last executing test programs: 14.585690613s ago: executing program 0 (id=2270): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[], 0x0) mlockall(0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') getdents(r2, &(0x7f0000000180)=""/141, 0x8d) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r5}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000280)={0x8, r5}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500109843146d9188326ddcad", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r7, &(0x7f0000000400)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r8) ptrace(0x420e, r8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x992dd2cadedf6e8c) 14.094816821s ago: executing program 3 (id=2273): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setns(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r4, 0xde34) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x141b82, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x6, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r4, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x38}, 0x18) r8 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r8, 0x52de, 0xf62e, 0x8, 0x0, 0x0) io_submit(r0, 0x7, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x5, r3, &(0x7f0000000000)="740128103cf8d79c16c38235a567aaa04514e8f2ff3885a741998a6df56076ea137f284017e4d87ecca4001790c8b085eb902b1236fa41e2020e5cf815bb50bd9e3b0ef2e973dfd77034a804ff93839a86b835167414a5f13657b78f77aad50b2b76e17a3054249fb389a9c64fa87d4e3b8def70f4c3ee5e5fabe482d5d85427f0b8c8f9aaba42d7b04adb63443594810fa71a6294e112c2110827814e5714485337e846d3e14ae7f2ca0a85419966b2f6c240ad49faad801af3c204019d3f939bb34017f61ab846a7a1f05dcebd4259d6ed911ce6a236dfdede45b49773a28aba7714", 0xe3, 0x4, 0x0, 0x1, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="78e52c4269ff72a02939370856df", 0xe, 0x200, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000200)="1a595a7c6ae2e4df1b5a6ca5fd6109b2eeb1e83f4bcd1448fe896e922e45a8861f1b8d2e5963ff240078ef42157f480c36298f135e4cfbe6fd19017dee48f6e252a5", 0x42, 0x6, 0x0, 0x0, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3, r4, &(0x7f00000002c0)="784eddd9402697b1aa3a3f8a3580de175e34aba91c8e379f6234166295cb0efd6c73", 0x22, 0x8, 0x0, 0x3, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x40, r2, &(0x7f0000000340)="50cc934a08d152a438779120cdd918b6b0d06346f298d1eea17db6b09671ad392051fb35f833194e7650b9c93972f53f3ff6720b19094506157cc4b59981c292fbb33b6e01c781a50683d0515df206183a425c4419ccaa8e9bfbf76da39b042e195d84b5fe855d861531992475d88e8cc29447dc4fe2ea403cedf8a0e82b166c37436f0cdf8314ec1e0b68f2acbd3718e2de93c62d01cfef80d0ad01cb0e40e2dfd173d586630149b6c1e460b03befc3690c2ced28439698ff0ada0c7ebc42eddb9c732d9687847d0ca3056ad7e343431a658ea69de7", 0xd6, 0x2, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xde35, r6, &(0x7f00000004c0)="e1ed02942a81524e898b0ae470403614cf804c43c44e41369f2babdd716b91ba9ddeb09da6a055ddf1e940dc7d9f0af16ca218bde0beaf316549eb63e1a9343d4b78d16285c3f97ebd678dc0ffec09de1de812a89cf769b08ce96eeb", 0x5c, 0x80000000, 0x0, 0x2, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x5, r4, &(0x7f0000000580)="1283f3888c06ed181f0a15ccc293ab34d5d10405fd4a2570ba9806e09ed031bceaa785cdd49706ca77515f78925e845bf4e5e0ad918661b34b0dc565492b6668948eb133306a235ebbd480da7494121a5a978fd9512be70687d551598ac2c8c6a1bd09967509ce07e9422150d7f098f9271e5834336456b3e7bee1f96d943f62746a0e8c28421e60023165e7bfb58e8ccf6eb331b562a65a1a4f330b9e9069fcf13211fdaf0d88bbecc5e86895d9e1b03448a7b17d7d4ab0a1ea95870812b70c040db0fff470d6034fe831", 0xcb, 0x9, 0x0, 0x2}]) 13.918038904s ago: executing program 3 (id=2274): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, 0x0, 0x0, 0x7}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioprio_set$pid(0x3, r3, 0x2000) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 13.815935319s ago: executing program 3 (id=2275): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="000000001fffffffb703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x15}, 0x94) sendmmsg$unix(r2, &(0x7f0000000000), 0x1, 0x40011) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r9, 0x0, 0x3, 0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000240)=0x1) 13.645367617s ago: executing program 0 (id=2276): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x227d, 0xa19, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x5, 0x3}}]}}}]}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r5 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xf27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x60, 0x101, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 12.029712821s ago: executing program 0 (id=2280): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x72ea4d80, 0xfffffffffffffffc, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/131, 0x83}], 0x3, 0x80000001, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.807291722s ago: executing program 3 (id=2286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x8, 0x55, 0xffffffff}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.786372625s ago: executing program 2 (id=2288): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x4) write$binfmt_script(r4, &(0x7f0000000400), 0xb) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xb, 0x0) gettid() 8.326674343s ago: executing program 4 (id=2289): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0xfffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$igmp(0x2, 0x3, 0x2) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32], 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = gettid() r2 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) io_uring_enter(r2, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 8.033296879s ago: executing program 1 (id=2290): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x227d, 0xa19, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x5, 0x3}}]}}}]}}]}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r5 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xf27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x60, 0x101, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 7.971813041s ago: executing program 2 (id=2291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000000206030000000000000000000d0000031c0007800500030000000000080017400000c78005001500910000000500050005000000100003006269746d"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x30, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x77}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r6 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="000000c6d222406b096cc34801000000647418aaf9b9a332f41ec9591b532723e017c8c54d863ecd9b0df090720300e43d59f817b99310b68400968f3c2f02", 0x3f, r5) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) 7.873096373s ago: executing program 0 (id=2292): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0xac}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x114, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@etimer_thresh={0x8, 0xc, 0x3}, @coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x114}}, 0x4000084) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x501200) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000015ea00000000"], 0x0}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000400)=[@uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x8001, 0x9}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0xfff}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x60, {"f3420f09f42ef20f78e31e00f30fc771bb66b8cb008ed848b800000000008000000f23c00f21f835030007000f23f8673e430fc72e66bad10466b8590066efc462518cadc700000066b8be000f00d0"}}, @code={0x1, 0x62, {"40d30f430f019b0400000066ba430066b84de066ef66400f3881b00050000066b8df000f00d044dde1f30fbcc6c7442400c6000000c74424028e000000c7442406000000000f011c24c8cb746c470f01ca"}}, @code={0x1, 0x81, {"c74424001f000000c744240200100000ff1c240f225866baf80cb8c24b7f81ef66bafc0c66edb9800000c00f3235004000000f3066baf80cb89009f783ef66bafc0cecc4a10dfb670065410fc09d00680000660f6557003e6546d9f166baf80cb8d0617885ef66bafc0c66b8000066ef"}}, @cpuid={0x2, 0x18, {0x6, 0x699}}, @cpuid={0x2, 0x18, {0x7fffffff, 0x8}}, @cpuid={0x2, 0x18, {0xf608, 0x2}}, @code={0x1, 0x5a, {"66bad00466eddbcdc4828d9c9f00180000360f01f84081b797000000160000000fc7b100000000f326de2766baf80cb8b48bac8bef66bafc0ced0f20d835200000000f22d80f013c37"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x4, 0x1}}, @code={0x1, 0x75, {"2ef30f09400f06260f01ca66baf80cb8490c9887ef66bafc0cec48b8d1000000000000000f23c80f21f8350800a0000f23f8f20faef766b811008ee00f79a20d000000c401fd29d2c744240052000000c744240204000000c7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x1ff}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x2, 0xe}}, @uexit={0x0, 0x18, 0x7ff}, @cpuid={0x2, 0x18, {0x9, 0x200}}, @code={0x1, 0x6b, {"c4c1cdec6f4dc42121eb8e8a00000066baa000b805880000eff20f5ad4f3466fc4017e5b4800b8010000000f01c1c74424009aebfe6cc744240200600000c7442406000000000f011424c4c1fd2f8c726e8ae40ec4c37d08d3a4"}}, @cpuid={0x2, 0x18, {0x101, 0xfffffffe}}, @uexit={0x0, 0x18, 0x7fff}, @uexit={0x0, 0x18, 0x442c00c5}, @code={0x1, 0x73, {"66baf80cb848522e81ef66bafc0c66edc4623da70266b840008ee0f30f0f7e95903e440fbd6d2c6566400f3880af8c7400000f01c566baf80cb83213df81ef66bafc0cb086ee48b800980000000000000f23d00f21f835200000060f23f8650f01c8"}}, @uexit={0x0, 0x18, 0x3}], 0x4b8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)=0x1) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7.670398731s ago: executing program 3 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001000010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="200404000300000048001280110001006272696467655f736c6176650000000030000580050001000300000004001800050009000000000005002100000000000500010000000000060002"], 0x68}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 6.63655098s ago: executing program 4 (id=2294): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0xff00}, [@inet=@rpfilter={{0x78}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 6.451988435s ago: executing program 4 (id=2295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000083a0200ac1414000c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x102, 0x0) sendfile(r1, r1, 0x0, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 6.45156254s ago: executing program 2 (id=2296): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)=""/124, 0x7c}], 0x2, 0xe9b4, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x700, 0xfdef) 6.30632923s ago: executing program 2 (id=2297): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x5}, 0x4) (async) r0 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xd0) inotify_add_watch(r0, &(0x7f0000000240)='./file1\x00', 0x300) (async, rerun: 64) r1 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 6.208531071s ago: executing program 1 (id=2298): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x19, 0x7, {0x7, 0xe, "fe52d83db7"}}, 0x0}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x6, "aed2e1a3120f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x38, {0x38, 0xf, "8833df704622ad5ffa223cff7d9f06bb2dbaf28ceb1fb840a1615e0372ef58f43e1b6a11b4311f7ed1d29b956683b0e3017c753d9167"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0xd, 0xf, "2ba4c3042329872b649175efcdb219"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x86}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x30, 0x5, 0x1ff, 0x8, 0xd4f, 0x4, 0x401, 0x4c8f, 0xcd, 0x4, 0x1ff, 0x5}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0xde5}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x3, "9de1cd"}, 0x0, 0x0, 0x0, 0x0}) 6.139912464s ago: executing program 2 (id=2299): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x34, 0xffffffff}, 0x9c) 6.104059733s ago: executing program 2 (id=2300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x1800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0xd0, 0x0, 0x12a0, 0x0, 0xd0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x5, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'wg0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x2, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0, 0xe2}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, 0x0}], 0x1, 0x53, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.685769827s ago: executing program 0 (id=2301): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) gettid() connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8d9d0826c4072a1193e169bbc5", 0xd}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYBLOB="fc7c35180322afd205af53114b6b5494d8c57ad8977de620644bbfd5b7d25cdd994af207b48ef1bb748a0d4176c50bedd60cee13137e72a3fc5c842935974ad3583b4be7851ab754b6b5b0ee14a78c9adf78683dfefbae580829ea7028c0fc87ee", @ANYRESDEC=r2]) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet(0x2, 0x80001, 0x84) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xd) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000000)={0x1, 0xffffffff, 0x2d8, 0x0, 0x4fd, 0x5}) 3.710035167s ago: executing program 1 (id=2302): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x72ea4d80, 0xfffffffffffffffc, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/131, 0x83}], 0x3, 0x80000001, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.303917026s ago: executing program 4 (id=2303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) read(r3, &(0x7f0000000080)=""/116, 0xfffffeb2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x2, 0x6, 0x4, 0x2c, 0x1f}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000060000000000000e6000021000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e86003c5c000000"], 0x60}) 2.364325912s ago: executing program 1 (id=2304): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002de, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) (async) sendfile(r4, r4, 0x0, 0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x58, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x501, @remote, 0x40}, @in6={0xa, 0x4e20, 0x1, @empty, 0x10000}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000640)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x82100, 0x3, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) socket$inet(0x2, 0x80000, 0x2) (async) r6 = socket$inet(0x2, 0x80000, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x4e21, 0x9, 0x4e21, 0xf29, 0xa, 0xa0, 0x90, 0x67, r8, 0xffffffffffffffff}, {0xce, 0x30823d0e, 0xdc3, 0x26, 0x7, 0x0, 0xe, 0x3eb}, {0x100, 0x5, 0x0, 0xffffffffffffffff}, 0x1800, 0x6e6bbe, 0x2, 0x0, 0x7, 0x2}, {{@in6=@private0, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x3505, 0x3, 0x1, 0x10, 0xff, 0x1, 0x3}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x4e21, 0x9, 0x4e21, 0xf29, 0xa, 0xa0, 0x90, 0x67, r8, 0xffffffffffffffff}, {0xce, 0x30823d0e, 0xdc3, 0x26, 0x7, 0x0, 0xe, 0x3eb}, {0x100, 0x5, 0x0, 0xffffffffffffffff}, 0x1800, 0x6e6bbe, 0x2, 0x0, 0x7, 0x2}, {{@in6=@private0, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x3505, 0x3, 0x1, 0x10, 0xff, 0x1, 0x3}}, 0xe8) 2.143948875s ago: executing program 1 (id=2305): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x4000000}, [@inet=@rpfilter={{0x78}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.95570148s ago: executing program 1 (id=2306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80a02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000fc0)={0x0, 0x5276, 0x4, 0xfffffffe, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x31, &(0x7f0000000240)={0x0}}, 0x4000018) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x1ee}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000f00)="9559cf9ae46c7a518b2e43431a7f8311f68575ad97571b68eda056713102000000760d85fba7f18c6daa496d3d96c7e6f2575e2b11f34d847be87b2ed0cda76826421beddfec5c9f869ed14374ef99df70f14c0b25dad32bbe7402f1eacdd375b6c844e09d93cd0133e10d627abd65b45bf507d50a33a0b50a2b00"/134, 0x86}], 0x1}}], 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff00080000000109022400010000000009040000092140000001220f000905", @ANYRESHEX=r5], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220fe004000000ff030000c35289fc8300000000"], 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000e80)=ANY=[@ANYBLOB="000001080086df6ea4cb0cc24fe20c450c25d758a0fa973043662c566507822d11bd97ed64b8ce336cad0ede68978274fbeba3d879358f7296bc9bde15b798d3db08b0bfa74ff27fd4b4f232edd59032df099824a8ba1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.728325388s ago: executing program 4 (id=2307): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x4, 0x58}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000040ac1e0101000000000000000000000000e000000200000000000000000000000004000000000000000a00000000004cc9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000010000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400000000000000010000000000000a0010000100000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004804}, 0x4c050) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000004e2300000a"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012"], 0x50}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x855, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x8005, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x3, 0x3, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x3, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.583250708s ago: executing program 0 (id=2308): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x4000010, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000340)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) mlockall(0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1.40416425s ago: executing program 4 (id=2309): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f00000000c0)="2b91", 0x2) 0s ago: executing program 3 (id=2310): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x80600) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x81) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r3 = dup2(r2, r0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r5, 0x7}}, 0x48) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0xfffffe83) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r9}}, 0x30) (async) r10 = gettid() (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r12 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@remote, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xdbdc}, 0x1c) (async) timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f00000008c0)) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 656] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 704.353957][T13656] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 704.365274][T13656] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 704.377536][T13656] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.393446][T13656] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 704.404049][T13656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.451180][T13656] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.466494][T13656] usb 4-1: invalid MIDI out EP 0 [ 704.533074][ T5937] kovaplus 0003:1E7D:2D50.001D: item fetching failed at offset 0/3 [ 704.565408][ T5937] kovaplus 0003:1E7D:2D50.001D: parse failed [ 704.599350][ T5937] kovaplus 0003:1E7D:2D50.001D: probe with driver kovaplus failed with error -22 [ 704.627884][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.701882][T13656] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 704.715830][ T1225] usb 1-1: USB disconnect, device number 25 [ 704.851855][T13700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.923711][T13700] vimc link validate: Scaler:src:510x56 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 706.025038][T13711] delete_channel: no stack [ 706.180306][T13718] fuse: Unknown parameter 'group_id00000000000000000000' [ 706.438969][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 706.448417][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 706.965275][T13656] usb 4-1: USB disconnect, device number 30 [ 707.005178][T13681] delete_channel: no stack [ 707.350590][T13734] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1981'. [ 708.249768][ T30] audit: type=1326 audit(1753122856.098:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.342362][ T30] audit: type=1326 audit(1753122856.108:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.365797][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.413351][ T30] audit: type=1326 audit(1753122856.108:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.436397][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.476376][ T30] audit: type=1326 audit(1753122856.108:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.499041][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.589550][T13747] pim6reg: entered allmulticast mode [ 708.623350][ T30] audit: type=1326 audit(1753122856.108:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.740844][ T30] audit: type=1326 audit(1753122856.108:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.769141][ T30] audit: type=1326 audit(1753122856.108:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.800342][ T30] audit: type=1326 audit(1753122856.108:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.862864][ T30] audit: type=1326 audit(1753122856.108:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.885629][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.908472][T13742] pim6reg: left allmulticast mode [ 708.931681][ T30] audit: type=1326 audit(1753122856.108:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.3.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 708.954576][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.369899][T13656] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 709.439271][T13771] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 709.463320][T13771] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1990'. [ 709.527190][T13656] usb 5-1: Using ep0 maxpacket: 32 [ 709.536290][T13656] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 709.549371][T13656] usb 5-1: config 0 has no interface number 0 [ 709.570896][T13656] usb 5-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 709.584432][T13656] usb 5-1: config 0 interface 167 has no altsetting 0 [ 709.671315][T13656] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 709.681097][T13656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.701320][T13656] usb 5-1: Product: syz [ 709.708160][T13656] usb 5-1: Manufacturer: syz [ 709.717167][ T1225] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 709.736271][T13656] usb 5-1: SerialNumber: syz [ 709.753331][T13656] usb 5-1: config 0 descriptor?? [ 709.759880][T13762] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 709.860374][ T1225] usb 1-1: device descriptor read/64, error -71 [ 710.005107][T13656] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 710.015683][T13656] usbtest 5-1:0.167: probe with driver usbtest failed with error -22 [ 710.033309][T13656] usb 5-1: USB disconnect, device number 14 [ 710.100497][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 710.113160][ T1225] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 710.274113][ T1225] usb 1-1: device descriptor read/64, error -71 [ 710.396202][ T1225] usb usb1-port1: attempt power cycle [ 710.624372][T13782] input: syz0 as /devices/virtual/input/input86 [ 710.677202][T13784] fuse: Unknown parameter '' [ 710.757154][ T1225] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 710.787849][ T1225] usb 1-1: device descriptor read/8, error -71 [ 711.027716][ T1225] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 711.061198][ T1225] usb 1-1: device descriptor read/8, error -71 [ 711.192788][ T1225] usb usb1-port1: unable to enumerate USB device [ 712.067148][ T1208] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 712.121245][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 712.132249][T13800] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 712.141880][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 712.156343][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 712.166853][T13800] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1998'. [ 712.339710][ T1208] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 712.355568][ T1208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.405956][ T1208] usb 4-1: config 0 has no interface number 0 [ 712.426982][ T1208] usb 4-1: too many endpoints for config 0 interface 101 altsetting 153: 228, using maximum allowed: 30 [ 712.441730][ T1208] usb 4-1: config 0 interface 101 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 712.531482][ T1208] usb 4-1: config 0 interface 101 has no altsetting 0 [ 712.540651][ T1208] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 712.579267][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=33, SerialNumber=0 [ 712.590803][ T1208] usb 4-1: Product: syz [ 712.611214][ T1208] usb 4-1: config 0 descriptor?? [ 712.636969][T13805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1999'. [ 712.846099][T13791] batman_adv: batadv0: Adding interface: ipvlan2 [ 712.853418][T13791] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.891575][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.937294][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.964389][T13791] batman_adv: batadv0: Interface activated: ipvlan2 [ 712.973264][T13809] fuse: Bad value for 'user_id' [ 712.978487][T13809] fuse: Bad value for 'user_id' [ 713.208162][ T1208] usb 4-1: USB disconnect, device number 31 [ 713.235967][T13817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2002'. [ 715.227931][T13859] Unknown options in mask 5 [ 715.262918][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 715.417302][ T10] usb 1-1: device descriptor read/64, error -71 [ 715.657291][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 715.807320][ T10] usb 1-1: device descriptor read/64, error -71 [ 715.937629][ T10] usb usb1-port1: attempt power cycle [ 716.192051][T13861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.297465][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 716.361404][ T10] usb 1-1: device descriptor read/8, error -71 [ 716.647172][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 716.678151][ T10] usb 1-1: device descriptor read/8, error -71 [ 716.808270][ T10] usb usb1-port1: unable to enumerate USB device [ 716.983315][T13872] FAULT_INJECTION: forcing a failure. [ 716.983315][T13872] name failslab, interval 1, probability 0, space 0, times 0 [ 716.998952][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.4.2018 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 716.998982][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.998996][T13872] Call Trace: [ 716.999006][T13872] [ 716.999016][T13872] dump_stack_lvl+0x189/0x250 [ 716.999047][T13872] ? __pfx____ratelimit+0x10/0x10 [ 716.999071][T13872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.999096][T13872] ? __pfx__printk+0x10/0x10 [ 716.999132][T13872] ? __pfx___might_resched+0x10/0x10 [ 716.999162][T13872] should_fail_ex+0x414/0x560 [ 716.999191][T13872] should_failslab+0xa8/0x100 [ 716.999223][T13872] kmem_cache_alloc_noprof+0x73/0x3c0 [ 716.999250][T13872] ? skb_clone+0x212/0x3a0 [ 716.999275][T13872] skb_clone+0x212/0x3a0 [ 716.999293][T13872] ? pfkey_broadcast_one+0x7d/0x360 [ 716.999322][T13872] pfkey_broadcast_one+0x9b/0x360 [ 716.999346][T13872] ? pfkey_broadcast+0x39c/0x3e0 [ 716.999373][T13872] pfkey_broadcast+0x3a9/0x3e0 [ 716.999397][T13872] ? pfkey_broadcast+0x48/0x3e0 [ 716.999424][T13872] pfkey_sendmsg+0xdd8/0x1090 [ 716.999467][T13872] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 716.999521][T13872] ? aa_sock_msg_perm+0x94/0x160 [ 716.999546][T13872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.999569][T13872] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 716.999596][T13872] __sock_sendmsg+0x21c/0x270 [ 716.999625][T13872] ____sys_sendmsg+0x505/0x830 [ 716.999667][T13872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.999710][T13872] ? import_iovec+0x74/0xa0 [ 716.999745][T13872] ___sys_sendmsg+0x21f/0x2a0 [ 716.999780][T13872] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.999859][T13872] ? __fget_files+0x2a/0x420 [ 716.999877][T13872] ? __fget_files+0x3a0/0x420 [ 716.999908][T13872] __x64_sys_sendmsg+0x19b/0x260 [ 716.999944][T13872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.999987][T13872] ? __pfx_ksys_write+0x10/0x10 [ 717.000014][T13872] ? rcu_is_watching+0x15/0xb0 [ 717.000045][T13872] ? do_syscall_64+0xbe/0x3b0 [ 717.000073][T13872] do_syscall_64+0xfa/0x3b0 [ 717.000096][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.000119][T13872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.000140][T13872] ? clear_bhb_loop+0x60/0xb0 [ 717.000166][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.000188][T13872] RIP: 0033:0x7f1476b8e9a9 [ 717.000208][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.000226][T13872] RSP: 002b:00007f1477a61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.000250][T13872] RAX: ffffffffffffffda RBX: 00007f1476db5fa0 RCX: 00007f1476b8e9a9 [ 717.000266][T13872] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 717.000281][T13872] RBP: 00007f1477a61090 R08: 0000000000000000 R09: 0000000000000000 [ 717.000294][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.000307][T13872] R13: 0000000000000000 R14: 00007f1476db5fa0 R15: 00007f1476edfa28 [ 717.000339][T13872] [ 717.655228][T13887] ptrace attach of "./syz-executor exec"[5866] was attempted by "\x09     s  \x07   n     5w Hf;    security $sUf0 Jc~YBcYAuJ)`;ۦR vAB\x0aB.!xL+X4\x0cW*riVO㾨e0o+&L>\x07>jA?/J0mϏ*-FGeBѩH(9L^\x1b\x22kӆ4F9f6 [ 717.874534][T13895] netlink: 'syz.2.2025': attribute type 9 has an invalid length. [ 718.044507][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 718.064482][T13895] macvlan2: entered promiscuous mode [ 718.328079][T13895] hsr0: entered promiscuous mode [ 718.353803][T13895] macvlan2: entered allmulticast mode [ 718.366784][T13895] hsr0: entered allmulticast mode [ 718.380929][T13895] hsr_slave_0: entered allmulticast mode [ 718.547783][ T5941] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 718.739438][ T5941] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 718.796312][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.926788][ T5941] usb 1-1: config 0 descriptor?? [ 719.123027][T13911] FAULT_INJECTION: forcing a failure. [ 719.123027][T13911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.141615][T13911] CPU: 1 UID: 0 PID: 13911 Comm: syz.2.2030 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 719.141618][T13656] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 719.141646][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.141661][T13911] Call Trace: [ 719.141669][T13911] [ 719.141678][T13911] dump_stack_lvl+0x189/0x250 [ 719.141720][T13911] ? __pfx____ratelimit+0x10/0x10 [ 719.141748][T13911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.141777][T13911] ? __pfx__printk+0x10/0x10 [ 719.141824][T13911] should_fail_ex+0x414/0x560 [ 719.141855][T13911] _copy_to_user+0x31/0xb0 [ 719.141893][T13911] simple_read_from_buffer+0xe1/0x170 [ 719.141934][T13911] proc_fail_nth_read+0x1df/0x250 [ 719.141960][T13911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.141986][T13911] ? rw_verify_area+0x258/0x650 [ 719.142016][T13911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.142042][T13911] vfs_read+0x200/0x980 [ 719.142079][T13911] ? __pfx___mutex_lock+0x10/0x10 [ 719.142108][T13911] ? __pfx_vfs_read+0x10/0x10 [ 719.142139][T13911] ? __fget_files+0x2a/0x420 [ 719.142166][T13911] ? __fget_files+0x3a0/0x420 [ 719.142186][T13911] ? __fget_files+0x2a/0x420 [ 719.142219][T13911] ksys_read+0x145/0x250 [ 719.142252][T13911] ? __pfx_ksys_read+0x10/0x10 [ 719.142280][T13911] ? rcu_is_watching+0x15/0xb0 [ 719.142315][T13911] ? do_syscall_64+0xbe/0x3b0 [ 719.142346][T13911] do_syscall_64+0xfa/0x3b0 [ 719.142372][T13911] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.142396][T13911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.142420][T13911] ? clear_bhb_loop+0x60/0xb0 [ 719.142448][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.142471][T13911] RIP: 0033:0x7f99b918d3bc [ 719.142492][T13911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 719.142517][T13911] RSP: 002b:00007f99b9f18030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.142543][T13911] RAX: ffffffffffffffda RBX: 00007f99b93b5fa0 RCX: 00007f99b918d3bc [ 719.142561][T13911] RDX: 000000000000000f RSI: 00007f99b9f180a0 RDI: 0000000000000004 [ 719.142578][T13911] RBP: 00007f99b9f18090 R08: 0000000000000000 R09: 0000000000000000 [ 719.142592][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.142607][T13911] R13: 0000000000000000 R14: 00007f99b93b5fa0 R15: 00007f99b94dfa28 [ 719.142643][T13911] [ 719.839529][T13656] usb 4-1: config 0 has no interfaces? [ 719.898396][T13656] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 719.908024][T13656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.944394][T13656] usb 4-1: Product: syz [ 719.959281][T13656] usb 4-1: Manufacturer: syz [ 719.964485][T13656] usb 4-1: SerialNumber: syz [ 720.025766][T13656] usb 4-1: config 0 descriptor?? [ 720.080256][ T5941] usb 1-1: Cannot set autoneg [ 720.085168][ T5941] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 720.112344][ T5941] usb 1-1: USB disconnect, device number 34 [ 720.160319][T13921] netlink: 'syz.4.2032': attribute type 5 has an invalid length. [ 720.177164][ T1208] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 720.317473][ T1208] usb 3-1: device descriptor read/64, error -71 [ 720.349169][ T5929] usb 4-1: USB disconnect, device number 32 [ 720.707553][ T1208] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 720.874287][ T1208] usb 3-1: device descriptor read/64, error -71 [ 721.069743][ T1208] usb usb3-port1: attempt power cycle [ 721.077271][T13936] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 721.218240][T13942] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2034'. [ 721.577490][ T1208] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 721.647137][ T1208] usb 3-1: device descriptor read/8, error -71 [ 721.718380][T13947] fuse: Bad value for 'user_id' [ 721.723708][T13947] fuse: Bad value for 'user_id' [ 722.140154][ T1208] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 722.196359][ T1208] usb 3-1: device descriptor read/8, error -71 [ 722.373918][ T1208] usb usb3-port1: unable to enumerate USB device [ 723.188286][T13968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.216735][T13969] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 723.687209][T13656] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 723.728791][T13982] FAULT_INJECTION: forcing a failure. [ 723.728791][T13982] name failslab, interval 1, probability 0, space 0, times 0 [ 723.749182][T13982] CPU: 0 UID: 0 PID: 13982 Comm: syz.3.2048 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 723.749213][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.749226][T13982] Call Trace: [ 723.749235][T13982] [ 723.749246][T13982] dump_stack_lvl+0x189/0x250 [ 723.749277][T13982] ? __pfx____ratelimit+0x10/0x10 [ 723.749301][T13982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.749326][T13982] ? __pfx__printk+0x10/0x10 [ 723.749362][T13982] ? ref_tracker_alloc+0x318/0x460 [ 723.749390][T13982] should_fail_ex+0x414/0x560 [ 723.749418][T13982] should_failslab+0xa8/0x100 [ 723.749452][T13982] kmem_cache_alloc_noprof+0x73/0x3c0 [ 723.749482][T13982] ? skb_clone+0x212/0x3a0 [ 723.749508][T13982] skb_clone+0x212/0x3a0 [ 723.749533][T13982] __netlink_deliver_tap+0x404/0x850 [ 723.749577][T13982] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.749609][T13982] netlink_deliver_tap+0x19c/0x1b0 [ 723.749640][T13982] netlink_unicast+0x730/0x8e0 [ 723.749707][T13982] netlink_sendmsg+0x805/0xb30 [ 723.749748][T13982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.749783][T13982] ? aa_sock_msg_perm+0x94/0x160 [ 723.749809][T13982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.749833][T13982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.749865][T13982] __sock_sendmsg+0x21c/0x270 [ 723.749894][T13982] ____sys_sendmsg+0x505/0x830 [ 723.749933][T13982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.749976][T13982] ? import_iovec+0x74/0xa0 [ 723.750009][T13982] ___sys_sendmsg+0x21f/0x2a0 [ 723.750044][T13982] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.750115][T13982] ? __fget_files+0x2a/0x420 [ 723.750133][T13982] ? __fget_files+0x3a0/0x420 [ 723.750163][T13982] __x64_sys_sendmsg+0x19b/0x260 [ 723.750199][T13982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.750254][T13982] ? __pfx_ksys_write+0x10/0x10 [ 723.750279][T13982] ? rcu_is_watching+0x15/0xb0 [ 723.750309][T13982] ? do_syscall_64+0xbe/0x3b0 [ 723.750339][T13982] do_syscall_64+0xfa/0x3b0 [ 723.750364][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.750384][T13982] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 723.750405][T13982] ? clear_bhb_loop+0x60/0xb0 [ 723.750430][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.750451][T13982] RIP: 0033:0x7f8615b8e9a9 [ 723.750469][T13982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.750487][T13982] RSP: 002b:00007f8616acd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.750508][T13982] RAX: ffffffffffffffda RBX: 00007f8615db5fa0 RCX: 00007f8615b8e9a9 [ 723.750523][T13982] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 723.750536][T13982] RBP: 00007f8616acd090 R08: 0000000000000000 R09: 0000000000000000 [ 723.750548][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.750561][T13982] R13: 0000000000000000 R14: 00007f8615db5fa0 R15: 00007f8615edfa28 [ 723.750593][T13982] [ 724.620917][T13656] usb 1-1: config 0 has no interfaces? [ 724.701433][T13656] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 724.751206][T13656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.790569][T13656] usb 1-1: Product: syz [ 724.803393][T13656] usb 1-1: Manufacturer: syz [ 724.816391][T13656] usb 1-1: SerialNumber: syz [ 724.837461][T13656] usb 1-1: config 0 descriptor?? [ 724.867256][ T5937] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 725.021251][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 725.049407][ T5937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.073779][ T5937] usb 4-1: config 0 has no interface number 0 [ 725.098641][ T5937] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 725.108722][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.116787][ T5937] usb 4-1: Product: syz [ 725.126369][ T1225] usb 1-1: USB disconnect, device number 35 [ 725.139553][ T5937] usb 4-1: Manufacturer: syz [ 725.151237][ T5937] usb 4-1: SerialNumber: syz [ 725.180711][ T5937] usb 4-1: config 0 descriptor?? [ 725.215426][ T5937] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 725.287225][T13656] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 725.447454][T13656] usb 5-1: Using ep0 maxpacket: 16 [ 725.459034][T13656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 725.481775][T13656] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 725.493004][T13656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.547133][T13656] usb 5-1: Product: syz [ 725.556849][T13656] usb 5-1: Manufacturer: syz [ 725.566360][T13656] usb 5-1: SerialNumber: syz [ 725.615394][T13656] usb 5-1: config 0 descriptor?? [ 725.676285][T13656] hub 5-1:0.0: bad descriptor, ignoring hub [ 725.684241][T13656] hub 5-1:0.0: probe with driver hub failed with error -5 [ 725.701949][T13656] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.884163][T13656] usb 5-1: USB disconnect, device number 15 [ 726.001606][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 726.274591][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.284364][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.295557][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.306317][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.324501][ T5937] gspca_spca1528: reg_w err -71 [ 726.329759][ T5937] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 726.352118][ T5937] usb 4-1: USB disconnect, device number 33 [ 726.478162][T14007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 726.491624][T14008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 726.531178][T14010] fuse: Bad value for 'rootmode' [ 727.179855][T14026] FAULT_INJECTION: forcing a failure. [ 727.179855][T14026] name failslab, interval 1, probability 0, space 0, times 0 [ 727.230790][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.0.2062 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 727.230822][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.230837][T14026] Call Trace: [ 727.230846][T14026] [ 727.230855][T14026] dump_stack_lvl+0x189/0x250 [ 727.230893][T14026] ? __pfx____ratelimit+0x10/0x10 [ 727.230918][T14026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.230944][T14026] ? __pfx__printk+0x10/0x10 [ 727.230982][T14026] ? ref_tracker_alloc+0x318/0x460 [ 727.231010][T14026] should_fail_ex+0x414/0x560 [ 727.231038][T14026] should_failslab+0xa8/0x100 [ 727.231073][T14026] kmem_cache_alloc_noprof+0x73/0x3c0 [ 727.231101][T14026] ? skb_clone+0x212/0x3a0 [ 727.231127][T14026] skb_clone+0x212/0x3a0 [ 727.231150][T14026] __netlink_deliver_tap+0x404/0x850 [ 727.231190][T14026] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.231220][T14026] netlink_deliver_tap+0x19c/0x1b0 [ 727.231250][T14026] netlink_unicast+0x730/0x8e0 [ 727.231287][T14026] netlink_sendmsg+0x805/0xb30 [ 727.231327][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.231368][T14026] ? aa_sock_msg_perm+0x94/0x160 [ 727.231394][T14026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 727.231418][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.231449][T14026] __sock_sendmsg+0x21c/0x270 [ 727.231479][T14026] ____sys_sendmsg+0x505/0x830 [ 727.231518][T14026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.231562][T14026] ? import_iovec+0x74/0xa0 [ 727.231596][T14026] ___sys_sendmsg+0x21f/0x2a0 [ 727.231632][T14026] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.231704][T14026] ? __fget_files+0x2a/0x420 [ 727.231721][T14026] ? __fget_files+0x3a0/0x420 [ 727.231752][T14026] __x64_sys_sendmsg+0x19b/0x260 [ 727.231789][T14026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.231832][T14026] ? __pfx_ksys_write+0x10/0x10 [ 727.231867][T14026] ? do_syscall_64+0xbe/0x3b0 [ 727.231895][T14026] do_syscall_64+0xfa/0x3b0 [ 727.231918][T14026] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.231940][T14026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.231962][T14026] ? clear_bhb_loop+0x60/0xb0 [ 727.231987][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.232009][T14026] RIP: 0033:0x7f58af18e9a9 [ 727.232027][T14026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.232045][T14026] RSP: 002b:00007f58aff2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.232067][T14026] RAX: ffffffffffffffda RBX: 00007f58af3b5fa0 RCX: 00007f58af18e9a9 [ 727.232083][T14026] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 727.232097][T14026] RBP: 00007f58aff2e090 R08: 0000000000000000 R09: 0000000000000000 [ 727.232110][T14026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.232123][T14026] R13: 0000000000000000 R14: 00007f58af3b5fa0 R15: 00007f58af4dfa28 [ 727.232155][T14026] [ 728.054914][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 728.054939][ T30] audit: type=1326 audit(1753122875.968:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.183602][ T30] audit: type=1326 audit(1753122875.978:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.237288][ T30] audit: type=1326 audit(1753122875.978:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.261245][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.323807][ T30] audit: type=1326 audit(1753122875.978:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.384839][ T30] audit: type=1326 audit(1753122875.978:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.407661][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.475055][ T30] audit: type=1326 audit(1753122875.978:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.544187][ T30] audit: type=1326 audit(1753122875.978:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.640873][ T30] audit: type=1326 audit(1753122875.978:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.725666][ T30] audit: type=1326 audit(1753122875.988:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 728.806060][ T30] audit: type=1326 audit(1753122875.988:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.3.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 729.963273][T14068] FAULT_INJECTION: forcing a failure. [ 729.963273][T14068] name failslab, interval 1, probability 0, space 0, times 0 [ 729.986852][T14068] CPU: 0 UID: 0 PID: 14068 Comm: syz.4.2075 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 729.986883][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.986897][T14068] Call Trace: [ 729.986907][T14068] [ 729.986918][T14068] dump_stack_lvl+0x189/0x250 [ 729.986950][T14068] ? __pfx____ratelimit+0x10/0x10 [ 729.986982][T14068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.987010][T14068] ? __pfx__printk+0x10/0x10 [ 729.987043][T14068] ? __pfx___might_resched+0x10/0x10 [ 729.987066][T14068] ? fs_reclaim_acquire+0x7d/0x100 [ 729.987092][T14068] should_fail_ex+0x414/0x560 [ 729.987119][T14068] should_failslab+0xa8/0x100 [ 729.987152][T14068] __kmalloc_cache_noprof+0x70/0x3d0 [ 729.987180][T14068] ? __request_module+0x2b5/0x5e0 [ 729.987206][T14068] __request_module+0x2b5/0x5e0 [ 729.987240][T14068] ? rtnl_link_ops_get+0x23/0x250 [ 729.987270][T14068] ? __pfx___request_module+0x10/0x10 [ 729.987304][T14068] ? rtnl_link_ops_get+0x23/0x250 [ 729.987332][T14068] ? rtnl_link_ops_get+0x23/0x250 [ 729.987363][T14068] ? rtnl_link_ops_get+0x215/0x250 [ 729.987395][T14068] rtnl_newlink+0x64f/0x1c70 [ 729.987433][T14068] ? __pfx_rtnl_newlink+0x10/0x10 [ 729.987459][T14068] ? is_bpf_text_address+0x26/0x2b0 [ 729.987490][T14068] ? __lock_acquire+0xab9/0xd20 [ 729.987524][T14068] ? __lock_acquire+0xab9/0xd20 [ 729.987566][T14068] ? is_bpf_text_address+0x26/0x2b0 [ 729.987594][T14068] ? is_bpf_text_address+0x292/0x2b0 [ 729.987616][T14068] ? is_bpf_text_address+0x26/0x2b0 [ 729.987642][T14068] ? kernel_text_address+0xa5/0xe0 [ 729.987675][T14068] ? __lock_acquire+0xab9/0xd20 [ 729.987721][T14068] ? __pfx_rtnl_newlink+0x10/0x10 [ 729.987747][T14068] rtnetlink_rcv_msg+0x7cf/0xb70 [ 729.987780][T14068] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 729.987806][T14068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.987851][T14068] netlink_rcv_skb+0x208/0x470 [ 729.987883][T14068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.987913][T14068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.987970][T14068] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.987998][T14068] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.988034][T14068] netlink_unicast+0x759/0x8e0 [ 729.988073][T14068] netlink_sendmsg+0x805/0xb30 [ 729.988111][T14068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.988144][T14068] ? aa_sock_msg_perm+0x94/0x160 [ 729.988169][T14068] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.988190][T14068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.988219][T14068] __sock_sendmsg+0x21c/0x270 [ 729.988245][T14068] ____sys_sendmsg+0x505/0x830 [ 729.988283][T14068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.988327][T14068] ? import_iovec+0x74/0xa0 [ 729.988360][T14068] ___sys_sendmsg+0x21f/0x2a0 [ 729.988396][T14068] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.988467][T14068] ? __fget_files+0x2a/0x420 [ 729.988486][T14068] ? __fget_files+0x3a0/0x420 [ 729.988516][T14068] __x64_sys_sendmsg+0x19b/0x260 [ 729.988552][T14068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.988596][T14068] ? __pfx_ksys_write+0x10/0x10 [ 729.988623][T14068] ? rcu_is_watching+0x15/0xb0 [ 729.988654][T14068] ? do_syscall_64+0xbe/0x3b0 [ 729.988683][T14068] do_syscall_64+0xfa/0x3b0 [ 729.988706][T14068] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.988728][T14068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.988749][T14068] ? clear_bhb_loop+0x60/0xb0 [ 729.988774][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.988795][T14068] RIP: 0033:0x7f1476b8e9a9 [ 729.988814][T14068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.988832][T14068] RSP: 002b:00007f1477a61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.988855][T14068] RAX: ffffffffffffffda RBX: 00007f1476db5fa0 RCX: 00007f1476b8e9a9 [ 729.988870][T14068] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 729.988884][T14068] RBP: 00007f1477a61090 R08: 0000000000000000 R09: 0000000000000000 [ 729.988897][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.988910][T14068] R13: 0000000000000000 R14: 00007f1476db5fa0 R15: 00007f1476edfa28 [ 729.988942][T14068] [ 730.619053][T14077] fuse: Unknown parameter 'subj_type' [ 731.057135][ T1225] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 731.234611][ T1225] usb 5-1: config 0 has no interfaces? [ 731.258338][ T1225] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.258376][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.258400][ T1225] usb 5-1: Product: syz [ 731.258417][ T1225] usb 5-1: Manufacturer: syz [ 731.258435][ T1225] usb 5-1: SerialNumber: syz [ 731.263468][ T1225] usb 5-1: config 0 descriptor?? [ 732.057406][ T1225] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 732.187527][ T1225] usb 4-1: device descriptor read/64, error -71 [ 732.457925][ T1225] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 732.622651][ T1225] usb 4-1: device descriptor read/64, error -71 [ 732.686883][T14113] FAULT_INJECTION: forcing a failure. [ 732.686883][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 732.738376][ T1225] usb usb4-port1: attempt power cycle [ 732.788459][T14113] CPU: 1 UID: 0 PID: 14113 Comm: syz.1.2087 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 732.788493][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.788507][T14113] Call Trace: [ 732.788517][T14113] [ 732.788527][T14113] dump_stack_lvl+0x189/0x250 [ 732.788558][T14113] ? __pfx____ratelimit+0x10/0x10 [ 732.788583][T14113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.788608][T14113] ? __pfx__printk+0x10/0x10 [ 732.788643][T14113] ? __pfx___might_resched+0x10/0x10 [ 732.788667][T14113] ? fs_reclaim_acquire+0x7d/0x100 [ 732.788693][T14113] should_fail_ex+0x414/0x560 [ 732.788721][T14113] should_failslab+0xa8/0x100 [ 732.788755][T14113] __kmalloc_cache_noprof+0x70/0x3d0 [ 732.788784][T14113] ? rtnl_newlink+0xed/0x1c70 [ 732.788817][T14113] rtnl_newlink+0xed/0x1c70 [ 732.788845][T14113] ? finish_task_switch+0x266/0x950 [ 732.788876][T14113] ? __pfx_rtnl_newlink+0x10/0x10 [ 732.788900][T14113] ? trace_sched_exit_tp+0x38/0x120 [ 732.788920][T14113] ? __schedule+0x171b/0x4cf0 [ 732.788955][T14113] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 732.788985][T14113] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.789009][T14113] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 732.789029][T14113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 732.789062][T14113] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 732.789113][T14113] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 732.789156][T14113] ? rcu_is_watching+0x15/0xb0 [ 732.789183][T14113] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 732.789215][T14113] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 732.789242][T14113] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 732.789267][T14113] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 732.789318][T14113] ? __pfx_rtnl_newlink+0x10/0x10 [ 732.789345][T14113] rtnetlink_rcv_msg+0x7cf/0xb70 [ 732.789377][T14113] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 732.789404][T14113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 732.789438][T14113] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 732.789479][T14113] netlink_rcv_skb+0x208/0x470 [ 732.789507][T14113] ? rcu_is_watching+0x15/0xb0 [ 732.789532][T14113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 732.789562][T14113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.789605][T14113] ? netlink_deliver_tap+0x2e/0x1b0 [ 732.789643][T14113] netlink_unicast+0x759/0x8e0 [ 732.789683][T14113] netlink_sendmsg+0x805/0xb30 [ 732.789723][T14113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.789756][T14113] ? aa_sock_msg_perm+0x94/0x160 [ 732.789782][T14113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.789804][T14113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.789835][T14113] __sock_sendmsg+0x21c/0x270 [ 732.789864][T14113] ____sys_sendmsg+0x505/0x830 [ 732.789902][T14113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.789944][T14113] ? import_iovec+0x74/0xa0 [ 732.789985][T14113] ___sys_sendmsg+0x21f/0x2a0 [ 732.790020][T14113] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.790090][T14113] ? __fget_files+0x2a/0x420 [ 732.790108][T14113] ? __fget_files+0x3a0/0x420 [ 732.790138][T14113] __x64_sys_sendmsg+0x19b/0x260 [ 732.790174][T14113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.790216][T14113] ? __pfx_ksys_write+0x10/0x10 [ 732.790242][T14113] ? rcu_is_watching+0x15/0xb0 [ 732.790272][T14113] ? do_syscall_64+0xbe/0x3b0 [ 732.790300][T14113] do_syscall_64+0xfa/0x3b0 [ 732.790322][T14113] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.790344][T14113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.790366][T14113] ? clear_bhb_loop+0x60/0xb0 [ 732.790391][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.790411][T14113] RIP: 0033:0x7fa960f8e9a9 [ 732.790431][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.790448][T14113] RSP: 002b:00007fa961e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.790471][T14113] RAX: ffffffffffffffda RBX: 00007fa9611b5fa0 RCX: 00007fa960f8e9a9 [ 732.790486][T14113] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 732.790500][T14113] RBP: 00007fa961e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 732.790513][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.790525][T14113] R13: 0000000000000000 R14: 00007fa9611b5fa0 R15: 00007fa9612dfa28 [ 732.790556][T14113] [ 733.213272][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.277431][ T1225] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 733.297772][ T1225] usb 4-1: device descriptor read/8, error -71 [ 733.778335][ T1225] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 733.913857][ T1225] usb 4-1: device descriptor read/8, error -71 [ 734.038442][ T1225] usb usb4-port1: unable to enumerate USB device [ 734.899806][ T5929] usb 5-1: USB disconnect, device number 16 [ 735.055847][T14127] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.2093'. [ 735.537711][ T5929] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 735.697155][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 735.706708][ T5929] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 735.720124][ T5929] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 735.758052][ T5929] usb 5-1: language id specifier not provided by device, defaulting to English [ 735.786438][ T5929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.796905][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.805291][ T5929] usb 5-1: Product: syz [ 735.817188][ T5929] usb 5-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 735.847665][ T5937] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 735.864257][ T5929] usb 5-1: SerialNumber: syz [ 735.923774][T14150] FAULT_INJECTION: forcing a failure. [ 735.923774][T14150] name failslab, interval 1, probability 0, space 0, times 0 [ 735.942008][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.2.2099 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 735.942034][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.942045][T14150] Call Trace: [ 735.942051][T14150] [ 735.942058][T14150] dump_stack_lvl+0x189/0x250 [ 735.942081][T14150] ? __pfx____ratelimit+0x10/0x10 [ 735.942099][T14150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.942117][T14150] ? __pfx__printk+0x10/0x10 [ 735.942141][T14150] ? __pfx___might_resched+0x10/0x10 [ 735.942163][T14150] should_fail_ex+0x414/0x560 [ 735.942183][T14150] should_failslab+0xa8/0x100 [ 735.942207][T14150] kmem_cache_alloc_noprof+0x73/0x3c0 [ 735.942228][T14150] ? getname_flags+0xb8/0x540 [ 735.942245][T14150] getname_flags+0xb8/0x540 [ 735.942263][T14150] user_path_at+0x24/0x60 [ 735.942281][T14150] __x64_sys_umount+0xee/0x160 [ 735.942302][T14150] ? __pfx___x64_sys_umount+0x10/0x10 [ 735.942321][T14150] ? rcu_is_watching+0x15/0xb0 [ 735.942342][T14150] ? do_syscall_64+0xbe/0x3b0 [ 735.942363][T14150] do_syscall_64+0xfa/0x3b0 [ 735.942379][T14150] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.942395][T14150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.942410][T14150] ? clear_bhb_loop+0x60/0xb0 [ 735.942429][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.942452][T14150] RIP: 0033:0x7f99b918e9a9 [ 735.942467][T14150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.942480][T14150] RSP: 002b:00007f99b6ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 735.942496][T14150] RAX: ffffffffffffffda RBX: 00007f99b93b6080 RCX: 00007f99b918e9a9 [ 735.942508][T14150] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000000 [ 735.942517][T14150] RBP: 00007f99b6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 735.942527][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.942535][T14150] R13: 0000000000000000 R14: 00007f99b93b6080 R15: 00007f99b94dfa28 [ 735.942558][T14150] [ 736.150211][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.187166][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 736.195127][ T5937] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 736.203500][ T5937] usb 4-1: config 0 has no interface number 0 [ 736.209750][ T5937] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 65344, setting to 1024 [ 736.221065][ T5937] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 736.231246][ T5937] usb 4-1: config 0 interface 41 has no altsetting 0 [ 736.244359][ T5937] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 736.253758][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.261837][ T5937] usb 4-1: Product: syz [ 736.266049][ T5937] usb 4-1: Manufacturer: syz [ 736.270966][ T5937] usb 4-1: SerialNumber: syz [ 736.281064][ T5937] usb 4-1: config 0 descriptor?? [ 736.286847][T14141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.299714][ T1208] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 736.339155][ T5937] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 736.482235][ T1208] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 736.491047][ T1208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.503406][ T1208] usb 1-1: config 0 has no interface number 0 [ 736.514516][ T1208] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 736.523919][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.533260][ T1208] usb 1-1: Product: syz [ 736.537884][ T1208] usb 1-1: Manufacturer: syz [ 736.542768][ T1208] usb 1-1: SerialNumber: syz [ 736.557708][ T1208] usb 1-1: config 0 descriptor?? [ 736.575297][ T5941] usb 4-1: USB disconnect, device number 38 [ 736.618099][ T1208] hub 1-1:0.31: bad descriptor, ignoring hub [ 736.741135][ T1208] hub 1-1:0.31: probe with driver hub failed with error -5 [ 736.768164][ T1208] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 736.806880][ T1208] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 736.847423][ T1208] usb 1-1: Failed to create links for entity 6 [ 736.866004][ T1208] usb 1-1: Failed to register entities (-22). [ 736.930930][ T1208] usb 1-1: USB disconnect, device number 36 [ 736.943232][T14154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.977639][T14154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.157396][ T5941] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 737.322411][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 737.335746][ T5941] usb 3-1: config 127 has an invalid interface number: 88 but max is 3 [ 737.363366][ T5941] usb 3-1: config 127 has an invalid interface number: 64 but max is 3 [ 737.393052][ T5941] usb 3-1: config 127 has an invalid interface number: 145 but max is 3 [ 737.415526][ T5941] usb 3-1: config 127 has an invalid interface number: 12 but max is 3 [ 737.437774][ T5941] usb 3-1: config 127 has an invalid interface number: 209 but max is 3 [ 737.463436][ T5941] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 737.479551][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2104'. [ 737.505360][ T5941] usb 3-1: config 127 has an invalid interface number: 58 but max is 3 [ 737.518343][ T5941] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 737.527874][ T5941] usb 3-1: config 127 has 6 interfaces, different from the descriptor's value: 4 [ 737.537663][ T5941] usb 3-1: config 127 has no interface number 0 [ 737.544375][ T5941] usb 3-1: config 127 has no interface number 1 [ 737.632892][ T5941] usb 3-1: config 127 has no interface number 2 [ 737.648926][ T5941] usb 3-1: config 127 has no interface number 3 [ 737.681246][ T5941] usb 3-1: config 127 has no interface number 4 [ 737.693661][ T5941] usb 3-1: config 127 has no interface number 5 [ 737.708765][ T5941] usb 3-1: config 127 interface 88 altsetting 121 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 737.796744][ T5941] usb 3-1: config 127 interface 88 altsetting 121 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.816470][ T5941] usb 3-1: config 127 interface 88 altsetting 121 has a duplicate endpoint with address 0x5, skipping [ 737.831762][T14174] tipc: Enabled bearer , priority 0 [ 737.838769][ T5941] usb 3-1: config 127 interface 88 altsetting 121 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 737.838809][ T5941] usb 3-1: config 127 interface 88 altsetting 121 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 737.838838][ T5941] usb 3-1: config 127 interface 88 altsetting 121 has a duplicate endpoint with address 0x7, skipping [ 737.838865][ T5941] usb 3-1: config 127 interface 88 altsetting 121 has a duplicate endpoint with address 0x7, skipping [ 737.838906][ T5941] usb 3-1: config 127 interface 64 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 737.838930][ T5941] usb 3-1: config 127 interface 64 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 737.941277][T14174] syzkaller0: entered promiscuous mode [ 737.946863][T14174] syzkaller0: entered allmulticast mode [ 738.000476][ T5941] usb 3-1: too many endpoints for config 127 interface 145 altsetting 149: 159, using maximum allowed: 30 [ 738.012917][ T5941] usb 3-1: config 127 interface 145 altsetting 149 has a duplicate endpoint with address 0xB, skipping [ 738.032033][ T5941] usb 3-1: config 127 interface 145 altsetting 149 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 738.046093][T14174] tipc: Resetting bearer [ 738.056602][ T5941] usb 3-1: config 127 interface 145 altsetting 149 has 3 endpoint descriptors, different from the interface descriptor's value: 159 [ 738.077787][T14173] tipc: Resetting bearer [ 738.086104][ T5941] usb 3-1: too many endpoints for config 127 interface 12 altsetting 203: 221, using maximum allowed: 30 [ 738.120090][ T5941] usb 3-1: config 127 interface 12 altsetting 203 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 738.136112][ T5941] usb 3-1: config 127 interface 209 altsetting 9 endpoint 0xC has an invalid bInterval 127, changing to 10 [ 738.140509][T14173] tipc: Disabling bearer [ 738.160292][ T5941] usb 3-1: config 127 interface 209 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 738.183492][ T5941] usb 3-1: config 127 interface 209 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 738.203655][ T5941] usb 3-1: config 127 interface 209 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 738.219314][ T5941] usb 3-1: config 127 interface 209 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 738.233293][ T5941] usb 3-1: config 127 interface 209 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 738.255728][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 738.312044][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 738.521131][ T5929] cdc_ncm 5-1:1.0: bind() failure [ 738.532399][ T5929] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 738.541319][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0xC, skipping [ 738.560761][ T5929] cdc_ncm 5-1:1.1: bind() failure [ 738.620644][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 738.664524][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 738.715425][ T5929] usb 5-1: USB disconnect, device number 17 [ 738.858241][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 738.894984][ T5941] usb 3-1: config 127 interface 58 altsetting 64 bulk endpoint 0x88 has invalid maxpacket 8 [ 739.135388][ T5941] usb 3-1: config 127 interface 58 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 739.167179][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has an endpoint descriptor with address 0x6B, changing to 0xB [ 739.179102][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 739.190225][ T5941] usb 3-1: config 127 interface 58 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 739.202149][ T5941] usb 3-1: config 127 interface 88 has no altsetting 0 [ 739.209138][ T5941] usb 3-1: config 127 interface 64 has no altsetting 0 [ 739.216025][ T5941] usb 3-1: config 127 interface 145 has no altsetting 0 [ 739.223553][ T5941] usb 3-1: config 127 interface 12 has no altsetting 0 [ 739.231638][ T5941] usb 3-1: config 127 interface 209 has no altsetting 0 [ 739.239116][ T5941] usb 3-1: config 127 interface 58 has no altsetting 0 [ 739.249828][ T5941] usb 3-1: Dual-Role OTG device on HNP port [ 739.256375][ T5941] usb 3-1: New USB device found, idVendor=3340, idProduct=2326, bcdDevice=94.b7 [ 739.273208][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.296211][ T5941] usb 3-1: Product: И [ 739.308318][ T5941] usb 3-1: Manufacturer: ဇ [ 739.321906][ T5941] usb 3-1: SerialNumber: ꋈꄠ൦槦䮞꘲⚄桠ݯ㗖鲨犈蠄዁킓▚⃥ꀧ㑇宣䤟Ÿ毘ꐘ⥵䠼嫌ᄆ滩鄻⌺ᅜ寬ଏ [ 739.397312][ T5941] usb 3-1: Interface #209 referenced by multiple IADs [ 739.802093][ T5941] usb 3-1: USB disconnect, device number 94 [ 740.473685][T14218] FAULT_INJECTION: forcing a failure. [ 740.473685][T14218] name failslab, interval 1, probability 0, space 0, times 0 [ 740.491560][ T5929] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 740.538306][T14218] CPU: 1 UID: 0 PID: 14218 Comm: syz.2.2117 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 740.538334][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.538348][T14218] Call Trace: [ 740.538357][T14218] [ 740.538367][T14218] dump_stack_lvl+0x189/0x250 [ 740.538399][T14218] ? __pfx____ratelimit+0x10/0x10 [ 740.538423][T14218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.538449][T14218] ? __pfx__printk+0x10/0x10 [ 740.538484][T14218] ? __pfx___might_resched+0x10/0x10 [ 740.538508][T14218] ? fs_reclaim_acquire+0x7d/0x100 [ 740.538534][T14218] should_fail_ex+0x414/0x560 [ 740.538562][T14218] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 740.538584][T14218] should_failslab+0xa8/0x100 [ 740.538618][T14218] __kvmalloc_node_noprof+0x161/0x5f0 [ 740.538649][T14218] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 740.538678][T14218] alloc_netdev_mqs+0xa8b/0x11e0 [ 740.538710][T14218] rtnl_create_link+0x31f/0xd10 [ 740.538742][T14218] rtnl_newlink_create+0x25c/0xb00 [ 740.538781][T14218] ? __pfx_aa_get_newest_label+0x10/0x10 [ 740.538809][T14218] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 740.538838][T14218] ? rtnl_newlink+0x8db/0x1c70 [ 740.538869][T14218] ? __pfx___mutex_lock+0x10/0x10 [ 740.538905][T14218] ? ns_capable+0x8a/0xf0 [ 740.538934][T14218] rtnl_newlink+0x16d6/0x1c70 [ 740.538981][T14218] ? __pfx_rtnl_newlink+0x10/0x10 [ 740.539007][T14218] ? is_bpf_text_address+0x26/0x2b0 [ 740.539039][T14218] ? __lock_acquire+0xab9/0xd20 [ 740.539131][T14218] ? __lock_acquire+0xab9/0xd20 [ 740.539190][T14218] ? __pfx_rtnl_newlink+0x10/0x10 [ 740.539216][T14218] rtnetlink_rcv_msg+0x7cf/0xb70 [ 740.539250][T14218] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 740.539276][T14218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.539323][T14218] netlink_rcv_skb+0x208/0x470 [ 740.539358][T14218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.539388][T14218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 740.539431][T14218] ? netlink_deliver_tap+0x2e/0x1b0 [ 740.539461][T14218] ? netlink_deliver_tap+0x2e/0x1b0 [ 740.539497][T14218] netlink_unicast+0x759/0x8e0 [ 740.539537][T14218] netlink_sendmsg+0x805/0xb30 [ 740.539578][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.539613][T14218] ? aa_sock_msg_perm+0x94/0x160 [ 740.539638][T14218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.539661][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.539693][T14218] __sock_sendmsg+0x21c/0x270 [ 740.539723][T14218] ____sys_sendmsg+0x505/0x830 [ 740.539762][T14218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.539805][T14218] ? import_iovec+0x74/0xa0 [ 740.539840][T14218] ___sys_sendmsg+0x21f/0x2a0 [ 740.539876][T14218] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.539949][T14218] ? __fget_files+0x2a/0x420 [ 740.539968][T14218] ? __fget_files+0x3a0/0x420 [ 740.539999][T14218] __x64_sys_sendmsg+0x19b/0x260 [ 740.540036][T14218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.540079][T14218] ? __pfx_ksys_write+0x10/0x10 [ 740.540105][T14218] ? rcu_is_watching+0x15/0xb0 [ 740.540137][T14218] ? do_syscall_64+0xbe/0x3b0 [ 740.540174][T14218] do_syscall_64+0xfa/0x3b0 [ 740.540197][T14218] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.540220][T14218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.540241][T14218] ? clear_bhb_loop+0x60/0xb0 [ 740.540267][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.540289][T14218] RIP: 0033:0x7f99b918e9a9 [ 740.540310][T14218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.540327][T14218] RSP: 002b:00007f99b9f18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.540349][T14218] RAX: ffffffffffffffda RBX: 00007f99b93b5fa0 RCX: 00007f99b918e9a9 [ 740.540365][T14218] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 740.540378][T14218] RBP: 00007f99b9f18090 R08: 0000000000000000 R09: 0000000000000000 [ 740.540391][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.540403][T14218] R13: 0000000000000000 R14: 00007f99b93b5fa0 R15: 00007f99b94dfa28 [ 740.540436][T14218] [ 740.940509][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.440662][ T5929] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.469129][ T5929] usb 1-1: config 0 has no interface number 0 [ 741.529689][ T5929] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 741.588792][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 741.588807][ T30] audit: type=1326 audit(1753122889.488:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.639883][ T30] audit: type=1326 audit(1753122889.488:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.677258][ T5929] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 741.692690][ T30] audit: type=1326 audit(1753122889.488:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.721665][ T30] audit: type=1326 audit(1753122889.488:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.746449][ T5929] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.746485][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.749875][ T5929] usb 1-1: config 0 descriptor?? [ 741.781992][ T30] audit: type=1326 audit(1753122889.488:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.812817][ T30] audit: type=1326 audit(1753122889.488:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.838410][ T1225] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 741.851605][ T30] audit: type=1326 audit(1753122889.488:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 741.881635][ T30] audit: type=1326 audit(1753122889.488:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 742.002157][ T30] audit: type=1326 audit(1753122889.488:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 742.083753][T14207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 742.096179][ T30] audit: type=1326 audit(1753122889.488:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.2.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99b918e9a9 code=0x7ffc0000 [ 742.171300][ T5929] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 742.372805][ T5941] usb 1-1: USB disconnect, device number 37 [ 742.378856][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 743.324704][ T5929] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 743.557339][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 743.592188][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.612019][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.702505][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 743.824190][ T5929] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 743.935779][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.023007][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.098512][ T5929] usb 5-1: config 0 descriptor?? [ 744.514066][ T5929] microsoft 0003:045E:07DA.001E: unknown main item tag 0x2 [ 744.535027][T14265] syzkaller1: entered promiscuous mode [ 744.555672][T14265] syzkaller1: entered allmulticast mode [ 744.585099][ T5929] microsoft 0003:045E:07DA.001E: unknown main item tag 0x6 [ 744.645829][ T5929] microsoft 0003:045E:07DA.001E: unknown main item tag 0x6 [ 744.656076][ T5929] microsoft 0003:045E:07DA.001E: unknown main item tag 0x6 [ 744.690903][ T5929] microsoft 0003:045E:07DA.001E: unknown main item tag 0x6 [ 744.720662][ T5929] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 744.759327][ T5929] microsoft 0003:045E:07DA.001E: no inputs found [ 744.767235][ T5929] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 744.808944][ T5929] usb 5-1: USB disconnect, device number 18 [ 745.042322][T14269] fido_id[14269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 745.078899][T14275] netlink: 'syz.1.2132': attribute type 32 has an invalid length. [ 745.797418][ T1225] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 746.047148][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 746.058365][ T1225] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 746.069290][ T1225] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.117487][ T5929] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 746.345572][ T1225] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 746.369807][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.385626][ T1225] usb 4-1: Product: syz [ 746.394488][ T1225] usb 4-1: Manufacturer: syz [ 746.404411][ T1225] usb 4-1: SerialNumber: syz [ 746.427785][ T1225] usb 4-1: config 0 descriptor?? [ 746.760198][ T1225] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 747.108731][ T1225] usb 3-1: Using ep0 maxpacket: 16 [ 747.482044][T14327] ipt_ECN: cannot use operation on non-tcp rule [ 747.530282][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.542109][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.280998][T13658] usb 4-1: USB disconnect, device number 39 [ 748.867252][T13658] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 749.060785][T13658] usb 4-1: Using ep0 maxpacket: 8 [ 749.085209][T13658] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 749.121899][T13658] usb 4-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 749.361271][T13658] usb 4-1: config 0 has no interface number 0 [ 749.385416][T13658] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.458412][T13658] usb 4-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 749.529514][T13658] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 749.530604][ T5929] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 749.556752][T13658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.590709][T13658] usb 4-1: Product: syz [ 749.607271][T13658] usb 4-1: Manufacturer: syz [ 749.617288][T13658] usb 4-1: SerialNumber: syz [ 749.665175][T13658] usb 4-1: config 0 descriptor?? [ 749.693223][T13658] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 749.795207][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.814126][ T5929] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 749.878642][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2148'. [ 749.887931][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.925831][ T5929] usb 5-1: config 0 descriptor?? [ 749.948018][T14349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2148'. [ 750.301951][ T5929] usbhid 5-1:0.0: can't add hid device: -71 [ 750.330903][ T5929] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 750.378679][ T5929] usb 5-1: USB disconnect, device number 20 [ 750.420678][ T5937] usb 4-1: USB disconnect, device number 40 [ 750.538041][T13658] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 750.585505][ T1225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 750.612280][ T1225] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 750.627096][ T1225] usb 3-1: can't read configurations, error -71 [ 750.757121][T13658] usb 1-1: Using ep0 maxpacket: 16 [ 750.766293][T13658] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 750.787142][T13658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 750.815342][T13658] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.827435][ T5929] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 750.837840][T13658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.900144][T13658] usb 1-1: Product: syz [ 750.949957][T13658] usb 1-1: Manufacturer: syz [ 750.970954][T13658] usb 1-1: SerialNumber: syz [ 751.007499][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 751.010438][T13658] usb 1-1: config 0 descriptor?? [ 751.030160][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.045157][T13658] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.073875][T13658] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 751.087193][ T5929] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 751.098664][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.132999][ T5929] usb 5-1: config 0 descriptor?? [ 751.148654][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 751.148672][ T30] audit: type=1326 audit(1753122899.068:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.181745][ T5929] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 751.199160][ T5929] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 751.266334][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.311634][ T30] audit: type=1326 audit(1753122899.078:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.337415][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.389910][ T30] audit: type=1326 audit(1753122899.078:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.649878][ T30] audit: type=1326 audit(1753122899.078:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.736255][ T30] audit: type=1326 audit(1753122899.078:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.811902][ T30] audit: type=1326 audit(1753122899.078:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.845011][T13658] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 751.853367][T13658] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 751.884302][T13658] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 751.894443][T13658] em28xx 1-1:0.0: No AC97 audio processor [ 751.902295][ T30] audit: type=1326 audit(1753122899.078:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 751.960024][T13658] usb 1-1: USB disconnect, device number 38 [ 751.991048][T13658] em28xx 1-1:0.0: Disconnecting em28xx [ 752.023477][T13658] em28xx 1-1:0.0: Freeing device [ 752.031647][ T30] audit: type=1326 audit(1753122899.348:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8615b8d310 code=0x7ffc0000 [ 752.143885][ T30] audit: type=1326 audit(1753122899.348:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 752.214757][ T30] audit: type=1326 audit(1753122899.358:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.3.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8615b8e9a9 code=0x7ffc0000 [ 752.297412][ T1225] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 752.467275][ T1225] usb 4-1: Using ep0 maxpacket: 16 [ 752.480436][ T1225] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 752.493035][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.502976][ T1225] usb 4-1: Product: syz [ 752.511463][ T1225] usb 4-1: Manufacturer: syz [ 752.519452][ T1225] usb 4-1: SerialNumber: syz [ 752.535127][ T1225] r8152-cfgselector 4-1: Unknown version 0x0000 [ 752.546576][ T1225] r8152-cfgselector 4-1: config 0 descriptor?? [ 752.648343][ T5853] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 752.714462][ T5853] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 752.806352][ T5929] usb 5-1: USB disconnect, device number 21 [ 752.827508][ T5929] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 752.848088][ T5853] usb 2-1: USB disconnect, device number 24 [ 753.542004][ T1225] r8152-cfgselector 4-1: Unknown version 0x78e0 [ 753.604254][ T1225] r8152-cfgselector 4-1: bad CDC descriptors [ 753.734122][T14400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'. [ 753.894595][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 754.704289][T14407] netlink: 'syz.1.2163': attribute type 9 has an invalid length. [ 754.723263][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 754.759888][T14407] hsr0: entered promiscuous mode [ 754.787612][T14407] macvlan2: entered promiscuous mode [ 754.799107][T14407] macvlan2: entered allmulticast mode [ 754.814873][T14407] hsr0: entered allmulticast mode [ 754.830149][T14407] hsr_slave_0: entered allmulticast mode [ 754.871464][T14407] hsr_slave_1: entered allmulticast mode [ 754.972270][T14377] tap0: tun_chr_ioctl cmd 1074025678 [ 754.994029][T14377] tap0: group set to 0 [ 755.497118][ T1225] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 756.171408][T14428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.183657][T14428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.280742][ T5929] r8152-cfgselector 4-1: USB disconnect, device number 41 [ 757.310620][T14428] loop4: detected capacity change from 0 to 2560 [ 757.325238][ T5946] buffer_io_error: 10 callbacks suppressed [ 757.325254][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.347911][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.356567][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.386503][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.404828][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.552383][T14446] netlink: 'syz.1.2169': attribute type 9 has an invalid length. [ 757.592528][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 757.638657][T14446] macvlan3: entered promiscuous mode [ 757.644365][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.659171][T14446] macvlan3: entered allmulticast mode [ 757.665342][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.692758][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.731867][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 757.770150][ T5946] Buffer I/O error on dev loop4, logical block 0, async page read [ 758.182215][T14455] x_tables: duplicate underflow at hook 1 [ 758.210242][T14455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.217911][T14455] IPv6: NLM_F_CREATE should be set when creating new route [ 758.225572][T14455] IPv6: NLM_F_CREATE should be set when creating new route [ 758.527504][ T1225] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 758.687174][ T1225] usb 3-1: Using ep0 maxpacket: 8 [ 758.737458][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 758.747179][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 758.793758][ T1225] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 758.878990][ T5929] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 758.914905][ T1225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.927566][ T1225] usb 3-1: config 0 has no interface number 0 [ 759.021038][ T1225] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 759.062333][ T1225] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.114888][ T1225] usb 3-1: config 0 interface 52 has no altsetting 0 [ 759.126242][ T1225] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 759.136234][ T1225] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 759.144971][ T1225] usb 3-1: Manufacturer: syz [ 759.183992][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 759.209099][ T5929] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 759.302433][ T5929] usb 1-1: config 0 has no interface number 0 [ 759.328594][ T5929] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 759.338397][ T1225] usb 3-1: config 0 descriptor?? [ 759.361958][ T5929] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 759.387616][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 759.433866][ T5929] usb 1-1: Manufacturer: syz [ 759.494686][ T5929] usb 1-1: SerialNumber: syz [ 759.613060][ T1225] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input88 [ 759.668912][ T5929] usb 1-1: config 0 descriptor?? [ 759.820470][ T1225] usb 3-1: USB disconnect, device number 98 [ 759.826546][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 759.878247][ T5929] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 759.887339][ T5929] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 759.998140][ T5929] usb 1-1: USB disconnect, device number 40 [ 760.717167][ T5929] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 761.049082][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 761.064131][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 761.080051][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 761.088536][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.193147][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.298356][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 761.332045][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.352670][ T5929] usb 3-1: config 0 descriptor?? [ 761.369285][T14494] input: syz1 as /devices/virtual/input/input90 [ 761.530516][ T6412] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 761.789942][ T5929] apple 0003:05AC:0274.001F: unknown main item tag 0x4 [ 761.807952][ T5929] apple 0003:05AC:0274.001F: unexpected long global item [ 761.843754][ T6412] usb 1-1: config 0 has no interfaces? [ 761.892264][ T5929] apple 0003:05AC:0274.001F: parse failed [ 761.908398][ T5929] apple 0003:05AC:0274.001F: probe with driver apple failed with error -22 [ 761.920806][ T6412] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 761.930630][ T6412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.939008][ T6412] usb 1-1: Product: syz [ 761.943572][ T6412] usb 1-1: Manufacturer: syz [ 761.977361][ T6412] usb 1-1: SerialNumber: syz [ 761.997766][ T6412] usb 1-1: config 0 descriptor?? [ 762.009195][ T5929] usb 3-1: USB disconnect, device number 99 [ 762.197287][ T6412] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 762.369571][ T6412] usb 2-1: Using ep0 maxpacket: 8 [ 762.514870][ T6412] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 762.528390][ T6412] usb 2-1: config 0 has no interface number 0 [ 762.543571][ T6412] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 762.603897][ T6412] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 762.691433][ T6412] usb 2-1: config 0 interface 48 has no altsetting 0 [ 762.716531][ T6412] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 762.726369][ T6412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.753157][ T6412] usb 2-1: Product: syz [ 762.758655][ T6412] usb 2-1: Manufacturer: syz [ 762.763449][ T6412] usb 2-1: SerialNumber: syz [ 762.807691][T13658] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 762.823535][ T6412] usb 2-1: config 0 descriptor?? [ 763.121045][T13658] usb 4-1: Using ep0 maxpacket: 16 [ 763.137256][T13658] usb 4-1: config index 0 descriptor too short (expected 927, got 452) [ 763.153531][T13658] usb 4-1: config 4 has an invalid interface number: 15 but max is 2 [ 763.175667][T13658] usb 4-1: config 4 has an invalid descriptor of length 9, skipping remainder of the config [ 763.201103][T13658] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 763.234755][T13658] usb 4-1: config 4 has no interface number 0 [ 763.259911][T13658] usb 4-1: config 4 interface 15 altsetting 5 endpoint 0xE has an invalid bInterval 129, changing to 11 [ 763.295874][T13658] usb 4-1: config 4 interface 15 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 763.401542][T13658] usb 4-1: config 4 interface 15 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 763.499506][T13658] usb 4-1: config 4 interface 15 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 763.627244][T13658] usb 4-1: config 4 interface 15 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 763.669191][T13658] usb 4-1: config 4 interface 15 has no altsetting 0 [ 763.844701][T13658] usb 4-1: New USB device found, idVendor=04b4, idProduct=bd29, bcdDevice=1e.ea [ 763.874311][T13658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.925124][T13658] usb 4-1: Product: syz [ 763.945844][T13658] usb 4-1: Manufacturer: syz [ 763.967206][T13658] usb 4-1: SerialNumber: syz [ 764.007515][T13658] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 764.040908][T13658] usb 4-1: no configuration chosen from 1 choice [ 764.066167][ T6412] usb 1-1: USB disconnect, device number 41 [ 764.446285][T14516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.031880][T13658] usb 2-1: USB disconnect, device number 25 [ 765.237430][ T6412] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 765.410608][T14535] set match dimension is over the limit! [ 765.554128][T13658] usb 4-1: USB disconnect, device number 42 [ 765.619471][ T6412] usb 1-1: config 0 has no interfaces? [ 765.640663][ T6412] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 765.705126][ T6412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.740183][ T6412] usb 1-1: Product: syz [ 765.744537][ T6412] usb 1-1: Manufacturer: syz [ 765.770570][ T6412] usb 1-1: SerialNumber: syz [ 765.826162][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 765.868165][ T6412] usb 1-1: config 0 descriptor?? [ 766.102591][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 766.124043][T14544] netlink: 'syz.4.2196': attribute type 2 has an invalid length. [ 767.893188][ T6412] usb 1-1: USB disconnect, device number 42 [ 768.515682][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.576510][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.697322][ T6412] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 768.777256][T13658] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 768.987116][T13658] usb 2-1: Using ep0 maxpacket: 16 [ 768.997350][T13658] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 769.011756][T13658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 769.025349][T13658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59378, setting to 1024 [ 769.051592][ T6412] usb 5-1: config 0 has no interfaces? [ 769.060346][T13658] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 769.071231][T13658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.080277][T13658] usb 2-1: Product: syz [ 769.091387][T13658] usb 2-1: Manufacturer: syz [ 769.110900][T13658] usb 2-1: SerialNumber: syz [ 769.358595][T13658] usb 2-1: config 0 descriptor?? [ 769.373061][T13658] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 769.382601][T13658] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 769.577382][ T6412] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 769.616895][ T6412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.641855][T13658] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 769.660608][T13658] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 769.680455][T13658] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 769.688937][ T6412] usb 5-1: Product: syz [ 769.696874][ T6412] usb 5-1: Manufacturer: syz [ 769.708193][ T6412] usb 5-1: SerialNumber: syz [ 769.724072][ T6412] usb 5-1: config 0 descriptor?? [ 769.739390][T13658] em28xx 2-1:0.0: No AC97 audio processor [ 769.978587][T13658] usb 2-1: USB disconnect, device number 26 [ 769.992646][T13658] em28xx 2-1:0.0: Disconnecting em28xx [ 770.002355][T13658] em28xx 2-1:0.0: Freeing device [ 770.490207][ T30] audit: type=1326 audit(1753122918.408:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.525527][ T30] audit: type=1326 audit(1753122918.418:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.552471][ T30] audit: type=1326 audit(1753122918.418:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.578812][ T30] audit: type=1326 audit(1753122918.418:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.604699][ T30] audit: type=1326 audit(1753122918.418:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.642619][ T30] audit: type=1326 audit(1753122918.418:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.680240][ T30] audit: type=1326 audit(1753122918.418:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.717480][ T30] audit: type=1326 audit(1753122918.418:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.741892][ T6412] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 770.809498][ T30] audit: type=1326 audit(1753122918.418:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.872277][ T30] audit: type=1326 audit(1753122918.418:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14579 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa960f8e9a9 code=0x7ffc0000 [ 770.929871][ T6412] usb 4-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 770.939646][ T6412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.184347][ T6412] usb 4-1: config 0 descriptor?? [ 771.222824][ T6412] gspca_main: tv8532-2.14.0 probing 0545:808b [ 771.476777][ T6412] usb 4-1: USB disconnect, device number 43 [ 771.534477][ T1225] usb 5-1: USB disconnect, device number 22 [ 771.987110][T13658] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 772.187238][ T1225] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 772.195220][T13658] usb 3-1: Using ep0 maxpacket: 8 [ 772.214491][T13658] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 772.233659][T13658] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.266412][T13658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.292316][T13658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 772.377771][T13658] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.394060][T13658] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.405718][T13658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.425581][ T1225] usb 5-1: config 0 has no interfaces? [ 772.435235][ T1225] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 772.447157][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.457185][ T6412] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 772.471073][ T1225] usb 5-1: Product: syz [ 772.497161][ T1225] usb 5-1: Manufacturer: syz [ 772.502210][ T1225] usb 5-1: SerialNumber: syz [ 772.530418][ T1225] usb 5-1: config 0 descriptor?? [ 772.710154][ T6412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 772.731408][ T6412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 772.758079][T14602] program syz.4.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.778039][T14602] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 772.799502][ T6412] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 772.827383][ T6412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.835548][ T6412] usb 4-1: Product: syz [ 772.857191][ T6412] usb 4-1: Manufacturer: syz [ 772.862134][ T6412] usb 4-1: SerialNumber: syz [ 772.870668][ T6412] usb 4-1: config 0 descriptor?? [ 772.889951][ T6412] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 772.922191][ T1208] usb 3-1: USB disconnect, device number 100 [ 773.027799][T14612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2211'. [ 773.108140][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.174894][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.199389][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.227891][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.264496][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.288764][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.308605][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.322246][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.333340][T14604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.354538][T14604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.752424][ T1208] usb 4-1: USB disconnect, device number 44 [ 774.951803][T13658] usb 5-1: USB disconnect, device number 23 [ 775.159211][ T6412] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 775.571705][ T6412] usb 2-1: config 0 has no interfaces? [ 775.607968][ T6412] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 775.617799][ T1208] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 775.676929][ T6412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.772133][ T6412] usb 2-1: Product: syz [ 775.776395][ T6412] usb 2-1: Manufacturer: syz [ 775.805576][ T6412] usb 2-1: SerialNumber: syz [ 775.879133][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 776.001443][T13658] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 776.098599][ T6412] usb 2-1: config 0 descriptor?? [ 776.112502][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.128182][ T1208] usb 3-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.00 [ 776.143731][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.177381][T13658] usb 5-1: Using ep0 maxpacket: 16 [ 776.191591][T13658] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 776.207244][T13658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.227725][ T1208] usb 3-1: config 0 descriptor?? [ 776.393902][T13658] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 776.423866][T13658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.510338][T13658] usb 5-1: Product: syz [ 776.537144][T13658] usb 5-1: Manufacturer: syz [ 776.542811][T13658] usb 5-1: SerialNumber: syz [ 776.574525][T13658] usb 5-1: config 0 descriptor?? [ 776.651399][T13658] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 776.681707][T13658] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 776.787345][ T1208] usbhid 3-1:0.0: can't add hid device: -71 [ 776.793869][ T1208] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 776.880247][ T1208] usb 3-1: USB disconnect, device number 101 [ 777.128248][T13658] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 777.135309][T13658] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 777.202288][T13658] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 777.238269][T13658] em28xx 5-1:0.0: No AC97 audio processor [ 777.266458][T13658] usb 5-1: USB disconnect, device number 24 [ 777.446059][T13658] em28xx 5-1:0.0: Disconnecting em28xx [ 777.537423][T13658] em28xx 5-1:0.0: Freeing device [ 777.721614][ T1208] usb 2-1: USB disconnect, device number 27 [ 777.934477][T13658] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 777.945802][T13656] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 778.211636][T13656] usb 3-1: device descriptor read/64, error -71 [ 778.241043][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 778.374283][T13658] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 778.848428][T13658] usb 5-1: config 0 has no interface number 0 [ 778.867132][T13658] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 778.895863][T13658] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 778.957228][ T5853] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 778.968844][T13658] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 778.987258][T13656] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 779.037389][T13658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.078902][T13658] usb 5-1: Product: syz [ 779.084089][T13658] usb 5-1: Manufacturer: syz [ 779.104433][T13658] usb 5-1: SerialNumber: syz [ 779.127810][T13658] usb 5-1: config 0 descriptor?? [ 779.152228][T14664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 779.187166][T13656] usb 3-1: device descriptor read/64, error -71 [ 779.195987][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 779.450058][T13656] usb usb3-port1: attempt power cycle [ 779.455644][T13658] kaweth 5-1:0.58: Firmware present in device. [ 779.608070][T13658] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 779.620937][T13658] kaweth 5-1:0.58: probe with driver kaweth failed with error -5 [ 779.838144][T13656] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 779.846975][T13658] usb 5-1: USB disconnect, device number 25 [ 779.899223][T13656] usb 3-1: device descriptor read/8, error -71 [ 780.037320][ T1208] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 780.158703][T13656] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 780.196027][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.208239][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.235540][ T1208] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 780.284680][T13656] usb 3-1: device descriptor read/8, error -71 [ 780.306588][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.464817][T13656] usb usb3-port1: unable to enumerate USB device [ 780.486629][ T1208] usb 1-1: config 0 descriptor?? [ 780.993360][ T1208] usbhid 1-1:0.0: can't add hid device: -71 [ 781.005237][ T1208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 781.116486][ T1208] usb 1-1: USB disconnect, device number 43 [ 781.609123][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.623266][ T5853] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 781.640013][ T5853] usb 2-1: can't read configurations, error -71 [ 781.877371][T13656] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 781.957137][ T1208] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 782.058961][T13656] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 782.115236][T13656] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 782.131691][T13656] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 782.182194][ T1208] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 782.202385][T13656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.202407][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.202432][ T1208] usb 1-1: Product: syz [ 782.227150][ T1208] usb 1-1: Manufacturer: syz [ 782.232025][ T1208] usb 1-1: SerialNumber: syz [ 782.252813][ T1208] usb 1-1: config 0 descriptor?? [ 782.262898][ T1208] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 782.277126][T13656] usb 5-1: Product: syz [ 782.293839][T13656] usb 5-1: Manufacturer: syz [ 782.321589][T13656] usb 5-1: SerialNumber: syz [ 782.343775][T13656] usb 5-1: config 0 descriptor?? [ 782.367619][ T5853] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 782.577244][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 782.612608][T13656] usb 5-1: USB disconnect, device number 26 [ 782.637902][ T5853] usb 2-1: config 162 has an invalid interface number: 253 but max is 0 [ 782.646764][ T5853] usb 2-1: config 162 has no interface number 0 [ 782.709983][ T5853] usb 2-1: config 162 interface 253 has no altsetting 0 [ 782.714038][ T1208] gspca_sunplus: reg_r err -71 [ 782.740376][ T5853] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 782.743322][ T1208] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 782.789002][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.821609][ T5853] usb 2-1: Product: syz [ 782.824295][ T1208] usb 1-1: USB disconnect, device number 44 [ 782.825943][ T5853] usb 2-1: Manufacturer: syz [ 782.874800][ T5853] usb 2-1: SerialNumber: syz [ 783.240656][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2233'. [ 783.325497][ T5853] go7007 2-1:162.253: probe with driver go7007 failed with error -12 [ 783.394202][ T5853] usb 2-1: USB disconnect, device number 29 [ 783.527444][T13656] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 783.734347][T13656] usb 4-1: config 0 has no interfaces? [ 783.776613][T13656] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 783.810470][T13656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.867126][T13656] usb 4-1: Product: syz [ 783.876093][T13656] usb 4-1: Manufacturer: syz [ 783.902738][T13656] usb 4-1: SerialNumber: syz [ 783.934772][T13656] usb 4-1: config 0 descriptor?? [ 784.197091][ T1208] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 784.262492][T14706] xt_policy: neither incoming nor outgoing policy selected [ 784.317135][T13656] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 784.352174][ T1208] usb 1-1: device descriptor read/64, error -71 [ 784.537118][T13656] usb 2-1: Using ep0 maxpacket: 16 [ 784.560430][T13656] usb 2-1: config 0 interface 0 has no altsetting 0 [ 784.567741][T13656] usb 2-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.00 [ 784.597114][T13656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.608076][ T1208] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 784.705796][T13656] usb 2-1: config 0 descriptor?? [ 784.747162][ T1208] usb 1-1: device descriptor read/64, error -71 [ 784.864832][ T1208] usb usb1-port1: attempt power cycle [ 785.207287][ T1208] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 785.234605][T13656] usb 2-1: string descriptor 0 read error: -71 [ 785.238829][ T1208] usb 1-1: device descriptor read/8, error -71 [ 785.303498][T13656] usbhid 2-1:0.0: can't add hid device: -71 [ 785.324640][T13656] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 785.360206][T13656] usb 2-1: USB disconnect, device number 30 [ 785.497187][ T1208] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 785.517630][ T1208] usb 1-1: device descriptor read/8, error -71 [ 785.642148][ T1208] usb usb1-port1: unable to enumerate USB device [ 786.387095][T13658] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 787.037233][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.079559][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.089499][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.099214][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.109431][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.122480][T14746] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2245'. [ 787.132590][T14746] tipc: Enabling of bearer rejected, failed to enable media [ 787.321109][ T1208] usb 4-1: USB disconnect, device number 45 [ 787.431738][T13658] usb 2-1: device descriptor read/64, error -71 [ 787.698853][T13658] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 787.867116][T13658] usb 2-1: device descriptor read/64, error -71 [ 787.928757][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.967859][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.980152][T13658] usb usb2-port1: attempt power cycle [ 788.367084][T13658] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 788.569462][T13658] usb 2-1: device descriptor read/8, error -71 [ 788.828126][T14762] warning: `syz.3.2250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 788.987148][T13658] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 789.020422][T13658] usb 2-1: device descriptor read/8, error -71 [ 789.154767][T13658] usb usb2-port1: unable to enumerate USB device [ 789.247117][ T5853] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 789.453563][ T5853] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 789.551340][ T5853] usb 4-1: config 1 interface 0 has no altsetting 0 [ 789.607143][ T5941] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 789.657612][ T5853] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.40 [ 789.729698][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.812419][ T5941] usb 5-1: device descriptor read/64, error -71 [ 789.902269][ T5853] usb 4-1: Product: syz [ 789.948255][T13658] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 789.967610][T14783] netlink: 'syz.0.2256': attribute type 5 has an invalid length. [ 789.983601][ T5853] usb 4-1: Manufacturer: Й [ 790.042077][ T5853] usb 4-1: SerialNumber: syz [ 790.200929][ T5941] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 790.209183][T13658] usb 3-1: Using ep0 maxpacket: 32 [ 790.261654][T13658] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 790.310282][T13658] usb 3-1: config 0 has no interface number 0 [ 790.316638][T13658] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.337156][T13658] usb 3-1: config 0 interface 85 has no altsetting 0 [ 790.372781][T13658] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 790.402762][T13658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.420900][ T5941] usb 5-1: device descriptor read/64, error -71 [ 790.432508][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 790.433594][T13658] usb 3-1: Product: syz [ 790.448020][ T5853] usbhid 4-1:1.0: can't add hid device: -71 [ 790.454105][ T5853] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 790.475556][T13658] usb 3-1: Manufacturer: syz [ 790.490451][T13658] usb 3-1: SerialNumber: syz [ 790.501971][ T5853] usb 4-1: USB disconnect, device number 47 [ 790.531243][T13658] usb 3-1: config 0 descriptor?? [ 790.552363][ T5941] usb usb5-port1: attempt power cycle [ 790.917149][ T5941] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 790.972780][ T5941] usb 5-1: device descriptor read/8, error -71 [ 791.148611][T13658] appletouch 3-1:0.85: Geyser mode initialized. [ 791.157669][T13658] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input92 [ 791.227148][ T5941] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 791.281690][ T5941] usb 5-1: device descriptor read/8, error -71 [ 791.367516][T14781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.408119][T14781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.517552][ T5941] usb usb5-port1: unable to enumerate USB device [ 791.529288][ T6412] usb 3-1: USB disconnect, device number 106 [ 791.604963][ T6412] appletouch 3-1:0.85: input: appletouch disconnected [ 792.117362][ T6412] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 792.383140][ T6412] usb 3-1: config 0 has no interfaces? [ 792.405825][ T6412] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 792.449751][ T6412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.623805][ T6412] usb 3-1: Product: syz [ 792.656375][ T6412] usb 3-1: Manufacturer: syz [ 792.714334][ T6412] usb 3-1: SerialNumber: syz [ 792.750403][ T6412] usb 3-1: config 0 descriptor?? [ 792.857204][T13658] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 793.017128][T13658] usb 4-1: Using ep0 maxpacket: 16 [ 793.024071][ T6412] usb 3-1: USB disconnect, device number 107 [ 793.033152][T13658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.051328][T13658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.065549][T13658] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.132098][T13658] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.182516][T13658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.332012][T13658] usb 4-1: config 0 descriptor?? [ 793.465433][T14828] hub 9-0:1.0: USB hub found [ 793.473635][T14828] hub 9-0:1.0: 1 port detected [ 793.885693][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 793.903637][T13658] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 794.008148][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.027546][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.090563][T14812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.101817][T14812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.127270][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.157546][T14812] QAT: Invalid ioctl 1075883590 [ 794.163280][T14812] QAT: Invalid ioctl 1075883590 [ 794.172490][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.194810][T14812] QAT: Invalid ioctl 1075883590 [ 794.204837][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.205030][T14812] QAT: Invalid ioctl 1075883590 [ 794.227163][ T5853] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 794.227326][T14812] QAT: Invalid ioctl 1075883590 [ 794.255059][T14812] QAT: Invalid ioctl 1075883590 [ 794.255389][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.263626][T14812] QAT: Invalid ioctl 1075883590 [ 794.290347][T14812] QAT: Invalid ioctl 1075883590 [ 794.301434][T14812] QAT: Invalid ioctl 1075883590 [ 794.306599][T14812] QAT: Invalid ioctl 1075883590 [ 794.357088][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.364579][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.385937][ T5853] usb 3-1: device descriptor read/64, error -71 [ 794.468885][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.476215][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.522682][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.543080][T13658] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 794.563461][T13658] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 794.604428][T13658] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 794.634940][T13658] microsoft 0003:045E:07DA.0020: no inputs found [ 794.667067][T13658] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 794.697459][ T5853] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 794.727341][T13658] usb 4-1: USB disconnect, device number 48 [ 794.732189][T14840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.740814][ T6412] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 794.839275][T14838] fido_id[14838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 794.863446][ T5853] usb 3-1: device descriptor read/64, error -71 [ 794.942052][ T6412] usb 5-1: Invalid ep0 maxpacket: 32 [ 794.990910][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 794.990928][ T30] audit: type=1326 audit(1753122942.918:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14839 comm="syz.0.2270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58af18e9a9 code=0x0 [ 795.021558][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.031464][T14840] bond5: entered promiscuous mode [ 795.042286][ T5853] usb usb3-port1: attempt power cycle [ 795.049466][T14840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 795.070114][T14847] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 795.077006][T14847] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 795.087575][T14847] vhci_hcd vhci_hcd.0: Device attached [ 795.097412][ T6412] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 795.109676][T14849] vhci_hcd: connection closed [ 795.111440][T12542] vhci_hcd: stop threads [ 795.125118][T12542] vhci_hcd: release socket [ 795.145075][T12542] vhci_hcd: disconnect device [ 795.181497][ T30] audit: type=1804 audit(1753122943.108:2859): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2273" name="/" dev="pidfs" ino=14851 res=1 errno=0 [ 795.202593][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.257421][ T6412] usb 5-1: Invalid ep0 maxpacket: 32 [ 795.265391][ T6412] usb usb5-port1: attempt power cycle [ 795.398061][ T5853] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 795.418061][ T5853] usb 3-1: device descriptor read/8, error -71 [ 795.627157][ T6412] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 795.648002][ T6412] usb 5-1: Invalid ep0 maxpacket: 32 [ 795.667394][ T5853] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 795.714008][ T5853] usb 3-1: device descriptor read/8, error -71 [ 795.778339][ T6412] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 795.807591][ T6412] usb 5-1: Invalid ep0 maxpacket: 32 [ 795.815250][ T6412] usb usb5-port1: unable to enumerate USB device [ 795.837141][ T5937] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 795.837546][ T5853] usb usb3-port1: unable to enumerate USB device [ 795.957356][ T5929] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 796.001518][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 796.023729][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.038214][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.063163][ T5937] usb 1-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.00 [ 796.074654][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.096576][ T5937] usb 1-1: config 0 descriptor?? [ 796.146581][ T5929] usb 2-1: config 0 has no interfaces? [ 796.164278][ T5929] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 796.177982][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.196912][ T5929] usb 2-1: Product: syz [ 796.204805][ T5929] usb 2-1: Manufacturer: syz [ 796.210979][ T5929] usb 2-1: SerialNumber: syz [ 796.236616][ T5929] usb 2-1: config 0 descriptor?? [ 796.524941][ T5929] usb 2-1: USB disconnect, device number 35 [ 796.633370][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 796.644503][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.681887][ T5937] usb 1-1: USB disconnect, device number 49 [ 797.067944][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 799.007996][ T5937] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 799.191934][ T5937] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 799.201496][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.223538][ T5937] usb 5-1: config 0 descriptor?? [ 799.259937][ T5937] cp210x 5-1:0.0: cp210x converter detected [ 799.818080][ T5937] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 800.109791][ T5937] usb 5-1: cp210x converter now attached to ttyUSB0 [ 800.309963][T13658] usb 5-1: USB disconnect, device number 35 [ 800.341612][T13658] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 800.419751][T13658] cp210x 5-1:0.0: device disconnected [ 801.317209][ T5937] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 801.511445][T14917] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2291'. [ 801.568516][ T5937] usb 5-1: config 0 has no interfaces? [ 801.589969][ T5937] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 801.656253][T13658] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 801.684326][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.697526][ T5937] usb 5-1: Product: syz [ 801.701945][ T5937] usb 5-1: Manufacturer: syz [ 801.706746][ T5937] usb 5-1: SerialNumber: syz [ 801.735384][ T5937] usb 5-1: config 0 descriptor?? [ 801.818224][ T5941] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 801.851951][T13658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 801.863848][T13658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.877416][T13658] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.893829][T13658] usb 2-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.00 [ 801.908266][T13658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.932973][T13658] usb 2-1: config 0 descriptor?? [ 801.957753][ T5941] usb 1-1: device descriptor read/64, error -71 [ 801.997191][ T5929] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 802.032245][ T5853] usb 5-1: USB disconnect, device number 36 [ 802.157497][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 802.165443][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.189704][ T5929] usb 4-1: config 7 has an invalid interface number: 204 but max is 0 [ 802.208026][ T5929] usb 4-1: config 7 has no interface number 0 [ 802.208027][ T5941] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 802.214581][ T5929] usb 4-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 802.244102][ T5929] usb 4-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 802.267844][ T5929] usb 4-1: config 7 interface 204 has no altsetting 0 [ 802.287462][ T5929] usb 4-1: string descriptor 0 read error: -22 [ 802.301740][ T5929] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 802.317722][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.339529][ T5929] hub 4-1:7.204: bad descriptor, ignoring hub [ 802.359496][ T5929] hub 4-1:7.204: probe with driver hub failed with error -5 [ 802.407963][ T5941] usb 1-1: device descriptor read/64, error -71 [ 802.435098][T13658] usbhid 2-1:0.0: can't add hid device: -71 [ 802.445440][T13658] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 802.468022][T13658] usb 2-1: USB disconnect, device number 36 [ 802.550939][ T5941] usb usb1-port1: attempt power cycle [ 802.550965][ T5929] asix 4-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 802.808696][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 802.865156][T14929] block device autoloading is deprecated and will be removed. [ 802.875289][T14929] syz.2.2296: attempt to access beyond end of device [ 802.875289][T14929] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 802.970002][ T5929] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 802.977104][ T5941] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 802.989238][ T5929] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 803.027914][ T5941] usb 1-1: device descriptor read/8, error -71 [ 803.077356][T13658] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 803.157746][ T5929] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 803.171999][ T5929] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 803.227324][T13658] usb 5-1: device descriptor read/64, error -71 [ 803.277566][ T5941] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 803.308256][ T5941] usb 1-1: device descriptor read/8, error -71 [ 803.327181][ T5937] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 803.351648][ T5929] asix 4-1:7.204 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 8a:0f:21:59:85:00 [ 803.434396][ T5941] usb usb1-port1: unable to enumerate USB device [ 803.477198][T13658] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 803.478127][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 803.499745][ T5937] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 803.513836][ T5937] usb 2-1: config 0 has no interface number 0 [ 803.520663][ T5937] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 803.535981][ T5937] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 803.546462][ T5929] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 803.554994][ T5937] usb 2-1: config 0 interface 41 has no altsetting 0 [ 803.573303][ T5937] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 803.586356][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.596919][ T5937] usb 2-1: Product: syz [ 803.616213][ T5937] usb 2-1: Manufacturer: syz [ 803.621446][ T5937] usb 2-1: SerialNumber: syz [ 803.630634][T13658] usb 5-1: device descriptor read/64, error -71 [ 803.635116][ T5937] usb 2-1: config 0 descriptor?? [ 803.644467][T14936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.658420][T14936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.724360][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 803.748302][T13658] usb usb5-port1: attempt power cycle [ 803.872672][T14936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 803.883203][T14936] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.087440][T13658] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 804.104452][ T5937] Error reading MAC address [ 804.108016][T13658] usb 5-1: device descriptor read/8, error -71 [ 804.116728][T14954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.124408][T14954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.372234][T13658] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 804.398472][T13658] usb 5-1: device descriptor read/8, error -71 [ 804.507538][T13658] usb usb5-port1: unable to enumerate USB device [ 804.614379][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.623824][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.644189][T14960] program syz.0.2301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.948750][ T5929] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 805.087120][ T5929] usb 1-1: device descriptor read/64, error -71 [ 805.327241][ T5929] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 805.457138][ T5929] usb 1-1: device descriptor read/64, error -71 [ 805.581332][ T5929] usb usb1-port1: attempt power cycle [ 805.937254][ T5929] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 805.968132][ T5929] usb 1-1: device descriptor read/8, error -71 [ 806.268059][ T5929] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 806.298100][ T5929] usb 1-1: device descriptor read/8, error -71 [ 806.529212][ T5929] usb usb1-port1: unable to enumerate USB device [ 807.425676][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 807.566456][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 808.974944][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.981623][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.118079][ T5512] asix 4-1:7.204 eth1: Failed to read reg index 0x0000: -110 [ 809.149165][ T5937] sr9700 2-1:0.41 eth2: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, e6:31:29:ff:a2:3f [ 809.187501][ T5937] usb 2-1: USB disconnect, device number 37 [ 809.195858][ T5937] sr9700 2-1:0.41 eth2: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 809.289278][ T1208] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 809.331570][ T1208] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 809.367584][ T5941] usb 4-1: USB disconnect, device number 49 [ 809.398885][ T5941] asix 4-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 809.593198][ T5941] ------------[ cut here ]------------ [ 809.600184][ T5941] WARNING: CPU: 0 PID: 5941 at net/sched/sch_generic.c:1498 dev_shutdown+0x3e1/0x440 [ 809.609991][ T5941] Modules linked in: [ 809.614743][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: kworker/0:6 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 809.625238][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.635534][ T5941] Workqueue: usb_hub_wq hub_event [ 809.640723][ T5941] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 809.646117][ T5941] Code: 95 8e ab f8 49 83 7d 00 00 75 19 e8 89 7c 49 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 c9 f9 01 cc e8 70 7c 49 f8 90 <0f> 0b 90 eb e1 e8 65 7c 49 f8 4c 89 e7 be 03 00 00 00 e8 98 b8 49 [ 809.665955][ T5941] RSP: 0018:ffffc900045af120 EFLAGS: 00010287 [ 809.672187][ T5941] RAX: ffffffff8976aa60 RBX: ffff88807b6044c8 RCX: 0000000000100000 [ 809.680691][ T5941] RDX: ffffc90019a55000 RSI: 0000000000005140 RDI: 0000000000005141 [ 809.688782][ T5941] RBP: 0000000000000001 R08: ffffc900045aef07 R09: 1ffff920008b5de0 [ 809.697344][ T5941] R10: dffffc0000000000 R11: fffff520008b5de1 R12: ffffffff8f563d10 [ 809.705402][ T5941] R13: ffff88807b6045a8 R14: 1ffff1100f6c0899 R15: ffffffff8f563d00 [ 809.713621][ T5941] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 809.722706][ T5941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.729483][ T5941] CR2: 00007f9091cd8768 CR3: 0000000032d60000 CR4: 00000000003526f0 [ 809.737557][ T5941] Call Trace: [ 809.740885][ T5941] [ 809.743870][ T5941] unregister_netdevice_many_notify+0xea7/0x2320 [ 809.750460][ T5941] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 809.757466][ T5941] ? __mutex_lock+0xa6d/0xe80 [ 809.762350][ T5941] ? __mutex_lock+0x51b/0xe80 [ 809.767316][ T5941] ? rtnl_net_dev_lock+0x257/0x2f0 [ 809.772695][ T5941] ? __pfx___mutex_lock+0x10/0x10 [ 809.778310][ T5941] unregister_netdevice_queue+0x33c/0x380 [ 809.784139][ T5941] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 809.790624][ T5941] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 809.795848][ T5941] unregister_netdev+0x1f/0x60 [ 809.800743][ T5941] usbnet_disconnect+0xcd/0x380 [ 809.805672][ T5941] usb_unbind_interface+0x26e/0x8f0 [ 809.811024][ T5941] ? __pfx_usb_unbind_interface+0x10/0x10 [ 809.816867][ T5941] device_release_driver_internal+0x4d6/0x7c0 [ 809.823125][ T5941] bus_remove_device+0x34d/0x410 [ 809.828403][ T5941] device_del+0x511/0x8e0 [ 809.832816][ T5941] ? __pm_runtime_barrier+0x212/0x460 [ 809.838510][ T5941] ? __pfx_device_del+0x10/0x10 [ 809.843528][ T5941] ? __pfx___mutex_lock+0x10/0x10 [ 809.848679][ T5941] usb_disable_device+0x3e9/0x8a0 [ 809.853786][ T5941] usb_disconnect+0x330/0x950 [ 809.858607][ T5941] hub_event+0x1cf5/0x4a20 [ 809.863166][ T5941] ? do_raw_spin_lock+0x121/0x290 [ 809.868352][ T5941] ? register_lock_class+0x51/0x320 [ 809.873633][ T5941] ? __pfx_hub_event+0x10/0x10 [ 809.878567][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 809.884380][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 809.889689][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 809.895507][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 809.901436][ T5941] process_scheduled_works+0xae1/0x17b0 [ 809.907141][ T5941] ? __pfx_process_scheduled_works+0x10/0x10 [ 809.913251][ T5941] worker_thread+0x8a0/0xda0 [ 809.918023][ T5941] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 809.924443][ T5941] ? __kthread_parkme+0x7b/0x200 [ 809.929645][ T5941] kthread+0x70e/0x8a0 [ 809.933790][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 809.939064][ T5941] ? __pfx_kthread+0x10/0x10 [ 809.943820][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 809.949194][ T5941] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.954452][ T5941] ? __pfx_kthread+0x10/0x10 [ 809.959618][ T5941] ret_from_fork+0x3fc/0x770 [ 809.964317][ T5941] ? __pfx_ret_from_fork+0x10/0x10 [ 809.969566][ T5941] ? __switch_to_asm+0x39/0x70 [ 809.974397][ T5941] ? __switch_to_asm+0x33/0x70 [ 809.979311][ T5941] ? __pfx_kthread+0x10/0x10 [ 809.983970][ T5941] ret_from_fork_asm+0x1a/0x30 [ 809.988967][ T5941] [ 809.992089][ T5941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 809.999409][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: kworker/0:6 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 810.009865][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.020200][ T5941] Workqueue: usb_hub_wq hub_event [ 810.025532][ T5941] Call Trace: [ 810.029019][ T5941] [ 810.032002][ T5941] dump_stack_lvl+0x99/0x250 [ 810.036637][ T5941] ? __asan_memcpy+0x40/0x70 [ 810.041344][ T5941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.046569][ T5941] ? __pfx__printk+0x10/0x10 [ 810.051240][ T5941] panic+0x2db/0x790 [ 810.055348][ T5941] ? __pfx_panic+0x10/0x10 [ 810.059788][ T5941] ? show_trace_log_lvl+0x4fb/0x550 [ 810.065057][ T5941] ? ret_from_fork_asm+0x1a/0x30 [ 810.070206][ T5941] __warn+0x31b/0x4b0 [ 810.074212][ T5941] ? dev_shutdown+0x3e1/0x440 [ 810.078921][ T5941] ? dev_shutdown+0x3e1/0x440 [ 810.083625][ T5941] report_bug+0x2be/0x4f0 [ 810.087978][ T5941] ? dev_shutdown+0x3e1/0x440 [ 810.092682][ T5941] ? dev_shutdown+0x3e1/0x440 [ 810.097390][ T5941] ? dev_shutdown+0x3e3/0x440 [ 810.102119][ T5941] handle_bug+0x84/0x160 [ 810.106396][ T5941] exc_invalid_op+0x1a/0x50 [ 810.110919][ T5941] asm_exc_invalid_op+0x1a/0x20 [ 810.115784][ T5941] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 810.121099][ T5941] Code: 95 8e ab f8 49 83 7d 00 00 75 19 e8 89 7c 49 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 c9 f9 01 cc e8 70 7c 49 f8 90 <0f> 0b 90 eb e1 e8 65 7c 49 f8 4c 89 e7 be 03 00 00 00 e8 98 b8 49 [ 810.140999][ T5941] RSP: 0018:ffffc900045af120 EFLAGS: 00010287 [ 810.147126][ T5941] RAX: ffffffff8976aa60 RBX: ffff88807b6044c8 RCX: 0000000000100000 [ 810.155246][ T5941] RDX: ffffc90019a55000 RSI: 0000000000005140 RDI: 0000000000005141 [ 810.163259][ T5941] RBP: 0000000000000001 R08: ffffc900045aef07 R09: 1ffff920008b5de0 [ 810.171732][ T5941] R10: dffffc0000000000 R11: fffff520008b5de1 R12: ffffffff8f563d10 [ 810.179751][ T5941] R13: ffff88807b6045a8 R14: 1ffff1100f6c0899 R15: ffffffff8f563d00 [ 810.187781][ T5941] ? dev_shutdown+0x3e0/0x440 [ 810.192736][ T5941] unregister_netdevice_many_notify+0xea7/0x2320 [ 810.199124][ T5941] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 810.206304][ T5941] ? __mutex_lock+0xa6d/0xe80 [ 810.211052][ T5941] ? __mutex_lock+0x51b/0xe80 [ 810.215770][ T5941] ? rtnl_net_dev_lock+0x257/0x2f0 [ 810.221212][ T5941] ? __pfx___mutex_lock+0x10/0x10 [ 810.226694][ T5941] unregister_netdevice_queue+0x33c/0x380 [ 810.232492][ T5941] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 810.238771][ T5941] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 810.243915][ T5941] unregister_netdev+0x1f/0x60 [ 810.248700][ T5941] usbnet_disconnect+0xcd/0x380 [ 810.253582][ T5941] usb_unbind_interface+0x26e/0x8f0 [ 810.258907][ T5941] ? __pfx_usb_unbind_interface+0x10/0x10 [ 810.264663][ T5941] device_release_driver_internal+0x4d6/0x7c0 [ 810.270849][ T5941] bus_remove_device+0x34d/0x410 [ 810.275824][ T5941] device_del+0x511/0x8e0 [ 810.280189][ T5941] ? __pm_runtime_barrier+0x212/0x460 [ 810.285692][ T5941] ? __pfx_device_del+0x10/0x10 [ 810.290660][ T5941] ? __pfx___mutex_lock+0x10/0x10 [ 810.295720][ T5941] usb_disable_device+0x3e9/0x8a0 [ 810.300797][ T5941] usb_disconnect+0x330/0x950 [ 810.305608][ T5941] hub_event+0x1cf5/0x4a20 [ 810.310084][ T5941] ? do_raw_spin_lock+0x121/0x290 [ 810.315141][ T5941] ? register_lock_class+0x51/0x320 [ 810.320372][ T5941] ? __pfx_hub_event+0x10/0x10 [ 810.325300][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 810.331060][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.336370][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 810.342133][ T5941] ? process_scheduled_works+0x9ef/0x17b0 [ 810.347962][ T5941] process_scheduled_works+0xae1/0x17b0 [ 810.353568][ T5941] ? __pfx_process_scheduled_works+0x10/0x10 [ 810.359681][ T5941] worker_thread+0x8a0/0xda0 [ 810.364375][ T5941] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 810.370927][ T5941] ? __kthread_parkme+0x7b/0x200 [ 810.375951][ T5941] kthread+0x70e/0x8a0 [ 810.380086][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 810.385334][ T5941] ? __pfx_kthread+0x10/0x10 [ 810.389978][ T5941] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.395202][ T5941] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.400451][ T5941] ? __pfx_kthread+0x10/0x10 [ 810.405080][ T5941] ret_from_fork+0x3fc/0x770 [ 810.409699][ T5941] ? __pfx_ret_from_fork+0x10/0x10 [ 810.415067][ T5941] ? __switch_to_asm+0x39/0x70 [ 810.419891][ T5941] ? __switch_to_asm+0x33/0x70 [ 810.424733][ T5941] ? __pfx_kthread+0x10/0x10 [ 810.429506][ T5941] ret_from_fork_asm+0x1a/0x30 [ 810.434419][ T5941] [ 810.438194][ T5941] Kernel Offset: disabled [ 810.442666][ T5941] Rebooting in 86400 seconds..