last executing test programs: 6m47.146089941s ago: executing program 2 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000010101030000000000000000020000000c001980080001000208000018000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000740"], 0x104}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @win={{0x6417, 0x69f20258, 0x8, 0x8003}, 0x6, 0x1, &(0x7f0000000440)={{0x0, 0x8001, 0x859, 0x1}}, 0x8, 0x0, 0xc4}}, 0x9592}) 6m46.731587662s ago: executing program 2 (id=2172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000300)) r2 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0xf, 0x1, 'T'}, 0x0, 0x0}) listen(r0, 0x6) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) io_uring_enter(r4, 0x627, 0xc1040000, 0x20, 0x0, 0x0) r7 = syz_io_uring_setup(0x3924, 0x0, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f00000014c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xd124}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c4001, 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0xf00}], 0x1) preadv(r10, 0x0, 0x0, 0x800, 0x0) 6m43.298270022s ago: executing program 2 (id=2188): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0xfffffffffffffeb2}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x4) ftruncate(r2, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6m42.874067518s ago: executing program 2 (id=2190): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, &(0x7f0000000080)={"dff1ff11002f90128fe2db4b9eff00b952f104006b0000000000000000000e00"}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 6m41.886783714s ago: executing program 2 (id=2195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000bc0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) r6 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="186695d1a6ce608ff2ecf5", 0xb}, {&(0x7f0000000340)="8ce9c55094a93668a7c6f1fd5908c68668510c91df0aab8de60b9d2b4864808770a72dbea22c34b92f0003d9b183814d837a02de71e9f3ab01b4ae2bbc7f00dc366779fe3e74cd69aa797cc2b349df88edcc326cdc9c58e78829ff5d191c13c79a57b7f52ef4d6ecc187e27e51f0d8a86af025d982eb7963ecf9e1aca05acb019d2471aacd0d96bbe8736d481ab94d4f6362f6d228a4c34dc4e4ceb382b8ff58d4151cde79a036834b38a6813a084d6b6a7ac24eac96b5d713de33445658a3d0f4c25ab3a3179ce982b7c41685bb730a77b6f4279cb823bd80660ccc33b6c25941d91f41", 0xe4}, {&(0x7f0000000580)="19152c4f8a6c19e153c011e18719395cf6a07edca8a901c883fbf7c6d3a51cb96db436872b4cbb8bd941ab98cfea3420809e609680fe9b9945af28e019fd572fe889b43d15c83c6646ccd12965888e79b802c82caa867ae352314d01b461c36f2f4ad785e4706d196eaca8dcf13658f404c300cda49bf7824865c4be3b8ec5fd7d223138b54baa4816fb6089efe84c53638bdeaf6dfa1a6de9d537e8", 0x9c}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000000280)="b5b5d963214ab816f62c5e61922d3c27e5cd4b5c2f8862e25e36eba0406f1794589a5d41a8ffe5577bb5bcc65a197805", 0x30}, {&(0x7f0000000640)="c946a8982a7757b6bb225e862962856a2b56913a68284736b1d299c9d8eab6b28e0a1dc9d1ced2476dd70d812b5eee1187d0a622cc8bd456e3e1c0ad3b85143bcd9c6a2b69f5d7433b7231ae3fbd454546202044620b687c9e2ca7cfea3b38d7cbcd449026eac5b4a9c3dd23b1847c1420", 0x71}, {&(0x7f00000002c0)="be47d479deaa6c27c85b", 0xa}, {&(0x7f0000000780)="59f5eae0fe78de22ac1787c10fc0a27afabfb5d4c473e206804948002a51876c0aba5a4190247eefada4d861a4005becb65277dddcc524fda8c20bf5506cadddf73f827d3f585dc824d87306fbd79669355daf6fb1a6702e06ceb47ffed9600a7ec0bc9f97ef17ed1061bc26796241b905e9465f908a3140a659abc5411ad19d44bab4e954f2d8c6402f16", 0x8b}], 0x9, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040080}, {0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000900)="a7445bcd014e8cfdf81919c43b8c77ff49402cadeec53eddabe6913ec04d7e8181d92d891f0e3dcd02e84c85028dde8bca048d493cd1db3921eecc5d76f102c718cbee22004e149682fe4816bc1b27f22a6bfd74af0b67ba315160948890b7722519bf4d669c1cb2b08596adff924b9291cb1ca153", 0x75}, {&(0x7f0000000980)="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", 0xff}, {&(0x7f0000000a80)="5232182afc4169d5078ed301526e44afc0b1054130e5eac08ffad7c7728b173f909825e6ac4badb9acfcfae95d93eb2a91ceec622d00a6b15940399923b1ad65197726d9fa0769306364485f1ccf154e4ccdbd30b0db15ea1f5cf1e7a767c911ecdef8afc016311178dc645bfd7c6b69da78fd60585f14e54d5bf693b7e61e296bca9e98d350fa480ee3e08696ab5deaccc291b2f6382814c8195fba730426fbc4be668ce0d394b8f3b64eb664efd40cfd7b3293fd0061677686c5c8cb9cb249a66bf5f18ff8ed0f04e1b6b9b3e1c1f2b1d98c32857f285bceaf8440a8db1a4311a2479c2601706a1c7e0f", 0xeb}, {&(0x7f0000000700)}, {&(0x7f0000000c00)="c9e0ac853636f01fc79ac10ee1ab3a81997eb92cde1c73051bb04be1db8a147054bff6b6c645f61f435faf3a735d100d36a2080949b1d9e29048eb5ef58960554cb44cd9d6b6aa2e5b0761a48ee44bbe1a5fa4d5531a65ffbfdd554cd3364312190a716b8bd385d1b776f95e8648a633499b96b2f4cce31a17e541c6102c95f242635a97c5196a2e3e8873c913edafa932e8b6318fdaaab3bfb64b1394743c5a5ae4a7892491b279e63ea0db427c30e9479fa853fe5204bd67c09c32fd83fa39193ced99735cc3787553252171dd96b7e6f5b5e1be50149bfe485b7a472985a8bcc105937a3eac171670663f07454e26b45f14b529183becd3", 0xf9}, {&(0x7f0000000d00)="439459e9e1e38341c707155716bc85b992638faf46664f82bb6c165d3cccf45886ead274bf3e22b4631cbdfba8b3c41ee84e3ca79eef784c994705a5c7065aedf9fe7733fce7fd3418992e9a9e5a6febab2b17b38ad3a1429d488f7fb08b3d264dd1bd7cf9c4bce71bcf16070dd3b6f713bf88752a4406b2d461da14a5b9c867a3350957398acc7c9cb55cddf1", 0x8d}], 0x6, &(0x7f0000005d80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1e, "6ec62966b7da5bf37064736f4fbdec3e0f0f1dfe41e75c51c3fc762d4277"}, @iv={0xc8, 0x117, 0x2, 0xaf, "f354f516c1455a6ff191c9fea6784f8469e97161af4f6804fb0f70d931c8fd03cb85d5a0ddd051a28cdab80eb5464d14f6a49e6f9191ff429871954f475494558ec24c90f79d07119df21111b866554cde3ee1554c8d168fb43e5917506ec456d680fbcca6cd20758e9e610ae1da644fe323e39d220598900acf903e69b1ce1ba173209eb26166a6e0da001534d175f775f515b52907af36073d10197a990dffa482b5aca9e6228e041125e0933659"}, @assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x85b7}], 0x1a8, 0x4000000}, {0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000e40)="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", 0xfe}, {&(0x7f0000000f40)="64def1062e776f434a3023797760c254b1550286809989a42e52549ea346ab339c38282c0eaabb9ed5f099e366c4643908c8d85f3ddf4d215878e1d403a043a5e4892ab3994fd4054b2a4b5662d834f61a2f6508b91c6a24cdfa9e4e8566355b1f2e964387d147ca83a299fe78a84f3425160f1bfba67b12bce09e99af59e6919c3d4b7c01215992e8fb5801e940317de63c909a51", 0x95}, {&(0x7f0000003280)="14336df79f7ede328e93f0050a660a8341509ea69654eb76f48c5d1656875aaf0d6a9bed463dc17c20493389e3b81d09c002a06a66c0fb433671419a8a9caef51e4c2536c5359a145f0a719d6327dcd5fdb7f0f62976052b9b531e9c8c2d187a76ec1c3f12ae7e4cac1346daad1a4d61b80c3d56f01bd6203447da3a1b17368356f9a795cdb468fb084b4f73a64c881bf753a89c9f3a02cfd393f609128c2a9b596568e6e3d509ad9356530f6f5580bc0d877996494b26e2b5956b130b4ee5c7cfac513c5460b209fed4093171e8bc1e1761bb0a96691f4aa0ae1a3c66959b67d3289eac94960fa4ece7a18c01", 0xed}, {&(0x7f0000000b80)="f37aaf6d665ec87aa69aad93a1d06447cc25e39728e1b6de", 0x18}, {&(0x7f0000003380)="c7e3e79b8d6682259dd422257e607b014fb3b51725c9e9ce9404307571b0ddd0aaded6c1121dc9e4d3d90ae135477ed600ef39dc651f82f29f08cd7ac23ce39c3702295aa2bd0c0a3f121167", 0x4c}, {&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000003400)="487050a2f40048171ce641d98037d3e692aeb47809c45609b41f4b9a72a4e94415a25b81fbd948d1f6c4b7cdec5f652d0c300f5e42e760429ae372a11f14b83a8d695eeef48d61596344c8e19adbaefc96688f6808ffc97f5e35e361e98e6ace95200b3d6cb81c42e84fb7f18a7f6de5e636549525f02805aaad9a674bde5671cbf82175e208456c991a7a455f8cd8f183604ce417cabada0ec169573a816859a1b10148f57009db800d0a1d4ae8a2d9b4d1142e4511aecdbe863d661ddeceb3bfde04eafb979d8dcc1f61b15cbf20e83e205a1ef1d79baa8b45db40444f1071b6f21176af12955e7170139a2840dca52d4bc9970a7c5da92e46", 0xfa}, {&(0x7f0000003500)="d4fb05a44c011297ec2bd2105e6088abf0da0a329737d6ae436d90e396dcf124155f1cabe5f4eb71a427898d56551d94814bac17a790c93bec2db0b894f6847f59c3f3df5a4861e0b2dd1c0eea2d348842fbe510fe1c32460bc0d3ff3c0f18c73d1149b0fbbc85709a2b870e57a4af45412977e6a490788fce3fe1931243e735b5ffd412f53d27030fe51383ba64c6243d1c20f235c44ec835a60e21a2df1a38387af74c42850b7d96cad805bdf7757941f40bc513b005a35ef9a7b9dce12eee2e6f2113a171bed9b55ec13ca33d965b95f79bd5b4bc6ccfb5774914f9b2", 0xde}], 0x8, &(0x7f0000006740)=[@iv={0x80, 0x117, 0x2, 0x6b, "eea0daf38f4f007533838e4e2c49547e135b14be0cb1f7c619c05bb442546e6690a1889a8e6241e2f83cd8fdbc94299ee731068a32910abf79e93d0eb63df7239cb25cbb46a0a8db8041f549ca827f3c84f3b9e97d34275d07af06c500330ba0350b39de33eec7676e20a6"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @iv={0xb8, 0x117, 0x2, 0x9e, "8ba0295eca7f72200ea75ce42ec3e6364f274566c483dbc6854fca7658aac421216ed82f949feaec0f3eeaa63e902a464de441fd9a5a9794cf6d4d1de73593ebcdb88e35dccdb00c843850d806337251092cf4d9c3e99fe8a8b392b9b80d257380e08dac6d2b9d2a457336ba92bdf83b50521f61ded61c0fe31ed7c3bd848a52f75adbf5c3c80c89e5086fda6abd8ec1067b68c829d5d72717f50f4b122c"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x11c8, 0x2400c080}, {0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003680)="88c164a4f321293864c8c1fed64e6ac59c4120f487bd8c45af82b88ce013e0afc9d35e8fb8f9ab74e0cc49055b9cbb1ae778c3be26132c346e1d60b10ea737a8d2960d80c93745b2ee23224f53488bcecf83ebb08680f2dea32ce98e990beb56e7a02f57f0cb60c5264ed95f320d26911aa40a72a50c72cab239153d8149701f4da083485bf837bfbb26f8d1bad0598cd1f4ac6dcc4b288c05502cf678", 0x9d}, {&(0x7f0000003740)="e70566cbeaffae61c65c3ec2e84eff331764d35c794fb37cd4b436f0faa87935c7ac5e1602865ddbd9515c3940174058cddd99ccc1d0f79c6c4cee069ecf616f105c347064240c7d0c201181439dbdf6e5d11095f8a24c85664bba1b0154e79af68f851858420ed6b034d741328d37dd6d19ce48fb5fb91b344f8a716686d14ce219f3746ac5dd3a1362f0a59c7ab1d1c1d13c5b275d76a7cc8f86a29a3d8b15e0b1ac2123eec0a5f8ae4a3fccf3f3ff6591b5d5a6fbd02b70efc75ddec2f832c04706aa384086af4182acf727d6f8245fd83d168b455e343c03d9730254d0f42343e5e5bf37d6a461ac9078419290f3", 0xf0}, {&(0x7f0000003840)="8c793a2a3eff85c5cc61cca55a0b570c7f0b58ec51ead0cf9f16861cd6d416c84c013927f3c88be01a886d9ec9a9700e987e9abe8cab695420dc0ae764dc063c885c4f6a9fd973acf3ce10858d76b4122db78e8985d249199e132208b148178fa6c16d500156d009b16aec514fb09ede36097982d932d476574646c81e54894d7d53a8942e388e0af35115ab0ea12a9e599bf3ba9511f71896fb4b8e41274dd68135714045033d37c8ccb370c0", 0xad}, {&(0x7f0000003900)="2a9834024dfdbbb623e26dd1e6f90b2c6b3a87aaffd0f0f54cc39e907cc1ca36a9f6cf3435f432ed9eac49889473e03b8d67c4863532f90e8d0a0786c1f7bd67f50f37ba3f008608350fbe6eb76de6010bf9ec6c44c1c25e9f1f783a6389574876c4beed196121d51914ed9a74ddf60892fffe368f7ed45f69aa02dd0376036eb91762ff4d42a1eb1227aeffb96eb3e2b4a5f06471c5c1a6d6694c2a35045f4f9880940f25c5d24566c4279c56812221df79e01b8ed5ff3f92148d12efb7aee279a670cf175d9592f1ff6a1f68b384fa5786bcf5578e68c57100bf7b8fcab29f4f04b1846d7f94c84b0b926e78eb3af76029929027e100feb6655cbb9f9d", 0xfe}], 0x4, &(0x7f0000003a40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4000014}, {0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000003ac0)="ae495e5b33a83228d9fa7cfe9590133109afeb69857ea453247d956aae6654a65244ff9998239fab07bcd9479333198f5385de86cf8629a2729ad34e68190824f9ba9164f30c012a921378a0f53f2cee7194ea5e08297fb4db0d1f5abbe4a140d386ae78122acc8640a3263ddcb41afafe75963c501c15ed66f8a322fc5398a2eb7b95c6", 0x84}, {&(0x7f0000003b80)="e868fa4074fcb2ecc8d2abd20eab8b9ea6336981a7ad8ea22d376531065ea59e55193064e7067ffae4b3cd6497a33daf1b5e9d33c8d9c21c79", 0x39}], 0x2, 0x0, 0x0, 0x4044850}], 0x5, 0x4004044) recvmmsg(r6, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) 6m41.511403323s ago: executing program 2 (id=2199): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec212548072434051810000000b00"/45, 0x2d}, {&(0x7f0000000400)="970000", 0x3}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8", 0x10}], 0x3) 6m41.289182721s ago: executing program 32 (id=2199): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec212548072434051810000000b00"/45, 0x2d}, {&(0x7f0000000400)="970000", 0x3}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8", 0x10}], 0x3) 7.883285086s ago: executing program 5 (id=3667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0) landlock_restrict_self(r2, 0x5) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) accept4(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008090}, 0x40000) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x101) 7.658918993s ago: executing program 3 (id=3670): unshare(0x6a040000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_sset_info={0xa}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000100)='\x00\x00\x00@', 0x4}, {&(0x7f0000000280)="d336bd75243cb9a6", 0x8}], 0x3) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000200)={r10, 0xa00}, 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) r11 = socket$kcm(0xa, 0x922000000003, 0x11) r12 = socket$kcm(0x10, 0x2, 0x4) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f0000000100)=r13, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000140)) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x40044160, 0x3) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x1, 0x4200, 0x4c, &(0x7f0000000300)="5e5f6a1e33f5595838dec0176a3efb46639507b92de9828929c852d154d19d591c81e2867bd35338b5ae9a5ac6f5678c9c074750e0d16021371f1e7047ec4ddb0249d0d1051d74f480c160fe"}], 0x1}) 7.618716752s ago: executing program 5 (id=3671): semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000004c0)=""/201) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x5a, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 7.305865364s ago: executing program 5 (id=3675): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x5, 0x1000, 0x0, 0x0}], 0x1}) 6.043619275s ago: executing program 3 (id=3679): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.386746181s ago: executing program 1 (id=3686): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002"], 0x4c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd7", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.335749278s ago: executing program 0 (id=3687): setrlimit(0xf, &(0x7f0000000000)={0xfffffffd, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000080)=""/101, 0x65}], 0x2, 0x0, 0x0) 4.271733199s ago: executing program 3 (id=3688): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x3, 0x2, 0xfffffffd, 0x100880, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x400004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x45}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000065c0)=0x29) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) unshare(0x20400) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x28, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000080)={0x2000a212}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x203) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.019930689s ago: executing program 5 (id=3689): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000013500)=ANY=[@ANYRES32, @ANYBLOB='\x00\b\t\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) syz_usbip_server_init(0x4) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xec8e, 0x0, 0xb49, 0xa1, 0x8, 0x9, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e0004"], 0x2c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) r8 = socket$inet(0x2, 0xa, 0x2) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000140)='pimreg0\x00') ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x1, 0x2, 0x0, 0x1, [0x0], [0x0, 0x7], [0x80000, 0x80000002, 0xda], [0x0, 0x0, 0x10001, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x2, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0xe891, 0x121c00) 3.815127959s ago: executing program 0 (id=3690): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.656110697s ago: executing program 0 (id=3691): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x377}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00fffffffffcffffff05000000180001"], 0x2c}}, 0x0) 2.5595904s ago: executing program 4 (id=3692): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000001}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2.435708876s ago: executing program 3 (id=3693): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, r0, 'id0\x00'}) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0)=0x9, 0x4) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000140), &(0x7f00000003c0)=0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"3d0300"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030ee1ff11070a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x5a, 0x101, 0x3b, 0x0, 0x8000, 0xffff1000, 0x4, '\x00', 0x5}) 2.250914615s ago: executing program 0 (id=3694): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x2, @mcast1, 0x7}, 0x1c, 0x0, 0x97}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)=':#h', 0x3}, {0x0}], 0x2}}], 0x2, 0xc004) 2.157379203s ago: executing program 1 (id=3695): capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000040)={0x8, 0x4e8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f0000000000), 0x7, 0x84000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000280)={0x18a796b5, 0x7fff}) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000280)={0x18a796b5, 0x7fff}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x9f00}, @code={0x1, 0x5d, {"360fc79f0000010066baa000ec2e2e400f38ca9b0c000000430f22d80f07b8010000000f01c1c7442400bf000000c74424023af0ea75ff2c2466bad104b800600000ef0f01c8c4419dc60323"}}], 0x75}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01c1460fde184898c4c23d3a0966baf80cb81cb5f289ef66bafc0cb8330c0000efc7442400df000000c74424020e000100ff1c243e0f78a7ba000000440fc7f2b805000000b971aa00000f01c1f3430f700100", 0x59}], 0x1, 0x1, &(0x7f0000000280), 0x0) 2.027563614s ago: executing program 4 (id=3696): semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000004c0)=""/201) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), &(0x7f00000001c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x5a, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 1.902628s ago: executing program 4 (id=3697): socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="58000000140019234083e22105c855bf4b80040d8c560a067f0200ff000000000000100058", 0x25}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) socket(0x2, 0x80805, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0xfffffffffffffd1f, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.801610082s ago: executing program 3 (id=3698): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x0, 0xffffffffffbffff8) r2 = dup2(r0, r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80040) 1.639699081s ago: executing program 0 (id=3699): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x5, 0x1000, 0x0, 0x0}], 0x1}) 1.586984742s ago: executing program 5 (id=3700): setrlimit(0xf, &(0x7f0000000000)={0xfffffffd, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000080)=""/101, 0x65}], 0x2, 0x0, 0x0) 1.549020358s ago: executing program 1 (id=3701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.387686095s ago: executing program 5 (id=3702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x10100, 0x0, 0x17f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/135) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800024000000002080001"], 0x2d4}}, 0x4048010) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x12) waitid(0x0, r7, 0x0, 0x2, 0x0) 1.348430355s ago: executing program 1 (id=3703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) creat(&(0x7f0000000240)='./file0\x00', 0x122) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r1 = getpid() fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x2, 0x5, 0xfffffffffffffffd, r1}) unlink(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x80, 0x4) 1.233773505s ago: executing program 1 (id=3704): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x15) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x20004881) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYBLOB="8000ff090a000200aaaa708a34da1d0b765a892626391f2cc3a1dd1c1149b963033d6e0ee9d4b73108c787394ad8944aa3d156cc64eaa3f38d65a8e8"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.067400253s ago: executing program 1 (id=3705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) pipe2$9p(&(0x7f0000000400), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x3, 0x200, 0x1, 0x1}, 0x5, 0x478, 0xc6a}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf090000000000005509010063af00000700000000000000bc9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$security_ima(r2, &(0x7f0000000180), &(0x7f00000002c0)=@v2={0x3, 0x1, 0xa, 0x2, 0xba, "f5ef2061bf4abbb5247731d5eeddceb9ff0d941d0c4f65924f45ba31f9216dfd2b6bc460071c0e1229499a8d1547259704956a04bfa9fe52976c33483b49948ef04f911e2f697acced4143c4f549c75739090c19c1288c77ead2891eef5d4ee8299532166dbe0f2a4af032d1cd2a0a223812c48599f9facab80c0db916d8284e6a72c08bfb884c722d2cd5f05cb57d43c00b61c49771cdefbaa2accc133210078aa63783688cf444abc697230dd38303ee2c5f12f01033ab80c9"}, 0xc3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r6, 0x3000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x200203, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r9], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 883.733861ms ago: executing program 4 (id=3706): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff0500030003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$unix(0x1, 0x1, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x808, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ppoll(&(0x7f0000000980)=[{r5}], 0x1, &(0x7f00000009c0), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaa59e5032aaaaaaabb8100230008084576001c006500000b029078e00000027f0000011f069078e0000001"], 0x0) 834.537705ms ago: executing program 3 (id=3707): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, r2) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) 595.860753ms ago: executing program 4 (id=3708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xfffffffffffffff0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {0x0}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3}], 0x1, 0x40800) 464.994167ms ago: executing program 4 (id=3709): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}], 0x1, 0x4004851) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x11, 0x3, 0x10) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x2) ptrace$setregs(0xf, 0x0, 0x80000000, &(0x7f0000000040)="d1ee0b59588ebcb81847c2ee6f81f92846bef82ed701256c0d68c5edb241ee4088d3baeed4a9753a9fd0c1462428d2") 0s ago: executing program 0 (id=3710): socket(0x10, 0x5, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000000)="66b9390a00000f320f20e06635000040000f22e01a320f01c8bad00466edbaf80c66b89742d38d66efbafc0cb09aeeb800008ec80f01c80f3566b91a0100000f32", 0x41}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3800000000000000) pause() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): 7 using dummy_hcd [ 1007.380376][ T24] usb 4-1: SerialNumber: syz [ 1007.400788][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1007.421288][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1007.453309][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.495799][ T43] usb 2-1: config 0 descriptor?? [ 1007.517724][T17785] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1007.544927][ T43] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1007.761063][ T43] usb 2-1: USB disconnect, device number 25 [ 1007.933238][T12822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1007.964566][T12822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1007.977384][T12822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1007.989886][T14310] usb 6-1: Using ep0 maxpacket: 8 [ 1007.998127][T12822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.006286][T14310] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1008.019019][T14310] usb 6-1: config 0 has no interface number 0 [ 1008.025383][T12822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1008.062760][T14310] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1008.089231][T14310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.104604][T14310] usb 6-1: Product: syz [ 1008.109313][T14310] usb 6-1: Manufacturer: syz [ 1008.113964][T14310] usb 6-1: SerialNumber: syz [ 1008.126122][T14310] usb 6-1: config 0 descriptor?? [ 1008.989184][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1009.209091][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1009.757978][ T24] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1009.846856][ T24] dvb-usb: bulk message failed: -71 (3/0) [ 1009.945494][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1010.070211][T12822] Bluetooth: hci4: command tx timeout [ 1010.153955][ T24] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1010.233507][ T24] usb 4-1: media controller created [ 1010.362559][T17806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1010.468248][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.698355][ T24] dvb-usb: bulk message failed: -71 (6/0) [ 1010.740385][ T24] dvb-usb: bulk message failed: -71 (6/0) [ 1010.786748][ T24] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1010.869088][ T9] vhci_hcd: vhci_device speed not set [ 1010.945031][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input93 [ 1011.067716][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1011.132161][ T24] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1011.230745][ T24] usb 4-1: USB disconnect, device number 48 [ 1011.280542][ T3085] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1011.348168][ T3085] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1011.356345][T14831] dvb-usb: bulk message failed: -19 (1/0) [ 1011.393364][T14831] dvb-usb: error while querying for an remote control event. [ 1011.422511][ T3085] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1011.505313][ T3085] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1011.655336][ T3085] rtc rtc0: __rtc_set_alarm: err=-22 [ 1011.738925][T14831] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1012.052768][ T24] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1012.139231][T14831] usb 1-1: config 0 has no interfaces? [ 1012.158395][T12822] Bluetooth: hci4: command tx timeout [ 1012.170026][T14831] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1012.197044][T14831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.278511][T14831] usb 1-1: Product: syz [ 1012.322003][T14831] usb 1-1: Manufacturer: syz [ 1012.326761][T14831] usb 1-1: SerialNumber: syz [ 1012.502740][T14831] usb 1-1: config 0 descriptor?? [ 1013.221058][T14310] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1013.351671][T14310] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 1013.457434][T14310] usb 6-1: Failed to create links for entity 5 [ 1013.468042][T14310] usb 6-1: Failed to register entities (-22). [ 1013.555812][T14529] bridge0 (unregistering): left promiscuous mode [ 1013.817658][T14529] $Hÿ (unregistering): left promiscuous mode [ 1013.892849][T14529] $Hÿ (unregistering): Released all slaves [ 1013.937094][T14529] bond1 (unregistering): Released all slaves [ 1014.087185][T17793] chnl_net:caif_netlink_parms(): no params data found [ 1014.221061][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1014.230226][T12822] Bluetooth: hci4: command tx timeout [ 1014.260388][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1014.385342][ T43] usb 2-1: can't read configurations, error -71 [ 1014.392519][T14831] usb 1-1: USB disconnect, device number 37 [ 1014.509395][T17843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.023345][T17793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.030952][ T43] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1015.066987][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.079773][T17793] bridge_slave_0: entered allmulticast mode [ 1015.087980][T17793] bridge_slave_0: entered promiscuous mode [ 1015.152252][T17793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.169204][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.196927][T17793] bridge_slave_1: entered allmulticast mode [ 1015.213638][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1015.224519][T17793] bridge_slave_1: entered promiscuous mode [ 1015.239123][ T43] usb 2-1: config 0 has no interface number 0 [ 1015.284963][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1015.320732][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1015.342724][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1015.355667][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.400914][ T43] usb 2-1: config 0 descriptor?? [ 1015.407392][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.438508][T17845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1015.471970][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.488279][ T43] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1015.725212][ T5908] usb 2-1: USB disconnect, device number 27 [ 1015.797760][T17793] team0: Port device team_slave_0 added [ 1015.855178][T17793] team0: Port device team_slave_1 added [ 1015.979172][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.007241][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.049054][T14310] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1016.089287][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.123339][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.134898][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.196767][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.248969][T14310] usb 1-1: Using ep0 maxpacket: 8 [ 1016.288812][T14310] usb 1-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 1016.308839][T14310] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1016.308931][T12822] Bluetooth: hci4: command tx timeout [ 1016.353966][T14310] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1016.393985][T14310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.439055][T14310] usb 1-1: Product: syz [ 1016.443310][T14310] usb 1-1: Manufacturer: syz [ 1016.479497][T14310] usb 1-1: SerialNumber: syz [ 1016.551107][T17872] syzkaller0: entered promiscuous mode [ 1016.556748][T17872] syzkaller0: entered allmulticast mode [ 1016.692587][T17793] hsr_slave_0: entered promiscuous mode [ 1016.740039][T17793] hsr_slave_1: entered promiscuous mode [ 1016.746749][T17793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.806030][T17793] Cannot create hsr debugfs directory [ 1017.200893][ T9] usb 6-1: USB disconnect, device number 47 [ 1017.302167][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1017.358006][T17890] vlan2: entered promiscuous mode [ 1017.363306][T17890] batadv0: entered promiscuous mode [ 1017.365695][T17893] netlink: 'syz.5.3116': attribute type 10 has an invalid length. [ 1017.494998][T17892] bridge_slave_0: left allmulticast mode [ 1017.512357][T17892] bridge_slave_0: left promiscuous mode [ 1017.521644][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.547789][T17892] bridge_slave_1: left allmulticast mode [ 1017.554975][T17892] bridge_slave_1: left promiscuous mode [ 1017.561263][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.603776][T17892] bond0: (slave bond_slave_0): Releasing backup interface [ 1017.616804][T17892] bond_slave_0: left promiscuous mode [ 1017.635483][T17892] bond0: (slave bond_slave_1): Releasing backup interface [ 1017.654043][T17892] bond_slave_1: left promiscuous mode [ 1017.707005][T17898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1017.713632][T17898] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1017.715413][T17892] team0: Port device team_slave_0 removed [ 1017.734812][T17898] vhci_hcd vhci_hcd.0: Device attached [ 1017.764216][T17892] team0: Port device team_slave_1 removed [ 1017.793741][T14310] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input94 [ 1017.814350][ T5191] bcm5974 1-1:1.0: could not read from device [ 1017.824957][ T5191] bcm5974 1-1:1.0: could not read from device [ 1017.846625][T17892] team0: Port device wlan1 removed [ 1017.867967][T17892] team0: Port device bridge1 removed [ 1017.904560][ T5191] bcm5974 1-1:1.0: could not read from device [ 1017.954350][ T5191] bcm5974 1-1:1.0: could not read from device [ 1017.962998][T14310] usb 1-1: USB disconnect, device number 38 [ 1017.969404][ T9] vhci_hcd: vhci_device speed not set [ 1017.983145][T17893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.990637][T17893] team0: Device bond0 failed to register rx_handler [ 1018.029240][ T9] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 1018.048424][T17903] tipc: Enabled bearer , priority 10 [ 1018.598303][T17899] vhci_hcd: connection reset by peer [ 1018.604516][T14537] vhci_hcd: stop threads [ 1018.609044][T14537] vhci_hcd: release socket [ 1018.614696][T14537] vhci_hcd: disconnect device [ 1018.958877][ T5833] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1019.149324][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 1019.176717][ T5833] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1019.202008][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.220277][ T5833] usb 1-1: Product: syz [ 1019.256504][ T5833] usb 1-1: Manufacturer: syz [ 1019.309148][ T43] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1019.314398][ T5833] usb 1-1: SerialNumber: syz [ 1019.342056][ T5833] usb 1-1: config 0 descriptor?? [ 1019.357110][ T5833] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1019.474632][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1019.484412][ T43] usb 4-1: config 0 has no interface number 0 [ 1019.495827][ T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1019.606476][ T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1019.678677][ T43] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1019.688561][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.763328][T17793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1019.780405][ T43] usb 4-1: config 0 descriptor?? [ 1019.788918][T17923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1019.865446][ T43] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1019.892956][T17793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1019.935932][T17793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1020.020928][T17793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1020.127174][ T43] usb 4-1: USB disconnect, device number 49 [ 1020.177778][T17940] binder: BINDER_SET_CONTEXT_MGR already set [ 1020.219805][T17940] binder: 17934:17940 ioctl 4018620d 200000000040 returned -16 [ 1020.239507][T17940] binder: 17934:17940 ioctl 89f1 200000000580 returned -22 [ 1020.728200][T17946] input: syz0 as /devices/virtual/input/input95 [ 1020.765987][T17793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.898713][T17793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.966516][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.973838][T14531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.049635][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.056881][T14537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.539044][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1021.708874][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1021.722080][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1021.739133][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.768281][ T24] usb 2-1: Product: syz [ 1021.776301][ T24] usb 2-1: Manufacturer: syz [ 1021.781617][ T24] usb 2-1: SerialNumber: syz [ 1021.794637][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.810407][ T24] usb 2-1: config 0 descriptor?? [ 1021.827491][ T24] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1021.980814][T17793] veth0_vlan: entered promiscuous mode [ 1022.046163][T17793] veth1_vlan: entered promiscuous mode [ 1022.096815][ T5833] pwc: send_video_command error -71 [ 1022.109844][ T5833] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1022.164847][ T5833] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1022.204278][T17793] veth0_macvtap: entered promiscuous mode [ 1022.210880][ T5833] usb 1-1: USB disconnect, device number 39 [ 1022.226508][ T24] gspca_vc032x: reg_w err -71 [ 1022.258961][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1022.294605][T17793] veth1_macvtap: entered promiscuous mode [ 1022.309865][ T24] usb 2-1: USB disconnect, device number 28 [ 1022.410995][T17950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3127'. [ 1022.428251][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.474285][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.525451][T17793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.552368][T17793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.576414][T17793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.589064][T17973] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1022.595742][T17973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1022.600659][T17793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.633787][T17973] vhci_hcd vhci_hcd.0: Device attached [ 1022.811363][ T43] vhci_hcd: vhci_device speed not set [ 1022.871009][T12822] Bluetooth: hci3: command 0x0406 tx timeout [ 1022.871482][ T5871] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1022.909402][ T43] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1022.966635][ T5871] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1022.977038][T17979] tipc: Enabling of bearer rejected, failed to enable media [ 1023.220194][ T9] vhci_hcd: vhci_device speed not set [ 1023.580621][T17991] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1023.587189][T17991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1023.668059][T17974] vhci_hcd: connection reset by peer [ 1023.676502][T17991] vhci_hcd vhci_hcd.0: Device attached [ 1023.689039][T14533] vhci_hcd: stop threads [ 1023.702425][T14533] vhci_hcd: release socket [ 1023.746818][T14533] vhci_hcd: disconnect device [ 1023.879594][T14831] vhci_hcd: vhci_device speed not set [ 1023.939079][T14831] usb 39-1: new full-speed USB device number 13 using vhci_hcd [ 1024.029424][T17999] tipc: Enabled bearer , priority 10 [ 1024.381711][T17993] vhci_hcd: connection reset by peer [ 1024.430505][T14537] vhci_hcd: stop threads [ 1024.435050][T14537] vhci_hcd: release socket [ 1024.455543][T14537] vhci_hcd: disconnect device [ 1025.349011][T12822] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.350432][ T5871] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1025.424643][ T5871] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1026.037620][T18029] loop6: detected capacity change from 0 to 524287999 [ 1026.077612][T18031] rdma_op ffff88804d30e1f0 conn xmit_rdma 0000000000000000 [ 1027.285494][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1027.285516][ T30] audit: type=1326 audit(1750294805.957:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.323012][ T30] audit: type=1326 audit(1750294805.967:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.348623][ T30] audit: type=1326 audit(1750294805.967:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.371099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.418302][ T30] audit: type=1326 audit(1750294805.987:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.443440][ T30] audit: type=1326 audit(1750294805.987:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.465839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.478067][ T30] audit: type=1326 audit(1750294805.987:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.500570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.508548][ T30] audit: type=1326 audit(1750294805.987:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.531964][ T30] audit: type=1326 audit(1750294806.127:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.554489][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.564967][ T30] audit: type=1326 audit(1750294806.127:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.3.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af8d8e929 code=0x7ffc0000 [ 1027.587391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.749273][T12822] Bluetooth: hci0: command 0x0c1a tx timeout [ 1027.749500][ T5871] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1027.765104][ T5871] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1028.069999][ T43] vhci_hcd: vhci_device speed not set [ 1029.099022][T14831] vhci_hcd: vhci_device speed not set [ 1029.828998][T12822] Bluetooth: hci2: command 0x0c1a tx timeout [ 1029.835391][ T5871] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1029.841998][ T5871] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1031.909036][T12822] Bluetooth: hci4: command 0x0c1a tx timeout [ 1031.909259][ T5871] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1031.925170][ T5871] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1032.109631][T14457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.117574][T14457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.264689][T14457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.318700][T14457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.037549][T14831] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1033.482297][T14831] usb 4-1: config 0 has no interfaces? [ 1033.502201][T14831] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1033.513709][T14831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.522396][T14831] usb 4-1: Product: syz [ 1033.527146][T14831] usb 4-1: Manufacturer: syz [ 1033.538712][T14831] usb 4-1: SerialNumber: syz [ 1033.575770][T14831] usb 4-1: config 0 descriptor?? [ 1033.669267][ T5871] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1033.902097][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 1033.955463][ T5871] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1034.025625][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1034.184108][ T5871] usb 2-1: Product: syz [ 1034.231159][ T5871] usb 2-1: Manufacturer: syz [ 1034.254508][ T5871] usb 2-1: SerialNumber: syz [ 1034.267281][ T5871] usb 2-1: config 0 descriptor?? [ 1034.348957][ T5908] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1034.705915][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 1034.748043][ T5908] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1034.819133][ T5871] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 1034.836401][ T5908] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1034.895655][ T5908] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1034.919372][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1034.930640][ T5908] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1034.940966][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1034.982888][ T5908] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1035.029605][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.047474][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.179322][ T5871] usb 1-1: config 0 has no interface number 0 [ 1035.194112][ T5908] usb 5-1: config 0 descriptor?? [ 1035.230181][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1035.249304][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1035.278044][ T5871] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1035.294919][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.393703][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3158'. [ 1035.459234][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.469971][ T5871] usb 1-1: config 0 descriptor?? [ 1035.499322][T18128] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1035.519567][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.562503][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.577461][ T5871] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1035.596033][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.626807][T14310] usb 2-1: USB disconnect, device number 29 [ 1035.697279][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.726094][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.797116][T14831] usb 1-1: USB disconnect, device number 40 [ 1035.823483][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.881083][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.903459][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.918683][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.968694][T17828] usb 4-1: USB disconnect, device number 50 [ 1035.999518][ T5908] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1036.058912][ T5908] usb 5-1: USB disconnect, device number 31 [ 1036.126101][ T5908] usblp0: removed [ 1036.339154][T18139] openvswitch: netlink: Message has 8 unknown bytes. [ 1036.346906][T18139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.398898][T14310] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1036.581327][T14310] usb 6-1: config index 0 descriptor too short (expected 149, got 148) [ 1036.598970][T14310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.630110][T14310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.681009][T14310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1036.697643][T14310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1036.728234][T14310] usb 6-1: SerialNumber: syz [ 1036.785100][T14310] usb 6-1: 0:2 : does not exist [ 1036.857463][T11289] tipc: Resetting bearer [ 1036.962248][T17463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1036.976679][ T5908] usb 6-1: USB disconnect, device number 48 [ 1036.986039][T17463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1036.997639][T17463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1037.016834][T17463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1037.030402][T17463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1037.041218][T11289] tipc: Disabling bearer [ 1037.416171][T18160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1037.856977][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1038.037672][T18152] chnl_net:caif_netlink_parms(): no params data found [ 1038.049210][ T43] usb 5-1: device descriptor read/64, error -71 [ 1038.328833][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1038.338854][T14310] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1038.589141][ T43] usb 5-1: device descriptor read/64, error -71 [ 1038.608879][T14310] usb 1-1: Using ep0 maxpacket: 16 [ 1038.644289][T14310] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1038.658857][T17828] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 1038.695558][T14310] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1038.706220][T14310] usb 1-1: Product: syz [ 1038.710270][ T43] usb usb5-port1: attempt power cycle [ 1038.710543][T14310] usb 1-1: Manufacturer: syz [ 1038.720870][T14310] usb 1-1: SerialNumber: syz [ 1038.729937][T14310] usb 1-1: config 0 descriptor?? [ 1038.802790][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.811068][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.818651][T18152] bridge_slave_0: entered allmulticast mode [ 1038.826313][T18152] bridge_slave_0: entered promiscuous mode [ 1038.836823][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.844731][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.852430][T18152] bridge_slave_1: entered allmulticast mode [ 1038.860500][T18152] bridge_slave_1: entered promiscuous mode [ 1038.953439][T17828] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.988479][T17828] usb 6-1: config 0 has no interface number 0 [ 1038.996436][T17828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1039.072204][T17828] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1039.083108][ T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1039.091522][T17828] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1039.101395][T17828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.110115][T12822] Bluetooth: hci3: command tx timeout [ 1039.128688][T17828] usb 6-1: config 0 descriptor?? [ 1039.135476][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.145753][T18172] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1039.153194][ T43] usb 5-1: device descriptor read/8, error -71 [ 1039.186183][T17828] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1039.283645][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.380824][ T5908] usb 6-1: USB disconnect, device number 49 [ 1039.418900][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1039.440434][ T43] usb 5-1: device descriptor read/8, error -71 [ 1039.569747][ T43] usb usb5-port1: unable to enumerate USB device [ 1039.572501][T18152] team0: Port device team_slave_0 added [ 1039.620645][T18152] team0: Port device team_slave_1 added [ 1039.774686][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.796414][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.822354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1039.865792][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.887907][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.915825][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.004701][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.152278][T14310] usb 1-1: USB disconnect, device number 41 [ 1040.163062][T18152] hsr_slave_0: entered promiscuous mode [ 1040.170349][T18152] hsr_slave_1: entered promiscuous mode [ 1040.178024][T18152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.187156][T18152] Cannot create hsr debugfs directory [ 1040.553968][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3180'. [ 1040.569271][ T5908] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1040.617991][T18195] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1040.627777][T18195] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1040.638090][T18195] netlink: 'syz.5.3179': attribute type 5 has an invalid length. [ 1040.647357][T18195] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1040.708965][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1040.885290][T18199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1040.891910][T18199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1040.947158][T18199] vhci_hcd vhci_hcd.0: Device attached [ 1040.949391][ T5908] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1041.013715][T18152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.129369][ T43] vhci_hcd: vhci_device speed not set [ 1041.138895][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1041.196908][ T43] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 1041.204595][T12822] Bluetooth: hci3: command tx timeout [ 1041.259479][ T5908] usb usb2-port1: attempt power cycle [ 1041.691550][ T5908] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1041.692911][T18152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.765045][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1041.800213][T18209] tipc: Enabling of bearer rejected, failed to enable media [ 1042.026472][T18201] vhci_hcd: connection reset by peer [ 1042.039437][T14537] vhci_hcd: stop threads [ 1042.043764][T14537] vhci_hcd: release socket [ 1042.050659][T14537] vhci_hcd: disconnect device [ 1042.123823][T18205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1042.125431][T18152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.189064][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1042.230015][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1042.296424][T18152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.339546][ T5908] usb usb2-port1: unable to enumerate USB device [ 1043.021314][T18152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1043.065643][T18152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1043.107339][T18152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1043.130533][T14831] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 1043.173394][T18152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1043.269076][T12822] Bluetooth: hci3: command tx timeout [ 1043.347187][T14831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1043.378808][T14831] usb 6-1: config 0 has no interface number 0 [ 1043.413256][T14831] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1043.488807][T14831] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1043.489228][ T5908] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1043.513966][T14831] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1043.595303][T14831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.652538][T14831] usb 6-1: config 0 descriptor?? [ 1043.671759][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.680165][T18220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1043.686157][T18238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1043.703444][T14831] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1043.736940][ T5908] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1043.777076][ T5908] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 1043.793284][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.803182][ T5908] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1043.837006][T14533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.844232][T14533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.854409][ T5908] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1043.891347][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.898795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.910737][ T5908] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1043.923007][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.025912][ T5871] usb 6-1: USB disconnect, device number 50 [ 1044.202668][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.258533][T18152] veth0_vlan: entered promiscuous mode [ 1044.308008][T18152] veth1_vlan: entered promiscuous mode [ 1044.418414][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1044.609659][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1044.621254][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.671479][T18152] veth0_macvtap: entered promiscuous mode [ 1044.688410][ T24] usb 2-1: Product: syz [ 1044.712174][ T24] usb 2-1: Manufacturer: syz [ 1044.732187][ T24] usb 2-1: SerialNumber: syz [ 1044.750394][ T24] usb 2-1: config 0 descriptor?? [ 1044.775260][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 1044.795883][T18152] veth1_macvtap: entered promiscuous mode [ 1044.825330][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1044.860334][ T24] f81232 2-1:0.0: f81534a converter detected [ 1044.917415][T18152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.985303][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.997417][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.030754][ T5908] ath6kl: Failed to submit usb control message: -110 [ 1045.040354][ T5908] ath6kl: unable to send the bmi data to the device: -110 [ 1045.051387][T18152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.053586][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3194'. [ 1045.078867][ T5908] ath6kl: Unable to send get target info: -110 [ 1045.089080][ T5908] ath6kl: Failed to init ath6kl core: -110 [ 1045.090831][ T24] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1045.112823][T18152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.119313][ T5908] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1045.124687][ T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1045.163614][T18152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.210903][T18255] binder: 18249:18255 ioctl c0306201 200000000700 returned -14 [ 1045.221248][T18152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.232159][ T24] usb 2-1: USB disconnect, device number 34 [ 1045.261082][T18152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.293193][ T24] f81232 2-1:0.0: device disconnected [ 1045.353602][T12822] Bluetooth: hci3: command tx timeout [ 1045.644891][T18258] FAULT_INJECTION: forcing a failure. [ 1045.644891][T18258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.671889][T18258] CPU: 1 UID: 0 PID: 18258 Comm: syz.0.3196 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1045.671911][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.671919][T18258] Call Trace: [ 1045.671924][T18258] [ 1045.671930][T18258] dump_stack_lvl+0x189/0x250 [ 1045.671956][T18258] ? __pfx____ratelimit+0x10/0x10 [ 1045.671976][T18258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.671996][T18258] ? __pfx__printk+0x10/0x10 [ 1045.672025][T18258] should_fail_ex+0x414/0x560 [ 1045.672046][T18258] _copy_to_user+0x31/0xb0 [ 1045.672060][T18258] simple_read_from_buffer+0xe1/0x170 [ 1045.672077][T18258] proc_fail_nth_read+0x1df/0x250 [ 1045.672094][T18258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.672111][T18258] ? rw_verify_area+0x258/0x650 [ 1045.672129][T18258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.672145][T18258] vfs_read+0x200/0x980 [ 1045.672167][T18258] ? __pfx___mutex_lock+0x10/0x10 [ 1045.672180][T18258] ? __pfx_vfs_read+0x10/0x10 [ 1045.672200][T18258] ? __fget_files+0x2a/0x420 [ 1045.672217][T18258] ? __fget_files+0x3a0/0x420 [ 1045.672230][T18258] ? __fget_files+0x2a/0x420 [ 1045.672249][T18258] ksys_read+0x145/0x250 [ 1045.672262][T18258] ? __pfx_ksys_read+0x10/0x10 [ 1045.672280][T18258] ? rcu_is_watching+0x15/0xb0 [ 1045.672302][T18258] ? do_syscall_64+0xbe/0x3b0 [ 1045.672316][T18258] do_syscall_64+0xfa/0x3b0 [ 1045.672327][T18258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.672350][T18258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.672362][T18258] ? clear_bhb_loop+0x60/0xb0 [ 1045.672377][T18258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.672389][T18258] RIP: 0033:0x7f1708d8d33c [ 1045.672402][T18258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1045.672413][T18258] RSP: 002b:00007f1709bd6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1045.672428][T18258] RAX: ffffffffffffffda RBX: 00007f1708fb6080 RCX: 00007f1708d8d33c [ 1045.672438][T18258] RDX: 000000000000000f RSI: 00007f1709bd60a0 RDI: 0000000000000010 [ 1045.672446][T18258] RBP: 00007f1709bd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.672454][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.672461][T18258] R13: 0000000000000000 R14: 00007f1708fb6080 R15: 00007f17090dfa28 [ 1045.672480][T18258] [ 1046.102388][T18253] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1046.300891][ T43] vhci_hcd: vhci_device speed not set [ 1046.391270][T14457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.411901][T14457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.546962][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.572609][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.660029][ T30] audit: type=1326 audit(1750294825.337:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e18e929 code=0x7ffc0000 [ 1046.685016][ T30] audit: type=1326 audit(1750294825.357:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.760643][ T30] audit: type=1326 audit(1750294825.357:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.793119][ T30] audit: type=1326 audit(1750294825.357:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.876944][ T30] audit: type=1326 audit(1750294825.357:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.909435][ T30] audit: type=1326 audit(1750294825.357:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.941337][ T30] audit: type=1326 audit(1750294825.357:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1046.969258][ T5871] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1047.066229][ T30] audit: type=1326 audit(1750294825.357:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1047.189351][ T30] audit: type=1326 audit(1750294825.357:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1047.338583][ T24] usb 5-1: USB disconnect, device number 36 [ 1047.596182][ T30] audit: type=1326 audit(1750294825.357:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18262 comm="syz.1.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f451e12ab19 code=0x7ffc0000 [ 1047.630218][T14310] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1047.816778][T18278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3201'. [ 1047.853115][T14310] usb 4-1: config 0 has no interfaces? [ 1047.875152][T14310] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1047.885533][T14310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.898860][T14310] usb 4-1: Product: syz [ 1047.903200][T14310] usb 4-1: Manufacturer: syz [ 1047.960934][T14310] usb 4-1: SerialNumber: syz [ 1047.989873][T18283] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1047.996521][T18283] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1048.021527][T14310] usb 4-1: config 0 descriptor?? [ 1048.034619][T18283] vhci_hcd vhci_hcd.0: Device attached [ 1048.202693][ T3085] vhci_hcd: vhci_device speed not set [ 1048.373769][T18291] tipc: Enabling of bearer rejected, failed to enable media [ 1048.382657][ T3085] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 1049.267891][T18284] vhci_hcd: connection reset by peer [ 1049.352644][ T49] vhci_hcd: stop threads [ 1049.357255][ T49] vhci_hcd: release socket [ 1049.366617][ T49] vhci_hcd: disconnect device [ 1050.116502][T18312] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1050.438284][ T24] usb 4-1: USB disconnect, device number 51 [ 1050.734581][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1050.767439][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1051.891639][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'. [ 1052.539387][T18344] batadv0: entered promiscuous mode [ 1052.566791][T18344] macsec1: entered promiscuous mode [ 1052.649827][T18344] batadv0: left promiscuous mode [ 1052.844618][ T30] kauditd_printk_skb: 762 callbacks suppressed [ 1052.844640][ T30] audit: type=1326 audit(1750294831.517:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1052.879256][ T30] audit: type=1326 audit(1750294831.557:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1052.901715][ C0] vkms_vblank_simulate: vblank timer overrun [ 1052.914035][ T30] audit: type=1326 audit(1750294831.587:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1052.936381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.031590][ T30] audit: type=1326 audit(1750294831.587:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1053.058978][ T30] audit: type=1326 audit(1750294831.587:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1053.081802][ T30] audit: type=1326 audit(1750294831.587:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec318e929 code=0x7ffc0000 [ 1053.089052][T14310] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1053.135072][ T30] audit: type=1326 audit(1750294831.587:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec318e929 code=0x7ffc0000 [ 1053.227240][ T30] audit: type=1326 audit(1750294831.697:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efec312ab19 code=0x7ffc0000 [ 1053.250091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.257367][ T30] audit: type=1326 audit(1750294831.697:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec318e929 code=0x7ffc0000 [ 1053.284845][ T30] audit: type=1326 audit(1750294831.697:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18339 comm="syz.5.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec318e929 code=0x7ffc0000 [ 1053.451447][T18361] FAULT_INJECTION: forcing a failure. [ 1053.451447][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.509301][ T3085] vhci_hcd: vhci_device speed not set [ 1053.522763][T18361] CPU: 0 UID: 0 PID: 18361 Comm: syz.0.3223 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1053.522799][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.522813][T18361] Call Trace: [ 1053.522822][T18361] [ 1053.522831][T18361] dump_stack_lvl+0x189/0x250 [ 1053.522867][T18361] ? __pfx____ratelimit+0x10/0x10 [ 1053.522898][T18361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1053.522938][T18361] ? __pfx__printk+0x10/0x10 [ 1053.522968][T18361] ? __pfx___might_resched+0x10/0x10 [ 1053.522998][T18361] ? fs_reclaim_acquire+0x7d/0x100 [ 1053.523028][T18361] should_fail_ex+0x414/0x560 [ 1053.523070][T18361] should_failslab+0xa8/0x100 [ 1053.523096][T18361] __kmalloc_noprof+0xcb/0x4f0 [ 1053.523115][T18361] ? kfree+0x4d/0x440 [ 1053.523141][T18361] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1053.523176][T18361] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1053.523206][T18361] ? tomoyo_domain+0xd9/0x130 [ 1053.523241][T18361] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1053.523265][T18361] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1053.523292][T18361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1053.523335][T18361] ? __lock_acquire+0xab9/0xd20 [ 1053.523382][T18361] ? __fget_files+0x2a/0x420 [ 1053.523408][T18361] ? __fget_files+0x2a/0x420 [ 1053.523429][T18361] ? __fget_files+0x3a0/0x420 [ 1053.523450][T18361] ? __fget_files+0x2a/0x420 [ 1053.523477][T18361] security_file_ioctl+0xcb/0x2d0 [ 1053.523504][T18361] __se_sys_ioctl+0x47/0x170 [ 1053.523536][T18361] do_syscall_64+0xfa/0x3b0 [ 1053.523553][T18361] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.523581][T18361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.523601][T18361] ? clear_bhb_loop+0x60/0xb0 [ 1053.523626][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.523645][T18361] RIP: 0033:0x7f1708d8e929 [ 1053.523664][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.523681][T18361] RSP: 002b:00007f1709bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.523704][T18361] RAX: ffffffffffffffda RBX: 00007f1708fb5fa0 RCX: 00007f1708d8e929 [ 1053.523719][T18361] RDX: 0000200000000000 RSI: 000000004020565b RDI: 0000000000000003 [ 1053.523732][T18361] RBP: 00007f1709bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.523744][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.523756][T18361] R13: 0000000000000000 R14: 00007f1708fb5fa0 R15: 00007f17090dfa28 [ 1053.523789][T18361] [ 1053.523828][T18361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.806167][T18367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1053.812780][T18367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1053.895029][T18371] Invalid logical block size (17746) [ 1053.903768][T18367] vhci_hcd vhci_hcd.0: Device attached [ 1054.091349][ T43] vhci_hcd: vhci_device speed not set [ 1054.131162][T18375] tipc: Started in network mode [ 1054.136312][T18375] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1054.145246][T18375] tipc: Enabled bearer , priority 10 [ 1054.196479][T18375] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3225'. [ 1054.206832][T18375] tipc: Resetting bearer [ 1054.242260][ T43] usb 41-1: new full-speed USB device number 9 using vhci_hcd [ 1054.266151][T18375] tipc: Disabling bearer [ 1054.532854][T18368] vhci_hcd: connection reset by peer [ 1054.549550][T14531] vhci_hcd: stop threads [ 1054.553916][T14531] vhci_hcd: release socket [ 1054.563959][T14531] vhci_hcd: disconnect device [ 1054.637521][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.711818][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.718259][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.000716][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 1056.133890][T18393] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1056.158799][T18393] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1056.180182][T18398] fuse: Unknown parameter 'rootmod0000000' [ 1056.276056][T14310] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1056.301549][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1056.489045][T14310] usb 6-1: Using ep0 maxpacket: 8 [ 1056.547112][T14310] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1056.557632][T14310] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1056.567820][T14310] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1056.578338][T14310] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1056.598983][T14310] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.619820][T14310] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1056.639994][T14310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.799613][T18408] usb usb8: usbfs: process 18408 (syz.0.3238) did not claim interface 0 before use [ 1056.884113][T14310] usb 6-1: usb_control_msg returned -32 [ 1056.895374][T14310] usbtmc 6-1:16.0: can't read capabilities [ 1056.909745][T18411] usb usb8: usbfs: process 18411 (syz.3.3239) did not claim interface 0 before use [ 1057.546549][T18418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3241'. [ 1057.838963][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1057.875178][T18426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1057.881760][T18426] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1057.898889][T18426] vhci_hcd vhci_hcd.0: Device attached [ 1057.976699][ T30] kauditd_printk_skb: 735 callbacks suppressed [ 1057.976728][ T30] audit: type=1326 audit(1750294836.647:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1058.026406][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1058.049411][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.061000][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.084081][ T30] audit: type=1326 audit(1750294836.757:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1058.108349][ T24] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1058.168556][T14831] vhci_hcd: vhci_device speed not set [ 1058.174398][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.187722][ T30] audit: type=1326 audit(1750294836.757:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1058.215479][ T30] audit: type=1326 audit(1750294836.757:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1058.239255][ T30] audit: type=1326 audit(1750294836.757:10249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1058.248913][T14831] usb 39-1: new full-speed USB device number 14 using vhci_hcd [ 1058.352361][ T30] audit: type=1326 audit(1750294836.757:10250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1058.388256][T18434] tipc: Started in network mode [ 1058.393813][T18434] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1058.404357][T18434] tipc: Enabled bearer , priority 10 [ 1058.411042][T14310] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1058.464394][T18434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3244'. [ 1058.487395][T18434] tipc: Resetting bearer [ 1058.500798][ T24] usb 2-1: config 0 descriptor?? [ 1058.692024][T18434] tipc: Disabling bearer [ 1058.745175][T17828] usb 6-1: USB disconnect, device number 52 [ 1058.837363][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x0 [ 1058.844861][ T30] audit: type=1326 audit(1750294836.757:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1058.930969][T18427] vhci_hcd: connection reset by peer [ 1058.971148][ T36] vhci_hcd: stop threads [ 1058.977126][ T36] vhci_hcd: release socket [ 1058.977901][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x0 [ 1059.024404][ T30] audit: type=1326 audit(1750294836.757:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1059.031596][ T36] vhci_hcd: disconnect device [ 1059.071113][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x0 [ 1059.108601][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x0 [ 1059.161645][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x0 [ 1059.206757][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.219413][T17828] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1059.229547][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.287172][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.345036][ T43] vhci_hcd: vhci_device speed not set [ 1059.373123][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.382322][T17828] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1059.393756][T17828] usb 6-1: config 0 has no interface number 0 [ 1059.402917][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.411959][ T24] aureal 0003:0755:2626.001D: unknown main item tag 0x3 [ 1059.421633][T17828] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1059.432417][T17828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.443340][T17828] usb 6-1: Product: syz [ 1059.447956][T17828] usb 6-1: Manufacturer: syz [ 1059.454783][ T24] aureal 0003:0755:2626.001D: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 1059.466747][T17828] usb 6-1: SerialNumber: syz [ 1059.477355][T17828] usb 6-1: config 0 descriptor?? [ 1059.503668][ T24] usb 2-1: USB disconnect, device number 36 [ 1059.514920][T18442] input: syz1 as /devices/virtual/input/input96 [ 1059.564882][ T30] audit: type=1326 audit(1750294836.757:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1059.608471][ T30] audit: type=1326 audit(1750294836.757:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18422 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1059.735733][T17828] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1059.829952][T17828] usb 6-1: USB disconnect, device number 53 [ 1059.881803][T18444] fido_id[18444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1060.173624][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1060.217411][T18448] [U]  [ 1060.918594][T18458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1061.399001][T17828] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1061.899104][T17828] usb 2-1: Using ep0 maxpacket: 16 [ 1062.005077][T18474] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1062.011701][T18474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1062.128980][ T5871] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1062.143234][T18474] vhci_hcd vhci_hcd.0: Device attached [ 1062.174437][T18483] CUSE: info not properly terminated [ 1062.207365][T18483] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3259'. [ 1062.314930][T18486] tipc: Enabling of bearer rejected, failed to enable media [ 1062.362431][T18486] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3258'. [ 1062.390137][ T24] vhci_hcd: vhci_device speed not set [ 1062.415701][ T5871] usb 5-1: config 0 has no interfaces? [ 1062.429489][ T5871] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.448826][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.460092][ T24] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 1062.541612][ T5871] usb 5-1: Product: syz [ 1062.617541][ T5871] usb 5-1: Manufacturer: syz [ 1062.724622][ T5871] usb 5-1: SerialNumber: syz [ 1062.890059][T18477] vhci_hcd: connection reset by peer [ 1062.895895][T14457] vhci_hcd: stop threads [ 1062.900656][T14457] vhci_hcd: release socket [ 1062.905260][T14457] vhci_hcd: disconnect device [ 1062.912942][ T5871] usb 5-1: config 0 descriptor?? [ 1063.472062][ T3085] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1063.750801][T14831] vhci_hcd: vhci_device speed not set [ 1063.961055][ T3085] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1063.969753][ T3085] usb 4-1: config 0 has no interface number 0 [ 1064.005831][ T3085] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1064.040587][ T3085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.154134][ T3085] usb 4-1: Product: syz [ 1064.164289][ T3085] usb 4-1: Manufacturer: syz [ 1064.178806][ T3085] usb 4-1: SerialNumber: syz [ 1064.187195][ T3085] usb 4-1: config 0 descriptor?? [ 1064.412053][ T3085] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1064.435628][ T3085] usb 4-1: USB disconnect, device number 52 [ 1064.982801][T14831] usb 5-1: USB disconnect, device number 37 [ 1065.138657][T17828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1065.175929][T17828] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1065.189206][T17828] usb 2-1: can't read configurations, error -71 [ 1065.747328][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1065.798698][ T30] kauditd_printk_skb: 368 callbacks suppressed [ 1065.802213][T18509] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1065.806883][ T30] audit: type=1326 audit(1750294844.467:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1065.884489][T18509] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1066.018389][ T30] audit: type=1326 audit(1750294844.467:10624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1066.115791][T14310] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1066.162727][ T30] audit: type=1326 audit(1750294844.517:10625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.189006][T18516] blktrace: Concurrent blktraces are not allowed on sg0 [ 1066.249381][ T30] audit: type=1326 audit(1750294844.517:10626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.350277][ T30] audit: type=1326 audit(1750294844.517:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.452343][ T30] audit: type=1326 audit(1750294844.517:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.529014][ T30] audit: type=1326 audit(1750294844.517:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.600080][ T30] audit: type=1326 audit(1750294844.517:10630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.641357][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1066.688867][ T30] audit: type=1326 audit(1750294844.517:10631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.816599][ T30] audit: type=1326 audit(1750294844.517:10632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.4.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88a232ab19 code=0x7ffc0000 [ 1066.899373][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1066.908585][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.031850][ T9] usb 2-1: config 0 descriptor?? [ 1067.099346][ T5871] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1067.393534][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.460416][ T5871] usb 1-1: config 0 has no interface number 0 [ 1067.479790][ T5871] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1067.489733][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.504735][ T5871] usb 1-1: Product: syz [ 1067.516509][ T5871] usb 1-1: Manufacturer: syz [ 1067.525743][ T5871] usb 1-1: SerialNumber: syz [ 1067.547302][ T5871] usb 1-1: config 0 descriptor?? [ 1067.579026][ T24] vhci_hcd: vhci_device speed not set [ 1067.717501][ T9] usb 2-1: Cannot set MAC address [ 1067.723053][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1067.767294][ T5871] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1067.787978][ T9] usb 2-1: USB disconnect, device number 39 [ 1067.816186][ T5871] usb 1-1: USB disconnect, device number 43 [ 1068.609218][ T5908] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1068.804646][ T5908] usb 6-1: config 0 has no interfaces? [ 1068.837062][ T5908] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1068.894930][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.977114][ T5908] usb 6-1: Product: syz [ 1069.068680][T18550] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 1069.090325][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3279'. [ 1069.104863][T18550] fuse: Bad value for 'fd' [ 1069.111159][ T5908] usb 6-1: Manufacturer: syz [ 1069.144619][ T5908] usb 6-1: SerialNumber: syz [ 1069.176443][ T5908] usb 6-1: config 0 descriptor?? [ 1069.939122][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1070.144684][ T9] usb 5-1: config 0 has no interfaces? [ 1070.228347][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1070.362137][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.387242][ T9] usb 5-1: Product: syz [ 1070.406017][ T9] usb 5-1: Manufacturer: syz [ 1070.481479][ T9] usb 5-1: SerialNumber: syz [ 1070.577101][ T9] usb 5-1: config 0 descriptor?? [ 1070.917556][T14831] usb 6-1: USB disconnect, device number 54 [ 1071.377091][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3286'. [ 1071.451704][T14831] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1071.724751][T14831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1071.796523][T14831] usb 2-1: config 0 has no interface number 0 [ 1071.833418][T14831] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1071.886079][ T30] kauditd_printk_skb: 554 callbacks suppressed [ 1071.886102][ T30] audit: type=1326 audit(1750294850.557:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1071.950093][ T30] audit: type=1326 audit(1750294850.557:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1071.975139][T14831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.007749][T14831] usb 2-1: Product: syz [ 1072.019399][T14831] usb 2-1: Manufacturer: syz [ 1072.024083][T14831] usb 2-1: SerialNumber: syz [ 1072.048627][T14831] usb 2-1: config 0 descriptor?? [ 1072.089794][ T30] audit: type=1326 audit(1750294850.667:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.114515][ T30] audit: type=1326 audit(1750294850.667:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.188900][ T30] audit: type=1326 audit(1750294850.667:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.212677][ T30] audit: type=1326 audit(1750294850.667:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.235743][ T30] audit: type=1326 audit(1750294850.667:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.258634][ T30] audit: type=1326 audit(1750294850.667:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.261214][T17828] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1072.281437][ T30] audit: type=1326 audit(1750294850.667:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.281496][ T30] audit: type=1326 audit(1750294850.667:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18569 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1072.440633][T14831] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1072.685641][T14831] usb 2-1: USB disconnect, device number 40 [ 1073.339568][T18590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1073.465283][T18592] syzkaller1: entered promiscuous mode [ 1073.481085][T18592] syzkaller1: entered allmulticast mode [ 1073.518364][T18594] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3293'. [ 1073.818693][ T9] usb 5-1: USB disconnect, device number 39 [ 1074.888948][ T9] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1075.033856][T18620] openvswitch: netlink: Missing valid actions attribute. [ 1075.041753][ T9] usb 2-1: device descriptor read/64, error -71 [ 1075.072264][T18620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.148885][T14310] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1075.306858][ T9] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1075.372074][T14310] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1075.389016][T14310] usb 4-1: config 0 has no interface number 0 [ 1075.761012][ T5908] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1075.803778][T14310] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1075.813171][ T9] usb 2-1: device descriptor read/64, error -71 [ 1076.156208][ T9] usb usb2-port1: attempt power cycle [ 1076.182783][T14310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.205720][T14310] usb 4-1: Product: syz [ 1076.279159][T14310] usb 4-1: Manufacturer: syz [ 1076.299341][ T5908] usb 6-1: config 0 has no interfaces? [ 1076.308930][T14310] usb 4-1: SerialNumber: syz [ 1076.400376][T14310] usb 4-1: config 0 descriptor?? [ 1076.418931][ T5908] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1076.508015][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.562006][ T9] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1076.600214][ T5908] usb 6-1: Product: syz [ 1076.604630][ T5908] usb 6-1: Manufacturer: syz [ 1076.688933][ T5908] usb 6-1: SerialNumber: syz [ 1076.699281][T14310] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1076.708433][ T9] usb 2-1: device descriptor read/8, error -71 [ 1076.732975][ T5908] usb 6-1: config 0 descriptor?? [ 1076.746448][T14310] usb 4-1: USB disconnect, device number 53 [ 1076.959174][ T9] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1077.040623][ T9] usb 2-1: device descriptor read/8, error -71 [ 1077.180677][ T9] usb usb2-port1: unable to enumerate USB device [ 1077.576676][ T30] kauditd_printk_skb: 936 callbacks suppressed [ 1077.576699][ T30] audit: type=1326 audit(1750294856.227:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1077.909450][T17828] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1077.965201][T18652] binder: 18650:18652 ioctl c0306201 200000000140 returned -14 [ 1078.549733][ T30] audit: type=1326 audit(1750294856.227:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1078.583777][ T30] audit: type=1326 audit(1750294856.287:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1078.787509][ T30] audit: type=1326 audit(1750294856.287:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1078.877553][ T30] audit: type=1326 audit(1750294856.287:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1078.938599][ T30] audit: type=1326 audit(1750294856.287:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x7ffc0000 [ 1078.976555][ T30] audit: type=1326 audit(1750294856.297:12139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1079.015204][ T30] audit: type=1326 audit(1750294856.297:12140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1079.046565][ T30] audit: type=1326 audit(1750294856.297:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1079.079638][ T30] audit: type=1326 audit(1750294856.297:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1708d2ab19 code=0x7ffc0000 [ 1079.876070][T14310] usb 6-1: USB disconnect, device number 55 [ 1080.385961][T18676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1080.392570][T18676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1080.405000][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1080.409621][T18676] vhci_hcd vhci_hcd.0: Device attached [ 1080.445177][T18680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1080.589063][T14831] vhci_hcd: vhci_device speed not set [ 1080.589438][T14310] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1080.648912][T14831] usb 39-1: new full-speed USB device number 15 using vhci_hcd [ 1080.661475][T18686] tipc: Enabling of bearer rejected, failed to enable media [ 1080.710822][ T5908] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1080.799059][T14310] usb 5-1: Using ep0 maxpacket: 8 [ 1080.812455][T14310] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1080.826780][T14310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.836347][T14310] usb 5-1: Product: syz [ 1080.866195][T14310] usb 5-1: Manufacturer: syz [ 1080.872158][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1080.893452][T14310] usb 5-1: SerialNumber: syz [ 1080.917364][T14310] usb 5-1: config 0 descriptor?? [ 1081.081362][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1081.128881][ T5908] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1081.140568][T14310] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1081.357690][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1081.448471][T18678] vhci_hcd: connection reset by peer [ 1081.460122][ T49] vhci_hcd: stop threads [ 1081.464591][ T49] vhci_hcd: release socket [ 1081.469767][ T49] vhci_hcd: disconnect device [ 1081.517166][ T5908] usb usb2-port1: attempt power cycle [ 1081.868921][ T5908] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1081.902723][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1082.169280][ T5908] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1082.203090][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1082.339220][ T5908] usb usb2-port1: unable to enumerate USB device [ 1082.418246][T14310] gspca_sunplus: reg_w_riv err -71 [ 1082.423844][T14310] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1082.471853][T14310] usb 5-1: USB disconnect, device number 40 [ 1082.649151][T17828] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1082.841204][T17828] usb 4-1: config 0 has no interfaces? [ 1082.861146][T17828] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1082.870814][T17828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.879254][T17828] usb 4-1: Product: syz [ 1082.883630][T17828] usb 4-1: Manufacturer: syz [ 1082.888477][T17828] usb 4-1: SerialNumber: syz [ 1082.922123][T17828] usb 4-1: config 0 descriptor?? [ 1083.540371][T18708] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1083.546975][T18708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1083.572973][T18708] vhci_hcd vhci_hcd.0: Device attached [ 1083.760616][ T24] vhci_hcd: vhci_device speed not set [ 1083.802117][T18713] tipc: Enabling of bearer rejected, already enabled [ 1083.868814][T18713] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1083.878877][T18713] tipc: Resetting bearer [ 1083.888397][ T24] usb 35-1: new full-speed USB device number 8 using vhci_hcd [ 1084.136066][T18713] tipc: Disabling bearer [ 1084.758858][T17828] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1084.770489][T18709] vhci_hcd: connection reset by peer [ 1084.799232][T14531] vhci_hcd: stop threads [ 1084.803649][T14531] vhci_hcd: release socket [ 1084.808344][T14531] vhci_hcd: disconnect device [ 1084.940881][T17828] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1085.198686][T17828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.240280][T17828] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1085.334685][T17828] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1085.394863][T14310] usb 4-1: USB disconnect, device number 54 [ 1085.463459][T17828] usb 5-1: Manufacturer: syz [ 1085.473466][T17828] usb 5-1: config 0 descriptor?? [ 1085.839361][T14831] vhci_hcd: vhci_device speed not set [ 1085.848960][T17828] rc_core: IR keymap rc-hauppauge not found [ 1085.906615][T17828] Registered IR keymap rc-empty [ 1085.939070][T17828] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1085.989390][T17828] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 1086.003513][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 1086.003533][ T30] audit: type=1326 audit(1750294864.677:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f738e929 code=0x7ffc0000 [ 1086.078896][ T30] audit: type=1326 audit(1750294864.707:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f738e929 code=0x7ffc0000 [ 1086.103127][T18735] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1086.116884][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1086.360434][ T30] audit: type=1326 audit(1750294864.837:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1086.533304][ T30] audit: type=1326 audit(1750294864.837:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1086.555811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.651541][ T30] audit: type=1326 audit(1750294864.847:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1086.811252][ T30] audit: type=1326 audit(1750294864.847:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1086.872874][ T30] audit: type=1326 audit(1750294864.847:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1086.909961][ T30] audit: type=1326 audit(1750294864.847:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1087.378951][ T5927] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1087.420323][ T5833] usb 5-1: USB disconnect, device number 41 [ 1087.588871][T14831] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1087.625723][ T5927] usb 6-1: config 0 has no interfaces? [ 1087.856844][ T5927] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1087.890492][T14831] usb 2-1: config 0 has no interfaces? [ 1087.917003][ T30] audit: type=1326 audit(1750294864.847:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1087.969450][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.040589][T14831] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1088.110808][ T5927] usb 6-1: Product: syz [ 1088.117889][T14831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.144255][ T5927] usb 6-1: Manufacturer: syz [ 1088.151631][T18752] trusted_key: encrypted_key: insufficient parameters specified [ 1088.166854][ T5927] usb 6-1: SerialNumber: syz [ 1088.174376][T14831] usb 2-1: Product: syz [ 1088.178764][ T30] audit: type=1326 audit(1750294864.847:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f732ab19 code=0x7ffc0000 [ 1088.203609][T14831] usb 2-1: Manufacturer: syz [ 1088.219827][ T5927] usb 6-1: config 0 descriptor?? [ 1088.228932][T14831] usb 2-1: SerialNumber: syz [ 1088.257587][T14831] usb 2-1: config 0 descriptor?? [ 1088.539987][T18752] could not allocate digest TFM handle hmac(sha1-avx2) [ 1089.020571][ T24] vhci_hcd: vhci_device speed not set [ 1089.030735][T18762] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3334'. [ 1089.363664][T18764] FAULT_INJECTION: forcing a failure. [ 1089.363664][T18764] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.388662][T18764] CPU: 1 UID: 0 PID: 18764 Comm: syz.3.3334 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1089.388701][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1089.388713][T18764] Call Trace: [ 1089.388722][T18764] [ 1089.388731][T18764] dump_stack_lvl+0x189/0x250 [ 1089.388770][T18764] ? __pfx____ratelimit+0x10/0x10 [ 1089.388797][T18764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1089.388827][T18764] ? __pfx__printk+0x10/0x10 [ 1089.388855][T18764] ? __pfx___might_resched+0x10/0x10 [ 1089.388889][T18764] should_fail_ex+0x414/0x560 [ 1089.388920][T18764] should_failslab+0xa8/0x100 [ 1089.388944][T18764] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1089.388976][T18764] ? mas_alloc_nodes+0x2e9/0x8e0 [ 1089.389008][T18764] mas_alloc_nodes+0x2e9/0x8e0 [ 1089.389046][T18764] mas_preallocate+0x39e/0x6b0 [ 1089.389081][T18764] ? __pfx_mas_preallocate+0x10/0x10 [ 1089.389122][T18764] ? __mas_set_range+0x12f/0x3c0 [ 1089.389157][T18764] __split_vma+0x2fa/0xa00 [ 1089.389197][T18764] ? __pfx___split_vma+0x10/0x10 [ 1089.389251][T18764] vma_modify+0x13b3/0x1970 [ 1089.389300][T18764] vma_modify_flags+0x1e8/0x230 [ 1089.389330][T18764] ? __pfx_vma_modify_flags+0x10/0x10 [ 1089.389376][T18764] ? mas_next_slot+0xc20/0xcf0 [ 1089.389404][T18764] mprotect_fixup+0x400/0x9b0 [ 1089.389438][T18764] ? __pfx_mprotect_fixup+0x10/0x10 [ 1089.389472][T18764] do_mprotect_pkey+0x8cd/0xce0 [ 1089.389498][T18764] ? ksys_write+0x1cb/0x250 [ 1089.389527][T18764] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1089.389585][T18764] ? __pfx_ksys_write+0x10/0x10 [ 1089.389602][T18764] ? rcu_is_watching+0x15/0xb0 [ 1089.389652][T18764] __x64_sys_mprotect+0x80/0x90 [ 1089.389680][T18764] do_syscall_64+0xfa/0x3b0 [ 1089.389699][T18764] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.389727][T18764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.389749][T18764] ? clear_bhb_loop+0x60/0xb0 [ 1089.389774][T18764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.389795][T18764] RIP: 0033:0x7f31f738e929 [ 1089.389816][T18764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.389835][T18764] RSP: 002b:00007f31f51d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1089.389860][T18764] RAX: ffffffffffffffda RBX: 00007f31f75b6080 RCX: 00007f31f738e929 [ 1089.389877][T18764] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 000020000021f000 [ 1089.389891][T18764] RBP: 00007f31f51d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.389903][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.389916][T18764] R13: 0000000000000000 R14: 00007f31f75b6080 R15: 00007f31f76dfa28 [ 1089.389949][T18764] [ 1089.904462][T18766] ptrace attach of "./syz-executor exec"[16819] was attempted by "./syz-executor exec"[18766] [ 1090.007814][T18768] wg1: entered promiscuous mode [ 1090.017129][T18768] wg1: entered allmulticast mode [ 1090.535121][ T5833] usb 2-1: USB disconnect, device number 49 [ 1090.559889][ T5927] usb 6-1: USB disconnect, device number 56 [ 1090.899415][T18781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1090.906216][T18781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1090.962903][T18781] vhci_hcd vhci_hcd.0: Device attached [ 1091.005318][T18787] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1091.011926][T18787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1091.027890][T18787] vhci_hcd vhci_hcd.0: Device attached [ 1091.149065][ T24] vhci_hcd: vhci_device speed not set [ 1091.210066][ T24] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 1091.219334][ T5927] vhci_hcd: vhci_device speed not set [ 1091.230881][T18795] tipc: Enabling of bearer rejected, failed to enable media [ 1091.282416][ T5927] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 1091.525073][T18800] tipc: Enabling of bearer rejected, failed to enable media [ 1091.554354][T18800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1092.137752][T18788] vhci_hcd: connection reset by peer [ 1092.350659][T14531] vhci_hcd: stop threads [ 1092.421976][T14531] vhci_hcd: release socket [ 1092.463440][T18782] vhci_hcd: connection reset by peer [ 1092.690360][T14531] vhci_hcd: disconnect device [ 1093.156499][T18808] trusted_key: encrypted_key: insufficient parameters specified [ 1093.309777][T14533] vhci_hcd: stop threads [ 1093.359146][T14533] vhci_hcd: release socket [ 1093.390555][T14533] vhci_hcd: disconnect device [ 1093.865832][T18809] could not allocate digest TFM handle hmac(sha1-avx2) [ 1094.211187][T18818] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1094.217793][T18818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1094.345270][T18818] vhci_hcd vhci_hcd.0: Device attached [ 1094.599028][T14831] vhci_hcd: vhci_device speed not set [ 1094.779191][T14831] usb 39-1: new full-speed USB device number 16 using vhci_hcd [ 1095.003124][T18824] trusted_key: encrypted_key: insufficient parameters specified [ 1095.104310][T18826] tipc: Enabling of bearer rejected, failed to enable media [ 1095.554599][T18824] could not allocate digest TFM handle hmac(sha1-avx2) [ 1095.939007][T18819] vhci_hcd: connection reset by peer [ 1095.946822][ T2948] vhci_hcd: stop threads [ 1095.951335][ T2948] vhci_hcd: release socket [ 1095.966930][ T2948] vhci_hcd: disconnect device [ 1096.022513][T18839] binder: 18836:18839 ioctl c0306201 2000000003c0 returned -14 [ 1096.107311][T18845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1096.288858][ T43] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1096.309232][ T24] vhci_hcd: vhci_device speed not set [ 1096.315052][ T3085] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1096.409511][ T5927] vhci_hcd: vhci_device speed not set [ 1096.419233][ T43] usb 6-1: device descriptor read/64, error -71 [ 1096.647704][ T3085] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1096.660629][ T3085] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1096.688835][ T3085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.780006][ T3085] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1096.789297][ T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1096.848883][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1096.918891][ T43] usb 6-1: device descriptor read/64, error -71 [ 1097.019265][T18850] program syz.1.3347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1097.030699][ T43] usb usb6-port1: attempt power cycle [ 1097.152941][T18852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.175770][ T9] usb 1-1: config 0 has no interfaces? [ 1097.179478][T18852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.327031][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1097.379573][ T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1097.406683][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.421742][ T9] usb 1-1: Product: syz [ 1097.450156][ T43] usb 6-1: device descriptor read/8, error -71 [ 1097.450593][ T9] usb 1-1: Manufacturer: syz [ 1097.467617][ T9] usb 1-1: SerialNumber: syz [ 1097.475384][ T9] usb 1-1: config 0 descriptor?? [ 1097.865189][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1097.930644][ T43] usb 6-1: device descriptor read/8, error -71 [ 1098.130651][ T43] usb usb6-port1: unable to enumerate USB device [ 1098.469269][T18859] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1098.479226][T18859] macsec1: entered allmulticast mode [ 1098.484581][T18859] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1098.591383][T18859] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1098.599080][T18859] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1098.792952][T18861] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1098.799648][T18861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1098.823611][T18861] vhci_hcd vhci_hcd.0: Device attached [ 1098.998914][ T43] vhci_hcd: vhci_device speed not set [ 1099.041449][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1099.061226][ T43] usb 41-1: new full-speed USB device number 10 using vhci_hcd [ 1099.093392][T18871] tipc: Enabling of bearer rejected, failed to enable media [ 1099.139972][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1099.604740][ T5833] usb 2-1: USB disconnect, device number 50 [ 1099.653236][T18876] trusted_key: encrypted_key: insufficient parameters specified [ 1099.688940][ T3085] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1099.749344][T18879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1099.749366][T18879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1099.749440][T18879] vhci_hcd vhci_hcd.0: Device attached [ 1099.823433][T18864] vhci_hcd: connection reset by peer [ 1099.840340][T18811] vhci_hcd: stop threads [ 1099.840363][T18811] vhci_hcd: release socket [ 1099.840417][T18811] vhci_hcd: disconnect device [ 1099.885946][ T5927] usb 1-1: USB disconnect, device number 46 [ 1099.929360][ T3085] usb 6-1: Using ep0 maxpacket: 8 [ 1099.931742][ T3085] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1099.931806][ T3085] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1099.931833][ T3085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.937024][ T3085] usb 6-1: config 0 descriptor?? [ 1100.060861][T18876] could not allocate digest TFM handle hmac(sha1-avx2) [ 1100.146117][T18887] tipc: Enabling of bearer rejected, failed to enable media [ 1100.161563][T18887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1100.590387][ T3085] corsair 0003:1B1C:1B09.001E: unbalanced delimiter at end of report description [ 1100.628441][ T3085] corsair 0003:1B1C:1B09.001E: parse failed [ 1100.643591][ T3085] corsair 0003:1B1C:1B09.001E: probe with driver corsair failed with error -22 [ 1100.699122][T18880] vhci_hcd: connection reset by peer [ 1100.735383][ T2948] vhci_hcd: stop threads [ 1100.741271][ T2948] vhci_hcd: release socket [ 1100.779015][ T2948] vhci_hcd: disconnect device [ 1100.863342][T14831] vhci_hcd: vhci_device speed not set [ 1101.105671][ T3085] usb 6-1: USB disconnect, device number 61 [ 1102.219149][ T5908] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1102.249907][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 1102.391246][ T5908] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.405723][ T5908] usb 6-1: config 0 has no interface number 0 [ 1102.435392][ T5908] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1102.463164][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.498765][ T5908] usb 6-1: Product: syz [ 1102.503021][ T5908] usb 6-1: Manufacturer: syz [ 1102.535514][ T5908] usb 6-1: SerialNumber: syz [ 1102.582010][ T5908] usb 6-1: config 0 descriptor?? [ 1102.617921][T18917] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3368'. [ 1102.669029][T18917] netlink: zone id is out of range [ 1102.691542][T18917] netlink: zone id is out of range [ 1102.720256][T18917] netlink: zone id is out of range [ 1102.757789][T18917] netlink: zone id is out of range [ 1102.779968][T18917] netlink: zone id is out of range [ 1102.802791][T18917] netlink: zone id is out of range [ 1102.818856][T18917] netlink: zone id is out of range [ 1102.822804][ T5908] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1102.834291][T18917] netlink: zone id is out of range [ 1102.850885][ T5908] usb 6-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1102.859015][T18917] netlink: zone id is out of range [ 1102.869826][T18917] netlink: zone id is out of range [ 1102.878804][ T5908] usb 6-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1103.784460][T18962] netlink: 'syz.4.3390': attribute type 10 has an invalid length. [ 1103.811024][T18962] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3390'. [ 1104.223709][ T43] vhci_hcd: vhci_device speed not set [ 1104.289894][T18981] netlink: 'syz.0.3398': attribute type 39 has an invalid length. [ 1104.660185][T18995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1104.681030][T18994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1104.710782][T18995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1104.991294][T19006] netlink: 'syz.4.3408': attribute type 21 has an invalid length. [ 1105.009958][T19006] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1105.382046][T19024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1106.802560][T19039] batman_adv: batadv0: Adding interface: dummy0 [ 1106.809589][T19039] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.836259][T19039] batman_adv: batadv0: Interface activated: dummy0 [ 1106.988047][T19040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.440754][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1107.440776][ T30] audit: type=1326 audit(1750294886.117:12483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19056 comm="syz.3.3432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31f738e929 code=0x0 [ 1107.970413][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 1108.013280][ T30] audit: type=1326 audit(1750294886.617:12484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.0.3434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1708d8e929 code=0x0 [ 1108.932010][T19086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1108.938586][T19086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1108.980687][T19086] vhci_hcd vhci_hcd.0: Device attached [ 1109.009313][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1109.180157][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1109.188223][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.220098][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.230692][ T43] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 1109.269193][T14310] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1109.283788][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1109.334672][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.463430][ T9] usb 4-1: config 0 descriptor?? [ 1109.473655][T14310] usb 5-1: Using ep0 maxpacket: 16 [ 1109.482618][T14310] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1109.497784][T14310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.520816][T14310] usb 5-1: Product: syz [ 1109.526234][T14310] usb 5-1: Manufacturer: syz [ 1109.531286][T14310] usb 5-1: SerialNumber: syz [ 1109.543968][T14310] usb 5-1: config 0 descriptor?? [ 1109.566193][T14310] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1109.578041][T14310] usb 5-1: Detected FT232H [ 1109.762621][T14310] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1109.771325][T19088] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 9 [ 1109.811518][T14310] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1109.820191][T14531] vhci_hcd: stop threads [ 1109.833855][T14310] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1109.854644][T14310] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1109.882795][T14531] vhci_hcd: release socket [ 1109.883354][T14310] usb 5-1: USB disconnect, device number 42 [ 1109.907556][T14310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1109.944656][T14310] ftdi_sio 5-1:0.0: device disconnected [ 1109.950722][T14531] vhci_hcd: disconnect device [ 1109.956546][ T9] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1110.285054][T14310] usb 4-1: USB disconnect, device number 55 [ 1110.439150][ T5927] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1110.498385][T19104] lo: entered allmulticast mode [ 1110.505549][T19101] lo: left allmulticast mode [ 1110.518978][ T3085] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1110.642983][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 1110.716415][ T5927] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1110.853569][ T3085] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1110.892293][ T5927] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1110.901918][ T3085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.928134][ T3085] usb 1-1: Product: syz [ 1110.936860][ T5927] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1110.947818][ T3085] usb 1-1: Manufacturer: syz [ 1110.974016][ T3085] usb 1-1: SerialNumber: syz [ 1110.979141][ T5927] usb 2-1: config 250 has no interface number 0 [ 1111.002570][ T3085] usb 1-1: config 0 descriptor?? [ 1111.008320][ T5927] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1111.035941][ T3085] ch341 1-1:0.0: ch341-uart converter detected [ 1111.268804][ T5927] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1111.308657][ T5927] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1111.399071][ T5927] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1111.410960][ T5927] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1111.427870][ T5927] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1111.437968][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1111.447477][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1111.456161][ T5927] usb 2-1: Product: syz [ 1111.460644][ T5927] usb 2-1: SerialNumber: syz [ 1111.601894][ T5927] hub 2-1:250.228: bad descriptor, ignoring hub [ 1111.611285][ T5927] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1111.768951][ T3085] usb 1-1: failed to send control message: -71 [ 1111.776074][ T3085] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1111.909607][ T5927] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1111.957405][T19120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1112.017433][ T3085] usb 1-1: USB disconnect, device number 47 [ 1112.067312][ T3085] ch341 1-1:0.0: device disconnected [ 1112.266718][ C1] usblp0: nonzero read bulk status received: -71 [ 1112.628868][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1112.792762][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1112.852966][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.912409][ T24] usb 1-1: Product: syz [ 1112.938831][ T24] usb 1-1: Manufacturer: syz [ 1113.010413][ T24] usb 1-1: SerialNumber: syz [ 1113.030178][T19127] netlink: 'syz.4.3449': attribute type 10 has an invalid length. [ 1113.051361][ T24] usb 1-1: config 0 descriptor?? [ 1113.087378][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1113.121634][ T9] usb 2-1: USB disconnect, device number 51 [ 1113.162168][ T9] usblp0: removed [ 1113.186353][T19127] team0: Port device geneve1 added [ 1113.935226][ T24] gspca_sunplus: reg_r err -71 [ 1113.943427][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1113.963036][ T24] usb 1-1: USB disconnect, device number 48 [ 1113.969612][ T3085] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1114.119023][ T3085] usb 5-1: Using ep0 maxpacket: 8 [ 1114.129358][ T3085] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1114.138090][ T3085] usb 5-1: config 0 has no interface number 0 [ 1114.144772][ T3085] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1114.172988][ T3085] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1114.185580][ T3085] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1114.197927][ T3085] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.212902][ T3085] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1114.378982][ T43] vhci_hcd: vhci_device speed not set [ 1114.491247][ T3085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.563752][ T3085] usb 5-1: config 0 descriptor?? [ 1114.582043][ T3085] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1114.619511][T19143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1116.277308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.299211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.657857][T17955] usb 5-1: USB disconnect, device number 43 [ 1116.690110][T17955] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1119.263624][T19209] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1120.009623][T19216] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1120.029567][T19216] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1120.287650][T19216] netlink: 'syz.4.3479': attribute type 10 has an invalid length. [ 1120.304305][T19216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.323106][T19216] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1123.405225][T19269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1125.139056][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1125.288812][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1125.300265][T19297] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3506'. [ 1125.310768][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1125.319152][ T24] usb 2-1: config 0 has no interface number 0 [ 1125.325445][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1125.336285][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1125.357176][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.367309][ T24] usb 2-1: Product: syz [ 1125.377459][ T24] usb 2-1: Manufacturer: syz [ 1125.387587][ T24] usb 2-1: SerialNumber: syz [ 1125.415637][ T24] usb 2-1: config 0 descriptor?? [ 1125.427078][ T24] f81534 2-1:0.12: required endpoints missing [ 1127.987667][ T9] usb 2-1: USB disconnect, device number 52 [ 1128.699357][T19333] use of bytesused == 0 is deprecated and will be removed in the future, [ 1128.731629][T19333] use the actual size instead. [ 1129.240651][T19349] netlink: 'syz.0.3523': attribute type 27 has an invalid length. [ 1132.501624][T19363] ALSA: mixer_oss: invalid OSS volume '' [ 1133.822090][T19383] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1138.805579][T19476] pim6reg1: entered promiscuous mode [ 1138.811179][T19476] pim6reg1: entered allmulticast mode [ 1143.355637][T19490] sit0: entered allmulticast mode [ 1143.367380][T19493] sit0: entered promiscuous mode [ 1144.238285][T19543] sit0: entered allmulticast mode [ 1144.294976][T19543] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1144.479088][T17955] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1144.648899][T17955] usb 2-1: Using ep0 maxpacket: 8 [ 1144.656500][T17955] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1144.667036][T17955] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.677054][T17955] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.687798][T17955] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.701284][T17955] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.710586][T17955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.942833][T17955] usb 2-1: GET_CAPABILITIES returned 0 [ 1144.948430][T17955] usbtmc 2-1:16.0: can't read capabilities [ 1145.157364][T19546] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1145.218932][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1145.368978][ T9] usb 5-1: device descriptor read/64, error -71 [ 1145.477346][ T24] usb 2-1: USB disconnect, device number 53 [ 1145.619542][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1145.770498][ T9] usb 5-1: device descriptor read/64, error -71 [ 1145.889343][ T9] usb usb5-port1: attempt power cycle [ 1146.261888][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1146.300106][ T9] usb 5-1: device descriptor read/8, error -71 [ 1146.308870][T14310] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1146.483430][T14310] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 1146.491803][T14310] usb 1-1: config 0 has no interface number 0 [ 1146.497938][T14310] usb 1-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1146.508499][T14310] usb 1-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 1146.517701][T14310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.528865][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1146.539899][T14310] usb 1-1: config 0 descriptor?? [ 1146.546443][T19589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1146.565007][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1146.600496][ T9] usb 5-1: device descriptor read/8, error -71 [ 1146.699016][ T24] usb 2-1: device descriptor read/64, error -71 [ 1146.729597][ T9] usb usb5-port1: unable to enumerate USB device [ 1146.778074][T14310] usb 1-1: string descriptor 0 read error: -71 [ 1146.793253][T14310] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 1146.817103][T14310] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 1146.834819][T14310] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 1146.850782][T14310] usb 1-1: USB disconnect, device number 49 [ 1146.949038][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1147.089171][ T24] usb 2-1: device descriptor read/64, error -71 [ 1147.214621][ T24] usb usb2-port1: attempt power cycle [ 1147.559047][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1147.594791][ T24] usb 2-1: device descriptor read/8, error -71 [ 1147.599789][T19628] kvm: pic: non byte write [ 1147.838836][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1147.866713][ T24] usb 2-1: device descriptor read/8, error -71 [ 1147.980804][ T24] usb usb2-port1: unable to enumerate USB device [ 1148.135394][T19634] vxcan2: entered promiscuous mode [ 1148.188581][T19635] vti0: entered promiscuous mode [ 1148.195178][T19635] vti0: entered allmulticast mode [ 1148.207376][T19634] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3623' sets config #-1 [ 1151.182374][T19686] kvm: pic: non byte write [ 1151.524432][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1152.108993][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1152.284961][ T24] usb 1-1: device descriptor read/64, error -71 [ 1152.568944][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1153.007057][ T24] usb 1-1: device descriptor read/64, error -71 [ 1153.150977][ T24] usb usb1-port1: attempt power cycle [ 1153.560843][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1153.629523][ T24] usb 1-1: device descriptor read/8, error -71 [ 1153.898869][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1153.934167][ T24] usb 1-1: device descriptor read/8, error -71 [ 1154.059586][ T24] usb usb1-port1: unable to enumerate USB device [ 1154.195414][ T5833] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1154.349148][ T5833] usb 2-1: device descriptor read/64, error -71 [ 1154.368813][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1154.554196][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1154.679158][ T5833] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1154.819422][ T5833] usb 2-1: device descriptor read/64, error -71 [ 1154.941665][ T5833] usb usb2-port1: attempt power cycle [ 1155.233569][T19745] fuse: Bad value for 'user_id' [ 1155.254656][T19745] fuse: Bad value for 'user_id' [ 1155.328916][ T5833] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1155.407829][ T5833] usb 2-1: device descriptor read/8, error -71 [ 1155.668896][ T5833] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1155.690087][ T5833] usb 2-1: device descriptor read/8, error -71 [ 1155.839739][ T5833] usb usb2-port1: unable to enumerate USB device [ 1156.081655][T19754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1156.101572][T19754] 8021q: VLANs not supported on gre0 [ 1156.959097][ T3085] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1157.198170][ T3085] usb 1-1: Using ep0 maxpacket: 16 [ 1157.213638][ T3085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.225155][ T3085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.238660][ T3085] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.256016][ T3085] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.298544][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1157.327897][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1157.357239][ T3085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.367566][ T24] usb 5-1: can't read configurations, error -71 [ 1157.402963][ T3085] usb 1-1: config 0 descriptor?? [ 1157.849733][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.874243][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.883095][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.892584][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.916062][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.924731][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.942729][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.950823][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.985602][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1157.994395][ T3085] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1158.023052][ T3085] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 1158.064706][ T3085] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1158.068517][T19780] kvm: pic: non byte write [ 1158.098530][ T3085] microsoft 0003:045E:07DA.0020: no inputs found [ 1158.112320][ T3085] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 1158.137798][ T3085] usb 1-1: USB disconnect, device number 54 [ 1158.283335][T19784] fido_id[19784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1158.550850][T19788] fuse: Bad value for 'group_id' [ 1158.569643][T19788] fuse: Bad value for 'group_id' [ 1159.098965][T19796] tipc: Enabled bearer , priority 10 [ 1159.295881][T19813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1159.302501][T19813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1159.327535][ T30] audit: type=1326 audit(1750294937.997:12485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1159.393915][T19813] vhci_hcd vhci_hcd.0: Device attached [ 1159.420173][ T30] audit: type=1326 audit(1750294937.997:12486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1159.465948][ T30] audit: type=1326 audit(1750294937.997:12487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1159.490213][ T30] audit: type=1326 audit(1750294937.997:12488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1159.514182][ T30] audit: type=1326 audit(1750294937.997:12489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19795 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a238e929 code=0x7ffc0000 [ 1159.599246][ T24] vhci_hcd: vhci_device speed not set [ 1159.658843][ T24] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 1160.002081][T19823] kvm: pic: non byte write [ 1160.060168][T19816] vhci_hcd: connection reset by peer [ 1160.082533][T14533] vhci_hcd: stop threads [ 1160.087039][T14533] vhci_hcd: release socket [ 1160.098324][T14533] vhci_hcd: disconnect device [ 1160.231500][ T5833] tipc: Node number set to 43690 [ 1160.568813][ T5833] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1160.730642][ T5833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1160.771212][ T5833] usb 4-1: not running at top speed; connect to a high speed hub [ 1160.791393][ T5833] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1160.819197][ T5833] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.833217][ T5833] usb 4-1: config 4 has no interface number 0 [ 1160.842715][ T5833] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1160.876277][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.919037][ T5833] usb 4-1: Product: syz [ 1160.937342][ T5833] usb 4-1: Manufacturer: syz [ 1160.945161][ T5833] usb 4-1: SerialNumber: syz [ 1160.959526][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1161.132409][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1161.172260][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1161.229140][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1161.263938][ T5833] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 1161.288632][ T9] usb 5-1: Product: syz [ 1161.314877][ T5833] usb 4-1: No streaming interface found for terminal 6. [ 1161.333366][ T9] usb 5-1: Manufacturer: syz [ 1161.363460][ T9] usb 5-1: SerialNumber: syz [ 1161.399756][ T5833] usb 4-1: USB disconnect, device number 56 [ 1161.425764][ T9] usb 5-1: config 0 descriptor?? [ 1161.680621][T19836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1162.391338][T19857] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1162.397957][T19857] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1162.448284][T19857] vhci_hcd vhci_hcd.0: Device attached [ 1162.639060][ T5833] vhci_hcd: vhci_device speed not set [ 1162.710601][ T5833] usb 43-1: new full-speed USB device number 6 using vhci_hcd [ 1162.745128][T19865] tipc: Enabling of bearer rejected, failed to enable media [ 1163.214196][T19848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1163.639377][T17955] usb 5-1: USB disconnect, device number 50 [ 1163.698809][T19858] vhci_hcd: connection reset by peer [ 1163.719355][T18811] vhci_hcd: stop threads [ 1163.723699][T18811] vhci_hcd: release socket [ 1163.753515][T18811] vhci_hcd: disconnect device [ 1163.785230][T19871] netlink: 'syz.0.3691': attribute type 1 has an invalid length. [ 1164.229647][T17463] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.779050][ T24] vhci_hcd: vhci_device speed not set [ 1164.919115][ T3085] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1165.100585][ T3085] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1165.115826][ T3085] usb 1-1: config 0 has no interface number 0 [ 1165.139262][ T3085] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1165.149155][ T3085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.157169][ T3085] usb 1-1: Product: syz [ 1165.162037][ T3085] usb 1-1: Manufacturer: syz [ 1165.168240][ T3085] usb 1-1: SerialNumber: syz [ 1165.178275][ T3085] usb 1-1: config 0 descriptor?? [ 1165.341326][T19906] netlink: 'syz.1.3705': attribute type 11 has an invalid length. [ 1165.452825][ T3085] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1165.978992][T17955] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1166.209667][T17955] usb 4-1: config 0 has no interfaces? [ 1166.255518][T17955] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1166.280229][T17955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.315297][T17955] usb 4-1: Product: syz [ 1166.336446][T17955] usb 4-1: Manufacturer: syz [ 1166.342466][T17955] usb 4-1: SerialNumber: syz [ 1166.354624][T17955] usb 4-1: config 0 descriptor?? [ 1166.629025][ T31] INFO: task kworker/u8:11:14529 blocked for more than 143 seconds. [ 1166.637529][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 1166.645549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.655666][ T31] task:kworker/u8:11 state:D stack:21160 pid:14529 tgid:14529 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1166.805523][ T31] Workqueue: netns cleanup_net [ 1166.811196][ T31] Call Trace: [ 1166.814725][ T31] [ 1166.817708][ T31] __schedule+0x16f5/0x4d00 [ 1166.840710][ T31] ? schedule+0x165/0x360 [ 1166.847239][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.852646][ T31] ? schedule+0x91/0x360 [ 1166.857302][ T31] schedule+0x165/0x360 [ 1166.863879][ T31] afs_cell_purge+0x3d9/0x540 [ 1166.876603][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1166.974299][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1166.980289][ T31] ? afs_net+0x45/0x270 [ 1166.984738][ T31] ? afs_net+0x45/0x270 [ 1166.993752][ T31] afs_net_exit+0x50/0x100 [ 1166.998599][ T31] ops_undo_list+0x49a/0x990 [ 1167.004337][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1167.010627][ T31] cleanup_net+0x4c5/0x800 [ 1167.019005][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1167.024250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.031056][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1167.037194][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1167.052972][ T31] process_scheduled_works+0xae1/0x17b0 [ 1167.075750][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1167.082597][ T31] worker_thread+0x8a0/0xda0 [ 1167.087695][ T31] kthread+0x70e/0x8a0 [ 1167.092550][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1167.098010][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.144737][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.150405][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.155785][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.160841][ T31] ret_from_fork+0x3f9/0x770 [ 1167.165510][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.170951][ T31] ? __switch_to_asm+0x39/0x70 [ 1167.175764][ T31] ? __switch_to_asm+0x33/0x70 [ 1167.180772][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.185526][ T31] ret_from_fork_asm+0x1a/0x30 [ 1167.194913][ T31] [ 1167.198133][ T31] [ 1167.198133][ T31] Showing all locks held in the system: [ 1167.206022][ T31] 1 lock held by khungtaskd/31: [ 1167.212401][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1167.223592][ T31] 2 locks held by kworker/u8:3/49: [ 1167.228949][ T31] 5 locks held by kworker/1:2/3085: [ 1167.234564][ T31] #0: ffff888021ac0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.258972][ T31] #1: ffffc9000c077bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.277843][ T3085] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1167.280009][ T5908] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1167.296337][ T3085] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 1167.310176][ T31] #2: ffff88823be7c998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1167.329260][ T31] #3: ffff88805835d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1167.339055][ T5908] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1167.346906][ T3085] usb 1-1: USB disconnect, device number 55 [ 1167.348124][ T31] #4: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: __queue_work+0x103/0xfe0 [ 1167.390253][ T31] 2 locks held by getty/5600: [ 1167.398975][ T5908] usb 6-1: USB disconnect, device number 62 [ 1167.415307][ T31] #0: ffff88814c3820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1167.441113][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1167.455075][ T31] 5 locks held by kworker/0:3/5833: [ 1167.463584][ T31] #0: ffff888021ac0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.482162][ T31] #1: ffffc900041efbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.494348][ T31] #2: ffff88823bebe998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1167.503664][ T31] #3: ffff888145751510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1167.514255][ T31] #4: ffff888140fa6368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1167.524843][ T31] 3 locks held by kworker/0:5/5908: [ 1167.530359][ T31] #0: ffff888021ac0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.542097][ T31] #1: ffffc9000461fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.554882][ T31] #2: ffff888028d41198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1167.564078][ T31] 3 locks held by kworker/u8:11/14529: [ 1167.570839][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.582173][ T31] #1: ffffc9000b887bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.594057][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1167.603828][ T31] 1 lock held by syz-executor/17793: [ 1167.611211][ T31] #0: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1167.624270][ T31] 4 locks held by syz.3.3707/19926: [ 1167.629600][ T31] #0: ffffffff8eb221a8 (loop_validate_mutex){+.+.}-{4:4}, at: lo_ioctl+0xd94/0x2410 [ 1167.639462][ T31] #1: ffff888025727400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x17d6/0x2410 [ 1167.648593][ T31] #2: ffff8881427b4ee8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1d56/0x2410 [ 1167.659781][ T31] #3: ffff8881427b4f20 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: lo_ioctl+0x1d56/0x2410 [ 1167.670495][ T31] 1 lock held by syz.0.3710/19922: [ 1167.675732][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1167.720269][ T5908] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1167.759587][ T31] [ 1167.767437][ T31] ============================================= [ 1167.767437][ T31] [ 1167.819208][ T31] NMI backtrace for cpu 1 [ 1167.819230][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1167.819257][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.819270][ T31] Call Trace: [ 1167.819278][ T31] [ 1167.819286][ T31] dump_stack_lvl+0x189/0x250 [ 1167.819321][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1167.819348][ T5833] vhci_hcd: vhci_device speed not set [ 1167.819345][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.819375][ T31] ? __pfx__printk+0x10/0x10 [ 1167.819402][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1167.819428][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1167.819448][ T31] ? _printk+0xcf/0x120 [ 1167.819471][ T31] ? __pfx__printk+0x10/0x10 [ 1167.819492][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1167.819519][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1167.819544][ T31] watchdog+0xfee/0x1030 [ 1167.819571][ T31] ? watchdog+0x1de/0x1030 [ 1167.819601][ T31] kthread+0x70e/0x8a0 [ 1167.819625][ T31] ? __pfx_watchdog+0x10/0x10 [ 1167.819647][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.819675][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.819700][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.819725][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.819746][ T31] ret_from_fork+0x3f9/0x770 [ 1167.819781][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.819812][ T31] ? __switch_to_asm+0x39/0x70 [ 1167.819830][ T31] ? __switch_to_asm+0x33/0x70 [ 1167.819846][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.819867][ T31] ret_from_fork_asm+0x1a/0x30 [ 1167.819900][ T31] [ 1167.819939][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1167.984651][ C0] NMI backtrace for cpu 0 [ 1167.984671][ C0] CPU: 0 UID: 0 PID: 18811 Comm: kworker/u8:0 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1167.984691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.984702][ C0] Workqueue: bat_events batadv_nc_worker [ 1167.984729][ C0] RIP: 0010:__rcu_read_lock+0x15/0x60 [ 1167.984759][ C0] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 65 48 8b 1c 25 08 f0 9c 92 48 81 c3 44 04 00 00 <48> 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 [ 1167.984774][ C0] RSP: 0018:ffffc90003acfa10 EFLAGS: 00000286 [ 1167.984789][ C0] RAX: 1ffff1100537e788 RBX: ffff888026115e44 RCX: ffff888026115a00 [ 1167.984802][ C0] RDX: 0000000000000000 RSI: ffffffff8db6ecc7 RDI: ffff888026115a00 [ 1167.984814][ C0] RBP: ffff888031a81b20 R08: 0000000000000000 R09: ffffffff8b3418f2 [ 1167.984825][ C0] R10: dffffc0000000000 R11: ffffffff8b341820 R12: dffffc0000000000 [ 1167.984837][ C0] R13: ffff888029bf3c50 R14: ffff88807e194d80 R15: 0000000000000364 [ 1167.984854][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1167.984868][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.984880][ C0] CR2: 00007f1708f81178 CR3: 000000006b9f0000 CR4: 00000000003526f0 [ 1167.984896][ C0] Call Trace: [ 1167.984904][ C0] [ 1167.984912][ C0] batadv_nc_worker+0xcb/0x610 [ 1167.984935][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1167.984958][ C0] process_scheduled_works+0xae1/0x17b0 [ 1167.984992][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1167.985021][ C0] worker_thread+0x8a0/0xda0 [ 1167.985037][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1167.985063][ C0] ? __kthread_parkme+0x7b/0x200 [ 1167.985082][ C0] kthread+0x70e/0x8a0 [ 1167.985101][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1167.985122][ C0] ? __pfx_kthread+0x10/0x10 [ 1167.985140][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.985160][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.985181][ C0] ? __pfx_kthread+0x10/0x10 [ 1167.985199][ C0] ret_from_fork+0x3f9/0x770 [ 1167.985221][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.985245][ C0] ? __switch_to_asm+0x39/0x70 [ 1167.985261][ C0] ? __switch_to_asm+0x33/0x70 [ 1167.985276][ C0] ? __pfx_kthread+0x10/0x10 [ 1167.985293][ C0] ret_from_fork_asm+0x1a/0x30 [ 1167.985316][ C0] [ 1168.228374][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1168.235313][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1168.247576][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.257734][ T31] Call Trace: [ 1168.261068][ T31] [ 1168.264011][ T31] dump_stack_lvl+0x99/0x250 [ 1168.268625][ T31] ? __asan_memcpy+0x40/0x70 [ 1168.273406][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.278621][ T31] ? __pfx__printk+0x10/0x10 [ 1168.286491][ T31] panic+0x2db/0x790 [ 1168.290411][ T31] ? __pfx_panic+0x10/0x10 [ 1168.294849][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1168.299723][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1168.305556][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1168.310947][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1168.317122][ T31] watchdog+0x102d/0x1030 [ 1168.321468][ T31] ? watchdog+0x1de/0x1030 [ 1168.325905][ T31] kthread+0x70e/0x8a0 [ 1168.329991][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.334862][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.339469][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.344688][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.349917][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.354518][ T31] ret_from_fork+0x3f9/0x770 [ 1168.359304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.364437][ T31] ? __switch_to_asm+0x39/0x70 [ 1168.369209][ T31] ? __switch_to_asm+0x33/0x70 [ 1168.373992][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.378643][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.383438][ T31] [ 1168.386776][ T31] Kernel Offset: disabled [ 1168.391107][ T31] Rebooting in 86400 seconds..