usb 1-1: can't read configurations, error -61 [ 224.175000][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 224.376964][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 224.384148][ T9] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 224.396168][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 224.404199][ T9] usb 1-1: can't read configurations, error -61 [ 224.418840][ T9] usb usb1-port1: attempt power cycle [ 224.442953][ T5884] ucan 5-1:0.0 can0: registered device [ 224.600436][ T5884] ucan 5-1:0.0 can0: firmware string: unknown [ 224.928839][ T7973] netlink: 72 bytes leftover after parsing attributes in process `syz.2.479'. [ 224.938067][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 225.007745][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 225.016964][ T9] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 225.031235][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.060166][ T9] usb 1-1: can't read configurations, error -61 [ 225.173284][ T7976] bond3 (unregistering): Released all slaves [ 225.226494][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 225.285349][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 225.302112][ T9] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 225.338109][ T7976] netlink: 'syz.1.480': attribute type 13 has an invalid length. [ 225.352355][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.374346][ T9] usb 1-1: can't read configurations, error -61 [ 225.399156][ T9] usb usb1-port1: unable to enumerate USB device [ 225.494974][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.644517][ T5920] usb 5-1: USB disconnect, device number 26 [ 226.033766][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 226.033785][ T30] audit: type=1804 audit(1760223727.164:286): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.482" name="/newroot/101/file1" dev="fuse" ino=1 res=1 errno=0 [ 226.206303][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 226.367750][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 226.378435][ T43] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 226.418223][ T43] usb 4-1: config 0 has no interfaces? [ 226.449197][ T43] usb 4-1: config 0 has no interfaces? [ 226.481936][ T43] usb 4-1: config 0 has no interfaces? [ 226.528939][ T43] usb 4-1: config 0 has no interfaces? [ 226.599243][ T43] usb 4-1: config 0 has no interfaces? [ 226.616529][ T43] usb 4-1: config 0 has no interfaces? [ 226.625264][ T43] usb 4-1: config 0 has no interfaces? [ 226.641699][ T43] usb 4-1: config 0 has no interfaces? [ 226.668781][ T7994] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 226.675328][ T7994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.698998][ T7994] vhci_hcd vhci_hcd.0: Device attached [ 226.786899][ T8008] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 226.811678][ T43] usb 4-1: string descriptor 0 read error: -71 [ 226.818141][ T5946] vhci_hcd: stop threads [ 226.823336][ T5946] vhci_hcd: release socket [ 226.832761][ T43] usb 4-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 226.849812][ T5946] vhci_hcd: disconnect device [ 226.859899][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 226.884397][ T43] usb 4-1: config 0 descriptor?? [ 226.895227][ T5891] vhci_hcd: vhci_device speed not set [ 226.918005][ T43] usb 4-1: can't set config #0, error -71 [ 226.969425][ T43] usb 4-1: USB disconnect, device number 33 [ 227.302308][ T5918] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 227.476882][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 227.488720][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.523079][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 227.549034][ T8030] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 227.559814][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.617603][ T5918] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 227.626931][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.843162][ T5918] usb 5-1: Product: syz [ 227.853133][ T5918] usb 5-1: Manufacturer: syz [ 227.864696][ T5918] usb 5-1: SerialNumber: syz [ 228.016660][ T5918] usb 5-1: config 0 descriptor?? [ 228.057223][ T5918] redrat3 5-1:0.0: Couldn't find all endpoints [ 228.265332][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 228.335058][ T5891] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 228.484751][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 228.497871][ T5891] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 228.506502][ T5891] usb 3-1: config 0 has no interface number 0 [ 228.533508][ T5891] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 228.573051][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.604904][ T5918] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 228.641224][ T5891] usb 3-1: Product: syz [ 228.649531][ T5891] usb 3-1: Manufacturer: syz [ 228.654181][ T5891] usb 3-1: SerialNumber: syz [ 228.710758][ T5891] usb 3-1: config 0 descriptor?? [ 228.835364][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 228.900145][ T9] usb 5-1: USB disconnect, device number 27 [ 228.969117][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.988768][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.994944][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 229.024668][ T43] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 229.078270][ T5891] kaweth 3-1:0.58: Firmware present in device. [ 229.084245][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.096583][ T8049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.115722][ T43] usb 2-1: Product: syz [ 229.119908][ T43] usb 2-1: Manufacturer: syz [ 229.124513][ T43] usb 2-1: SerialNumber: syz [ 229.136057][ T8049] kvm: pic: non byte read [ 229.143768][ T8049] kvm: pic: level sensitive irq not supported [ 229.144632][ T8049] kvm: pic: non byte read [ 229.175995][ T43] usb 2-1: config 0 descriptor?? [ 229.204159][ T43] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 229.274955][ T5891] kaweth 3-1:0.58: Statistics collection: 0 [ 229.354577][ T5891] kaweth 3-1:0.58: Multicast filter limit: 0 [ 229.387249][ T5891] kaweth 3-1:0.58: MTU: 0 [ 229.391680][ T5891] kaweth 3-1:0.58: Read MAC address 00:00:00:00:00:00 [ 229.395640][ T43] usb 2-1: USB disconnect, device number 31 [ 229.710693][ T5891] kaweth 3-1:0.58: Error setting SOFS wait [ 229.720841][ T5891] kaweth 3-1:0.58: probe with driver kaweth failed with error -5 [ 229.741560][ T8061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.756120][ T8061] block device autoloading is deprecated and will be removed. [ 229.763946][ T5891] usb 3-1: USB disconnect, device number 35 [ 230.589636][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 230.765618][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 230.772621][ T10] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 230.782191][ T10] usb 2-1: config 0 has no interface number 0 [ 230.788500][ T10] usb 2-1: config 0 interface 230 has no altsetting 0 [ 230.810348][ T10] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 230.819578][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.854885][ T10] usb 2-1: Product: syz [ 230.860401][ T10] usb 2-1: Manufacturer: syz [ 230.865136][ T10] usb 2-1: SerialNumber: syz [ 230.891712][ T10] usb 2-1: config 0 descriptor?? [ 230.904891][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 230.936072][ T10] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 230.975112][ T10] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 231.055457][ T9] usb 3-1: device descriptor read/64, error -71 [ 231.307582][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 231.441654][ T30] audit: type=1326 audit(1760223732.574:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.468341][ T9] usb 3-1: device descriptor read/64, error -71 [ 231.474772][ T30] audit: type=1326 audit(1760223732.574:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.500153][ T30] audit: type=1326 audit(1760223732.574:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.522664][ T30] audit: type=1326 audit(1760223732.574:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.546212][ T30] audit: type=1326 audit(1760223732.574:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.569641][ T30] audit: type=1326 audit(1760223732.574:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.594773][ T30] audit: type=1326 audit(1760223732.574:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.596721][ T9] usb usb3-port1: attempt power cycle [ 231.626862][ T30] audit: type=1326 audit(1760223732.574:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.662644][ T30] audit: type=1326 audit(1760223732.574:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.685876][ T5918] usb 1-1: device descriptor read/64, error -71 [ 231.692986][ T30] audit: type=1326 audit(1760223732.574:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f82d7b8eec9 code=0x7ffc0000 [ 231.944947][ T5918] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 231.964972][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 232.004904][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 232.025408][ T9] usb 3-1: device descriptor read/8, error -71 [ 232.075050][ T5918] usb 1-1: device descriptor read/64, error -71 [ 232.166876][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.178129][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.188371][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 232.199256][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.215806][ T24] usb 4-1: config 0 descriptor?? [ 232.274922][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 232.284984][ T5918] usb usb1-port1: attempt power cycle [ 232.318887][ T9] usb 3-1: device descriptor read/8, error -71 [ 232.432733][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.441630][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.450770][ T9] usb usb3-port1: unable to enumerate USB device [ 232.655560][ T5918] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 232.659204][ T24] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 232.686644][ T24] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 232.707364][ T5918] usb 1-1: device descriptor read/8, error -71 [ 232.716083][ T24] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 232.858959][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.867847][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.876604][ C1] hid-thrustmaster 0003:044F:B65D.000C: Unknown packet type 0x0, unable to proceed further with wheel init [ 232.954957][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 232.962648][ T5918] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 232.985359][ T5918] usb 1-1: device descriptor read/8, error -71 [ 233.091127][ T24] usb 4-1: USB disconnect, device number 34 [ 233.105700][ T5918] usb usb1-port1: unable to enumerate USB device [ 233.136652][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 233.147610][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.164032][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.175199][ T9] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 233.183231][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'. [ 233.184346][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.205381][ T9] usb 5-1: config 0 descriptor?? [ 233.253347][ T10] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 233.272942][ T10] usb 2-1: USB disconnect, device number 32 [ 233.480343][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 233.487069][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.498158][ T9] usb 5-1: USB disconnect, device number 28 [ 233.551270][ T8114] futex_wake_op: syz.4.508 tries to shift op by 36; fix this program [ 233.597355][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 233.701174][ T8118] bond1: entered promiscuous mode [ 233.709944][ T8118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.770506][ T8119] bond2: entered promiscuous mode [ 233.785709][ T10] usb 2-1: config index 0 descriptor too short (expected 47019, got 18) [ 233.794720][ T8119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.804155][ T10] usb 2-1: config 57 has too many interfaces: 115, using maximum allowed: 32 [ 233.841560][ T10] usb 2-1: config 57 has an invalid descriptor of length 0, skipping remainder of the config [ 233.870693][ T10] usb 2-1: config 57 has 0 interfaces, different from the descriptor's value: 115 [ 233.880898][ T10] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 233.910273][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.956161][ T8134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.129602][ T8138] netlink: 68 bytes leftover after parsing attributes in process `syz.2.513'. [ 234.214921][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 234.382137][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 234.401483][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.416505][ T24] usb 5-1: Product: syz [ 234.421350][ T24] usb 5-1: Manufacturer: syz [ 234.426268][ T24] usb 5-1: SerialNumber: syz [ 235.202846][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 235.256893][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 235.300354][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 235.328344][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 235.352220][ T24] usb 5-1: USB disconnect, device number 29 [ 235.695203][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 235.935621][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 235.945185][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.953883][ T24] usb 5-1: config 0 has no interface number 0 [ 235.963414][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.973446][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.981828][ T24] usb 5-1: Product: syz [ 235.986477][ T24] usb 5-1: Manufacturer: syz [ 235.991489][ T24] usb 5-1: SerialNumber: syz [ 236.094968][ T8158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.104882][ T8158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.153135][ T8158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.160049][ T8158] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.208748][ T8158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.215648][ T8158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.251304][ T8158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.257990][ T8158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.288934][ T8158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.296074][ T8158] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.329277][ T10] usb 2-1: string descriptor 0 read error: -71 [ 236.344358][ T24] usb 5-1: config 0 descriptor?? [ 236.346425][ T10] usb 2-1: USB disconnect, device number 33 [ 236.374995][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 236.588521][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.612255][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.721600][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 236.733930][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 237.156811][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 237.164726][ T24] usb 5-1: USB disconnect, device number 30 [ 237.260382][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 237.871059][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 237.933962][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 238.102138][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 238.175053][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 238.245188][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 238.335099][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 238.341127][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 238.437280][ T24] quatech2 5-1:0.51: device disconnected [ 238.587217][ T8181] netlink: 'syz.4.523': attribute type 13 has an invalid length. [ 238.751351][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.758835][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.950035][ T1091] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.000613][ T1091] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.047210][ T1091] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.056814][ T1091] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.165618][ T1091] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.273680][ T1091] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.523632][ T1091] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.534947][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 239.590141][ T1091] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.767149][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 239.785158][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.798000][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.525'. [ 239.843862][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.015420][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 240.026796][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.092167][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.140834][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.245025][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 240.334923][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 240.348144][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 240.406407][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 240.412545][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 240.420737][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.430135][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.444905][ T10] usb 1-1: Product: syz [ 240.450368][ T10] usb 1-1: Manufacturer: syz [ 240.460503][ T10] usb 1-1: SerialNumber: syz [ 240.496726][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 240.502014][ T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 240.536667][ T10] cdc_ncm 1-1:1.0: bind() failure [ 240.943210][ T5884] usb 1-1: USB disconnect, device number 42 [ 241.147013][ T8225] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 241.523362][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 241.532101][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 241.675250][ T43] usb 2-1: device descriptor read/64, error -71 [ 241.760851][ T8230] use of bytesused == 0 is deprecated and will be removed in the future, [ 241.769576][ T8230] use the actual size instead. [ 241.785887][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.842790][ T10] usb 5-1: config 3 has an invalid interface number: 8 but max is 3 [ 241.888424][ T10] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 241.903308][ T10] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 241.917602][ T10] usb 5-1: config 3 has no interface number 0 [ 241.924985][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 241.933261][ T10] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 241.975578][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.988021][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.041649][ T10] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 242.065744][ T43] usb 2-1: device descriptor read/64, error -71 [ 242.134858][ T10] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 242.174862][ T10] usb 5-1: config 3 interface 8 has no altsetting 0 [ 242.185976][ T43] usb usb2-port1: attempt power cycle [ 242.204603][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 242.226901][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.254184][ T10] usb 5-1: Product: syz [ 242.272626][ T10] usb 5-1: Manufacturer: syz [ 242.277312][ T10] usb 5-1: SerialNumber: syz [ 242.368919][ T8242] bond2: entered promiscuous mode [ 242.396194][ T8242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.510269][ T10] appledisplay 5-1:3.8: Error while getting initial brightness: -71 [ 242.541276][ T10] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71 [ 242.545193][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 242.577562][ T10] usb 5-1: USB disconnect, device number 31 [ 242.581501][ T43] usb 2-1: device descriptor read/8, error -71 [ 242.814731][ T8186] syz.3.522 (8186): drop_caches: 1 [ 242.845342][ T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 242.868945][ T8192] syz.3.522 (8192): drop_caches: 1 [ 242.875672][ T43] usb 2-1: device descriptor read/8, error -71 [ 243.006805][ T43] usb usb2-port1: unable to enumerate USB device [ 243.087083][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 243.254931][ T10] usb 1-1: device descriptor read/64, error -71 [ 243.287152][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 243.508339][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.517561][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.526895][ T43] usb 4-1: Product: syz [ 243.531082][ T43] usb 4-1: Manufacturer: syz [ 243.538041][ T43] usb 4-1: SerialNumber: syz [ 243.559550][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.597341][ T5884] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.615743][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 243.725522][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 243.765020][ T10] usb 1-1: device descriptor read/64, error -71 [ 243.875873][ T10] usb usb1-port1: attempt power cycle [ 243.887059][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 243.896887][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.905968][ T24] usb 3-1: config 0 has no interface number 0 [ 243.912979][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 243.926695][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.935918][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.944368][ T24] usb 3-1: Product: syz [ 243.948697][ T24] usb 3-1: Manufacturer: syz [ 243.953966][ T24] usb 3-1: SerialNumber: syz [ 243.967102][ T24] usb 3-1: config 0 descriptor?? [ 244.052536][ T24] smsc75xx v1.0.0 [ 244.225904][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 244.269913][ T10] usb 1-1: device descriptor read/8, error -71 [ 244.411453][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.425297][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.572583][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 244.581657][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 244.589614][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 244.616132][ T10] usb 1-1: device descriptor read/8, error -71 [ 244.618691][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 244.637325][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 244.648818][ T5884] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 244.657189][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 244.671350][ T5884] ath9k_htc: Failed to initialize the device [ 244.683174][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 244.719810][ T8278] syz_tun: entered promiscuous mode [ 244.726590][ T5884] usb 4-1: ath9k_htc: USB layer deinitialized [ 244.735674][ T10] usb usb1-port1: unable to enumerate USB device [ 244.743926][ T8278] batadv_slave_1: entered promiscuous mode [ 244.766136][ T8278] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 244.794322][ T24] usb 4-1: USB disconnect, device number 35 [ 244.800700][ T8278] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.437879][ T8282] FAULT_INJECTION: forcing a failure. [ 245.437879][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.451433][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT(full) [ 245.451458][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.451480][ T8282] Call Trace: [ 245.451488][ T8282] [ 245.451496][ T8282] dump_stack_lvl+0x189/0x250 [ 245.451530][ T8282] ? __pfx____ratelimit+0x10/0x10 [ 245.451555][ T8282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.451576][ T8282] ? __pfx__printk+0x10/0x10 [ 245.451596][ T8282] ? __might_fault+0xb0/0x130 [ 245.451634][ T8282] should_fail_ex+0x414/0x560 [ 245.451663][ T8282] _copy_from_user+0x2d/0xb0 [ 245.451684][ T8282] ___sys_sendmsg+0x158/0x2a0 [ 245.451712][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.451772][ T8282] ? __fget_files+0x2a/0x420 [ 245.451789][ T8282] ? __fget_files+0x3a0/0x420 [ 245.451816][ T8282] __x64_sys_sendmsg+0x19b/0x260 [ 245.451842][ T8282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.451876][ T8282] ? __pfx_ksys_write+0x10/0x10 [ 245.451906][ T8282] ? do_syscall_64+0xbe/0xfa0 [ 245.451935][ T8282] do_syscall_64+0xfa/0xfa0 [ 245.451958][ T8282] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.451982][ T8282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.452002][ T8282] ? clear_bhb_loop+0x60/0xb0 [ 245.452025][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.452044][ T8282] RIP: 0033:0x7fa8e5b8eec9 [ 245.452062][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.452080][ T8282] RSP: 002b:00007fa8e6a8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.452101][ T8282] RAX: ffffffffffffffda RBX: 00007fa8e5de5fa0 RCX: 00007fa8e5b8eec9 [ 245.452115][ T8282] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 245.452128][ T8282] RBP: 00007fa8e6a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 245.452139][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.452151][ T8282] R13: 00007fa8e5de6038 R14: 00007fa8e5de5fa0 R15: 00007fa8e5f0fa28 [ 245.452182][ T8282] [ 245.653827][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.184997][ T5884] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 246.334904][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 246.343582][ T5884] usb 5-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config [ 246.357256][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.366690][ T5884] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.383706][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.392502][ T8288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 246.399098][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.409926][ T5884] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 246.427354][ T5884] usb 5-1: no configuration chosen from 1 choice [ 246.434413][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 246.447060][ T8292] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 246.453670][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.523754][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 246.574732][ T8288] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 246.581364][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.596416][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 246.597046][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.615199][ T24] vhci_hcd: vhci_device speed not set [ 246.650401][ T8288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 246.675537][ T24] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 246.676427][ T8318] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 246.701036][ T8307] vhci_hcd: connection reset by peer [ 246.701259][ T8316] vhci_hcd: connection closed [ 246.707702][ T8310] vhci_hcd: connection closed [ 246.715686][ T5946] vhci_hcd: stop threads [ 246.745336][ T5946] vhci_hcd: release socket [ 246.753252][ T5946] vhci_hcd: disconnect device [ 246.758805][ T5946] vhci_hcd: stop threads [ 246.763591][ T5946] vhci_hcd: release socket [ 246.772203][ T5946] vhci_hcd: disconnect device [ 246.782396][ T5946] vhci_hcd: stop threads [ 246.794468][ T5946] vhci_hcd: release socket [ 246.829548][ T5946] vhci_hcd: disconnect device [ 247.305769][ T5884] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 247.442793][ T5920] usb 3-1: USB disconnect, device number 41 [ 247.455144][ T5884] usb 2-1: device descriptor read/64, error -71 [ 247.833064][ T5884] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 247.975521][ T5884] usb 2-1: device descriptor read/64, error -71 [ 248.004591][ T8350] dvmrp0: entered allmulticast mode [ 248.086068][ T5884] usb usb2-port1: attempt power cycle [ 248.464900][ T5884] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 248.548760][ T5884] usb 2-1: device descriptor read/8, error -71 [ 248.808188][ T5884] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 248.835591][ T5884] usb 2-1: device descriptor read/8, error -71 [ 248.967360][ T5884] usb usb2-port1: unable to enumerate USB device [ 248.986071][ T5919] usb 5-1: USB disconnect, device number 32 [ 249.315886][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 249.476635][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.487039][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.502044][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.511340][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 249.520637][ T10] usb 3-1: SerialNumber: syz [ 249.530726][ T10] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 249.538808][ T10] usb 3-1: bad CDC descriptors [ 249.741101][ T10] usb 3-1: USB disconnect, device number 42 [ 250.180611][ T8381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.267523][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 250.280808][ T8386] bridge_slave_1: left allmulticast mode [ 250.287959][ T8386] bridge_slave_1: left promiscuous mode [ 250.295018][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.307642][ T8386] bridge_slave_0: left allmulticast mode [ 250.319653][ T8386] bridge_slave_0: left promiscuous mode [ 250.326091][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.164926][ T5920] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 251.314938][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 251.323100][ T5920] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 251.344413][ T5920] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 251.428479][ T5920] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.439141][ T5920] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 251.463132][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.470988][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 251.480621][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.552983][ T5920] usb 5-1: config 0 descriptor?? [ 251.755554][ T24] vhci_hcd: vhci_device speed not set [ 252.849673][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.859911][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.915105][ T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 253.409096][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 253.714897][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 253.726444][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 253.754158][ T8431] sit1: entered promiscuous mode [ 253.828505][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.850718][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.873528][ T5920] usb 5-1: USB disconnect, device number 33 [ 253.963085][ T10] usb 1-1: config 8 has an invalid interface number: 132 but max is 0 [ 254.168413][ T8435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.178665][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 254.212990][ T10] usb 1-1: config 8 has no interface number 0 [ 254.337069][ T10] usb 1-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.360373][ T10] usb 1-1: config 8 interface 132 has no altsetting 0 [ 254.427079][ T10] usb 1-1: string descriptor 0 read error: -22 [ 254.437900][ T10] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 254.469392][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.562750][ T10] usb-storage 1-1:8.132: USB Mass Storage device detected [ 254.675440][ T10] usb-storage 1-1:8.132: Quirks match for vid 07cf pid 1001: a [ 255.193503][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 255.300646][ T8476] netlink: 'syz.1.591': attribute type 21 has an invalid length. [ 255.444852][ T8476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.591'. [ 255.526745][ T8476] netlink: 'syz.1.591': attribute type 5 has an invalid length. [ 255.580078][ T8476] netlink: 3 bytes leftover after parsing attributes in process `syz.1.591'. [ 255.693439][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700091][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803652][ T5884] usb 1-1: USB disconnect, device number 47 [ 257.154993][ T43] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 257.353732][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 257.388386][ T43] usb 3-1: can't read configurations, error -71 [ 257.547620][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 257.569944][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 258.153527][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 258.356223][ T8525] @: renamed from syz_tun (while UP) [ 259.113962][ T8534] FAULT_INJECTION: forcing a failure. [ 259.113962][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 259.153321][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) [ 259.153349][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.153361][ T8534] Call Trace: [ 259.153368][ T8534] [ 259.153376][ T8534] dump_stack_lvl+0x189/0x250 [ 259.153400][ T8534] ? __pfx____ratelimit+0x10/0x10 [ 259.153430][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.153450][ T8534] ? __pfx__printk+0x10/0x10 [ 259.153475][ T8534] ? __pfx___might_resched+0x10/0x10 [ 259.153496][ T8534] ? fs_reclaim_acquire+0x7d/0x100 [ 259.153529][ T8534] should_fail_ex+0x414/0x560 [ 259.153558][ T8534] should_failslab+0xa8/0x100 [ 259.153578][ T8534] __kmalloc_noprof+0xcb/0x7f0 [ 259.153605][ T8534] ? fib_create_info+0x172d/0x3210 [ 259.153631][ T8534] fib_create_info+0x172d/0x3210 [ 259.153656][ T8534] ? rcu_is_watching+0x15/0xb0 [ 259.153683][ T8534] ? __mutex_lock+0x335/0x1350 [ 259.153709][ T8534] ? nlmon_xmit+0xb0/0x100 [ 259.153736][ T8534] fib_table_insert+0xc6/0x1b50 [ 259.153766][ T8534] ? __pfx___mutex_lock+0x10/0x10 [ 259.153789][ T8534] ? rtm_to_fib_config+0x1086/0x13c0 [ 259.153816][ T8534] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.153842][ T8534] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.153865][ T8534] ? __dev_queue_xmit+0x27b/0x3b50 [ 259.153898][ T8534] inet_rtm_newroute+0x12b/0x210 [ 259.153917][ T8534] ? __lock_acquire+0xab9/0xd20 [ 259.153937][ T8534] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 259.153980][ T8534] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 259.154005][ T8534] rtnetlink_rcv_msg+0x7cc/0xb70 [ 259.154030][ T8534] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 259.154049][ T8534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.154067][ T8534] ? ref_tracker_free+0x63a/0x7d0 [ 259.154093][ T8534] ? __asan_memcpy+0x40/0x70 [ 259.154116][ T8534] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.154139][ T8534] ? __skb_clone+0x63/0x7a0 [ 259.154172][ T8534] netlink_rcv_skb+0x208/0x470 [ 259.154207][ T8534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.154229][ T8534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.154265][ T8534] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.154295][ T8534] netlink_unicast+0x82c/0x9e0 [ 259.154322][ T8534] ? __pfx_netlink_unicast+0x10/0x10 [ 259.154354][ T8534] ? netlink_sendmsg+0x642/0xb30 [ 259.154373][ T8534] ? skb_put+0x11b/0x210 [ 259.154398][ T8534] netlink_sendmsg+0x805/0xb30 [ 259.154430][ T8534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.154500][ T8534] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.154537][ T8534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.154555][ T8534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.154576][ T8534] __sock_sendmsg+0x219/0x270 [ 259.154606][ T8534] ____sys_sendmsg+0x505/0x830 [ 259.154633][ T8534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.154663][ T8534] ? import_iovec+0x74/0xa0 [ 259.154687][ T8534] ___sys_sendmsg+0x21f/0x2a0 [ 259.154712][ T8534] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.154768][ T8534] ? __fget_files+0x2a/0x420 [ 259.154784][ T8534] ? __fget_files+0x3a0/0x420 [ 259.154808][ T8534] __x64_sys_sendmsg+0x19b/0x260 [ 259.154832][ T8534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.154862][ T8534] ? __pfx_ksys_write+0x10/0x10 [ 259.154891][ T8534] ? do_syscall_64+0xbe/0xfa0 [ 259.154917][ T8534] do_syscall_64+0xfa/0xfa0 [ 259.154938][ T8534] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.154959][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.154977][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 259.154998][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.155015][ T8534] RIP: 0033:0x7f82d7b8eec9 [ 259.155032][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.155049][ T8534] RSP: 002b:00007f82d8ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.155070][ T8534] RAX: ffffffffffffffda RBX: 00007f82d7de5fa0 RCX: 00007f82d7b8eec9 [ 259.155084][ T8534] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 259.155095][ T8534] RBP: 00007f82d8ada090 R08: 0000000000000000 R09: 0000000000000000 [ 259.155105][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.155115][ T8534] R13: 00007f82d7de6038 R14: 00007f82d7de5fa0 R15: 00007f82d7f0fa28 [ 259.155142][ T8534] [ 259.559626][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 259.725387][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 259.740228][ T43] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 259.770555][ T8538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.822490][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.860369][ T43] usb 1-1: config 0 has no interface number 1 [ 259.897253][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.982034][ T43] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 260.065152][ T43] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 260.132129][ T43] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 260.141501][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.149817][ T43] usb 1-1: Product: syz [ 260.154606][ T43] usb 1-1: Manufacturer: syz [ 260.160350][ T43] usb 1-1: SerialNumber: syz [ 260.178937][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 260.270992][ T43] usb 1-1: config 0 descriptor?? [ 260.344986][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 260.352012][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 260.361160][ T10] usb 4-1: config 0 has no interface number 0 [ 260.367691][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 260.378627][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.492194][ T43] cxacru 1-1:0.0: cxacru_bind: interface has incorrect endpoints [ 260.506146][ T43] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 260.527524][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 260.535110][ T43] cxacru 1-1:0.4: cxacru_bind: interface has incorrect endpoints [ 260.543002][ T43] cxacru 1-1:0.4: usbatm_usb_probe: bind failed: -19! [ 260.554652][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 260.563949][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.572297][ T10] usb 4-1: Product: syz [ 260.605209][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 260.614514][ T10] usb 4-1: Manufacturer: syz [ 260.624724][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.637462][ T43] usb 1-1: USB disconnect, device number 48 [ 260.658050][ T10] usb 4-1: SerialNumber: syz [ 260.679140][ T9] usb 2-1: Product: syz [ 260.691192][ T10] usb 4-1: config 0 descriptor?? [ 260.734684][ T9] usb 2-1: Manufacturer: syz [ 260.753589][ T9] usb 2-1: SerialNumber: syz [ 260.795840][ T9] usb 2-1: config 0 descriptor?? [ 260.876403][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 260.902646][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 260.922480][ T9] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 260.964962][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 260.972226][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 261.175460][ T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 261.218440][ T10] usb 4-1: USB disconnect, device number 36 [ 261.302398][ T8569] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 261.346058][ T43] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 261.374023][ T43] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 261.457899][ T8578] netlink: 'syz.0.616': attribute type 13 has an invalid length. [ 261.545865][ T8573] bond1 (unregistering): Released all slaves [ 261.551930][ T43] usb 5-1: can't read configurations, error -22 [ 261.735765][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 261.827626][ T8582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.835372][ T8578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.896201][ T43] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 261.907635][ T43] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 261.916082][ T43] usb 5-1: can't read configurations, error -22 [ 261.923213][ T43] usb usb5-port1: attempt power cycle [ 262.265043][ T43] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.286003][ T43] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 262.296105][ T43] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 262.304213][ T43] usb 5-1: can't read configurations, error -22 [ 262.435005][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 262.456529][ T43] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 262.466437][ T43] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 262.474565][ T43] usb 5-1: can't read configurations, error -22 [ 262.481427][ T43] usb usb5-port1: unable to enumerate USB device [ 263.024996][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 263.125346][ T43] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 263.198577][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.210033][ T10] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 263.219116][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.230323][ T10] usb 4-1: config 0 descriptor?? [ 263.285805][ T43] usb 2-1: device firmware changed [ 263.297179][ T43] usb 2-1: USB disconnect, device number 43 [ 263.304695][ T43] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 263.441061][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.452305][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.614955][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 263.663956][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 263.670241][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 263.680367][ T10] usb 4-1: USB disconnect, device number 37 [ 263.705923][ T5920] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 263.775694][ T43] usb 2-1: no configurations [ 263.780344][ T43] usb 2-1: can't read configurations, error -22 [ 263.861737][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.877675][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.886944][ T5920] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.900192][ T5920] usb 3-1: config 1 interface 0 has no altsetting 1 [ 263.909879][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 263.919332][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 263.927306][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.937312][ T5920] usb 3-1: Product: syz [ 263.941483][ T5920] usb 3-1: Manufacturer: syz [ 263.946228][ T5920] usb 3-1: SerialNumber: syz [ 263.961422][ T5920] smsusb:smsusb_probe: board id=8, interface number 0 [ 264.086843][ T43] usb 2-1: no configurations [ 264.091567][ T43] usb 2-1: can't read configurations, error -22 [ 264.099043][ T43] usb usb2-port1: attempt power cycle [ 264.161161][ T5920] smsusb:smsusb_probe: Device initialized with return code -19 [ 264.225256][ T5884] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 264.372774][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.382532][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.412436][ T5920] usb 3-1: USB disconnect, device number 45 [ 264.444979][ T43] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 264.457019][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.470458][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.492241][ T5884] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.526377][ T8614] hub 9-0:1.0: USB hub found [ 264.533289][ T8614] hub 9-0:1.0: 1 port detected [ 264.546921][ T5884] usb 5-1: config 1 interface 0 has no altsetting 1 [ 264.556342][ T43] usb 2-1: no configurations [ 264.561105][ T43] usb 2-1: can't read configurations, error -22 [ 264.580234][ T5884] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 264.593311][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.608728][ T5884] usb 5-1: Product: syz [ 264.617838][ T5884] usb 5-1: Manufacturer: syz [ 264.631555][ T5884] usb 5-1: SerialNumber: syz [ 264.657441][ T5884] smsusb:smsusb_probe: board id=8, interface number 0 [ 264.715401][ T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 264.736344][ T43] usb 2-1: no configurations [ 264.741077][ T43] usb 2-1: can't read configurations, error -22 [ 264.747936][ T43] usb usb2-port1: unable to enumerate USB device [ 264.854947][ T8606] fuse: Unknown parameter 'fú‡Ü d' [ 265.170544][ T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 265.338168][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.375019][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 265.391764][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.414928][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 265.423912][ T10] usb 4-1: config 1 has no interface number 1 [ 265.454016][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 265.459129][ T5884] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 265.474435][ T5884] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 265.491608][ T5884] usb 5-1: USB disconnect, device number 38 [ 265.516224][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 265.547305][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65532, setting to 1023 [ 265.581693][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.591155][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.600514][ T10] usb 4-1: Product: syz [ 265.604862][ T10] usb 4-1: Manufacturer: syz [ 265.609840][ T10] usb 4-1: SerialNumber: syz [ 265.848776][ T8641] sit1: entered allmulticast mode [ 265.880727][ T10] hub 4-1:1.0: Invalid hub with more than one config or interface [ 265.908365][ T10] hub 4-1:1.0: probe with driver hub failed with error -22 [ 265.989419][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 266.055142][ T10] usb 4-1: USB disconnect, device number 38 [ 266.914938][ T5920] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 267.002274][ T8656] bond3 (unregistering): Released all slaves [ 267.018676][ T8660] netlink: 'syz.2.637': attribute type 13 has an invalid length. [ 267.098468][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 267.107604][ T8659] xt_CT: No such helper "pptp" [ 267.134217][ T8660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.160051][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.187887][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.198578][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.213812][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 267.226806][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.239920][ T5920] usb 2-1: config 0 descriptor?? [ 267.554946][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 267.592982][ T8667] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.640'. [ 267.602396][ T8667] openvswitch: netlink: EtherType 0 is less than min 600 [ 267.611358][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 267.620796][ T8667] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 267.667878][ T5920] apple 0003:05AC:027A.000D: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 267.695670][ T9] usb 1-1: device descriptor read/64, error -71 [ 267.859945][ T10] usb 2-1: USB disconnect, device number 48 [ 267.944519][ T8669] fido_id[8669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 267.961628][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 268.105642][ T9] usb 1-1: device descriptor read/64, error -71 [ 268.214418][ T8683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.239060][ T9] usb usb1-port1: attempt power cycle [ 268.485698][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 268.596562][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 268.625666][ T9] usb 1-1: device descriptor read/8, error -71 [ 268.656847][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.675142][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.715767][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.753868][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.763405][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.771643][ T10] usb 4-1: Product: syz [ 268.776730][ T10] usb 4-1: Manufacturer: syz [ 268.781469][ T10] usb 4-1: SerialNumber: syz [ 268.800192][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 268.807283][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 268.885234][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 268.905723][ T9] usb 1-1: device descriptor read/8, error -71 [ 269.025221][ T9] usb usb1-port1: unable to enumerate USB device [ 269.032044][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 269.076275][ T10] usb 4-1: USB disconnect, device number 39 [ 269.091399][ T10] usblp0: removed [ 269.910897][ T8725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.998705][ T8729] netlink: 'syz.2.648': attribute type 2 has an invalid length. [ 270.438852][ T8740] fuse: Unknown parameter '0000000000000000000001500000000000000000000' [ 270.925965][ T5884] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 271.141765][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 271.291422][ T5884] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.300724][ T5884] usb 2-1: config 0 has no interface number 0 [ 271.345197][ T5884] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 271.386891][ T5884] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.420520][ T8759] netlink: 64 bytes leftover after parsing attributes in process `syz.4.652'. [ 271.501529][ T5884] usb 2-1: config 0 interface 41 has no altsetting 0 [ 271.676200][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.688883][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.784942][ T5884] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.798783][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.816823][ T5884] usb 2-1: Product: syz [ 271.825219][ T5884] usb 2-1: Manufacturer: syz [ 271.829838][ T5884] usb 2-1: SerialNumber: syz [ 271.839056][ T8759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.858327][ T5884] usb 2-1: config 0 descriptor?? [ 271.877166][ T5919] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 271.906091][ T8748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.926932][ T5918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.935114][ T8748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.025393][ T8458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.096518][ T5919] usb 4-1: config index 0 descriptor too short (expected 36, got 14) [ 272.131972][ T5919] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 272.251095][ T5919] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.533614][ T5919] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 272.579610][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.605740][ T8748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.651368][ T5919] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 272.675084][ T8748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.704964][ T5919] usb 4-1: no configuration chosen from 1 choice [ 272.885672][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.045466][ T8458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.075164][ T8458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.379610][ T5884] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 273.395118][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.805203][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 273.957918][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 273.972671][ T43] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 273.983891][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 274.011880][ T43] usb 3-1: config 1 has no interface number 1 [ 274.018871][ T43] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 274.028355][ T43] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 274.050923][ T43] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 274.093760][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.103351][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.130031][ T43] usb 3-1: Product: syz [ 274.144492][ T43] usb 3-1: Manufacturer: syz [ 274.161572][ T43] usb 3-1: SerialNumber: syz [ 274.393811][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.421606][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.435869][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.468864][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.485602][ T5884] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 274.505219][ T5884] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 274.525771][ T5884] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 274.541457][ T5884] usb 2-1: USB disconnect, device number 49 [ 274.562716][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.600800][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.611801][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.623383][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.636068][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.650239][ T5920] usb 4-1: USB disconnect, device number 40 [ 274.672391][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.693568][ T43] usb 3-1: 0:8 : does not exist [ 274.728617][ T43] usb 3-1: USB disconnect, device number 46 [ 274.764893][ T5919] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 274.950583][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 274.978286][ T5919] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 274.985097][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.003959][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.021009][ T5919] usb 5-1: Product: syz [ 275.035912][ T5919] usb 5-1: Manufacturer: syz [ 275.041232][ T5919] usb 5-1: SerialNumber: syz [ 275.055512][ T5919] usb 5-1: config 0 descriptor?? [ 275.062541][ T8828] @: renamed from vlan0 (while UP) [ 275.067830][ T5919] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 275.110080][ T8831] xt_hashlimit: invalid rate [ 275.186207][ T10] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 275.368202][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 275.376606][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 275.388751][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.435458][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.449090][ T10] usb 4-1: string descriptor 0 read error: -22 [ 275.461443][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.480505][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.493605][ T5919] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 275.504047][ T5919] visor 5-1:0.0: probe with driver visor failed with error -5 [ 275.530435][ T10] usb 4-1: 0:2 : does not exist [ 275.554915][ T43] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 275.654923][ T5920] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 275.710132][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 275.727923][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.750544][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 275.823775][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 275.835389][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 275.845005][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 275.859747][ T5920] usb 3-1: config 0 has an invalid interface number: 142 but max is 0 [ 275.870719][ T43] usb 1-1: Product: syz [ 275.928305][ T43] usb 1-1: Manufacturer: syz [ 275.932939][ T43] usb 1-1: SerialNumber: syz [ 275.943923][ T5920] usb 3-1: config 0 has no interface number 0 [ 275.947008][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 275.954409][ T5920] usb 3-1: config 0 interface 142 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 276.009428][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.018836][ T5920] usb 3-1: config 0 interface 142 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16 [ 276.032678][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 276.038728][ T5884] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.061719][ T5920] usb 3-1: config 0 interface 142 has no altsetting 0 [ 276.095183][ T5920] usb 3-1: New USB device found, idVendor=07a6, idProduct=0986, bcdDevice=7a.7b [ 276.104505][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.113237][ T5920] usb 3-1: Product: syz [ 276.118987][ T5920] usb 3-1: Manufacturer: syz [ 276.123871][ T5920] usb 3-1: SerialNumber: syz [ 276.141417][ T5920] usb 3-1: config 0 descriptor?? [ 276.150074][ T10] usb 4-1: USB disconnect, device number 41 [ 276.156415][ T8839] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 276.454873][ T5920] pegasus 3-1:0.142: probe with driver pegasus failed with error -71 [ 276.514415][ T5920] usb 3-1: USB disconnect, device number 47 [ 277.124996][ T5884] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 277.132160][ T5884] ath9k_htc: Failed to initialize the device [ 277.199300][ T5884] usb 1-1: ath9k_htc: USB layer deinitialized [ 277.302450][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 277.311808][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 277.354903][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 277.365309][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.445478][ T31] INFO: task kworker/0:2:897 blocked for more than 143 seconds. [ 277.453307][ T31] Not tainted syzkaller #0 [ 277.464850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.484585][ T31] task:kworker/0:2 state:D stack:22744 pid:897 tgid:897 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 277.490605][ T5920] usb 5-1: USB disconnect, device number 39 [ 277.517851][ T31] Workqueue: usb_hub_wq hub_event [ 277.522934][ T31] Call Trace: [ 277.526345][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 277.534632][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=eb.4c [ 277.545092][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.549792][ T31] [ 277.559639][ T31] __schedule+0x1798/0x4cc0 [ 277.564325][ T31] ? __pfx___schedule+0x10/0x10 [ 277.571033][ T31] ? schedule+0x91/0x360 [ 277.575723][ T31] schedule+0x165/0x360 [ 277.580420][ T31] schedule_preempt_disabled+0x13/0x30 [ 277.586245][ T31] __mutex_lock+0x7e6/0x1350 [ 277.610186][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.620820][ T31] ? __mutex_lock+0x5bb/0x1350 [ 277.625948][ T31] ? hub_event+0x21e5/0x4a20 [ 277.630731][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 277.636033][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.642223][ T31] hub_event+0x21e5/0x4a20 [ 277.646992][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.653528][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.660193][ T31] ? do_raw_spin_lock+0x121/0x290 [ 277.791440][ T31] ? __pfx_hub_event+0x10/0x10 [ 277.797301][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 277.843294][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.884846][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 277.896127][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.902952][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 277.909179][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 277.916059][ T31] process_scheduled_works+0xae1/0x17b0 [ 277.923007][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.935670][ T31] worker_thread+0x8a0/0xda0 [ 277.946933][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.958517][ T31] ? __kthread_parkme+0x7b/0x200 [ 277.967309][ T31] kthread+0x711/0x8a0 [ 277.975041][ T10] usb 2-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 277.985278][ T31] ? __pfx_worker_thread+0x10/0x10 [ 278.006632][ T31] ? __pfx_kthread+0x10/0x10 [ 278.025049][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.037862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.050285][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.058323][ T10] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 278.084900][ T31] ? __pfx_kthread+0x10/0x10 [ 278.091814][ T31] ret_from_fork+0x4bc/0x870 [ 278.097142][ T10] usb 2-1: media controller created [ 278.098137][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 278.102425][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 278.108272][ T31] ? __switch_to_asm+0x39/0x70 [ 278.119623][ T31] ? __switch_to_asm+0x33/0x70 [ 278.130354][ T31] ? __pfx_kthread+0x10/0x10 [ 278.135863][ T31] ret_from_fork_asm+0x1a/0x30 [ 278.141242][ T31] [ 278.144702][ T31] [ 278.144702][ T31] Showing all locks held in the system: [ 278.154757][ T31] 8 locks held by kworker/0:1/10: [ 278.169655][ T31] 1 lock held by khungtaskd/31: [ 278.170572][ T10] usb 2-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 278.182841][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 278.194430][ T31] 5 locks held by kworker/0:2/897: [ 278.200416][ T31] #0: ffff88801f69fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 278.212838][ T31] #1: ffffc90003a07ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 278.225539][ T31] #2: ffff888146368198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 278.234620][ T31] #3: ffff88814636b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 278.236769][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.244765][ T31] #4: ffff888028848668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 278.263296][ T31] 2 locks held by getty/5592: [ 278.268196][ T31] #0: ffff88814dc950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 278.278192][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 278.288734][ T31] 5 locks held by kworker/1:3/5884: [ 278.294051][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 278.315124][ T31] #1: ffffc90004457ba0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 278.327845][ T31] #2: ffff888027a5c198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x332/0x4c0 [ 278.338431][ T31] #3: ffff8880780c1198 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 278.349463][ T31] #4: ffff888026c89a68 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x53e/0x20e0 [ 278.360416][ T31] 5 locks held by kworker/0:6/5899: [ 278.366294][ T31] #0: ffff88801f69fd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 278.378017][ T31] #1: ffffc90004547ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 278.412687][ T31] #2: ffff888028a93198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 278.444324][ T31] #3: ffff888028976518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 278.481387][ T31] #4: ffff888028848668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 278.504524][ T31] 2 locks held by syz.3.673/8860: [ 278.504956][ T10] usb 2-1: USB disconnect, device number 50 [ 278.538437][ T31] #0: ffff88805aa01ec8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 278.548948][ T31] #1: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 278.560296][ T31] 1 lock held by syz.3.673/8864: [ 278.567613][ T31] [ 278.569966][ T31] ============================================= [ 278.569966][ T31] [ 278.585275][ T31] NMI backtrace for cpu 0 [ 278.585293][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.585314][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.585326][ T31] Call Trace: [ 278.585333][ T31] [ 278.585341][ T31] dump_stack_lvl+0x189/0x250 [ 278.585370][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.585390][ T31] ? __pfx__printk+0x10/0x10 [ 278.585422][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 278.585445][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 278.585467][ T31] ? __pfx__printk+0x10/0x10 [ 278.585491][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.585523][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 278.585545][ T31] watchdog+0xf60/0xfa0 [ 278.585570][ T31] ? watchdog+0x1e2/0xfa0 [ 278.585594][ T31] kthread+0x711/0x8a0 [ 278.585623][ T31] ? __pfx_watchdog+0x10/0x10 [ 278.585642][ T31] ? __pfx_kthread+0x10/0x10 [ 278.585668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.585696][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.585719][ T31] ? __pfx_kthread+0x10/0x10 [ 278.585744][ T31] ret_from_fork+0x4bc/0x870 [ 278.585766][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 278.585791][ T31] ? __switch_to_asm+0x39/0x70 [ 278.585813][ T31] ? __switch_to_asm+0x33/0x70 [ 278.585832][ T31] ? __pfx_kthread+0x10/0x10 [ 278.585857][ T31] ret_from_fork_asm+0x1a/0x30 [ 278.585892][ T31] [ 278.585899][ T31] Sending NMI from CPU 0 to CPUs 1: [ 278.737239][ C1] NMI backtrace for cpu 1 [ 278.737256][ C1] CPU: 1 UID: 0 PID: 8851 Comm: syz.1.670 Not tainted syzkaller #0 PREEMPT(full) [ 278.737276][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.737287][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x11/0x90 [ 278.737310][ C1] Code: 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 91 92 <65> 8b 15 38 77 d1 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 278.737325][ C1] RSP: 0018:ffffc9000530f398 EFLAGS: 00000246 [ 278.737340][ C1] RAX: ffffffff820aa36b RBX: 0000000000000000 RCX: ffff88802bd73c80 [ 278.737352][ C1] RDX: ffff88802bd73c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.737363][ C1] RBP: ffffc9000530f650 R08: ffffea0001ab65c7 R09: 1ffffd4000356cb8 [ 278.737376][ C1] R10: dffffc0000000000 R11: fffff94000356cb9 R12: ffffea0001ab65d8 [ 278.737389][ C1] R13: 1ffffd4000356cbb R14: ffffea0001ab65c0 R15: 0000000000000004 [ 278.737401][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 278.737415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.737426][ C1] CR2: 00002000002f7030 CR3: 000000005df58000 CR4: 00000000003526f0 [ 278.737441][ C1] Call Trace: [ 278.737447][ C1] [ 278.737453][ C1] unmap_page_range+0x168b/0x4370 [ 278.737495][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 278.737515][ C1] ? mas_find+0xb0e/0xd30 [ 278.737536][ C1] ? unmap_vmas+0x144/0x580 [ 278.737553][ C1] unmap_vmas+0x399/0x580 [ 278.737573][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 278.737601][ C1] exit_mmap+0x240/0xb40 [ 278.737623][ C1] ? uprobe_clear_state+0x20f/0x290 [ 278.737642][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 278.737676][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 278.737704][ C1] ? __pfx_exit_aio+0x10/0x10 [ 278.737725][ C1] ? uprobe_clear_state+0x27c/0x290 [ 278.737744][ C1] __mmput+0x118/0x430 [ 278.737762][ C1] exit_mm+0x1da/0x2c0 [ 278.737784][ C1] ? __pfx_exit_mm+0x10/0x10 [ 278.737807][ C1] ? rcu_is_watching+0x15/0xb0 [ 278.737827][ C1] do_exit+0x648/0x2300 [ 278.737852][ C1] ? do_raw_spin_lock+0x121/0x290 [ 278.737874][ C1] ? __pfx_do_exit+0x10/0x10 [ 278.737903][ C1] do_group_exit+0x21c/0x2d0 [ 278.737929][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.737951][ C1] get_signal+0x1285/0x1340 [ 278.737978][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 278.738004][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 278.738028][ C1] ? __se_sys_futex+0x36f/0x400 [ 278.738057][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 278.738084][ C1] exit_to_user_mode_loop+0x72/0x130 [ 278.738109][ C1] do_syscall_64+0x2bd/0xfa0 [ 278.738129][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.738148][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.738164][ C1] ? clear_bhb_loop+0x60/0xb0 [ 278.738182][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.738198][ C1] RIP: 0033:0x7fa8e5b8eec9 [ 278.738213][ C1] Code: Unable to access opcode bytes at 0x7fa8e5b8ee9f. [ 278.738222][ C1] RSP: 002b:00007fa8e6a8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.738238][ C1] RAX: fffffffffffffe00 RBX: 00007fa8e5de5fa8 RCX: 00007fa8e5b8eec9 [ 278.738250][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa8e5de5fa8 [ 278.738261][ C1] RBP: 00007fa8e5de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 278.738272][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.738282][ C1] R13: 00007fa8e5de6038 R14: 00007fa8e5f0f940 R15: 00007fa8e5f0fa28 [ 278.738303][ C1] [ 278.889818][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 278.889838][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.889860][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.889873][ T31] Call Trace: [ 278.889881][ T31] [ 278.889889][ T31] dump_stack_lvl+0x99/0x250 [ 278.889915][ T31] ? __asan_memcpy+0x40/0x70 [ 278.889940][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.889960][ T31] ? __pfx__printk+0x10/0x10 [ 278.889991][ T31] vpanic+0x237/0x6d0 [ 278.890018][ T31] ? __pfx_vpanic+0x10/0x10 [ 278.890045][ T31] ? preempt_schedule_common+0x83/0xd0 [ 278.890075][ T31] panic+0xb9/0xc0 [ 278.890100][ T31] ? __pfx_panic+0x10/0x10 [ 278.890128][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 278.890160][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 278.890183][ T31] watchdog+0xf9f/0xfa0 [ 278.890207][ T31] ? watchdog+0x1e2/0xfa0 [ 278.890232][ T31] kthread+0x711/0x8a0 [ 278.890261][ T31] ? __pfx_watchdog+0x10/0x10 [ 278.890279][ T31] ? __pfx_kthread+0x10/0x10 [ 278.890306][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.890328][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.890351][ T31] ? __pfx_kthread+0x10/0x10 [ 278.890378][ T31] ret_from_fork+0x4bc/0x870 [ 278.890401][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 278.890427][ T31] ? __switch_to_asm+0x39/0x70 [ 278.890448][ T31] ? __switch_to_asm+0x33/0x70 [ 278.890469][ T31] ? __pfx_kthread+0x10/0x10 [ 278.890495][ T31] ret_from_fork_asm+0x1a/0x30 [ 278.890533][ T31] [ 279.241805][ T31] Kernel Offset: disabled [ 279.246112][ T31] Rebooting in 86400 seconds..