last executing test programs: 8m54.957731526s ago: executing program 3 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b704000000000000b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010018000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m54.855849046s ago: executing program 3 (id=500): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x8) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0x8, 0xa, 0x1e, &(0x7f00000000c0)="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"}) r2 = syz_open_dev$vbi(&(0x7f0000000500), 0x3, 0x2) r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000580)={0x9, 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000840)={{r2}, r7, 0x0, @inherit={0x68, &(0x7f00000007c0)={0x1, 0x4, 0x8, 0xffffffffffffffff, {0x8, 0x7, 0x0, 0x1}, [0x9, 0xd71, 0x8, 0xd]}}, @subvolid=0x4}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000001840)=0x38) fsetxattr(r0, &(0x7f0000001880)=@known='trusted.overlay.nlink\x00', &(0x7f00000018c0)='\x00', 0x1, 0x1) r8 = accept4$vsock_stream(r1, &(0x7f0000001900)={0x28, 0x0, 0x2710}, 0x10, 0x80000) flistxattr(r8, &(0x7f0000001940)=""/77, 0x4d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000019c0)=0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001a00)={r6, r5, "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", "f13bd75fa9a5b67067f49b71d48f6482f8ec8a752c0bf6f99ccecf1a3d8aeb3ea14908721619cfdf4e1679d404c4f5a7f32b785213e718c768562e1366e0dd6637f714f011caa9e7ce878446c3af9264653ea38a4ec1247deb9d9378c5ae0a9251c9e9beecbaf41137606e2ca09e62e584a2a1fb228edf24465ca381feceac1697abdb13c9f5736699cd83c5f43e92b0b549415d4da539fbb14709c7c1c51ba57ebdd219a009a8ea15e748553d4dca04084d1beb5a343cb84efae56d17eb376d44cf0423e3de10c71477b0b05d083e55abd79cdf83ed5045fdc29b30177f7b8d3d238ab3def123ce1e647a34c68d2622014f9fecc3f2c398bebff412a4caac3e479337a56e5afa87239397347d7905080259b68bd615949f84e1a7f277753ed3d53f7fecc683a0073fed1c66e0394ac3489b19e42a8aeeb41ee30d5d31aeaa14a4a377361f687ebff830a6470ba61efad16c3f77d86ec7017f86cb8f40f83fc90026bd85a56d640543ba3e026a11dfe12c1beab245cd6927e05b0a3c7a31936b4817eaae6bb465d1702cd47c60072cacad55a0b41998434dd664dc8af8e64ab8e77a05e7e127a5ebe42e07b59070d49fb0a2e27e6219aee1bdbe4860f48f2fcd940c937f9c9cc2f67933baa3dfc0edd373b9ada911d8326418822385a2be4132d6d8fe7a6104afda9f5227b12638d7e8ded1e2c1caf2e63162a548be8955c69d905319035d60bee4bf8820a51eae97fdb7db5c17cfc1be2f3c967e7d09aa533bd2444cfb04e236aad93335eb45adb06011bbfc7b1a369b7c4252495e74b0c7e0883285a012608bc8379914a071de35bd9c494786d0d6de7cf9a3e737f449a00f36a8cbe91d8edf2ff61bf7a01ea57b38b58b9ce9909b6701d313d47c8d554f802b358e00cc15adb73e59300e0170d98696c069fe96847bce289e403a5d3e6d63a3c145b27fc38012d55baaa03a8b4ab0f78a0454a806a5918978a7cc649b0325689a60cf38562be6412beae9fe5675b3703508b60e7bc108521cb4b8718bd7847f4fcc769e853ecc319b4818c4356ef67b18354c1f9a006121a919e97741dd56a5b0eb83ca73ddfb19abfa850b535acfeaac3e743899190ddea4f63790561cdcccbcfe3ff5df89d3a7ec47dc8647ffff136e23cfe85528346d75644d6bc13bed849b6edb6c3d05b9e1bc8610eb9ad2c830281f4993d5f849882bacb96a1d1c7d50d3efb5e1cb5d011091d865b1fa52a369ec34a2feb12e63109e0d6f165d7950783477636d31a2a6eef079b4b6d719971c4419b98abacacb9b4bb761bcac847d290ef78966154374fecee64be07b383ed0e3391e2146c40098a1eaea997a554ad7b410a9c20d0be94bc87a11de447d2f41534ca69ca27e0b414c68651a91c2becb5ae4736a744d3135279914bf9e3884da2003e60fe2d315300e2541fe0fee557081ff1773c586e58f295eaa5a4be18ef8882e4d9c78549ab9620cef153b20eedb7e2cda10fa9093409947d5f87d299095796610182844a156ca72ea9ac779d6d711e984d3982fc78694278a8543a919be675c39cd526f675f2a7a1066b238631b492b7ca952bab7d2a8d0cb67021bd458aceabe779ffa9a978f0ee10f043625e7b5e73984355c0897468a531cc6bd8a0c74b0929a08aee5f9374eed647db8a2caa1e52b1916830165b0eb2840f26920c77195c85f44913d17e606da94818b6ee79ccc56ad0076bb1b9041099015b20bd6739ea0442a0edefc1f4407672ec4a864cf5319bb495abc64725b6ad5f318597e35587af7e54276cf7561f7532d02dc461fd282aa8ff5a870dbaf60cc49c0e5e074d5a81e1956105d36f6c3465d704a28595767a3c75e96c6a44b0a468aef9024e3343b56d203e3aff552b961cf02a8df62f0059557f5763d9ee2361f09bdf5ef0d5d081fd4f95170a07d9ecc63994fcaa9ea26acab4e88135ab08663c181220f5abd6415c260995cc8e0612183dfe79157ece09e0173a187df6b94280f0449940b85d08eac69c97dfb93f51458b342257b4f1ccf9fc28fa180483a883646e8cae9ea7901125f0b2c126956465d6fb9f4b6267694bd46a1ceef4bb7d5e724f55a1c3ecb08db63875929ff576609662a404ed60bd1e7d1fccf76d3fadf81c5e1ed7e89ded48515f6081cd318165971426876bebf903b594145b5c041738b6cd2c07f3ef3c96e8f8e495bc548da22949799f11e98b52902a1d8d748d407c38cb29d75fff40a21d3a0e22f09669c0849baeb09579eb0a403380a490a11579954dcc8e249ffe7696c258462dfe1450d5f2e76ee25d1cea6b9897bcf4bd7eaaef291d7f9f6879f014607ea1f49c6c284b05da03c34ce5ea555a032a49ed8df4b137561f8680409e2a3ca6cf9c9055ca2e5dc5b7d905868be74f05da5861938be7172aa81b41d6f3e0621ba1c90aeecc0996232f66694ccbbca32b4fdded0596132c866df759e168e57de30ddd05bbc0b0c0cab4255c20064e3facde37c1c1e2493729ef0e070137fcccb341d64377897239083d2aaa2f457867ba6f444140a7f7a39b3fd3f1e04217871274b9055c3fff9546e8cd6ebf43f2aab1e8b65565d8c2d6a0a379162c3c308ffc01cdfaf02cc6cf181f18eba3d64de37123e99de59b561c8f044834f83f21ad3ad6b415d3f5a769bfc9b64f38fdd11dc0034c3ac2b05f340a34c9743ea24b616c0719391345af81aea2f609a4ffe970cab352a8f51b115d441d4788ba061880596845effa8e2f3f2d851fdfe5bfe59e0684e2fe80f1998d4e9b886b02d620fe590db44537dd10e3b1c94a861c8bec71a7b6aa3f4706ee3a9bcf05a7b572c5527fb945eff533849c32052bf149f8930dfbd9c71f96ac155a0183012e36f6a2e61f661d89174d167b8eded0caf0fd60f6e4b7c57ed6ebf80ee796d4cabb55463b38e0f4a8a717a396ef0da73d3db4bc346617303663ce8f45470ac57dec658c683d41ee3cb5fc3b76db8e142634a94c0d7759417be31c8ad596f0bd06240535ae654e656af38cbf7c93eaf04148add345f896eadb4e9ac2c361a3b8f2d621e6b5b37c67c9dcfbf9c8c31c1e44c6cecc68fee08469a55c10c9590ea236abc229e7a3bb59bc7979a6c00dd9873282fa49a934fa096b699fdbfbcd52151e567c724de43483075f66e480ec30f8a5556e6ec8bb4dbb22e016f63e634131c47620ec6b139c531657920cc84e5f1bfb921adcd87cb9a6d3e4a67aeaabc8857c9f742539cd886a1cd9c509db01ea8897ba2e45a8b077c7b1150e644113aa20a7cee16f7c98adc2b44ae0721b2e5e0021867808718b16cdfa4eca3429f4d657889623329f42331cfc07249f5a096c56f5842aa539467513b01f0f236555e985256e2165ff4f4dacb8f555558302c19adc5bac7ce00da98fa602eb205abc67ece0836034e5cab19c370b4e3009bc3f026836d8cca8ae79d1cda2afc2aa7c4c224a81074eb87abceb84967c1b28e861fa461cf9a5ab1b8d493f57cf9625c4561e8f71a4a7747fe91fed5101098bc583a14e0c279a4241206f55b7be9aeeb5a5a53747a0dfdacfc476de789f98a4e1595ad6b46fa1b72e7645482168ef40d595d7d601baab3630c2a9916203e5a86fcb986b2c75022bceb086fb1e734258769a558b6deb2c9eb674bd0f8e35e2261a6e303d33ab53073342dd19bb391b1dea3405c5a44bca783ad106c33dc356762f20d7918139212e690952b3a81c7ea0dd0a9a9dfc2700b49f540e2b0d357ab23436a48622cf284ab714cc73a4fd543d29e78c5631a1e7a5d1025236cdb6721f5853a51a953f94ab0cfae7fff58a93771471bcfecdb340f9ea8ca687c9ee16ae38907256e3cd04b611bc38ce911151a22995682e4b42a81ae970e84ccc174c2a10b497572d44eaa01b5ac46e7813c46b3f7e76776fe2ed4dceb8ea4c41b1876dfad3fa7bf61409cecb443e2c2a8968f1b3838006a8ee4745627822bec1c828fd2a6cc85ad04b53d0304a2e03314dffb2fa74d9fed7aeb2e65051b7d661f3043e896f4faaf9cca3d7dc71979d16846445774c22b66e100676a3865934abb7f1696d062f97d081144731d1b4eb79b8bdf23eb49d6715b672eeb6d3263c88a1e7808b659244cc31cfc12c6715133971769e6c54de7367824bc0f879c917542718829b2a1902de3a1362cc9f0ca0f0f1e076f5bfec3b3dd7dee6ee19f6ef1494d49ce37b77312962ec977efe4cb596fd436c87cdb5d08849cc4403be753e23e6a46463c471b3cab832b5c47926fb37fc61f891fd952ab7623aa551b791dfaca82d809a41d6ad502c9b8bb790869cec146bf3aa2d1e7b7344dc748ba6d8c4a835b25153add99d004e8962c2bbb78a7e57fded4348ec4a0f77cfd3c940278f043ad9b5369bb2d61671f10406cfa77f850cd1b9e43e96974bc9a763ac5340103cbf3955aed222e7160fc724ece8de7a9d9b08d70f44ec21528bb75519db6326ef5f511dbdd71fc9ec17e231af3dce34bfdafa6e2ae0f1002fe8c07635e96693491b9780fc9c92122eca998f03d58384406f3502c690efcd5ea8a24e43c3523a7457780f97cd517d746f0637e040dd9f0b9335b1978e0973582a277beb7d2949eb11af77933c43d8afa0947358c0221a2b7823ce4be02ab355b26e03b826bfe4a1ba0bca5c37083a6a5c0d37a039b7975a302f31f257309460a12676186e28407af2c294941c73f248780afe30b46579e5f9d7ebe6cbcc24efa86972e3ab087391ca720ea1eaa0198efa27db3e8dbeafa2d8a60923bd1322c903bfbfbcf10be9311c6adc8ddeaa9cab459862b7da8f6aa995a0ece92ee8cbd56d55399d1f979042b6882343d7afbc7cb66bf79f47dea464ef125b9297c5f7689efe328367142037b40983cd6a8beadcd3b0acf7dd768d27bd611edd2f43002225314d156d0a3f3c41d8a208e638c04e72efd41ff8aecbe32259b6c425346723e74dbd0b168d5640f323c11739c2c5a527fb53e3008052bb61a01bdc71bfbb6afb619cfd21d77631340acef864f2f8ed79252aa2b4c7b0e68220f17a487246123932fb519728dc2c3ecd12ad79885a074d38a5745513bf3dbe6f5a5249fd0c3c04cc1eaca5e289608a5e3ba0688f96ed225e2dfc0a96306003b313fc4705577bc99f7982d05d5b57d059404afa5a735f548f7750438de80d9d0014f9ac5a2de187ca1409809f27a05be6f48ac2cbe91a5ec017f5449a15e830a3db6c2011bf343c9a2537c6d6e2ef3e9448e7456dec6969a305023ad6993d097dedc263f1c7b474375d0037fda33c51030ff0f006590ff95a2e25e3e797ca4518d7f6e5179b4bf5c809bf831f9e2b4430078de3ff208f0628ecead94b3d213b514ea20839f2be75ae313d4993c97e52f29ca86e93de86048a756280a627e57636c16"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000002a00)={0x1, 0x8, 0x3a, 0x2, 0x81, 0xc88}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002a80)='/proc/asound/timers\x00', 0x0, 0x0) write$P9_RMKDIR(r9, &(0x7f0000002ac0)={0x14, 0x49, 0x2, {0x2, 0x1, 0x6}}, 0x14) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000002b00)={0x9, 0x7, 0x81, 0xd, 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000002b40)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000002c40)=0xe8) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, r10, 0x0) dup(r3) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000003c80)={&(0x7f0000002c80)=""/4096, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000003d00)={0x5, &(0x7f0000003cc0)=[{0x3, 0x1, 0xd6}, {0x4, 0x81, 0x9, 0xe}, {0xc2, 0x8, 0x8, 0x9}, {0x4330, 0xff, 0x8b, 0x1ff}, {0xe, 0xf, 0x7, 0x71}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000003d40)) 8m53.55638238s ago: executing program 3 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x36}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x13}]}, 0x58}}, 0x4001) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000540)=@vmx={0x1, 0x0, 0x2080, {0xfffdb000, 0x50000, {0x1}, 0x1}, {"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", "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"}}) 8m53.437238498s ago: executing program 3 (id=508): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000180)=0x85, 0x4) io_submit(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0xe37}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x7, 0x6, r1, 0x0, 0x0, 0xfffffffffffffffe}]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r4 = userfaultfd(0x80001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x11, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_get_self_attr(0x66, 0x0, 0x0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x737}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap(&(0x7f00003d9000/0x4000)=nil, 0x4000, 0xc, 0x204031, 0xffffffffffffffff, 0xec774000) close(0x3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x54) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x200000, 0xde, &(0x7f0000000300)=""/222}]}) 8m52.54154108s ago: executing program 3 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xf1, 0x7, 0x5, 0xfffffae9}, {0x5, 0x7, 0xf3, 0x6}, {0x87, 0x0, 0x9}, {0x0, 0x0, 0x3, 0x5}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 8m52.164072323s ago: executing program 3 (id=518): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xd, 0x0, 0x4, 0x80000, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3c89b1c6893300f0723b57edf1a4b965624c8f9f8ecd59868471bea1154d019186c4782d03ce49ae56ca72d67a50ac90593a7343642f643f58e919814d5b05d499431e2505658ba60594d9695e8b084899404f8abb1554066ed955af8d68043a80da63da339e1aeb4293", 0x6a}, {&(0x7f00000000c0)="ce0a3a6846efff9796e80b2855", 0xd}], 0x2) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000140)={0xb02}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000001c0)={0x14}, 0x14) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000280)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000500)={r4, 0x1ff}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001500), 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000001540)={0x8, 0x40, 0x6, 0x400, 0x101}) close(r1) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000001580)=0x4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e21, 0xce0, @mcast2, 0x2}}, [0x0, 0x3, 0x9, 0xfffffffffffffe01, 0x0, 0x401, 0x3, 0x8, 0x0, 0x80000000, 0xeb, 0x3, 0x0, 0x0, 0x3ff]}, &(0x7f00000016c0)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001700)={r6, 0x3, 0x0, 0xffffffffffffff01, 0x24cd}, &(0x7f0000001740)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000017c0)={0x2, &(0x7f0000001780)=[{0x4, 0x1, 0x9, 0x6}, {0xfe, 0xfc, 0xf, 0x2}]}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000001800)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000001880)={0x8, r7}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000018c0)={0x0, 0x1}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001940)={r9, @in6={{0xa, 0x4e24, 0xfffff7e6, @local, 0xffff}}}, &(0x7f0000001a00)=0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0x837, 0x8, 0x3, 0x8001}]}) getsockname$packet(r1, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001bc0)={'ip6_vti0\x00', &(0x7f0000001b40)={'syztnl0\x00', r10, 0x29, 0x0, 0x9, 0xd, 0x40, @loopback, @private1, 0x20, 0x10, 0x1, 0x3}}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r5, 0xc0106440, &(0x7f0000001c40)={0x3, 0x10001, &(0x7f0000001c00)}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0xffff, 0x21000) r11 = fsmount(r1, 0x0, 0xb) ioctl$UI_SET_RELBIT(r11, 0x40045566, 0xd) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000001c80)={0xa, 0x0, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x7}) 8m51.767951828s ago: executing program 32 (id=518): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xd, 0x0, 0x4, 0x80000, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3c89b1c6893300f0723b57edf1a4b965624c8f9f8ecd59868471bea1154d019186c4782d03ce49ae56ca72d67a50ac90593a7343642f643f58e919814d5b05d499431e2505658ba60594d9695e8b084899404f8abb1554066ed955af8d68043a80da63da339e1aeb4293", 0x6a}, {&(0x7f00000000c0)="ce0a3a6846efff9796e80b2855", 0xd}], 0x2) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000140)={0xb02}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000001c0)={0x14}, 0x14) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000280)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000500)={r4, 0x1ff}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001500), 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000001540)={0x8, 0x40, 0x6, 0x400, 0x101}) close(r1) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000001580)=0x4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e21, 0xce0, @mcast2, 0x2}}, [0x0, 0x3, 0x9, 0xfffffffffffffe01, 0x0, 0x401, 0x3, 0x8, 0x0, 0x80000000, 0xeb, 0x3, 0x0, 0x0, 0x3ff]}, &(0x7f00000016c0)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001700)={r6, 0x3, 0x0, 0xffffffffffffff01, 0x24cd}, &(0x7f0000001740)=0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000017c0)={0x2, &(0x7f0000001780)=[{0x4, 0x1, 0x9, 0x6}, {0xfe, 0xfc, 0xf, 0x2}]}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000001800)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000001880)={0x8, r7}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000018c0)={0x0, 0x1}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001940)={r9, @in6={{0xa, 0x4e24, 0xfffff7e6, @local, 0xffff}}}, &(0x7f0000001a00)=0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0x837, 0x8, 0x3, 0x8001}]}) getsockname$packet(r1, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001bc0)={'ip6_vti0\x00', &(0x7f0000001b40)={'syztnl0\x00', r10, 0x29, 0x0, 0x9, 0xd, 0x40, @loopback, @private1, 0x20, 0x10, 0x1, 0x3}}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r5, 0xc0106440, &(0x7f0000001c40)={0x3, 0x10001, &(0x7f0000001c00)}) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0xffff, 0x21000) r11 = fsmount(r1, 0x0, 0xb) ioctl$UI_SET_RELBIT(r11, 0x40045566, 0xd) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000001c80)={0xa, 0x0, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x7}) 7.516297631s ago: executing program 2 (id=3039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x87, 0x1, 0x6, 0x3}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, 0x0) 7.363452896s ago: executing program 2 (id=3040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x15, 0x3, 0xfffffffc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xb, 0x1, {{0x5, 0x11}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 7.239868824s ago: executing program 2 (id=3042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x7000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) 6.276013017s ago: executing program 2 (id=3050): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x3b42, 0x2, 0xfffffffe, 0x2}) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYRES32], 0x20) read$eventfd(r2, &(0x7f0000000000), 0x8) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x11, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000a80)=""/188, 0xba) r4 = syz_io_uring_setup(0x5329, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r4, 0x0, 0x0, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.083442027s ago: executing program 0 (id=3053): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c000) unshare(0x6a040000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x2, 0x5, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x5, 0x2b, 0x0, @private=0xa010101, @private=0xa010100}}}}) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) creat(0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040040) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@remote, @multicast2}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {0x2, 0xfff3}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x220410d0}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xc7, 0x1, &(0x7f0000000480)='|'}) 5.749110189s ago: executing program 0 (id=3054): r0 = socket$kcm(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'batadv_slave_0\x00', {0x4}}) 5.62443577s ago: executing program 0 (id=3056): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r0 = socket(0x2, 0x80805, 0x1) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)}}, {{&(0x7f0000002c80)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f00000026c0)}}], 0x3, 0x4050088) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1}, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x41000003, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x541b, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x9, 0xfd, 0x8, 0x98, 0xf8, 0xfe, 0x21, 0x9, 0x5, 0x4, 0x9, 0x2}, {0xc, 0x404, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x0, 0x7, 0x7f, 0xf, 0x203}, {0x3, 0x4c3a, 0x3, 0x4e, 0x5c, 0x8, 0x4, 0x4, 0x9, 0x8, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0xffffffffffffffff, 0x5, 0x80, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x4005, 0x7fff, 0x1000200006, 0x4, 0x2, 0x0, 0x20000000001], 0xeeef0000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 5.248464243s ago: executing program 4 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b7040000ffffffb0b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.17716644s ago: executing program 4 (id=3059): r0 = socket(0x10, 0x3, 0x4) mknodat$null(0xffffffffffffffff, &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa956cacdc74b3478, 0x103) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="c3b9da367494632152ddef80ad5e75afef", 0x11}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r3, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000080)='=', 0x1}]) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) socket(0x10, 0x3, 0x4) (async) mknodat$null(0xffffffffffffffff, &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa956cacdc74b3478, 0x103) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) io_setup(0x20000000001005, &(0x7f0000000200)) (async) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="c3b9da367494632152ddef80ad5e75afef", 0x11}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090) (async) io_submit(r3, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000080)='=', 0x1}]) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1c1, 0xfffffffffffffffe) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) (async) 5.016453443s ago: executing program 4 (id=3060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b704000000000000b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0bf030000000000008500000083000000bf090000000800005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.928109249s ago: executing program 4 (id=3061): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000500)={0x0, 0x9, 0x3e, {0x3e, 0x8, "b5743125cc6bad051a92108af7d5cb741f6a72379573718720ec93272a6f943b1ca4ef3335a64e78d0cd18227cc30f9cbb747ebe06a3c2be025270b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_FLOWS={0x5, 0x5, 0x7ffffffe}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_INTERVAL={0xffffffdd, 0x3, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) landlock_restrict_self(r3, 0x0) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x2, 0x0) 4.768918282s ago: executing program 1 (id=3064): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r4, @ANYBLOB="5a006708060005"], 0x24}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r6, 0x0, 0xc7, 0x1, &(0x7f0000000480)='|'}) 4.758320735s ago: executing program 1 (id=3065): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x70bd29, 0x0, {0x2, 0x0, 0x20, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x1}}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800014000000010080001400000001308000340000000020800014020000017080002400000001008000340000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2511000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 4.68374497s ago: executing program 0 (id=3066): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x226242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000180)={0x0, 0x2}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r4, 0x79f, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010700278ed00ffffba90fd3183ea000000ff01000000000000334ceff9158faa24eb0a755fa8b5cdb364a36088", @ANYRES32=r5, @ANYBLOB="0b1b0500000000001c0012800b00010069703667726500000c0002800800150030100a00"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r5, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) listns(&(0x7f0000000240)={0x20, 0x0, 0xfffffffffffffff9, 0x8000000}, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000300)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2024160000001600fcedfa26d19a46253d80"], 0x0, 0x0, 0x0}, 0x0) 3.494690614s ago: executing program 5 (id=3072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x3}, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x804) 3.142466306s ago: executing program 2 (id=3073): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x40000000040a01, 0x0) io_uring_setup(0x2d29, &(0x7f0000000600)={0x0, 0x707d, 0x400, 0x2, 0xe8}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r4, &(0x7f0000000080), 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x17c, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4154}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x517}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x60000, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0x5877, 0x200, 0x7, 0x28, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0xff, 0x0, 0x3}) 3.13942195s ago: executing program 5 (id=3074): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mq_open(&(0x7f0000000200)='.\xae}^-%&+\x00', 0x1, 0x100, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000003c0)={0x2, 0x6, 0x202, 0x0, 0xec, 0x40010000, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.004489777s ago: executing program 1 (id=3075): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2b, 'net'}]}, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.789920736s ago: executing program 1 (id=3076): syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r4}, 0x10) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r6, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) (async) io_cancel(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28b8d5b3273c902b, 0x5602, r2, 0x0, 0x0, 0x100000000, 0x0, 0x1}, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) r8 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4\xc9\xc3\a\"\xed\xc3\xb3\xa6$\xae$\x91&6n @\xf4\xd6A\xdb\xd7B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rr)E\xe6\xee\r\x9d\xf0\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\x96\\\\//\xe3\xb8\xc7\x0f\x9a\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19&\xd8\xc0e\xdd\x9a\xfe\xbf\xf4U\fB\\\x98j\x19%!\x98\x18\xba\xed#N\x19\xe6}\x02\x90Q\x1arT\x89\\ \x1e\x12c\xabj\xe4\x01q\xa1\x7f\xbc{Y\n\x8bj\xaf\x1b\xbf\xcb\xaf\xc9\x9c\xf4@YC\xd9H]\x9ePZ\v\xd7,\x15\x01Im(\xb1L-m\'2q\x8d\xddV\xf9&\xc5+ir8h', 0x0) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x700, 0x7, 0xfffffbd9, 0x5, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@lsrr={0x83, 0x3, 0x56}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x3, [{@private=0xa010102, 0x80}, {@multicast1, 0xc9}]}, @end, @ra={0x94, 0x4}]}}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f00000001c0)="a7825dc7", 0x4}, {&(0x7f0000000200)="ff2457b61ee0ff676d8421b1521fdb0d6c777a0f28c6f70d5efbe093ee69017c6a6f814f3d0a1a398f9c076d75", 0x2d}, {&(0x7f0000000380)="d97553e78c03943cace83b9824a903a5d7230548ce989f60e70ad6a58b59631fb7deb255a3c9db35afe5a82a784b2d3c8b8433f28f3730d9e7c2c4a961c7c915d71b49ac65fd94c6cba18fd7c0cb45191c510536e725929fec7bd6b303b02c1170351c2b288bb48cd800eb0edd464be868b97421378ee8c67fef0d3f1b8ad39f8bf6b9162ba08ee04d7eb933103e9c704870939fc9622ed21e3750b01859e6", 0x9f}, {&(0x7f0000000600)="d005346493a7d4abc00b9893a5a2135fb9e9b2c97d4cafd9a20d093466669c91bb468ca5c71a8823a0a2629f1e233c0e921c606044e5e3ff0da674f947439ceeb683362e9a70ec2acdebcff70622db06f665f5581ec591d31a009bf5c7768fe3509c712f454cdb95642014bdf600726345da09ca7b7d7169888b52d6f525d2298e4a0718c0d878ddd84c56b3c3b1af6b04c11f19a76c0c8f2d72d367e26f0eaf7b3b30bc748f9d057241a036763f13a251be1d606c0e305a28211aa11c3b6686ff0c4c158cf4d5c337e41382", 0xcc}], 0x4, 0x8) setgroups(0xffffffffffffff81, 0x0) (async) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000001240)=""/143) socket(0x28, 0x2, 0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) 2.539032501s ago: executing program 1 (id=3077): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000140)={0x0, 0x6, 0xc8, "2895962cf7a3c5891099f74115c62f8c58f4a1777d53892d828edd1b855d43f162ab9e56d5007ac194221f81ca364656f8680679da32de2753378022477ba2f8f2a5c98b20e2113dfb9a9b5c440e83aca8506c4ce9e163a6ea0ca290a6224be9ce49c71c3056f8057753a3428121eadbd28594b0469e0a3b9dc71677b5db256266beffd1dbf82db7883a3cf9f3b24388451d7e4d499c68d5bd7865437240e4af78930f0e941ae9001420450de8854cee3fea8177b25201e9a7a9fba10c3f00"/200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.87635318s ago: executing program 4 (id=3078): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa00000000000000"], 0xfc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) 1.873152143s ago: executing program 4 (id=3079): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x6, 0x0, 0x9}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/39, 0x27}], 0x1, 0x9, 0xbf1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.639701728s ago: executing program 0 (id=3080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="08002600940900000800b700c5000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000a000180c2000001a5adb7138c1daaaaaaaaaa27aaaaaaaaaaaaffffffffffffffffffffffffaaaaaaaaaebbbbbbbbbbbbbb95ed440b40d401"]) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x10, 0x807, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x110) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="08002600940900000800b700c5000000"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x2}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000a000180c2000001a5adb7138c1daaaaaaaaaa27aaaaaaaaaaaaffffffffffffffffffffffffaaaaaaaaaebbbbbbbbbbbbbb95ed440b40d401"]) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x10, 0x807, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x110) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) 1.583349242s ago: executing program 5 (id=3081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bf7900000000000007020000f8ffffffb703000000000000b7040000ffffffb0b5001e008200000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.568692937s ago: executing program 5 (id=3082): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000000)='\x00', 0x300, &(0x7f0000000080)={@align=0x6, {0x2, 0xd, 0x10001}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)}) close_range(r0, r3, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x2) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 1.501635932s ago: executing program 0 (id=3083): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400), 0x0, 0x1, 0x0, 0x10000, 0x34f}}, 0x120) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x9}}, 0x800}, 0x90) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x558410e9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000675000/0x2000)=nil, &(0x7f000091d000/0x1000)=nil, &(0x7f000073c000/0x4000)=nil, &(0x7f0000268000/0x3000)=nil, &(0x7f00006c0000/0x3000)=nil, &(0x7f0000256000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, &(0x7f00008f5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000b1b000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="eddfae6022da9536305ba310660eabe448566d611d64849923f80bd32725bcd68e8f063997df18731460a81140d3420b5a791d07937e855506", 0x39, r5}, 0x68) uname(&(0x7f0000000040)=""/114) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmallocinfo\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000045ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 648.255252ms ago: executing program 5 (id=3084): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x48cb, 0x80, 0x2, 0x1fd}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2044, 0x800, 0x1, 0xf3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb9e5, 0x0, 0x2, 0x242}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce29, 0x80, 0x0, 0x33b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x58e7, 0x0, 0x1, 0x230}}], 0x4, &(0x7f0000001300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xaf}, 0x0, 0x0, '\x00', {0x2, 0xd35, 0x0, &(0x7f0000000300)=@buf_max_buf="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"}}, &(0x7f0000001380)) syz_ublk_setup_io_uring(0x4f68, &(0x7f00000013c0)={0x0, 0xe784, 0x2000, 0x3, 0x52, 0x0, r0}, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r2, &(0x7f0000001500), 0x0, 0x40002142, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_lsm={0x1d, 0x14, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @generic={0xeb, 0x6, 0x1, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='GPL\x00', 0x80000000, 0x10, &(0x7f0000001640)=""/16, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0x5, 0x8, 0x10001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001700)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001740)=[{0x2, 0x4, 0x0, 0x4}, {0x0, 0x1, 0xd, 0x7}, {0x2, 0x2, 0x3, 0xb}, {0x5, 0x4, 0xf, 0x6}], 0x10, 0x2}, 0x94) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000001840)={0xffffffffffffffff}) r5 = memfd_secret(0x80000) timer_create(0x3, &(0x7f00000018c0)={0x0, 0x3e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001900)=0x0) timer_settime(r6, 0x1, &(0x7f0000001940)={{}, {0x77359400}}, &(0x7f0000001980)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000019c0)={'bridge0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001a80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001a40)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000001ac0)={0x1, 0x10, 0xfa00, {&(0x7f0000001a00), r8}}, 0x18) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/consoles\x00', 0x0, 0x0) clock_getres(0x1, &(0x7f0000001b40)) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000001b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000001bc0)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000001c80)={&(0x7f0000001c40)=[{0x4, 0x9, 0x1}], 0x1, 0x10, 0x6, 0x4}) rt_sigtimedwait(&(0x7f0000001cc0)={[0x17]}, &(0x7f0000001d00), &(0x7f0000001d80)={0x0, 0x989680}, 0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_TMR_SELECT(r5, 0x40045408) sendmsg$nl_route_sched_retired(r9, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffff}, {0xffe0, 0x9}, {0xf, 0xb}}, [@f_rsvp6={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001fc0)={@cgroup=r4, 0x2e, 0x0, 0xfffffff8, &(0x7f0000001ec0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0], 0x0}, 0x40) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002000)={@cgroup=r13, r9, 0x1c, 0x0, r5, @void, @value=r3, @void, @void, r12}, 0x20) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x60, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7d7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}]}, 0x60}, 0x1, 0x0, 0x0, 0x95}, 0x40010) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000002200)={0x6, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000002240)={@local, @remote, @remote, 0xffffffff, 0x7, 0x3a5b, 0x500, 0x5, 0x1440044, r7}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000022c0)={0x0, 0xf4, "29725dec9a748f033e4f359df36bc7f8273a41e95e424dc50ee49b9c06cf43a1b1a5c4693b9dbcd84a42682e8c21cbdc64412f1ebc4c9fb58e6ada181c63517c15d618db6fd0d3c025c6c7dfc70615953c2caa5b4450942e40b96a0f567761e447f164fb3f3b22e0e5bdfa7bcbbdd462e756692c348cc3b6e2b081bd329d0fcdd9b99d8b57706ce91e46f88f0df8ffa0d13109602a2d9a490f277a6dca3856aac89bab7214c415b613d1a36a3bd12cb4062d881c8027da40cb08722efdc590aafc76710e7bf635a3bdf96a3171330572e672d8d5b9694cfa8ef594a738e7185b932596e146ec5d5d07d939ace75b4092b0176715"}, &(0x7f00000023c0)=0xfc) sendmsg$nl_xfrm(r9, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002500)={&(0x7f0000002440)=@getsadinfo={0x98, 0x23, 0x400, 0x70bd28, 0x25dfdbff, 0x0, [@algo_crypt={0x83, 0x2, {{'essiv(ctr-twofish-avx,tgr192-generic)\x00'}, 0x1d8, "899dbe504092bd2518966440c277350741c84f374df0b70aa06406bef755d3600bbc1d7757f471bb36490a8e06eac0a8501d16dab3e73b48ea8864"}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 634.59365ms ago: executing program 5 (id=3085): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x2, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040200010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 513.94943ms ago: executing program 1 (id=3086): r0 = socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x3) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x101, 0x0) getdents64(r3, &(0x7f0000000200)=""/75, 0x4b) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x4) syz_clone(0x140000, &(0x7f0000000240)="f7b27104e814d0004382af590b41f866fc8a3b076e1fc3be7f3d9d3ed7fc303cc1da815652033c045abaa9b2b6830d0c12a4eb5704e094ffc331ba76d99ff4d940339190deb95d52d34ea38ed2349972ed1455775c0797a75e9bb03163c146a66cb517fe49292d588cb073b109a495c0bcb478e648cfef0d7dcfd2b3aa2635902716da8aa09fc4d47c988e757fb44b4009f7b34823c5c00952e03461e7285446b91f9cc3cd2a8fe0c18e10ebaefe81cc4d85463390789bafc891a8ae356aa15f7104d080001a6b8c46d6aa727e1fcf", 0xcf, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="c478101cc1569bb4afd0f2003299514920a8418911dadfe6a18475517cc3871ebc8ee707c7b890c4d117192480f0c2cbc9c2bb73b7858f46737a883216118266cef53c4bfc1147a3745fa118ad389cbbe10e166bd2b0b0") write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000011140100000000000000000008004b000000000008004a000000000008004b001300"], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 0s ago: executing program 2 (id=3087): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0x400, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x4, 0x2, 0x100, 0x3, 0x0, [{0x1, 0x4, 0x5, '\x00', 0x81}, {0x7, 0x45, 0x0, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x1}, {0xc6, 0x4, 0x3, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x9, 0xf}, {0x2, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x0, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x80, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x4}, {0x60, 0x3, 0x5, '\x00', 0xb}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x8c, 0x3, 0x7f}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x4, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x40, 0x0, 0x7, '\x00', 0xe}]}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syslog(0x3, 0xffffffffffffffff, 0x1000000) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd70df2500010000000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000800000000003f14000200fe80"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xfffffffffffffd47, &(0x7f00000001c0)={&(0x7f00000000c0)=@getnexthop={0x20, 0x6a, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000180)) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x4000, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@mcast1, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x25dfdbff, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 899814][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 640.909462][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.914843][T15051] pwc: recv_control_msg error -71 req 04 val 1500 [ 640.929053][ T5721] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 640.931087][T15051] pwc: recv_control_msg error -71 req 02 val 2500 [ 640.943900][ T5721] usb 3-1: config 244 has no interface number 0 [ 640.951438][ T5721] usb 3-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 640.951474][ T5721] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 640.951500][ T5721] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 640.951526][ T5721] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 640.951546][ T5721] usb 3-1: config 244 interface 68 has no altsetting 0 [ 640.955518][ T5721] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 640.955548][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.955568][ T5721] usb 3-1: Product: syz [ 640.955583][ T5721] usb 3-1: Manufacturer: syz [ 640.955600][ T5721] usb 3-1: SerialNumber: syz [ 640.959438][T15051] pwc: recv_control_msg error -71 req 02 val 2400 [ 640.961670][T15051] pwc: recv_control_msg error -71 req 02 val 2600 [ 640.962084][T15051] pwc: recv_control_msg error -71 req 02 val 2900 [ 640.962823][T15051] pwc: recv_control_msg error -71 req 02 val 2800 [ 640.963387][T15051] pwc: recv_control_msg error -71 req 04 val 1100 [ 640.963770][T15051] pwc: recv_control_msg error -71 req 04 val 1200 [ 640.992244][T15051] pwc: Registered as video103. [ 640.994871][T15051] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 641.001927][T15051] usb 1-1: USB disconnect, device number 55 [ 641.184214][ T5721] comedi comedi5: Endpoint has wrong direction [ 641.184247][ T5721] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 641.198537][ T5721] usb 3-1: USB disconnect, device number 73 [ 641.251123][T15088] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 641.270257][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 641.419823][T15088] usb 2-1: Using ep0 maxpacket: 8 [ 641.420163][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 641.427062][T15088] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.442977][T15088] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.453249][T15088] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 641.464264][T15088] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.476993][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 641.478147][T15088] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 641.487202][ T24] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 641.487234][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 641.491928][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 641.522069][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.530412][ T24] usb 6-1: Product: syz [ 641.534421][T15088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.534742][ T24] usb 6-1: Manufacturer: syz [ 641.547462][ T24] usb 6-1: SerialNumber: syz [ 641.556925][ T24] usb 6-1: config 0 descriptor?? [ 641.639928][T15591] fuse: Bad value for 'user_id' [ 641.645143][T15591] fuse: Bad value for 'user_id' [ 641.771825][ T24] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 641.783540][T15088] usb 2-1: GET_CAPABILITIES returned 0 [ 641.785776][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 641.796981][T15088] usbtmc 2-1:16.0: can't read capabilities [ 641.812125][ T24] usb 6-1: USB disconnect, device number 16 [ 641.979866][ T5721] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 642.003405][ T24] usb 2-1: USB disconnect, device number 82 [ 642.141975][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 642.150884][ T5721] usb 3-1: config 3 has an invalid interface number: 106 but max is 0 [ 642.159176][ T5721] usb 3-1: config 3 has no interface number 0 [ 642.165401][ T5721] usb 3-1: config 3 interface 106 has no altsetting 0 [ 642.174391][ T5721] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=91.2c [ 642.183861][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.192121][ T5721] usb 3-1: Product: syz [ 642.196381][ T5721] usb 3-1: Manufacturer: syz [ 642.201577][ T5721] usb 3-1: SerialNumber: syz [ 642.421821][ T5721] adutux 3-1:3.106: interrupt endpoints not found [ 642.431903][ T5721] usbhid 3-1:3.106: couldn't find an input interrupt endpoint [ 642.453382][ T5721] usb 3-1: USB disconnect, device number 74 [ 642.690148][T15088] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 642.714853][T15614] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 642.723554][T15614] tipc: Enabling of bearer rejected, failed to enable media [ 642.733133][T15614] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 642.859897][T15088] usb 6-1: Using ep0 maxpacket: 32 [ 642.871719][T15088] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.889776][T15088] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 642.909796][T15088] usb 6-1: config 0 interface 0 has no altsetting 0 [ 642.936908][T15088] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 642.958574][T15088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.978513][T15088] usb 6-1: Product: syz [ 642.983005][T15088] usb 6-1: Manufacturer: syz [ 642.999831][T15088] usb 6-1: SerialNumber: syz [ 643.016374][T15088] usb 6-1: config 0 descriptor?? [ 643.140559][T15627] tipc: Enabling of bearer rejected, failed to enable media [ 643.434722][T15088] gs_usb 6-1:0.0: Configuring for 158 interfaces [ 643.728026][T15636] netlink: 'syz.2.2782': attribute type 1 has an invalid length. [ 643.730381][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 644.045305][T15088] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 644.057736][T15088] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 644.075519][T15088] usb 6-1: USB disconnect, device number 17 [ 644.112271][ T24] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 644.286998][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 644.307925][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.317923][ T24] usb 2-1: Product: syz [ 644.324560][ T24] usb 2-1: Manufacturer: syz [ 644.334469][ T24] usb 2-1: SerialNumber: syz [ 644.348769][ T24] usb 2-1: config 0 descriptor?? [ 644.393393][T15654] macvlan0: entered allmulticast mode [ 644.399260][T15654] syz_tun: entered allmulticast mode [ 644.410024][T15654] syz_tun: left allmulticast mode [ 644.468749][T15657] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2788'. [ 644.556290][T15659] netlink: 'syz.4.2789': attribute type 21 has an invalid length. [ 644.563833][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 644.565306][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 645.049841][ T5698] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 645.209841][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 645.217868][ T5698] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 645.227799][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.276986][ T5698] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 646.215282][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 646.262896][ T24] usb 2-1: USB disconnect, device number 83 [ 646.337273][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.346224][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.638158][ T5698] gspca_nw80x: reg_r err -110 [ 646.645572][ T5698] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 649.160899][T15693] geneve2: entered promiscuous mode [ 649.172209][T15087] usb 6-1: USB disconnect, device number 18 [ 649.278071][T10164] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 59168 - 0 [ 649.295035][T10164] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 59168 - 0 [ 649.304118][T10164] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 59168 - 0 [ 649.318588][T10164] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 59168 - 0 [ 649.487136][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2802'. [ 649.642932][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2805'. [ 649.657788][T15720] binder: 15717:15720 unknown command 1768304430 [ 649.667934][T15720] binder: 15717:15720 ioctl c0306201 200000000100 returned -22 [ 649.680065][T15087] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 649.765886][T15729] netlink: 'syz.2.2810': attribute type 32 has an invalid length. [ 649.840615][T15087] usb 5-1: Using ep0 maxpacket: 32 [ 649.851714][T15087] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.864854][T15087] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 649.876058][T15087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.886222][T15087] usb 5-1: Product: syz [ 649.890775][T15087] usb 5-1: Manufacturer: syz [ 649.895513][T15087] usb 5-1: SerialNumber: syz [ 649.899836][T15051] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 650.001633][T15088] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 650.059824][T15051] usb 1-1: Using ep0 maxpacket: 32 [ 650.067149][T15051] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 650.076949][T15051] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 650.085781][T15051] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 650.096680][T15051] usb 1-1: config 1 has no interface number 0 [ 650.103173][T15051] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.119028][T15051] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 650.133621][T15051] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 650.142978][T15051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.154925][T15087] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 650.161759][T15088] usb 6-1: device descriptor read/64, error -71 [ 650.177277][T15087] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 650.191086][T15051] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 650.259297][T15087] usb 5-1: USB disconnect, device number 95 [ 650.312989][T13175] udevd[13175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.386387][T15051] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 650.409776][T15088] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 650.539844][T15088] usb 6-1: device descriptor read/64, error -71 [ 650.660847][T15088] usb usb6-port1: attempt power cycle [ 650.806930][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.822234][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.969790][ T5636] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 651.019985][T15088] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 651.043837][T15088] usb 6-1: device descriptor read/8, error -71 [ 651.055377][T15087] usb 1-1: USB disconnect, device number 56 [ 651.067287][T15087] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 651.142469][ T5636] usb 2-1: config 251 has an invalid interface number: 243 but max is 0 [ 651.151100][ T5636] usb 2-1: config 251 has no interface number 0 [ 651.157384][ T5636] usb 2-1: config 251 interface 243 has no altsetting 0 [ 651.167311][ T5636] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 651.176710][ T5636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.184870][ T5636] usb 2-1: Product: syz [ 651.189288][ T5636] usb 2-1: Manufacturer: syz [ 651.193978][ T5636] usb 2-1: SerialNumber: syz [ 651.210773][T15051] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 651.289825][T15088] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 651.311655][T15088] usb 6-1: device descriptor read/8, error -71 [ 651.339803][T15051] usb 5-1: device descriptor read/64, error -71 [ 651.421743][T15088] usb usb6-port1: unable to enumerate USB device [ 651.430069][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 651.579971][T15051] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 651.606033][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 651.628923][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.639423][ T24] usb 3-1: Product: syz [ 651.650371][ T24] usb 3-1: Manufacturer: syz [ 651.659895][ T24] usb 3-1: SerialNumber: syz [ 651.729831][T15051] usb 5-1: device descriptor read/64, error -71 [ 651.850072][T15051] usb usb5-port1: attempt power cycle [ 651.902132][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 651.929809][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 651.950715][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 651.972528][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 652.000025][ T24] usb 3-1: USB disconnect, device number 75 [ 652.035240][ T5698] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 652.189813][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 652.211385][ T5698] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 652.219863][T15051] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 652.234703][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.246001][ T5698] usb 1-1: config 0 has no interface number 0 [ 652.252463][ T5698] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 652.263236][ T5698] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 652.274885][T15051] usb 5-1: device descriptor read/8, error -71 [ 652.281152][ T5698] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 652.293246][ T5698] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 652.305110][ T5698] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 652.315950][ T5698] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 652.337997][ T5698] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 652.350145][ T5698] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 652.360296][ T5698] usb 1-1: config 0 interface 239 has no altsetting 0 [ 652.371239][ T5698] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 652.390388][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.409775][ T5698] usb 1-1: Product: syz [ 652.414021][ T5698] usb 1-1: Manufacturer: syz [ 652.430624][ T5698] usb 1-1: SerialNumber: syz [ 652.437815][ T5698] usb 1-1: config 0 descriptor?? [ 652.452602][T15769] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 652.460391][T15769] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 652.480707][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 652.505449][T14960] Bluetooth: hci4: urb ffff888036d9fd00 submission failed (90) [ 652.519793][T15051] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 652.560963][T15051] usb 5-1: device descriptor read/8, error -71 [ 652.629971][ T24] usb 3-1: device descriptor read/64, error -71 [ 652.651751][ T5636] sisusb 2-1:251.243: Invalid USB2VGA device [ 652.658117][ T5636] sisusb 2-1:251.243: probe with driver sisusb failed with error -22 [ 652.672695][T15051] usb usb5-port1: unable to enumerate USB device [ 652.673601][ T5636] usb 2-1: USB disconnect, device number 84 [ 652.881407][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 652.957598][ T5636] usb 1-1: USB disconnect, device number 57 [ 653.043924][ T24] usb 3-1: device descriptor read/64, error -71 [ 653.171098][ T24] usb usb3-port1: attempt power cycle [ 653.396272][T15794] fuse: Unknown parameter '184467440737095516150x0000000000000006' [ 653.470532][T15798] syz_tun: entered allmulticast mode [ 653.535753][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 653.560644][ T24] usb 3-1: device descriptor read/8, error -71 [ 653.799807][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 653.820478][ T24] usb 3-1: device descriptor read/8, error -71 [ 653.846519][T15815] netlink: 'syz.5.2835': attribute type 21 has an invalid length. [ 653.855182][T15815] IPv6: NLM_F_CREATE should be specified when creating new route [ 653.911694][T15051] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 653.940148][ T24] usb usb3-port1: unable to enumerate USB device [ 654.049821][T15051] usb 2-1: device descriptor read/64, error -71 [ 654.201190][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 654.201207][ T29] audit: type=1326 audit(1781429722.027:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.243713][ T29] audit: type=1326 audit(1781429722.057:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.287511][ T29] audit: type=1326 audit(1781429722.057:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.299821][T15051] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 654.314168][ T29] audit: type=1326 audit(1781429722.057:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.370472][ T29] audit: type=1326 audit(1781429722.057:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.395840][ T29] audit: type=1326 audit(1781429722.057:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.422040][ T29] audit: type=1326 audit(1781429722.057:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.454234][ T29] audit: type=1326 audit(1781429722.057:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.493931][ T29] audit: type=1326 audit(1781429722.057:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.522415][ T29] audit: type=1326 audit(1781429722.097:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15825 comm="syz.4.2838" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 654.548704][T15051] usb 2-1: device descriptor read/64, error -71 [ 654.592482][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2839'. [ 654.660194][T15051] usb usb2-port1: attempt power cycle [ 654.999797][T15051] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 655.020489][T15051] usb 2-1: device descriptor read/8, error -71 [ 655.260081][T15051] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 655.306694][T15051] usb 2-1: device descriptor read/8, error -71 [ 655.385070][T15847] netdevsim0: renamed from gre0 (while UP) [ 655.402796][T15847] netdevsim0: entered allmulticast mode [ 655.409083][T15847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 655.443185][T15051] usb usb2-port1: unable to enumerate USB device [ 655.569799][ T5698] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 655.669777][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 655.720209][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 655.730084][ T5698] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 655.741667][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.751503][ T5698] usb 3-1: Product: syz [ 655.755718][ T5698] usb 3-1: Manufacturer: syz [ 655.760532][ T5698] usb 3-1: SerialNumber: syz [ 655.773065][ T5698] r8152-cfgselector 3-1: Unknown version 0x0000 [ 655.779578][ T5698] r8152-cfgselector 3-1: config 0 descriptor?? [ 655.831251][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 655.840188][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 655.850543][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 655.859559][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 655.870840][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 655.883702][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 655.894183][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 655.902490][ T24] usb 5-1: Product: syz [ 655.906710][ T24] usb 5-1: Manufacturer: syz [ 655.918045][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 655.924064][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 655.931331][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 655.937290][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 655.989233][ T5698] r8152-cfgselector 3-1: Needed 1 retries to read version [ 655.997275][ T5698] r8152-cfgselector 3-1: Unknown version 0x7070 [ 656.004945][ T5698] r8152-cfgselector 3-1: No union descriptors [ 656.126375][T15087] usb 5-1: USB disconnect, device number 100 [ 656.203812][ T5698] r8152-cfgselector 3-1: USB disconnect, device number 80 [ 656.451461][T15087] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 656.613015][T15087] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 656.648036][T15087] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 656.676568][T15087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 656.703006][T15087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 656.737613][T15087] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 656.778528][T15087] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 656.814335][T15087] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 656.836563][T15087] usb 5-1: Product: syz [ 656.849926][T15087] usb 5-1: Manufacturer: syz [ 656.881724][T15087] cdc_wdm 5-1:1.0: skipping garbage [ 656.903990][T15087] cdc_wdm 5-1:1.0: skipping garbage [ 656.923748][T15087] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 656.945296][T15087] cdc_wdm 5-1:1.0: Unknown control protocol [ 657.079827][ T5698] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 657.088561][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.094267][ C1] cdc_wdm 5-1:1.0: Cannot schedule work [ 657.100158][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.106037][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.111997][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.117834][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.122287][T15088] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 657.123843][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.124041][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.124237][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.149245][ T24] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 657.157083][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.164529][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.170411][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.178478][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.184601][ C1] cdc_wdm 5-1:1.0: Stall on int endpoint [ 657.190316][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 657.211402][ T5636] usb 5-1: USB disconnect, device number 101 [ 657.309851][T15088] usb 2-1: Using ep0 maxpacket: 8 [ 657.316896][T15088] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 657.325540][T15088] usb 2-1: config 0 has no interface number 0 [ 657.335293][T15088] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 657.344859][T15088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.353763][T15088] usb 2-1: Product: syz [ 657.357996][T15088] usb 2-1: Manufacturer: syz [ 657.362995][T15088] usb 2-1: SerialNumber: syz [ 657.363746][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 657.371231][T15088] usb 2-1: config 0 descriptor?? [ 657.375909][ T5698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.396703][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 657.406592][ T5698] usb 1-1: not running at top speed; connect to a high speed hub [ 657.415962][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 657.427646][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 657.439107][ T5698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.449423][ T5698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.462440][ T24] usb 3-1: string descriptor 0 read error: -22 [ 657.468908][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 657.478689][ T5698] usb 1-1: string descriptor 0 read error: -22 [ 657.484988][ T5698] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.494403][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.502527][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.741541][T15863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.760447][T15863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.785618][T15863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.805883][T15863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.809510][ T5698] usb 1-1: 0:2 : does not exist [ 657.829101][T15863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.927632][T15051] usb 3-1: USB disconnect, device number 81 [ 658.110387][ T5636] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 658.263534][ T5636] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 658.268350][ T5698] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 658.295027][ T5636] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.321737][ T5698] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 658.327068][ T5636] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.335919][ T5698] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 658.360320][ T5698] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 658.360836][T15088] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 658.372237][ T5698] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 658.387820][ T5636] usb 5-1: config 0 interface 0 has no altsetting 0 [ 658.404428][ T5698] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 658.414885][ T5636] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 658.430505][T15088] usb 2-1: USB disconnect, device number 89 [ 658.446066][T15884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2856'. [ 658.450099][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.505470][ T5636] usb 5-1: config 0 descriptor?? [ 658.532184][ T5698] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 658.571848][ T5698] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 658.614914][ T5698] usb 1-1: USB disconnect, device number 58 [ 658.789792][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 658.939856][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 658.947196][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 658.959563][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 658.968763][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.977163][ T24] usb 6-1: Product: syz [ 658.981600][ T24] usb 6-1: Manufacturer: syz [ 658.986242][ T24] usb 6-1: SerialNumber: syz [ 658.991217][T15051] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 659.001514][ T24] usb 6-1: config 0 descriptor?? [ 659.007598][T15887] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 659.020340][ T5720] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 659.034113][ T24] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 659.127617][T15876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.138306][T15876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.152697][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.156086][ T5698] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 659.161613][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.177054][T15051] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 659.177322][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.200119][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.200118][T15051] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 659.200146][T15051] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 659.207506][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.240000][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x0 [ 659.244393][ T5720] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 659.247465][ T5636] gt683r_led 0003:1770:FF00.002E: unknown main item tag 0x7 [ 659.260570][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 659.264673][ T5636] gt683r_led 0003:1770:FF00.002E: unknown global tag 0xd [ 659.270157][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 659.277633][ T5636] gt683r_led 0003:1770:FF00.002E: item 0 2 1 13 parsing failed [ 659.285448][ T24] usb 6-1: USB disconnect, device number 23 [ 659.300157][T15051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 659.313110][ T24] mcba_usb 6-1:0.0 can0: device disconnected [ 659.320078][ T5720] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 659.332922][ T5636] gt683r_led 0003:1770:FF00.002E: hid parsing failed [ 659.343621][ T5720] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 659.353040][ T5636] gt683r_led 0003:1770:FF00.002E: probe with driver gt683r_led failed with error -22 [ 659.359540][T15051] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 659.377173][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.387810][T15051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.391517][ T5636] usb 5-1: USB disconnect, device number 102 [ 659.422407][ T5698] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 659.436597][T15051] usb 3-1: Product: syz [ 659.453503][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.466129][T15051] usb 3-1: Manufacturer: syz [ 659.476058][ T5720] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 659.485023][T15051] usb 3-1: SerialNumber: syz [ 659.492841][ T5698] usb 1-1: Product: syz [ 659.502263][ T5698] usb 1-1: Manufacturer: syz [ 659.507948][ T5698] usb 1-1: SerialNumber: syz [ 659.513829][T15051] usb 3-1: config 0 descriptor?? [ 659.520188][T15889] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.534252][ T5698] usb 1-1: config 0 descriptor?? [ 659.544242][T15051] usb 3-1: ucan: probing device on interface #0 [ 659.553113][T15051] usb 3-1: ucan: invalid endpoint configuration [ 659.559542][T15051] usb 3-1: ucan: probe failed; try to update the device firmware [ 659.684908][ T5720] gspca_sn9c2028: read1 error -71 [ 659.698206][ T5720] gspca_sn9c2028: read1 error -71 [ 659.707216][ T5720] gspca_sn9c2028: read1 error -71 [ 659.712492][ T5720] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 659.727413][ T5720] usb 2-1: USB disconnect, device number 90 [ 659.777851][ T5698] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 659.975965][ T5636] usb 3-1: USB disconnect, device number 82 [ 660.034085][T15912] pim6reg: entered allmulticast mode [ 660.067923][T15912] pim6reg: left allmulticast mode [ 660.221398][T15922] gretap0: entered promiscuous mode [ 660.359354][T15934] loop3: detected capacity change from 0 to 2640 [ 660.370674][T15934] buffer_io_error: 346 callbacks suppressed [ 660.370692][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.428998][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.462133][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.465348][ T5698] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 660.532150][T15935] loop3: detected capacity change from 2640 to 524287992 [ 660.557315][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.578022][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.605071][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.634571][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.658674][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.658751][T15934] ldm_validate_partition_table(): Disk read failed. [ 660.658801][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.658892][T15934] Buffer I/O error on dev loop3, logical block 0, async page read [ 660.659098][T15934] Dev loop3: unable to read RDB block 0 [ 660.659538][T15934] loop3: unable to read partition table [ 660.661278][T15934] loop_reread_partitions: partition scan of loop3 (irc VUX) failed (rc=-5) [ 661.825801][T15894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.832561][T15894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 661.838660][T15894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 661.844879][T15894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 661.853110][T15894] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 661.893919][ T24] usb 1-1: USB disconnect, device number 59 [ 661.943578][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 661.943595][ T29] audit: type=1326 audit(1781429729.767:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15964 comm="syz.0.2872" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdfbb9ce59 code=0x0 [ 662.100269][ T5698] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 662.107958][T15051] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 662.110263][ T5636] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 662.115714][ T5720] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 662.269825][ T5636] usb 5-1: Using ep0 maxpacket: 8 [ 662.276581][ T5636] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 662.279938][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 662.287489][ T5636] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.296847][T15051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.305529][ T5636] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 662.326939][T15051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.326986][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.337238][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.348252][ T5636] usb 5-1: config 0 descriptor?? [ 662.356762][ T5698] usb 2-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 16 [ 662.364833][T14960] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.372144][ T24] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 662.381466][ T5636] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 662.390972][ T5698] usb 2-1: config 1 interface 0 has no altsetting 0 [ 662.401846][T15051] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 662.411666][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 662.423004][T15051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.434124][ T5720] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 662.443482][ T5698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.455238][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.464286][T15051] usb 3-1: config 0 descriptor?? [ 662.469299][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.477618][ T5720] usb 6-1: Product: syz [ 662.484000][ T5698] usb 2-1: Product: syz [ 662.489063][ T5720] usb 6-1: Manufacturer: syz [ 662.494452][ T5698] usb 2-1: Manufacturer: ௙妟组亼ꬸ䘀骣箾ﲿස繧茞⊘ऊ销Ŕ㶽溵⿛칐볛ｸ蓖匍䆭ۛ㳽㝠ࠃ腍ٜ渶뤭䇎ἓ哈뀄ᦠࣇꮨિ퀲欛겲푈㼠棜᪵Ṡꍇ䕗盵끯慍䄡톝锉锽菵⣰ឫ莮胆庩ֲ≣뽃통°냫黨໢ [ 662.519942][ T5720] usb 6-1: SerialNumber: syz [ 662.529314][ T5698] usb 2-1: SerialNumber: syz [ 662.535528][ T5720] usb 6-1: config 0 descriptor?? [ 662.544242][ T5720] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 662.553723][ T24] usb 1-1: device descriptor read/64, error -71 [ 662.568222][T15937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 662.750702][T15951] tipc: Enabled bearer , priority 10 [ 662.757859][ T5636] usb 6-1: USB disconnect, device number 24 [ 662.800891][ T24] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 662.894338][T15051] uclogic 0003:5543:0042.002F: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 662.939913][ T24] usb 1-1: device descriptor read/64, error -71 [ 662.992406][ T5698] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 663.016901][ T5698] usb 2-1: USB disconnect, device number 91 [ 663.051775][ T24] usb usb1-port1: attempt power cycle [ 663.105094][T15051] usb 3-1: USB disconnect, device number 83 [ 663.138823][T15969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.139461][ T5720] usb 5-1: USB disconnect, device number 103 [ 663.151170][T15969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.391397][ T24] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 663.420391][ T24] usb 1-1: device descriptor read/8, error -71 [ 663.526299][T15985] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2879'. [ 663.569883][ T5720] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 663.669913][ T24] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 663.711916][ T24] usb 1-1: device descriptor read/8, error -71 [ 663.729001][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.742671][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.750377][ T5721] tipc: Node number set to 46349428 [ 663.755234][ T5720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 663.771350][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.785032][T15051] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 663.793377][ T5720] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.803987][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.816248][ T5720] usb 5-1: config 0 descriptor?? [ 663.850843][ T24] usb usb1-port1: unable to enumerate USB device [ 663.870355][T14961] Bluetooth: hci3: command 0x0406 tx timeout [ 663.874877][T14960] Bluetooth: hci5: command 0x040f tx timeout [ 663.876459][ T4949] Bluetooth: hci1: command 0x0c1a tx timeout [ 663.884969][T14960] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.924913][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2882'. [ 663.951071][T15051] usb 2-1: Using ep0 maxpacket: 32 [ 663.957882][T15051] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 663.967057][T15051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.969779][ T5636] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 663.979286][T15051] usb 2-1: config 0 descriptor?? [ 664.010248][T15051] gspca_main: sunplus-2.14.0 probing 041e:400b [ 664.034705][ T5720] usbhid 5-1:0.0: can't add hid device: -71 [ 664.049917][ T5720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 664.073197][ T5720] usb 5-1: USB disconnect, device number 104 [ 664.140027][ T5636] usb 3-1: Using ep0 maxpacket: 16 [ 664.147641][ T5636] usb 3-1: unable to get BOS descriptor or descriptor too short [ 664.157579][ T5636] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 664.167148][ T5636] usb 3-1: config 1 has no interface number 0 [ 664.173453][ T5636] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 664.187175][ T5636] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice= 0.40 [ 664.196397][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.204835][ T5636] usb 3-1: Product: syz [ 664.209113][ T5636] usb 3-1: Manufacturer: syz [ 664.214361][ T5636] usb 3-1: SerialNumber: syz [ 664.369997][ T5721] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 664.425940][ T5636] usb 3-1: can't set first interface for hiFace device. [ 664.433614][ T5636] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 664.446373][ T5636] usb 3-1: can't set first interface for hiFace device. [ 664.453500][ T5636] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 664.521989][ T5721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.532323][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 664.543447][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.553282][ T5721] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 664.562708][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.575203][ T5721] usb 6-1: config 0 descriptor?? [ 664.646917][T15988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.662084][T15988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.687364][ T5720] usb 3-1: USB disconnect, device number 84 [ 664.972941][ T5636] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 664.991413][ T5721] hid (null): invalid report_size 1077464617 [ 665.005230][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.015382][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.023950][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.031669][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.040061][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2889'. [ 665.049175][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.059145][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.067368][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.075117][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.082705][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.090640][ T5721] magicmouse 0003:05AC:0324.0030: unknown main item tag 0x0 [ 665.103099][ T5721] magicmouse 0003:05AC:0324.0030: reserved main item tag 0xd [ 665.110848][ T5721] magicmouse 0003:05AC:0324.0030: invalid report_size 1077464617 [ 665.118843][ T5721] magicmouse 0003:05AC:0324.0030: item 0 4 1 7 parsing failed [ 665.127194][ T5721] magicmouse 0003:05AC:0324.0030: magicmouse hid parse failed [ 665.134851][ T5636] usb 5-1: Using ep0 maxpacket: 16 [ 665.140412][ T5721] magicmouse 0003:05AC:0324.0030: probe with driver magicmouse failed with error -22 [ 665.153000][ T5636] usb 5-1: config 3 has an invalid interface number: 20 but max is 0 [ 665.171832][ T5636] usb 5-1: config 3 has no interface number 0 [ 665.177981][ T5636] usb 5-1: config 3 interface 20 has no altsetting 0 [ 665.188016][ T5636] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 665.194561][ T5720] usb 6-1: USB disconnect, device number 25 [ 665.197354][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.213298][ T5636] usb 5-1: Product: syz [ 665.217532][ T5636] usb 5-1: Manufacturer: syz [ 665.222574][ T5636] usb 5-1: SerialNumber: syz [ 665.486774][T15051] gspca_sunplus: reg_w_riv err -71 [ 665.493208][T15051] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 665.517379][T15051] usb 2-1: USB disconnect, device number 92 [ 665.541701][T16019] trusted_key: encrypted_key: insufficient parameters specified [ 665.845298][T16028] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2892'. [ 665.986954][T16033] program syz.5.2894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.019149][T16033] gretap3: entered promiscuous mode [ 666.274946][ T29] audit: type=1326 audit(1781429734.097:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2896" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bb4f9ce59 code=0x0 [ 666.609781][T15051] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 666.739843][T15051] usb 2-1: device descriptor read/64, error -71 [ 666.979888][T15051] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 667.112503][T15051] usb 2-1: device descriptor read/64, error -71 [ 667.231206][T15051] usb usb2-port1: attempt power cycle [ 667.377624][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'. [ 667.579906][T15051] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 667.611483][T15051] usb 2-1: device descriptor read/8, error -71 [ 667.738758][ T5636] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input67 [ 667.766985][ T4985] bcm5974 5-1:3.20: could not read from device [ 667.777003][ T4985] bcm5974 5-1:3.20: could not read from device [ 667.787990][ T5636] usb 5-1: USB disconnect, device number 105 [ 667.835882][ T29] audit: type=1326 audit(1781429735.647:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 667.865356][ T29] audit: type=1326 audit(1781429735.647:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 667.866872][T15051] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 667.891914][ T29] audit: type=1326 audit(1781429735.647:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 667.925115][T15051] usb 2-1: device descriptor read/8, error -71 [ 667.929985][ T29] audit: type=1326 audit(1781429735.647:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 668.003535][ T29] audit: type=1326 audit(1781429735.647:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 668.028236][ T29] audit: type=1326 audit(1781429735.647:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 668.053804][T15051] usb usb2-port1: unable to enumerate USB device [ 668.064038][ T29] audit: type=1326 audit(1781429735.647:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 668.093128][ T29] audit: type=1326 audit(1781429735.647:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52199ce59 code=0x7ffc0000 [ 668.131383][ T29] audit: type=1326 audit(1781429735.647:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa52195d68e code=0x7ffc0000 [ 668.181229][ T29] audit: type=1326 audit(1781429735.647:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16059 comm="syz.4.2902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa52199caeb code=0x7ffc0000 [ 668.314253][ T5636] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 668.320011][T16062] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2903'. [ 668.462831][T16066] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2905'. [ 668.492296][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 668.503135][T16070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'. [ 668.512736][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 668.524023][ T5636] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.535429][ T5636] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 668.552092][ T5636] usb 5-1: config 1 interface 0 has no altsetting 0 [ 668.574364][ T5636] usb 5-1: string descriptor 0 read error: -22 [ 668.581709][ T5636] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 668.593694][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 668.614501][ T5636] usb 5-1: 0:2 : does not exist [ 668.665972][ T5636] usb-storage 5-1:1.1: USB Mass Storage device detected [ 668.689960][ T5721] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 668.779854][T15051] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 668.830442][ T5721] usb 6-1: device descriptor read/64, error -71 [ 668.850081][ T5720] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 668.932436][T15051] usb 3-1: unable to get BOS descriptor or descriptor too short [ 668.941211][T15051] usb 3-1: config 7 has an invalid interface number: 254 but max is 0 [ 668.949410][T15051] usb 3-1: config 7 has no interface number 0 [ 668.955745][T15051] usb 3-1: config 7 interface 254 has no altsetting 0 [ 668.964787][T15051] usb 3-1: New USB device found, idVendor=147a, idProduct=e042, bcdDevice= d.59 [ 668.974125][T15051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.982182][T15051] usb 3-1: Product: syz [ 668.986479][T15051] usb 3-1: Manufacturer: syz [ 668.991757][T15051] usb 3-1: SerialNumber: syz [ 669.009815][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 669.016545][ T5720] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.027827][ T5720] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 669.035428][T16060] __nla_validate_parse: 1 callbacks suppressed [ 669.035446][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 669.040969][ T5720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.063514][ T5720] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 669.077147][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.080380][ T5721] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 669.092933][ T5720] usb 1-1: config 0 descriptor?? [ 669.141462][T16060] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 669.223892][T15051] usb 3-1: USB disconnect, device number 85 [ 669.253121][ T5636] usb 5-1: us122l: couldn't allocate write buffer [ 669.260336][ T5721] usb 6-1: device descriptor read/64, error -71 [ 669.275796][ T5636] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 669.301889][ T5636] usb 5-1: USB disconnect, device number 106 [ 669.390763][ T5721] usb usb6-port1: attempt power cycle [ 669.504244][ T5720] microsoft 0003:045E:009D.0031: unbalanced collection at end of report description [ 669.514556][ T5720] microsoft 0003:045E:009D.0031: parse failed [ 669.521308][ T5720] microsoft 0003:045E:009D.0031: probe with driver microsoft failed with error -22 [ 669.579894][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 669.711664][ T24] usb 2-1: device descriptor read/64, error -71 [ 669.730269][ T5636] usb 1-1: USB disconnect, device number 64 [ 669.749997][ T5721] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 669.775832][T16080] program syz.2.2911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.795678][ T5721] usb 6-1: device descriptor read/8, error -71 [ 669.959833][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 670.030486][ T5720] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 670.051152][ T5721] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 670.070240][ T5721] usb 6-1: device descriptor read/8, error -71 [ 670.090035][ T24] usb 2-1: device descriptor read/64, error -71 [ 670.180040][ T5721] usb usb6-port1: unable to enumerate USB device [ 670.190100][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 670.198590][ T5720] usb 3-1: config 1 has an invalid interface number: 231 but max is 2 [ 670.207063][ T5720] usb 3-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 670.217720][ T24] usb usb2-port1: attempt power cycle [ 670.223982][ T5720] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 670.233025][ T5720] usb 3-1: config 1 has no interface number 3 [ 670.239150][ T5720] usb 3-1: config 1 interface 231 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 670.250248][ T5720] usb 3-1: config 1 interface 231 has no altsetting 0 [ 670.259170][ T5720] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 670.268445][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.277272][ T5720] usb 3-1: Product: syz [ 670.281696][ T5720] usb 3-1: Manufacturer: syz [ 670.286436][ T5720] usb 3-1: SerialNumber: syz [ 670.301824][ T5720] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 670.312022][T16085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2913'. [ 670.321831][T16085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2913'. [ 670.500598][T16080] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2911'. [ 670.515597][T16080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 670.559773][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 670.609796][ T24] usb 2-1: device descriptor read/8, error -71 [ 670.633607][ T5720] usb 3-1: USB disconnect, device number 86 [ 670.693863][T13175] udevd[13175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.850040][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 670.880911][ T24] usb 2-1: device descriptor read/8, error -71 [ 671.000103][ T24] usb usb2-port1: unable to enumerate USB device [ 671.125409][T16097] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2916'. [ 671.286790][T16103] FAULT_INJECTION: forcing a failure. [ 671.286790][T16103] name failslab, interval 1, probability 0, space 0, times 0 [ 671.304859][T16103] CPU: 0 UID: 0 PID: 16103 Comm: syz.2.2918 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.304889][T16103] Tainted: [L]=SOFTLOCKUP [ 671.304896][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.304907][T16103] Call Trace: [ 671.304915][T16103] [ 671.304935][T16103] dump_stack_lvl+0xe8/0x150 [ 671.304987][T16103] should_fail_ex+0x40c/0x560 [ 671.305015][T16103] should_failslab+0xa8/0x100 [ 671.305061][T16103] __kmalloc_noprof+0xe8/0x750 [ 671.305094][T16103] ? tomoyo_realpath_from_path+0xef/0x640 [ 671.305250][T16103] tomoyo_realpath_from_path+0xef/0x640 [ 671.305286][T16103] ? tomoyo_path_number_perm+0x219/0x5f0 [ 671.305309][T16103] tomoyo_path_number_perm+0x246/0x5f0 [ 671.305332][T16103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 671.305354][T16103] ? __lock_acquire+0x683/0x2cd0 [ 671.305399][T16103] ? hook_file_ioctl+0x1f0/0x5c0 [ 671.305491][T16103] ? __fget_files+0x2a/0x420 [ 671.305525][T16103] ? __fget_files+0x2a/0x420 [ 671.305543][T16103] ? __fget_files+0x3a2/0x420 [ 671.305562][T16103] ? __fget_files+0x2a/0x420 [ 671.305586][T16103] security_file_ioctl+0xc3/0x2a0 [ 671.305638][T16103] __se_sys_ioctl+0x47/0x170 [ 671.305663][T16103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.305696][T16103] do_syscall_64+0x174/0x580 [ 671.305716][T16103] ? trace_irq_disable+0x3b/0x140 [ 671.305752][T16103] ? clear_bhb_loop+0x40/0x90 [ 671.305775][T16103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.305793][T16103] RIP: 0033:0x7f1b8db9ce59 [ 671.305812][T16103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.305833][T16103] RSP: 002b:00007f1b8eadb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.305853][T16103] RAX: ffffffffffffffda RBX: 00007f1b8de15fa0 RCX: 00007f1b8db9ce59 [ 671.305866][T16103] RDX: 0000200000001200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 671.305878][T16103] RBP: 00007f1b8eadb090 R08: 0000000000000000 R09: 0000000000000000 [ 671.305890][T16103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.305900][T16103] R13: 00007f1b8de16038 R14: 00007f1b8de15fa0 R15: 00007f1b8df3fa48 [ 671.305931][T16103] [ 671.305939][T16103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.715143][T16113] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20001 [ 671.894069][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2922'. [ 672.021810][T16119] syzkaller0: entered promiscuous mode [ 672.028037][T16119] syzkaller0: entered allmulticast mode [ 672.110236][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 672.270422][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 672.284356][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.309252][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 672.338565][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.421290][ T24] usb 5-1: config 0 descriptor?? [ 672.750177][ T5720] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 672.921793][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 672.933128][ T5720] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 672.958665][ T5720] usb 2-1: config 0 has no interface number 0 [ 672.978997][ T5720] usb 2-1: config 0 interface 172 altsetting 249 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 673.017758][ T5720] usb 2-1: config 0 interface 172 has no altsetting 0 [ 673.052509][ T5720] usb 2-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 673.076477][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.099838][ T5720] usb 2-1: Product: syz [ 673.115546][ T5720] usb 2-1: Manufacturer: syz [ 673.125351][ T5720] usb 2-1: SerialNumber: syz [ 673.144478][T16126] trusted_key: encrypted_key: insufficient parameters specified [ 673.172019][ T5720] usb 2-1: config 0 descriptor?? [ 673.398433][ T5720] hso 2-1:0.172: Not our interface [ 673.404306][ T5720] usb-storage 2-1:0.172: USB Mass Storage device detected [ 673.530383][ T5636] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 673.540280][ T5720] usb 2-1: USB disconnect, device number 101 [ 673.682424][ T5636] usb 1-1: Using ep0 maxpacket: 8 [ 673.694777][ T5636] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 673.725408][ T5636] usb 1-1: config 179 has no interface number 0 [ 673.736492][ T5636] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 673.774462][ T5636] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 673.794145][ T5636] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 673.830421][ T5636] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 673.865618][ T5636] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 673.888465][ T5636] usb 1-1: config 179 interface 65 has no altsetting 0 [ 673.916083][ T5636] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 673.940499][ T5636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.029474][ T5636] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input68 [ 674.113729][ T4985] input input68: unable to receive magic message: -110 [ 674.139819][ T4985] input input68: unable to receive magic message: -32 [ 674.159572][T16126] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2924'. [ 674.171827][T16126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.183802][ T4985] input input68: unable to receive magic message: -32 [ 674.234370][T13257] input input68: unable to receive magic message: -32 [ 674.244980][T16126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.280146][ T4985] input input68: unable to receive magic message: -32 [ 674.382721][ T5720] usb 1-1: USB disconnect, device number 65 [ 674.387965][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 674.532059][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 675.025350][T16137] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2927'. [ 675.369863][T16139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2928'. [ 675.736884][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 675.736902][ T29] audit: type=1326 audit(1781429743.557:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16141 comm="syz.0.2929" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdfbb9ce59 code=0x0 [ 677.294453][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 677.306759][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 677.355855][ T24] usb 5-1: USB disconnect, device number 107 [ 677.529519][T16155] netlink: 'syz.2.2933': attribute type 2 has an invalid length. [ 677.558060][T16155] netlink: 'syz.2.2933': attribute type 8 has an invalid length. [ 677.577730][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2933'. [ 677.627597][T16153] syzkaller0: entered promiscuous mode [ 677.634881][T16153] syzkaller0: entered allmulticast mode [ 677.735322][T16153] tipc: Enabled bearer , priority 0 [ 677.755913][T16152] tipc: Resetting bearer [ 677.792258][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 677.800242][T16152] tipc: Disabling bearer [ 677.868524][T16171] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2938'. [ 677.944892][T16175] fuse: Bad value for 'fd' [ 677.952185][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 677.976120][ T24] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 677.984651][ T5698] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 677.993436][ T24] usb 5-1: config 114 has no interface number 0 [ 678.001029][ T24] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 678.012523][ T24] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 678.024787][ T24] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 678.035612][ T24] usb 5-1: config 114 interface 240 has no altsetting 0 [ 678.045125][ T24] usb 5-1: string descriptor 0 read error: -22 [ 678.051551][ T24] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 678.061840][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.073136][T16148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 678.080730][T16148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 678.089525][ T24] ir_usb 5-1:114.240: IR Dongle converter detected [ 678.150260][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 678.156868][ T5698] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 678.166164][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.169811][ T5636] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 678.182341][ T5698] usb 3-1: config 0 descriptor?? [ 678.196536][ T5698] gspca_main: sunplus-2.14.0 probing 041e:400b [ 678.209861][ T54] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 678.290133][ T24] usb 5-1: IRDA class descriptor not found, device not bound [ 678.329775][ T5636] usb 2-1: Using ep0 maxpacket: 16 [ 678.336870][ T5636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 678.350999][ T5721] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 678.358791][ T5636] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.368539][ T5636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.377752][ T5636] usb 2-1: Product: syz [ 678.382057][ T5636] usb 2-1: Manufacturer: syz [ 678.386896][ T5636] usb 2-1: SerialNumber: syz [ 678.392570][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.401966][ T54] usb 1-1: not running at top speed; connect to a high speed hub [ 678.410905][ T5636] usb 2-1: config 0 descriptor?? [ 678.416246][ T54] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 678.427304][ T5636] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 678.436809][ T5636] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 678.444139][ T54] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 678.452394][ T54] usb 1-1: can't read configurations, error -61 [ 678.516386][ T24] usb 5-1: USB disconnect, device number 108 [ 678.529824][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 678.538962][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.550920][ T5721] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 678.560081][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.573889][ T5721] usb 6-1: config 0 descriptor?? [ 678.599845][ T54] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 678.755841][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.764329][ T54] usb 1-1: not running at top speed; connect to a high speed hub [ 678.772269][ T54] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 678.782050][ T54] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 678.790451][ T54] usb 1-1: can't read configurations, error -61 [ 678.797160][ T54] usb usb1-port1: attempt power cycle [ 678.816080][T16166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.825064][T16166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.993989][ T5721] hid (null): nested delimiters [ 678.998899][ T5721] hid (null): nested delimiters [ 679.003938][ T5721] hid (null): nested delimiters [ 679.008877][ T5721] hid (null): report_id 24797 is invalid [ 679.028263][ T5721] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0042.0032/input/input69 [ 679.040606][ T5636] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 679.124597][ T5721] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0042.0032/input/input70 [ 679.148625][ T54] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 679.172250][ T5721] uclogic 0003:5543:0042.0032: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 679.190025][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 679.214258][ T54] usb 1-1: not running at top speed; connect to a high speed hub [ 679.238141][ T54] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 679.258893][ T54] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 679.273490][ T54] usb 1-1: can't read configurations, error -61 [ 679.340053][T15087] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 679.419859][ T54] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 679.442338][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 679.451111][ T54] usb 1-1: not running at top speed; connect to a high speed hub [ 679.461579][ T5698] gspca_sunplus: reg_w_riv err -71 [ 679.466310][ T54] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 679.471048][ T5698] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 679.487319][ T54] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 679.490943][ T5698] usb 3-1: USB disconnect, device number 87 [ 679.497246][ T5636] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 679.513818][T15087] usb 5-1: Using ep0 maxpacket: 32 [ 679.519063][ T54] usb 1-1: can't read configurations, error -61 [ 679.525518][ T5636] em28xx 2-1:0.0: board has no eeprom [ 679.531989][ T54] usb usb1-port1: unable to enumerate USB device [ 679.539485][T15087] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 679.551106][T15087] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 679.560252][T15087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 679.569261][T15087] usb 5-1: config 1 has no interface number 0 [ 679.575991][T15087] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.587227][T15087] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 679.600355][T15087] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 679.609468][T15087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.626726][T15087] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 679.841485][T15087] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 679.889908][ T5636] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 679.897985][ T5636] em28xx 2-1:0.0: dvb set to bulk mode. [ 679.903741][T15087] em28xx 2-1:0.0: Binding DVB extension [ 680.057193][T16181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.069113][T16181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.835601][T16168] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 680.885752][T15087] em28xx 2-1:0.0: Registering input extension [ 680.914340][T15087] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 680.966185][T15087] usb 6-1: USB disconnect, device number 30 [ 681.181743][T16197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2947'. [ 681.214810][T16201] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2949'. [ 681.439974][ T5698] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 681.480202][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 681.587271][ T29] audit: type=1326 audit(1781429749.407:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.630093][ T29] audit: type=1326 audit(1781429749.407:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.656021][ T5698] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 681.657305][ T29] audit: type=1326 audit(1781429749.407:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.669298][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 681.694097][ T29] audit: type=1326 audit(1781429749.407:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.725167][ T5698] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.734799][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 681.743319][ T5698] usb 3-1: SerialNumber: syz [ 681.750426][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.759505][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.770266][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 681.771067][ T29] audit: type=1326 audit(1781429749.407:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.784983][ T24] usb 1-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 681.804750][ T29] audit: type=1326 audit(1781429749.407:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.822271][ T5698] hub 3-1:1.0: bad descriptor, ignoring hub [ 681.842647][ T29] audit: type=1326 audit(1781429749.407:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 681.885349][ T5698] hub 3-1:1.0: probe with driver hub failed with error -5 [ 681.902857][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.902897][T15087] usb 2-1: USB disconnect, device number 102 [ 681.904812][T15087] em28xx 2-1:0.0: Disconnecting em28xx [ 681.919771][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.943234][ T24] usb 1-1: Product: syz [ 681.950211][ T24] usb 1-1: Manufacturer: syz [ 681.957572][ T24] usb 1-1: SerialNumber: syz [ 681.957923][T15087] em28xx 2-1:0.0: Closing input extension [ 681.984705][ T29] audit: type=1326 audit(1781429749.417:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 682.045717][ T29] audit: type=1326 audit(1781429749.417:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 682.075568][T15087] em28xx 2-1:0.0: Freeing device [ 682.134093][ T29] audit: type=1326 audit(1781429749.417:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.5.2951" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x7ffc0000 [ 682.173992][ T5636] usb 5-1: USB disconnect, device number 109 [ 682.182722][ T5636] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 682.193339][ T24] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 682.206435][ T24] cdc_ncm 1-1:1.0: bind() failure [ 682.244951][ T24] usb 1-1: USB disconnect, device number 70 [ 682.497184][ T5698] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 682.537490][ T5698] usb 3-1: USB disconnect, device number 88 [ 682.593921][T16220] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2954'. [ 683.282623][ T5636] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 683.379899][T15087] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 683.441788][ T5636] usb 1-1: Using ep0 maxpacket: 8 [ 683.454588][ T5636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.477225][ T5636] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.495527][ T5636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.532183][ T5636] usb 1-1: config 0 descriptor?? [ 683.543276][T15087] usb 3-1: Using ep0 maxpacket: 32 [ 683.567052][T15087] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 683.576112][T15087] usb 3-1: config 0 has no interface number 0 [ 683.598668][T15087] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 683.618230][T15087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.650249][T15087] usb 3-1: Product: syz [ 683.673454][T15087] usb 3-1: Manufacturer: syz [ 683.687013][T15087] usb 3-1: SerialNumber: syz [ 683.723289][T15087] usb 3-1: config 0 descriptor?? [ 683.751356][T15087] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 683.762158][ T5636] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 683.932399][T16239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2960'. [ 683.968311][ T5721] usb 1-1: USB disconnect, device number 71 [ 683.975404][T16243] iowarrior 1-1:0.0: Error -19 while submitting URB [ 683.993004][T15087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 684.022242][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 684.055154][T15087] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 684.129866][ T5636] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 684.140097][T15087] usb 3-1: USB disconnect, device number 89 [ 684.185308][T15087] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 684.244939][T15087] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 684.258680][T16247] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 684.289943][ T5636] usb 6-1: Invalid ep0 maxpacket: 16 [ 684.295712][T15087] quatech2 3-1:0.51: device disconnected [ 684.415718][T16255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2964'. [ 684.440641][ T5636] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 684.499196][T16258] netlink: 'syz.2.2965': attribute type 5 has an invalid length. [ 684.525891][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'. [ 684.536842][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'. [ 684.579991][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 684.602516][ T5636] usb 6-1: Invalid ep0 maxpacket: 16 [ 684.621927][ T5636] usb usb6-port1: attempt power cycle [ 684.742039][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 684.756679][ T24] usb 2-1: config 79 has an invalid interface number: 127 but max is 2 [ 684.771847][ T24] usb 2-1: config 79 has an invalid interface number: 115 but max is 2 [ 684.784575][ T24] usb 2-1: config 79 has an invalid interface number: 28 but max is 2 [ 684.794277][ T24] usb 2-1: config 79 has no interface number 0 [ 684.801097][ T24] usb 2-1: config 79 has no interface number 1 [ 684.807387][ T24] usb 2-1: config 79 has no interface number 2 [ 684.814627][ T24] usb 2-1: config 79 interface 127 altsetting 251 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 684.826208][ T24] usb 2-1: config 79 interface 127 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 684.838227][ T24] usb 2-1: config 79 interface 127 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 684.853958][ T24] usb 2-1: config 79 interface 127 altsetting 251 bulk endpoint 0xC has invalid maxpacket 32 [ 684.864750][ T24] usb 2-1: config 79 interface 127 altsetting 251 has a duplicate endpoint with address 0xC, skipping [ 684.876099][ T24] usb 2-1: config 79 interface 127 altsetting 251 has a duplicate endpoint with address 0xC, skipping [ 684.887494][ T24] usb 2-1: config 79 interface 127 altsetting 251 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 684.899887][ T24] usb 2-1: config 79 interface 127 altsetting 251 bulk endpoint 0xE has invalid maxpacket 32 [ 684.910165][ T24] usb 2-1: config 79 interface 127 altsetting 251 has a duplicate endpoint with address 0x9, skipping [ 684.921195][ T24] usb 2-1: config 79 interface 127 altsetting 251 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 684.939743][ T24] usb 2-1: config 79 interface 127 altsetting 251 endpoint 0x84 has an invalid bInterval 237, changing to 7 [ 684.958245][ T24] usb 2-1: config 79 interface 127 altsetting 251 endpoint 0x84 has invalid maxpacket 32981, setting to 1024 [ 684.975077][ T24] usb 2-1: config 79 interface 127 altsetting 251 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 684.994416][ T5636] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 684.998019][ T24] usb 2-1: config 79 interface 28 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 685.024019][ T24] usb 2-1: config 79 interface 28 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 685.036543][ T5698] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 685.037217][ T5636] usb 6-1: Invalid ep0 maxpacket: 16 [ 685.053741][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2968'. [ 685.067454][ T24] usb 2-1: config 79 interface 127 has no altsetting 0 [ 685.075262][ T24] usb 2-1: config 79 interface 115 has no altsetting 0 [ 685.082240][ T24] usb 2-1: config 79 interface 28 has no altsetting 0 [ 685.093996][ T24] usb 2-1: New USB device found, idVendor=059f, idProduct=0643, bcdDevice= 0.00 [ 685.104301][T16280] loop6: detected capacity change from 0 to 524288000 [ 685.111125][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.111150][ T24] usb 2-1: Product: 앷鷶톸ᓽ뤲⨻ȝ먮㚹뭋΁㮦辺놂锬탶䟗ㄋ郿⌎祢䥚珚鳴ጌ퇧纫ꆧ艎탇磌ம쫿醪찆⌸艗ႝ蒾駤ᮝ牽浦﯊讣㝝ꖙᢸᘱҁ⊶鴘怇楶쬻⃣杭輊ྦྷ⟕삷娭Ⱨ牡䑖ᙑ碉몜菡㻋㇛ [ 685.111176][ T24] usb 2-1: Manufacturer: ⣈Ꙙ梥书吳鞃羫뤁ᐫ퓺튤脏稅晿⵸熢毥Ñ솱蒴ܵ￈挡뀦날컧㿝礼ࢌ⢚囈懊䚫훎귽픦㫬羛͇㽜箜皵뗷۟봿फ⢤듾⤓ⲱ耎뮬띃쇗˽쾜Ồ侴ꙇ艳冭㚄ꠜ볒 [ 685.111198][ T24] usb 2-1: SerialNumber: syz [ 685.122481][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 685.184207][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 685.200080][ T5636] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 685.233131][ T5636] usb 6-1: Invalid ep0 maxpacket: 16 [ 685.238898][ T5636] usb usb6-port1: unable to enumerate USB device [ 685.239887][ T5698] usb 5-1: device descriptor read/64, error -71 [ 685.397990][T16253] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 685.414690][ T24] usb-storage 2-1:79.127: USB Mass Storage device detected [ 685.428964][ T24] usb-storage 2-1:79.127: Quirks match for vid 059f pid 0643: 100 [ 685.505826][ T24] usb-storage 2-1:79.115: USB Mass Storage device detected [ 685.513657][ T5698] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 685.526230][ T24] usb-storage 2-1:79.115: Quirks match for vid 059f pid 0643: 100 [ 685.590768][ T24] usb-storage 2-1:79.28: USB Mass Storage device detected [ 685.615358][ T24] usb-storage 2-1:79.28: Quirks match for vid 059f pid 0643: 100 [ 685.650419][ T5698] usb 5-1: device descriptor read/64, error -71 [ 685.680821][ T24] usb 2-1: USB disconnect, device number 103 [ 685.711816][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.718329][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.780167][ T5698] usb usb5-port1: attempt power cycle [ 685.929514][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2970'. [ 686.104321][T16297] netlink: 'syz.0.2972': attribute type 10 has an invalid length. [ 686.112394][T16303] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2973'. [ 686.120001][T16300] netlink: 'syz.0.2972': attribute type 10 has an invalid length. [ 686.133203][ T5698] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 686.133478][T16297] dummy0: entered promiscuous mode [ 686.173829][ T5698] usb 5-1: device descriptor read/8, error -71 [ 686.419852][ T5698] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 686.440496][ T5698] usb 5-1: device descriptor read/8, error -71 [ 686.550766][ T5698] usb usb5-port1: unable to enumerate USB device [ 686.806804][T16314] tipc: Enabling of bearer rejected, failed to enable media [ 686.995203][T16321] x_tables: duplicate underflow at hook 1 [ 687.014355][T16321] random: crng reseeded on system resumption [ 687.403405][T16329] netlink: 'syz.5.2982': attribute type 1 has an invalid length. [ 687.434272][T16329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 687.519391][T16340] __nla_validate_parse: 2 callbacks suppressed [ 687.519412][T16340] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2984'. [ 687.629107][T16346] kAFS: unable to lookup cell '' [ 688.196775][T16365] netlink: 'syz.2.2991': attribute type 7 has an invalid length. [ 688.425728][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 688.551266][ T5636] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 688.689895][ T5698] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 688.717170][ T5636] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.739508][ T5636] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 688.769396][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.792253][ T5636] usb 3-1: Product: syz [ 688.811357][ T5636] usb 3-1: Manufacturer: syz [ 688.819765][ T5636] usb 3-1: SerialNumber: syz [ 688.849077][ T5698] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 688.860547][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.868672][ T5698] usb 1-1: Product: syz [ 688.883421][ T5698] usb 1-1: Manufacturer: syz [ 688.888503][ T5698] usb 1-1: SerialNumber: syz [ 688.898011][ T5698] usb 1-1: config 0 descriptor?? [ 688.918902][ T5698] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 688.928618][ T5698] dvb-usb: bulk message failed: -22 (4/0) [ 688.936803][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 688.950449][ T5698] dvb-usb: bulk message failed: -22 (5/0) [ 688.968256][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 689.006385][ T5698] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 689.034602][ T5698] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 689.122825][ T5698] usb 1-1: USB disconnect, device number 72 [ 689.529909][T15087] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 689.681868][T15087] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.700018][ T5698] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 689.702950][T15087] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 689.733847][T15087] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.745963][T15087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.761874][T15087] usb 2-1: Product: syz [ 689.768868][T15087] usb 2-1: Manufacturer: syz [ 689.774132][T15087] usb 2-1: SerialNumber: syz [ 689.805239][T15087] cdc_mbim 2-1:1.0: skipping garbage [ 689.859855][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 689.866914][ T5698] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 689.876714][ T5698] usb 5-1: config 0 has no interface number 0 [ 689.885284][ T5698] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 689.896311][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.905018][ T5698] usb 5-1: Product: syz [ 689.909370][ T5698] usb 5-1: Manufacturer: syz [ 689.914566][ T5698] usb 5-1: SerialNumber: syz [ 689.923287][ T5698] usb 5-1: config 0 descriptor?? [ 690.003547][T16375] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 690.132593][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.142612][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.150551][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.160591][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.170989][ T5698] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 690.179362][ T5698] uvcvideo 5-1:0.31: No valid video chain found. [ 690.193226][ T5698] usb 5-1: USB disconnect, device number 114 [ 690.615082][T16375] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 690.623256][T15087] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 690.631207][T15087] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 690.981053][T16001] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 690.990555][T16001] CPU: 0 UID: 0 PID: 16001 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.990590][T16001] Tainted: [L]=SOFTLOCKUP [ 690.990598][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.990612][T16001] Workqueue: hci1 hci_rx_work [ 690.990750][T16001] Call Trace: [ 690.990760][T16001] [ 690.990770][T16001] dump_stack_lvl+0xe8/0x150 [ 690.990799][T16001] sysfs_create_dir_ns+0x271/0x2a0 [ 690.990842][T16001] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 690.990873][T16001] ? do_raw_spin_unlock+0xf5/0x210 [ 690.990903][T16001] kobject_add_internal+0x622/0xcd0 [ 690.990971][T16001] kobject_add+0x163/0x240 [ 690.990999][T16001] ? __pfx_kobject_add+0x10/0x10 [ 690.991026][T16001] ? get_device_parent+0x366/0x3a0 [ 690.991124][T16001] device_add+0x3fa/0xb90 [ 690.991157][T16001] hci_conn_add_sysfs+0xd5/0x210 [ 690.991226][T16001] le_conn_complete_evt+0xfef/0x1580 [ 690.991285][T16001] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 690.991309][T16001] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 690.991344][T16001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.991362][T16001] ? skb_pull_data+0xf0/0x200 [ 690.991430][T16001] hci_le_enh_conn_complete_evt+0x189/0x490 [ 690.991460][T16001] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 690.991491][T16001] hci_event_packet+0x67a/0xf10 [ 690.991544][T16001] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 690.991569][T16001] ? __pfx_hci_event_packet+0x10/0x10 [ 690.991593][T16001] ? tag_mounts+0x14f0/0x1600 [ 690.991627][T16001] ? hci_send_to_monitor+0xe2/0x590 [ 690.991665][T16001] hci_rx_work+0x3ee/0x1020 [ 690.991692][T16001] ? process_scheduled_works+0xa20/0x14e0 [ 690.991725][T16001] process_scheduled_works+0xa8e/0x14e0 [ 690.991767][T16001] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.991803][T16001] ? assign_work+0x3cf/0x5d0 [ 690.991839][T16001] worker_thread+0xa47/0xfb0 [ 690.991873][T16001] ? __kthread_parkme+0x71/0x1f0 [ 690.991904][T16001] kthread+0x389/0x470 [ 690.991929][T16001] ? __pfx_worker_thread+0x10/0x10 [ 690.991947][T16001] ? __pfx_kthread+0x10/0x10 [ 690.991974][T16001] ret_from_fork+0x514/0xb70 [ 690.992014][T16001] ? __pfx_ret_from_fork+0x10/0x10 [ 690.992034][T16001] ? __switch_to+0xc89/0x1420 [ 690.992061][T16001] ? __pfx_kthread+0x10/0x10 [ 690.992085][T16001] ret_from_fork_asm+0x1a/0x30 [ 690.992123][T16001] [ 690.992203][T16001] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 691.242464][T16001] Bluetooth: hci1: failed to register connection device [ 691.308360][ T5636] usb 3-1: unit 8 not found! [ 691.313711][ T5636] usb 3-1: unit 6 not found! [ 691.391834][ T5636] usb 3-1: USB disconnect, device number 90 [ 691.523406][T16434] netlink: 'syz.5.3012': attribute type 21 has an invalid length. [ 691.533341][T16434] netlink: 'syz.5.3012': attribute type 6 has an invalid length. [ 691.541379][T16434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3012'. [ 691.856935][T16453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.344565][T15087] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 692.360022][ T5698] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 692.368339][T15087] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 692.396708][T15087] wwan wwan0: port wwan0mbim0 attached [ 692.454457][T15087] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ce:62:96:cc:97:db [ 692.495335][T15087] usb 2-1: USB disconnect, device number 104 [ 692.520903][T15087] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 692.539972][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 692.553098][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 692.570789][ T5698] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 692.599620][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.633265][ T5698] usb 1-1: config 0 has no interface number 0 [ 692.652624][T15087] wwan wwan0: port wwan0mbim0 disconnected [ 692.656264][ T5698] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 692.692742][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.733356][ T5698] usb 1-1: Product: syz [ 692.750457][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 692.759493][ T5698] usb 1-1: Manufacturer: syz [ 692.769415][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 692.777985][ T5698] usb 1-1: SerialNumber: syz [ 692.793242][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.820606][ T5698] usb 1-1: config 0 descriptor?? [ 692.831426][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.864602][ T5698] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 692.871694][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.894321][ T5698] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 692.907039][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.943104][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 692.949944][ T5636] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 692.984537][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.995206][T16001] Bluetooth: hci1: command 0x0c1a tx timeout [ 693.122471][ T5636] usb 6-1: config 0 has an invalid interface number: 252 but max is 0 [ 693.130990][ T5636] usb 6-1: config 0 has no interface number 0 [ 693.137251][ T5636] usb 6-1: config 0 interface 252 has no altsetting 0 [ 693.151827][ T5636] usb 6-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 693.154897][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.163807][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.178000][ T5636] usb 6-1: Product: syz [ 693.182701][ T5636] usb 6-1: Manufacturer: syz [ 693.187391][ T5636] usb 6-1: SerialNumber: syz [ 693.193370][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.216430][ T5636] usb 6-1: config 0 descriptor?? [ 693.236806][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 693.241736][ T5721] usb 1-1: USB disconnect, device number 73 [ 693.269786][ T24] usbtmc 3-1:16.0: can't read capabilities [ 693.436522][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.460239][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.498251][ T5636] usb 6-1: USB disconnect, device number 35 [ 693.749932][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 693.874596][T16489] binder: 16485:16489 unknown command 0 [ 693.880378][ T24] usb 2-1: device descriptor read/64, error -71 [ 693.895748][T16489] binder: 16485:16489 ioctl c0306201 2000000001c0 returned -22 [ 693.920599][T16489] binder: 16485:16489 ioctl c0306201 0 returned -14 [ 693.982411][ T5698] usb 3-1: USB disconnect, device number 91 [ 694.139831][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 694.222569][T16503] netlink: 'syz.5.3034': attribute type 16 has an invalid length. [ 694.235450][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 694.244767][T16503] netlink: 'syz.5.3034': attribute type 17 has an invalid length. [ 694.290045][ T24] usb 2-1: device descriptor read/64, error -71 [ 694.410278][ T24] usb usb2-port1: attempt power cycle [ 694.417823][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.500015][ T5698] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 694.519625][ T5720] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 694.553520][T16503] erspan0: entered promiscuous mode [ 694.573360][T16503] gretap1: left promiscuous mode [ 694.596003][T16503] hsr1: left promiscuous mode [ 694.661642][ T6725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.680517][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 694.681005][ T6725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.685727][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 694.702472][T15087] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.703515][ T5698] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 694.725337][ T5720] usb 1-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 694.743304][ T5698] usb 3-1: config 0 has no interface number 0 [ 694.749418][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.771614][ T5698] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 694.782069][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 694.797710][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.807191][ T5720] usb 1-1: New USB device found, idVendor=0582, idProduct=0101, bcdDevice= 0.40 [ 694.817572][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.825933][ T5698] usb 3-1: Product: syz [ 694.830914][ T5720] usb 1-1: Product: syz [ 694.835360][ T24] usb 2-1: device descriptor read/8, error -71 [ 694.843493][ T5698] usb 3-1: Manufacturer: syz [ 694.848285][ T5720] usb 1-1: Manufacturer: syz [ 694.853306][ T5698] usb 3-1: SerialNumber: syz [ 694.858386][ T5720] usb 1-1: SerialNumber: syz [ 694.863651][ T6725] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 694.865969][ T5698] usb 3-1: config 0 descriptor?? [ 694.896680][ T5698] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 694.905364][ T5636] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 694.916345][ T6725] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 694.940275][ T5636] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 695.070031][T16001] Bluetooth: hci1: command 0x0c1a tx timeout [ 695.096050][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.112534][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 695.118474][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3038'. [ 695.136119][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.138688][ T5720] usb 1-1: unknown interface protocol 0xaf, assuming v1 [ 695.148151][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.154555][ T5720] usb 1-1: cannot find UAC_HEADER [ 695.166409][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.177229][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.182383][ T24] usb 2-1: device descriptor read/8, error -71 [ 695.187410][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.202135][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.211791][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.221517][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.237445][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.248698][ T5720] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 695.250254][T15087] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 695.268056][ T5720] usb 1-1: USB disconnect, device number 74 [ 695.292547][ T5698] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 695.321757][ T24] usb usb2-port1: unable to enumerate USB device [ 695.328504][ T5698] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 695.355815][T13257] udevd[13257]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.376653][ T5636] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 695.405047][T15087] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 695.447891][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 695.461690][ T5698] usb 3-1: USB disconnect, device number 92 [ 695.482039][ T5698] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 695.503360][ T5698] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 695.526140][ T5698] quatech2 3-1:0.51: device disconnected [ 695.551843][ T5636] usb 6-1: config index 0 descriptor too short (expected 897, got 27) [ 695.560282][ T5636] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 695.568467][ T5636] usb 6-1: config 2 has an invalid interface number: 1 but max is -1 [ 695.577381][ T5636] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 695.587680][ T5636] usb 6-1: config 2 has no interface number 0 [ 695.596107][ T5636] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 695.605454][ T5636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.613721][ T5636] usb 6-1: Product: syz [ 695.618125][ T5636] usb 6-1: Manufacturer: syz [ 695.623851][ T5636] usb 6-1: SerialNumber: syz [ 695.711232][T15087] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 695.838170][ T5636] cdc_ncm 6-1:2.1: CDC Union missing and no IAD found [ 695.847785][ T5636] cdc_ncm 6-1:2.1: bind() failure [ 695.855932][ T5636] usb 6-1: no audio or video endpoints found [ 695.866553][ T5636] usb 6-1: USB disconnect, device number 36 [ 696.179825][ T5698] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 696.350412][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 696.360385][ T5698] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 696.369589][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.384765][ T5698] usb 5-1: config 0 descriptor?? [ 696.403811][ T5698] gspca_main: sunplus-2.14.0 probing 041e:400b [ 696.680326][ T5720] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 696.724038][ T5698] gspca_sunplus: reg_w_riv err -71 [ 696.734778][ T5698] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 696.747169][T16551] trusted_key: encrypted_key: master key parameter 'Oց轓WWtHj' is invalid [ 696.754207][ T5698] usb 5-1: USB disconnect, device number 115 [ 696.840795][ T5720] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 696.850511][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.861037][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 696.870011][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.883031][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 696.890896][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.901901][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 696.911153][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.924795][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 696.935446][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.940499][ T5636] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 696.947392][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 696.963781][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.976900][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 696.984257][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 697.001394][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.011939][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 697.020941][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.033936][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.041918][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.052381][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 697.080052][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.093467][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.101697][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.111180][ T5636] usb 2-1: Using ep0 maxpacket: 32 [ 697.116910][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 697.116959][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.116985][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.129298][ T5636] usb 2-1: unable to get BOS descriptor or descriptor too short [ 697.155732][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.164420][ T5636] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 697.166827][T16001] Bluetooth: hci1: command 0x0c1a tx timeout [ 697.176201][ T5636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.193563][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 697.202575][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 697.207944][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.221575][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.228214][ T5636] usb 2-1: Product: syz [ 697.228236][ T5636] usb 2-1: Manufacturer: syz [ 697.228251][ T5636] usb 2-1: SerialNumber: syz [ 697.243884][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 697.254930][ T24] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 697.263774][ T24] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 697.281912][ T24] usb 3-1: config 14 has no interface number 0 [ 697.299150][ T24] usb 3-1: config 14 has no interface number 1 [ 697.306036][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.323668][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 697.333151][ T24] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 697.344348][ T5720] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.366554][ T24] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 697.381041][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 697.401276][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 697.415733][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 697.428904][ T24] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 697.441782][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 697.453325][ T5720] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 697.466269][ T5720] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 697.477515][ T5636] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.499065][ T5720] usb 6-1: Product: syz [ 697.504612][ T5720] usb 6-1: Manufacturer: syz [ 697.509503][ T5720] usb 6-1: SerialNumber: syz [ 697.513398][ T5636] usb 2-1: MIDIStreaming interface descriptor not found [ 697.514869][ T24] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.556424][ T24] usb 3-1: config 14 interface 57 has no altsetting 0 [ 697.563784][ T24] usb 3-1: config 14 interface 228 has no altsetting 0 [ 697.573495][ T24] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 697.583834][ T5720] usb 6-1: config 0 descriptor?? [ 697.596376][ T5720] yurex 6-1:0.0: Could not find endpoints [ 697.605881][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.629231][ T24] usb 3-1: Product: syz [ 697.637690][ T24] usb 3-1: Manufacturer: syz [ 697.649824][ T24] usb 3-1: SerialNumber: syz [ 697.697131][ T5636] usb 2-1: USB disconnect, device number 109 [ 697.772271][T13252] udevd[13252]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.917305][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.926196][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.936722][T15087] usb 6-1: USB disconnect, device number 37 [ 698.077648][ T24] legousbtower 3-1:14.57: interrupt endpoints not found [ 698.289841][ T5636] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 698.430041][ T5636] usb 5-1: device descriptor read/64, error -71 [ 698.479823][T15087] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 698.488404][ T24] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 698.502819][ T24] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 698.619898][ T5720] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 698.649795][T15087] usb 2-1: Using ep0 maxpacket: 8 [ 698.657991][T15087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.669156][T15087] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.679133][ T5636] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 698.691153][T15087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.705704][T15087] usb 2-1: config 0 descriptor?? [ 698.751236][ T5720] usb 1-1: device descriptor read/64, error -71 [ 698.830305][ T5636] usb 5-1: device descriptor read/64, error -71 [ 698.922157][T15087] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 698.940090][ T5636] usb usb5-port1: attempt power cycle [ 699.009823][ T5720] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 699.125701][T16594] netlink: 'syz.1.3065': attribute type 2 has an invalid length. [ 699.139921][ T5720] usb 1-1: device descriptor read/64, error -71 [ 699.148614][T15087] usb 3-1: USB disconnect, device number 93 [ 699.148731][ C1] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 699.217558][ T5721] usb 2-1: USB disconnect, device number 110 [ 699.230724][T14960] Bluetooth: hci1: command 0x0c1a tx timeout [ 699.251474][ T5720] usb usb1-port1: attempt power cycle [ 699.289816][ T5636] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 699.294919][T16594] usb 3-1: LEGO USB Tower reset control request failed [ 699.307606][T15087] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 699.331360][ T5636] usb 5-1: device descriptor read/8, error -71 [ 699.589834][ T5636] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 699.600161][ T5720] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 699.610698][ T5636] usb 5-1: device descriptor read/8, error -71 [ 699.620452][ T5720] usb 1-1: device descriptor read/8, error -71 [ 699.720088][ T5636] usb usb5-port1: unable to enumerate USB device [ 699.880428][ T5720] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 699.900318][ T5720] usb 1-1: device descriptor read/8, error -71 [ 700.010775][ T5720] usb usb1-port1: unable to enumerate USB device [ 700.089878][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 700.129873][ T5698] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 700.266084][T16622] CIFS: VFS: UNC: missing share name [ 700.271885][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 700.277188][T16622] CIFS: VFS: Malformed UNC in devname [ 700.284377][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 700.293439][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.303396][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.313255][ T5698] usb 6-1: Using ep0 maxpacket: 8 [ 700.318412][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.328453][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.341934][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.351263][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.361514][ T5698] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.372981][ T5698] usb 6-1: config 0 interface 0 has no altsetting 0 [ 700.384600][ T5698] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 700.393765][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.401834][ T5698] usb 6-1: Product: syz [ 700.406023][ T5698] usb 6-1: Manufacturer: syz [ 700.410686][ T5698] usb 6-1: SerialNumber: syz [ 700.417376][ T5698] usb 6-1: config 0 descriptor?? [ 700.426289][ T5698] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 700.584993][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 700.591414][ T24] usbtmc 3-1:16.0: can't read capabilities [ 700.628681][ T5698] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 700.636679][ T5698] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 700.647093][ T5698] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 700.709921][ T5720] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 700.801909][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.810686][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.819517][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.828909][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.836694][ T5636] usb 6-1: USB disconnect, device number 38 [ 700.837981][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.853210][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.862287][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.871345][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.880424][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.896617][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.905715][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.914777][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.923830][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.935294][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.935664][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 700.944417][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.951312][ T5720] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 700.958945][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.966906][ T5720] usb 2-1: config 0 has no interface number 0 [ 700.976200][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 700.982612][ T5720] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 700.993579][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.008979][ T5720] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 701.027188][ T5720] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 701.036639][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.045319][ T5720] usb 2-1: Product: syz [ 701.049592][ T5720] usb 2-1: Manufacturer: syz [ 701.065816][ T5720] usb 2-1: SerialNumber: syz [ 701.077302][ T5720] usb 2-1: config 0 descriptor?? [ 701.445484][ T5698] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 701.502099][ T5720] radio-si470x 2-1:0.35: DeviceID=0x9596 ChipID=0x2cf7 [ 701.589822][ T5698] usb 5-1: device descriptor read/64, error -71 [ 701.702821][ T5720] radio-si470x 2-1:0.35: software version 149, hardware version 150 [ 701.780249][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 701.839806][ T5698] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 701.903446][ T5720] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 701.920076][ T5720] radio-si470x 2-1:0.35: submitting int urb failed (-90) [ 701.927725][ T5720] radio-si470x 2-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 701.937231][ T5720] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -22 [ 701.961770][ T24] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 701.970422][ T5698] usb 5-1: device descriptor read/64, error -71 [ 701.976966][ T24] usb 1-1: config 253 has no interface number 0 [ 701.983442][ T5720] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 701.991340][ T24] usb 1-1: config 253 interface 130 has no altsetting 0 [ 702.001462][ T24] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 702.019203][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.029345][ T5720] usb 2-1: USB disconnect, device number 111 [ 702.043527][ T24] usb 1-1: Product: syz [ 702.060232][ T24] usb 1-1: Manufacturer: syz [ 702.072871][ T24] usb 1-1: SerialNumber: syz [ 702.100067][ T5698] usb usb5-port1: attempt power cycle [ 702.440074][ T5698] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 702.461063][ T5698] usb 5-1: device descriptor read/8, error -71 [ 702.610393][ T5720] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 702.719917][ T5698] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 702.750859][ T5698] usb 5-1: device descriptor read/8, error -71 [ 702.779848][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 702.788652][ T5720] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 702.808044][ T5720] usb 6-1: config 0 has no interface number 0 [ 702.821346][ T5720] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.847856][T15087] usb 3-1: USB disconnect, device number 94 [ 702.849743][ T5720] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.872228][ T5698] usb usb5-port1: unable to enumerate USB device [ 702.889825][ T5720] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 702.908859][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.949250][ T5720] usb 6-1: config 0 descriptor?? [ 703.039342][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 703.060634][T16654] ip6tnl2: entered allmulticast mode [ 703.195271][T16651] [ 703.197010][T16652] fuse: Bad value for 'fd' [ 703.197633][T16651] ===================================================== [ 703.208967][T16651] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 703.216638][T16651] syzkaller #0 Tainted: G L [ 703.222628][T16651] ----------------------------------------------------- [ 703.229625][T16651] syz.1.3086/16651 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 703.237410][T16651] ffff88804d140be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 703.246229][T16651] [ 703.246229][T16651] and this task is already holding: [ 703.253597][T16651] ffff888057af7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 703.263470][T16651] which would create a new lock dependency: [ 703.269345][T16651] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 703.277500][T16651] [ 703.277500][T16651] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 703.286951][T16651] (&dev->event_lock#2){..-.}-{3:3} [ 703.286982][T16651] [ 703.286982][T16651] ... which became SOFTIRQ-irq-safe at: [ 703.299847][T16651] lock_acquire+0x106/0x350 [ 703.304442][T16651] _raw_spin_lock_irqsave+0x40/0x60 [ 703.309827][T16651] input_inject_event+0xa4/0x330 [ 703.314944][T16651] led_trigger_event+0x138/0x210 [ 703.320063][T16651] kbd_bh+0x1c6/0x2e0 [ 703.324183][T16651] tasklet_action_common+0x2da/0x4a0 [ 703.329561][T16651] handle_softirqs+0x225/0x840 [ 703.334404][T16651] __irq_exit_rcu+0xca/0x220 [ 703.339075][T16651] irq_exit_rcu+0x9/0x30 [ 703.343394][T16651] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 703.349108][T16651] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 703.355163][T16651] _raw_spin_unlock_irqrestore+0x47/0x80 [ 703.360882][T16651] evdev_write+0x325/0x4c0 [ 703.365375][T16651] vfs_write+0x296/0xba0 [ 703.369702][T16651] ksys_write+0x150/0x270 [ 703.374108][T16651] do_syscall_64+0x174/0x580 [ 703.378766][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.384746][T16651] [ 703.384746][T16651] to a SOFTIRQ-irq-unsafe lock: [ 703.391824][T16651] (tasklist_lock){.+.+}-{3:3} [ 703.391849][T16651] [ 703.391849][T16651] ... which became SOFTIRQ-irq-unsafe at: [ 703.404450][T16651] ... [ 703.404458][T16651] lock_acquire+0x106/0x350 [ 703.411597][T16651] _raw_read_lock+0x36/0x50 [ 703.416185][T16651] __do_wait+0xd9/0x720 [ 703.420422][T16651] do_wait+0x1e7/0x510 [ 703.424562][T16651] kernel_wait+0xd6/0x1c0 [ 703.428969][T16651] call_usermodehelper_exec_work+0xbe/0x230 [ 703.434949][T16651] process_scheduled_works+0xa8e/0x14e0 [ 703.440571][T16651] worker_thread+0xa47/0xfb0 [ 703.445236][T16651] kthread+0x389/0x470 [ 703.449381][T16651] ret_from_fork+0x514/0xb70 [ 703.454042][T16651] ret_from_fork_asm+0x1a/0x30 [ 703.458885][T16651] [ 703.458885][T16651] other info that might help us debug this: [ 703.458885][T16651] [ 703.469096][T16651] Chain exists of: [ 703.469096][T16651] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 703.469096][T16651] [ 703.482723][T16651] Possible interrupt unsafe locking scenario: [ 703.482723][T16651] [ 703.491081][T16651] CPU0 CPU1 [ 703.496424][T16651] ---- ---- [ 703.501825][T16651] lock(tasklist_lock); [ 703.506056][T16651] local_irq_disable(); [ 703.512791][T16651] lock(&dev->event_lock#2); [ 703.520034][T16651] lock(&client->buffer_lock); [ 703.527393][T16651] [ 703.530878][T16651] lock(&dev->event_lock#2); [ 703.535756][T16651] [ 703.535756][T16651] *** DEADLOCK *** [ 703.535756][T16651] [ 703.543884][T16651] 7 locks held by syz.1.3086/16651: [ 703.549065][T16651] #0: ffff88802c8fc110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 703.558258][T16651] #1: ffff88801fbf8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 703.568346][T16651] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 703.577998][T16651] #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 703.587562][T16651] #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 703.596864][T16651] #5: ffff888057af7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 703.607032][T16651] #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 703.616073][T16651] [ 703.616073][T16651] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 703.626459][T16651] -> (&dev->event_lock#2){..-.}-{3:3} { [ 703.632100][T16651] IN-SOFTIRQ-W at: [ 703.636256][T16651] lock_acquire+0x106/0x350 [ 703.642574][T16651] _raw_spin_lock_irqsave+0x40/0x60 [ 703.649589][T16651] input_inject_event+0xa4/0x330 [ 703.656341][T16651] led_trigger_event+0x138/0x210 [ 703.663100][T16651] kbd_bh+0x1c6/0x2e0 [ 703.668889][T16651] tasklet_action_common+0x2da/0x4a0 [ 703.675989][T16651] handle_softirqs+0x225/0x840 [ 703.682562][T16651] __irq_exit_rcu+0xca/0x220 [ 703.688971][T16651] irq_exit_rcu+0x9/0x30 [ 703.695027][T16651] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 703.702495][T16651] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 703.710283][T16651] _raw_spin_unlock_irqrestore+0x47/0x80 [ 703.717730][T16651] evdev_write+0x325/0x4c0 [ 703.723953][T16651] vfs_write+0x296/0xba0 [ 703.730010][T16651] ksys_write+0x150/0x270 [ 703.736151][T16651] do_syscall_64+0x174/0x580 [ 703.742548][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.750260][T16651] INITIAL USE at: [ 703.754226][T16651] lock_acquire+0x106/0x350 [ 703.760453][T16651] _raw_spin_lock_irqsave+0x40/0x60 [ 703.767380][T16651] input_inject_event+0xa4/0x330 [ 703.774044][T16651] kbd_led_trigger_activate+0xbc/0x100 [ 703.781223][T16651] led_trigger_set+0x525/0x940 [ 703.787714][T16651] led_trigger_set_default+0x263/0x2a0 [ 703.794899][T16651] led_classdev_register_ext+0x761/0x9a0 [ 703.802257][T16651] input_leds_connect+0x4de/0x750 [ 703.809007][T16651] input_register_device+0xd12/0x1150 [ 703.816107][T16651] atkbd_connect+0x6fa/0x9f0 [ 703.822420][T16651] serio_driver_probe+0x82/0xb0 [ 703.829083][T16651] really_probe+0x254/0xae0 [ 703.835356][T16651] __driver_probe_device+0x1f5/0x380 [ 703.842459][T16651] driver_probe_device+0x4f/0x240 [ 703.849223][T16651] __driver_attach+0x342/0x620 [ 703.855723][T16651] bus_for_each_dev+0x23b/0x2c0 [ 703.862341][T16651] serio_handle_event+0x1af/0xfc0 [ 703.869126][T16651] process_scheduled_works+0xa8e/0x14e0 [ 703.876414][T16651] worker_thread+0xa47/0xfb0 [ 703.882738][T16651] kthread+0x389/0x470 [ 703.888537][T16651] ret_from_fork+0x514/0xb70 [ 703.894856][T16651] ret_from_fork_asm+0x1a/0x30 [ 703.901348][T16651] } [ 703.903919][T16651] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 703.913140][T16651] -> (&client->buffer_lock){....}-{3:3} { [ 703.918866][T16651] INITIAL USE at: [ 703.922748][T16651] lock_acquire+0x106/0x350 [ 703.928812][T16651] _raw_spin_lock+0x2e/0x40 [ 703.934872][T16651] evdev_pass_values+0xcb/0xc00 [ 703.941277][T16651] evdev_events+0x1e6/0x340 [ 703.947333][T16651] input_pass_values+0x288/0x890 [ 703.953840][T16651] input_event_dispose+0x330/0x6b0 [ 703.960526][T16651] input_event+0x84/0xc0 [ 703.966331][T16651] uinput_write+0x3bb/0xfe0 [ 703.972476][T16651] vfs_write+0x296/0xba0 [ 703.978277][T16651] ksys_write+0x150/0x270 [ 703.984161][T16651] do_syscall_64+0x174/0x580 [ 703.990305][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.997779][T16651] } [ 704.000263][T16651] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 704.008405][T16651] ... acquired at: [ 704.012193][T16651] _raw_spin_lock+0x2e/0x40 [ 704.016865][T16651] evdev_pass_values+0xcb/0xc00 [ 704.021877][T16651] evdev_events+0x1e6/0x340 [ 704.026540][T16651] input_pass_values+0x288/0x890 [ 704.031641][T16651] input_event_dispose+0x330/0x6b0 [ 704.036916][T16651] input_event+0x84/0xc0 [ 704.041321][T16651] uinput_write+0x3bb/0xfe0 [ 704.045986][T16651] vfs_write+0x296/0xba0 [ 704.050398][T16651] ksys_write+0x150/0x270 [ 704.054899][T16651] do_syscall_64+0x174/0x580 [ 704.059649][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.065708][T16651] [ 704.068015][T16651] [ 704.068015][T16651] the dependencies between the lock to be acquired [ 704.068024][T16651] and SOFTIRQ-irq-unsafe lock: [ 704.081524][T16651] -> (tasklist_lock){.+.+}-{3:3} { [ 704.086833][T16651] HARDIRQ-ON-R at: [ 704.090983][T16651] lock_acquire+0x106/0x350 [ 704.097481][T16651] _raw_read_lock+0x36/0x50 [ 704.103981][T16651] __do_wait+0xd9/0x720 [ 704.110129][T16651] do_wait+0x1e7/0x510 [ 704.116189][T16651] kernel_wait+0xd6/0x1c0 [ 704.122508][T16651] call_usermodehelper_exec_work+0xbe/0x230 [ 704.130392][T16651] process_scheduled_works+0xa8e/0x14e0 [ 704.137921][T16651] worker_thread+0xa47/0xfb0 [ 704.144493][T16651] kthread+0x389/0x470 [ 704.150561][T16651] ret_from_fork+0x514/0xb70 [ 704.157175][T16651] ret_from_fork_asm+0x1a/0x30 [ 704.164020][T16651] SOFTIRQ-ON-R at: [ 704.168164][T16651] lock_acquire+0x106/0x350 [ 704.174656][T16651] _raw_read_lock+0x36/0x50 [ 704.181153][T16651] __do_wait+0xd9/0x720 [ 704.187328][T16651] do_wait+0x1e7/0x510 [ 704.193391][T16651] kernel_wait+0xd6/0x1c0 [ 704.199787][T16651] call_usermodehelper_exec_work+0xbe/0x230 [ 704.207677][T16651] process_scheduled_works+0xa8e/0x14e0 [ 704.215213][T16651] worker_thread+0xa47/0xfb0 [ 704.221790][T16651] kthread+0x389/0x470 [ 704.227846][T16651] ret_from_fork+0x514/0xb70 [ 704.234417][T16651] ret_from_fork_asm+0x1a/0x30 [ 704.241166][T16651] INITIAL USE at: [ 704.245230][T16651] lock_acquire+0x106/0x350 [ 704.251633][T16651] _raw_write_lock_irq+0x3d/0x50 [ 704.258565][T16651] copy_process+0x29eb/0x4380 [ 704.265146][T16651] kernel_clone+0x2d7/0x940 [ 704.271550][T16651] user_mode_thread+0x110/0x180 [ 704.278304][T16651] rest_init+0x23/0x300 [ 704.284359][T16651] start_kernel+0x38a/0x3e0 [ 704.290892][T16651] x86_64_start_reservations+0x24/0x30 [ 704.298305][T16651] x86_64_start_kernel+0x137/0x1b0 [ 704.305319][T16651] common_startup_64+0x13e/0x147 [ 704.312163][T16651] INITIAL READ USE at: [ 704.316655][T16651] lock_acquire+0x106/0x350 [ 704.323489][T16651] _raw_read_lock+0x36/0x50 [ 704.330348][T16651] __do_wait+0xd9/0x720 [ 704.336853][T16651] do_wait+0x1e7/0x510 [ 704.343265][T16651] kernel_wait+0xd6/0x1c0 [ 704.349943][T16651] call_usermodehelper_exec_work+0xbe/0x230 [ 704.358379][T16651] process_scheduled_works+0xa8e/0x14e0 [ 704.366266][T16651] worker_thread+0xa47/0xfb0 [ 704.373201][T16651] kthread+0x389/0x470 [ 704.379606][T16651] ret_from_fork+0x514/0xb70 [ 704.386534][T16651] ret_from_fork_asm+0x1a/0x30 [ 704.393632][T16651] } [ 704.396293][T16651] ... key at: [] tasklist_lock+0x18/0x40 [ 704.404281][T16651] ... acquired at: [ 704.408244][T16651] _raw_read_lock+0x36/0x50 [ 704.412918][T16651] send_sigurg+0x12b/0x420 [ 704.417504][T16651] sk_send_sigurg+0x6c/0x2e0 [ 704.422315][T16651] queue_oob+0x42c/0x4f0 [ 704.426790][T16651] unix_stream_sendmsg+0xc30/0xde0 [ 704.432065][T16651] ____sys_sendmsg+0x9b9/0xa20 [ 704.437067][T16651] ___sys_sendmsg+0x2a5/0x360 [ 704.441908][T16651] __sys_sendmmsg+0x27c/0x4e0 [ 704.446751][T16651] __x64_sys_sendmmsg+0xa0/0xc0 [ 704.451769][T16651] do_syscall_64+0x174/0x580 [ 704.456520][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.462581][T16651] [ 704.464892][T16651] -> (&f_owner->lock){....}-{3:3} { [ 704.470188][T16651] INITIAL USE at: [ 704.474153][T16651] lock_acquire+0x106/0x350 [ 704.480385][T16651] _raw_write_lock_irq+0x3d/0x50 [ 704.487057][T16651] __f_setown+0x5f/0x380 [ 704.493029][T16651] generic_setlease+0xacb/0xfd0 [ 704.499633][T16651] do_fcntl_add_lease+0x35e/0x470 [ 704.506387][T16651] fcntl_setdeleg+0x14c/0x1e0 [ 704.512795][T16651] do_fcntl+0xec1/0x1a30 [ 704.518772][T16651] __se_sys_fcntl+0xc8/0x150 [ 704.525090][T16651] do_syscall_64+0x174/0x580 [ 704.531406][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.539112][T16651] INITIAL READ USE at: [ 704.543515][T16651] lock_acquire+0x106/0x350 [ 704.550183][T16651] _raw_read_lock_irqsave+0x48/0x60 [ 704.557547][T16651] send_sigio+0x38/0x370 [ 704.563957][T16651] kill_fasync+0x24d/0x4d0 [ 704.570552][T16651] lease_break_callback+0x26/0x30 [ 704.577746][T16651] __break_lease+0x80d/0x1e70 [ 704.584585][T16651] vfs_set_acl+0x48f/0xb50 [ 704.591162][T16651] file_setxattr+0x233/0x2b0 [ 704.597946][T16651] path_setxattrat+0x3cc/0x450 [ 704.604871][T16651] __x64_sys_fsetxattr+0xbc/0xe0 [ 704.611973][T16651] do_syscall_64+0x174/0x580 [ 704.618723][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.626775][T16651] } [ 704.629344][T16651] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 704.638354][T16651] ... acquired at: [ 704.642228][T16651] _raw_read_lock_irqsave+0x48/0x60 [ 704.647597][T16651] send_sigio+0x38/0x370 [ 704.652098][T16651] kill_fasync+0x24d/0x4d0 [ 704.656679][T16651] lease_break_callback+0x26/0x30 [ 704.661873][T16651] __break_lease+0x80d/0x1e70 [ 704.666733][T16651] vfs_set_acl+0x48f/0xb50 [ 704.671317][T16651] file_setxattr+0x233/0x2b0 [ 704.676075][T16651] path_setxattrat+0x3cc/0x450 [ 704.681005][T16651] __x64_sys_fsetxattr+0xbc/0xe0 [ 704.686117][T16651] do_syscall_64+0x174/0x580 [ 704.690870][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.696925][T16651] [ 704.699235][T16651] -> (&new->fa_lock){....}-{3:3} { [ 704.704352][T16651] INITIAL USE at: [ 704.708233][T16651] lock_acquire+0x106/0x350 [ 704.714292][T16651] _raw_write_lock_irq+0x3d/0x50 [ 704.720801][T16651] fasync_remove_entry+0xf1/0x1c0 [ 704.727391][T16651] lease_modify+0x4f7/0x6c0 [ 704.733448][T16651] locks_remove_file+0x5ed/0xf40 [ 704.739943][T16651] __fput+0x378/0xa50 [ 704.745475][T16651] task_work_run+0x1d9/0x270 [ 704.751623][T16651] exit_to_user_mode_loop+0x193/0x6b0 [ 704.758561][T16651] do_syscall_64+0x353/0x580 [ 704.764701][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.772159][T16651] INITIAL READ USE at: [ 704.776480][T16651] lock_acquire+0x106/0x350 [ 704.782970][T16651] _raw_read_lock_irqsave+0x48/0x60 [ 704.790171][T16651] kill_fasync+0x199/0x4d0 [ 704.796593][T16651] lease_break_callback+0x26/0x30 [ 704.803619][T16651] __break_lease+0x80d/0x1e70 [ 704.810305][T16651] vfs_set_acl+0x48f/0xb50 [ 704.816729][T16651] file_setxattr+0x233/0x2b0 [ 704.823322][T16651] path_setxattrat+0x3cc/0x450 [ 704.830084][T16651] __x64_sys_fsetxattr+0xbc/0xe0 [ 704.837013][T16651] do_syscall_64+0x174/0x580 [ 704.843625][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.851505][T16651] } [ 704.853988][T16651] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 704.862684][T16651] ... acquired at: [ 704.866484][T16651] _raw_read_lock_irqsave+0x48/0x60 [ 704.871865][T16651] kill_fasync+0x199/0x4d0 [ 704.876453][T16651] evdev_pass_values+0x552/0xc00 [ 704.881553][T16651] evdev_events+0x1e6/0x340 [ 704.886389][T16651] input_pass_values+0x288/0x890 [ 704.891494][T16651] input_event_dispose+0x330/0x6b0 [ 704.896794][T16651] input_inject_event+0x1dd/0x330 [ 704.901983][T16651] evdev_write+0x325/0x4c0 [ 704.906561][T16651] vfs_write+0x296/0xba0 [ 704.910970][T16651] ksys_write+0x150/0x270 [ 704.915466][T16651] do_syscall_64+0x174/0x580 [ 704.920220][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.926276][T16651] [ 704.928584][T16651] [ 704.928584][T16651] stack backtrace: [ 704.934462][T16651] CPU: 1 UID: 0 PID: 16651 Comm: syz.1.3086 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.934484][T16651] Tainted: [L]=SOFTLOCKUP [ 704.934490][T16651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.934500][T16651] Call Trace: [ 704.934508][T16651] [ 704.934516][T16651] dump_stack_lvl+0xe8/0x150 [ 704.934535][T16651] __lock_acquire+0x2a37/0x2cd0 [ 704.934558][T16651] ? kill_fasync+0x199/0x4d0 [ 704.934579][T16651] lock_acquire+0x106/0x350 [ 704.934594][T16651] ? kill_fasync+0x199/0x4d0 [ 704.934615][T16651] ? do_raw_spin_lock+0x12b/0x2f0 [ 704.934635][T16651] ? evdev_pass_values+0xcb/0xc00 [ 704.934653][T16651] _raw_read_lock_irqsave+0x48/0x60 [ 704.934674][T16651] ? kill_fasync+0x199/0x4d0 [ 704.934701][T16651] kill_fasync+0x199/0x4d0 [ 704.934721][T16651] ? kill_fasync+0x53/0x4d0 [ 704.934741][T16651] evdev_pass_values+0x552/0xc00 [ 704.934758][T16651] ? evdev_pass_values+0x6a1/0xc00 [ 704.934775][T16651] evdev_events+0x1e6/0x340 [ 704.934789][T16651] ? evdev_events+0x79/0x340 [ 704.934802][T16651] ? input_pass_values+0x8d/0x890 [ 704.934824][T16651] input_pass_values+0x288/0x890 [ 704.934849][T16651] ? input_handle_event+0x6fd/0xf10 [ 704.934868][T16651] input_event_dispose+0x330/0x6b0 [ 704.934889][T16651] input_inject_event+0x1dd/0x330 [ 704.934909][T16651] ? input_inject_event+0xb5/0x330 [ 704.934928][T16651] evdev_write+0x325/0x4c0 [ 704.934943][T16651] ? __lock_acquire+0x683/0x2cd0 [ 704.934958][T16651] ? __pfx_evdev_write+0x10/0x10 [ 704.934974][T16651] ? bpf_lsm_file_permission+0x9/0x20 [ 704.935028][T16651] ? security_file_permission+0x75/0x260 [ 704.935049][T16651] ? rw_verify_area+0x203/0x4c0 [ 704.935069][T16651] ? __pfx_evdev_write+0x10/0x10 [ 704.935083][T16651] vfs_write+0x296/0xba0 [ 704.935106][T16651] ? __pfx_vfs_write+0x10/0x10 [ 704.935127][T16651] ? __fget_files+0x2a/0x420 [ 704.935145][T16651] ? __fget_files+0x2a/0x420 [ 704.935162][T16651] ? __fget_files+0x3a2/0x420 [ 704.935179][T16651] ? __fget_files+0x2a/0x420 [ 704.935200][T16651] ksys_write+0x150/0x270 [ 704.935221][T16651] ? __pfx_ksys_write+0x10/0x10 [ 704.935241][T16651] ? __task_pid_nr_ns+0x28/0x470 [ 704.935262][T16651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.935278][T16651] do_syscall_64+0x174/0x580 [ 704.935293][T16651] ? clear_bhb_loop+0x40/0x90 [ 704.935310][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.935325][T16651] RIP: 0033:0x7fc0e799ce59 [ 704.935341][T16651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.935355][T16651] RSP: 002b:00007fc0e87b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.935373][T16651] RAX: ffffffffffffffda RBX: 00007fc0e7c15fa0 RCX: 00007fc0e799ce59 [ 704.935385][T16651] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000007 [ 704.935396][T16651] RBP: 00007fc0e7a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 704.935406][T16651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.935416][T16651] R13: 00007fc0e7c16038 R14: 00007fc0e7c15fa0 R15: 00007fc0e7d3fa48 [ 704.935432][T16651] [ 704.951416][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3086'. [ 704.969301][ T5720] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input2 [ 705.276985][ T24] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 705.305646][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 705.317324][ T24] dib0700: firmware download failed at 7 with -22 [ 705.327875][ T24] usb 1-1: USB disconnect, device number 79 [ 705.430025][ T5720] usb 6-1: USB disconnect, device number 39 [ 706.189878][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 706.189896][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.189898][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 708.110035][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!