last executing test programs: 3m2.893486878s ago: executing program 1 (id=212): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64) mknodat$null(r0, &(0x7f00000001c0)='./file0\x00', 0x4b8981ec7d8f82ef, 0x103) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x85) read$ptp(r0, &(0x7f0000000380)=""/175, 0xaf) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1f0, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa79}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf09c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x43}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @remote, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = syz_usb_connect$cdc_ncm(0x1, 0xa0, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x4, 0x0, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e2a16c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x822b, 0xba, 0x9}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@obex={0x5, 0x24, 0x15, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x9, 0x7, 0x2, 0x400, 0x2}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x4}, @country_functional={0x12, 0x24, 0x7, 0x80, 0xcdf, [0xd228, 0xf, 0x7ff, 0x9, 0x80, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x9, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x20, 0xf, 0x8}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x9, 0x81, 0x0, 0x10, 0x4}, 0x24, &(0x7f0000000840)={0x5, 0xf, 0x24, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xc}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x0, 0xc7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa4, 0x6, 0x7, 0x9c, 0x5}, @ptm_cap={0x3}]}, 0x8, [{0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "bff7caac8b9c821bf486e7dab25394bdce8431cd72e5a85293e984b6ab1b196a661e2dfc9857327f86c6472a9fa40038f366bf7ef2eb00bda3536f2a97f8f297911ba56ed56c856cc00e6218277e973ae88e054a5e7f8c807ed0451f9e4c5c3bc8448f4660ce4fad33e22784374459b8e4e6435f53c2ba67a0d0dd5931c6e6b80fda8755462a506f9d2113b20b981dee3289ce280bc61d23db5130"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4ff}}, {0x1d, &(0x7f0000000980)=@string={0x1d, 0x3, "a2cec2620240973c1673c6de8af1edc94446a56971db50fbcf2c1c"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x810}}, {0x1e, &(0x7f0000000a00)=@string={0x1e, 0x3, "0a3227cc4d875adc4d411348060bcd948d1a19bb0c2368d8cc43437c"}}, {0xb1, &(0x7f0000000a40)=@string={0xb1, 0x3, "bceb517d43fceb37248515c7c50b03f66c98a2d75fdbe5a87337f34b265318711bcc49e86eb17b63388036fdf68843f440faed9a4596354b150640e0295ee1ab9338c9fed81a9ac582569b3d4e3a3ccfcd057ae947a4d8a939f110556ff8358ff115969f8b454d115f7276b07987158ef8a328b22163e936191a10caac2a33486d4cec8f005863acf670af2614d92572a512fa949b869dbd3bbe19a8f9ab97386e09d35acf7f90fd32446cb16e87de"}}, {0x6, &(0x7f0000000b00)=@string={0x6, 0x3, "e028a21f"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000c80)={0x14, &(0x7f0000000c00)={0x40, 0x4, 0x3, {0x3, 0x9, "15"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x40, 0x12, 0x5b, "0b85cfe9bb289bb5a9203b5b9f0bde5bf5b9b73074752a4d2a3f3d425f7b93ff74600242aaab144bb8c6e4741f61aaea29d32cfc99d9ad94eadedafa96105be670629cd39514619058022db15c7190f8bbea69eda6d507a51b8a44"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x5, 0x0, 0x1, 0x2, 0x4, 0xfffc, 0x1590, 0x115, 0x8000, 0x0, 0xdda1, 0x5}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000e40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000ec0)={0x20, 0x89, 0x2, 0x1}}) (async) getsockname(r0, &(0x7f0000000f80)=@generic, &(0x7f0000001000)=0x80) (async) r6 = syz_open_dev$usbfs(&(0x7f0000001040), 0xa, 0x208000) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x35}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x4) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000011c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001480)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001200)={0x218, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7787f500}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf66c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44a5787d}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68f35929}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b55693b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5845728}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x341fd890}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d82afb8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237a9a6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x290f8362}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6dc2}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9044}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f7ad4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36a176c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f9a2cf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8887}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24251d26}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x561d023a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb197}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbf0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68f6edcd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeec4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ef6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f7ff33b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688dca16}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5953c0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7478}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aa726c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55fc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386290e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8be4606}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x726905d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8234}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c70}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, r9, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4010) (async) r10 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, &(0x7f0000001840)={0x14, &(0x7f0000001680)={0x40, 0x30, 0xe3, {0xe3, 0x8, "c39bf5f8b6887ed3a7565ae043a3485a56c7d33fcb2297d9619374b5ed368be2aa7c137140d6b2d5fca0d72474c4358770e15f660ee4e3149fea103eaa9359c8de304d77618c62d0f2c19ef1cc226c9bd013e0a4c0560a5ed3ca7df8237485880df1a889cbb53a17fd42c08accb702d0c59bc08e02f380f75b6e1b5305c81fcbfc5e1c49d9f127373fd61d23228073df4d1d2dc6292def7a459feb1f1e3626435708ecb7cf40fcc1d1b6f33819d128103be4a01724c38af3405b77746ca8ff8d3af6b3db51589ab388188a4b2d73704ef46f8a0a76635762192ab3b2877a3bdf89"}}, &(0x7f0000001780)={0x0, 0x3, 0xad, @string={0xad, 0x3, "8a1e2b9bbe657e741ef08c1647de5849d4e58e1c3c231a7a71d8639471871a8d6e9ef615817d941decc37cad1780f33057ceeb1ea619c629cf9f7f47fdd9646dd7128ebbce48e88697de29edd448271f5cecfb0f544b1ea828f65bebeaf9352d28b723cbcf03cdf2fb254c7486d0264061da59e1bb2b542317fe61c4c30154fb71d328f1309747650dcd0d51c5dd418a63a83392c97b968cebde907d3a1d49e24ec9ac4764401e636f2ce9"}}}, &(0x7f0000001a80)={0x34, &(0x7f0000001880)={0x0, 0x16, 0xb6, "1fae02dc31a72fd36ee4cfd384c7d8e7707eb85fd3f0afdc8b49c55fc471500491695355279eb123b5be00f0b34d5d9fa76af4acf2ceacfcd099d29cc48f00a9e219d5c983068ecae443f56bc2aa14d429c0bd405168cd233a299945ac3efbad48b6bdccc839f30625d84063b14872585cb924c8890f67b1a818146ef5fa6440173b6b96457b7f27d1d0fa1ef11ff3162139b6f2067219c211d220d08a7c895fdc5192d129349586d470515abbb5741cfc93e22480ce"}, &(0x7f0000001940)={0x0, 0xa, 0x1}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000019c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000001a00)={0x40, 0xa0, 0x4}, &(0x7f0000001a40)={0xc0, 0xa2, 0x2f, "cf9c7d6ec635038f23ecd4d2679ca71eced248b74921c305b3f35f5f490ab63e40cc145cbff0e449012df7eeb3bc86"}}) (async, rerun: 64) r11 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0x8, 0x3}, {0x9, 0x5, 0x778f0816e5eb4164, 0x2, 0x200, 0x1f, 0x8, 0x7}, {0x9, 0x5, 0x0, 0x3, 0x20, 0x2, 0x9, 0x24}}}}}}]}}, 0x0) (rerun: 64) syz_usb_control_io$sierra_net(r11, &(0x7f0000001b80)={0x14, &(0x7f0000001b00)={0x0, 0xa, 0x35, {0x35, 0x0, "b0d8a3da68016430309eba226dd48f0caaf6a0bcded689ebfaaed0789a2ff5aba6f8cb06eba3e03c6dde3508f0a74f6868daaf"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000002100)={0x1c, &(0x7f0000001bc0)={0x40, 0x0, 0x9a, "9cf9d7b34ef05e6cd8c2606db0730027d7cd88299e3cfdb5c30e68fcfafe638e36e58fa566b171a51e69ea2510e05a6f9d56d4e768c26f47a9e91a772ae51aba83c05401ce9d78c2e307d405045562cf4c3a5068dff8e8b486e4d5ed6f0e5a34dfe4120e492b7dcf353e2a2a0991271a5502801d143165d440312d0de1fbc758915d631b86a954da2c270e04bba3a41ae7954dd12f218b0b68ab"}, &(0x7f0000001c80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000020c0)={0x21, 0x0, 0x3, "629810"}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r0) (rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, r12, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x92}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0xc4, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 2m59.533730063s ago: executing program 1 (id=218): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xb0002, 0x0) write(r0, &(0x7f0000000040)="8a0d3f3fafa41417997801e0a5d133ce23ad78e8414d062ddc5dd4fc12fe3c0b40de830955a6996d19719dd9bd94b1816a7e255e869dc161cc47379a2bd748225369b0db1d0ee224e68d", 0x4a) r1 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x4000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x3) r2 = getpid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@dev, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellink={0x58, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x5028, 0x240}, [@IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "468c63e7f4ca6b6303a80ddebc8fb8f2"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/vcs\x00'}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/video#\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x60, 0x17, 0x8, 0x4, 0x46, 0xffffffab, &(0x7f0000000300)="ed5564146990003bd41cb60eeaebe39d34d0b555c9410d2c0f107eefbdece92348fd84ee041f4477c7ab902f2a6b63fe310b040624444c64072bce30e00b6a20a633e202c00e"}) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256,ecb(des3_ede))\x00'}, 0x58) syz_usb_connect(0x5, 0x8c7, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xfb, 0x6d, 0xe9, 0x10, 0x1199, 0x68a2, 0x6d70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b5, 0x3, 0x58, 0x76, 0x50, 0x68, [{{0x9, 0x4, 0x13, 0x50, 0x6, 0x9f, 0xf8, 0x79, 0xc9, [@hid_hid={0x9, 0x21, 0x8001, 0x6, 0x1, {0x22, 0xc51}}, @hid_hid={0x9, 0x21, 0x3ff, 0xd, 0x1, {0x22, 0xe00}}], [{{0x9, 0x5, 0x80, 0x3, 0x0, 0x2, 0x7, 0x80, [@generic={0x11, 0xc, "84cb272cf3972c7afc47a37a409a00"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x4f, 0x1, 0xf6}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x5, 0x8, 0x1, [@generic={0xcc, 0xd, "90e4f58e496dfc322c65a14ef3d387a71518f14e7649abdbc6384d742bf404c1aedf60261cbb8032877ce61223bdfcc10cb9f421ea5171d8e7096bfa54bf80412c9f985fe0c855810b6e7078a4ea12125c3840d9f93eefbb27a339a0b5637bdfdcce0022768c74d8436f6d38effc19754a501d791cdad8bde39aa5ee8bacf1e1e655ad1d0b397ddc693c9b1598838148975d0263bf49f4adcead3dcdae95358d910c975785bd7ca747a54dc673075f2f9844abfd04266e9251dbe4b0393fb49599aa3c168be79cfa354a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x4, 0x9, 0x47}}, {{0x9, 0x5, 0x8, 0xd, 0x200, 0x0, 0x4, 0x5}}]}}, {{0x9, 0x4, 0xa7, 0x80, 0xe, 0xff, 0x6, 0x1a, 0x7, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x6, "e080f3", "22a2"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x3, 0x9, "d376a1930d25"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x36}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x81, 0x64, "da7b", "47821c"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2000, 0xfffa, 0x4, "8772bd"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x1ff, 0x2, "e8ae4ba0a5d1d1"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xfa, 0xc0, 0xa}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x81, 0x6, 0xfc}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x1, 0x7, 0xd3}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7d, 0x1, 0x10}}, {{0x9, 0x5, 0x2, 0x17, 0x30, 0x2, 0xb1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xed, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x9b, 0x63, 0x2, [@generic={0xda, 0x21, "099aafefa552ba14c51177a7bd049c7547650dab0f67e9c0ada7254b614d9d236e97c00e9073adcdff8be117d939339b1601581e195d2421a25476b77e0af0634df2777f4c0bbd0b33916147a9afe9862e73c7c5502b4daa7082d4a17d3b9223e6b2229f352d3ebad563092a9534872d1bc4bee0832e087ba8512b196592ce9af0eb985d44e51836fb854f55fd0a92fe94643542452124b75f6f48b6c10169d06811cb4f6bee6e58fa1d04596a9363b29cf82ab5015cd3b75077defd45284296ee8a86860496a5879e031e4950c5230f242b415c848e387b"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x6, 0x0, 0x7, [@generic={0x70, 0xd, "e286f566909a78def25abf8d8b5688082d54b251681dc12bc65c88e2d3b5777aa3ce7525140acfd8ca7adda6951e347bf2532c5bae584d42eb44b55b5c199f30b2e8e1016d09fd7b76f88218fc6f1d65f647a7cce6c57624c2da31388ad7dd493f758ba573ae2948effa7b3f4a93"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x19, 0x10, 0xf2, 0x3, 0x8}}, {{0x9, 0x5, 0xf, 0x1c, 0x3ff, 0x5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0xbe, 0x9, 0x6, [@generic={0xf2, 0x21, "acd9e3e0bd3c74a300aacceb2a264545d6343c8dca9629d95bf9d9d4d2fb2941859afc24db6767a395cdad979753b3b1a529087864e155effc335476d6817566c9159546fe9b4e8506441101edd9bcd55757e43bedf1b8f0b9893fc9e277fd7d88fda569f79c41fa0296a286af04f40b8437d7860691e90bf2a732bf9baeb790e72487d03d8299bfa94de80e2ce2f247ca917ec0dcfa7d20bccb9b11aee6a2ec56d680fd56969d6ed786c7f8e269007aa267e360867139a60b6709d0aa62893d5baefac13bd31c7d741981c2b65fd97d56fddecbbcda7189e56cb8e27180c4052b7b625103692a333fd843147a3460b6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x4, 0x81, 0x75, [@generic={0x50, 0x31, "49bab1fa1400707626ad9dba83d85a83ec49298a333e311032a60b64b694cfede98244ae85bc9497ac3bc251f868fc7516f2537b69260bbcb1875035fd7959216daa44e5e4ee222fb9e9c23e5902"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x4, 0x80, 0x60, [@generic={0xeb, 0x4, "d334ec62bda16d466dfd94e447ab7c730a9ee8561454999130e6159a169ced7725d86f810f7c4e218b6290d0fbbe03f0fa891ffe07e550ef4a987d88ced01da19a6460bd81505af034414584606b8e9a12d8503671c1d2cf72f503139a2ce3fe23cb0e3eea0bbf448799fb6b88d38b838f552ef06c4a5815a631b5a57018179c2067944d510187bb8cc2c80f82fbc9a31ebab6e94c713e83be623469ea3a62c18f7b2e63435e25930c80b5b54b13f213a8104999fa789c8fff5f5badf6a0d21d4636e134792a83392581bebb0b720c41022c21f24c9a6629895cc62c9e33c1908049cfcf88d9591104"}, @generic={0xbd, 0x22, "265074c84be4c78df2f56f94717c09640a43d3e07fa3d22d2d4651f05bd5cc2de4e2d305aaf744c76a542b82b683023a038151568ff70075906c87d3bca85580f682d20b4cd8fc1c4d9d63ed79331d72bc407fd8853c4ece165557f957b58a597cd5e182867bd6528644aeaf93aa66dd27538496280cdac5fe7ffa2bd81c03f5b3fb73c4280be2878b6d43608a0af2a8ea220265a1829328052d6157c3a1728ee433241a4e3ec1b4eb4860593dacc4b81f2a2d0ffa0ef90697bdb7"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0xf8, 0xb7, 0xc, 0xff, 0xff, 0xff, 0x6, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0xd7, 0x0, "42b6fd", "103b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x2, "e913", "ea"}, @as_header={0x7, 0x24, 0x1, 0xbc, 0x18, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x8, 0x2, "3562aa78581834a9b7"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x8, 0x0, "ba3cc0", "9619"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "340bef"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x437, 0x2}, {0x6, 0x24, 0x1a, 0x80, 0x12}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x3, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x2, 0x85, 0x5}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x90, 0x8, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xe6, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}, @generic={0xbe, 0x2, "5bbacf89b375e1ebaa77dbc1b4b15a3a78368af8fceb61d6fe777aec47c7166da019e43d793594522711ec42dd2d42b88617d4f6d0302fcc2d636c533e6fcf385f363f57c71066e4e27c49e33582edc2bc46c0af24045ee381fd8854e7ffbeb8add0253bef4b90f947a8203c764eb6e6f08decc4fbbc8f806e03d52f003d273ab476d1bf5638b67d91886d62801dfad119c9bab3ae3274e74d9e658f8c4e14f8e93fd5e1dd2f71f3c35f089b88b711f4d60ae996d1e4bfb2c46e4cfd"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x2, 0x5e, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x80, 0x8, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1000}]}}, {{0x9, 0x5, 0xd, 0x2, 0x628, 0x2, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x7, 0x8, 0xd}}, {{0x9, 0x5, 0xb, 0x3, 0x1ff, 0x1, 0x64, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0x33, 0x34}}, {{0x9, 0x5, 0xc, 0xa, 0x208, 0x1, 0x5, 0x1}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x40, 0x43, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb6, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0xa, 0x0, 0x6, [@generic={0x4b, 0xb, "339e2f86f62d9bc444a3bafbe7feb54b54dd5e1e7b7ecc4b9d2a46895015e07986e4da93384e364cad04abcd8557d95e4f7a79c3ae172df470d35f4b22debf54ca4855087bf2d574a2"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x440, 0xb2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x1, 0x6, 0x0, 0xff, 0x4}, 0x39, &(0x7f0000000d80)={0x5, 0xf, 0x39, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "6edc90111ce7ae7807ea8713f37c2897"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x76, 0x6, 0xfffb, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3b, 0x6, 0xd, 0x400, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x21c}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x42a}}]}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x8, 0x2004, @fd_index=0x3, 0x4, &(0x7f0000000fc0)=[{&(0x7f0000000e40)="6d09905f164e9a", 0x7}, {&(0x7f0000000e80)="48aadb9ee4bd2fb4eedac80397f1a14864e9f61ea4576e1b5426de73a100ffc4c6b98517fca5ad6d48febf3097b7858ba5a6d5414aaac88fcb2f15c2362234865aa8af5e3b53b4c4b5be0e28eac0d2433e64e721bd2bccc3cd693323a1f4da22f761a9364fce8a705404a468ea2cb7055b781ad948965a27b01cde5de515748c89d245a7e07fe31b341b206e9d38cd032ddab4fcc4732c2fd4b508eba7af8f867563e58082c1b3d606abae35c83c83ff4f9928c7088567b8ebc23aa0aab844", 0xbf}, {&(0x7f0000000f40)="ea22b4ef3bcd3006f6d89491f42281a5fab0fe61f64971b26c3acbea459f6230b129709e407f1a1058a7de8c532c9ef8f307b38eea2d127f63b451845f3dd2d221cf5326bf47bd", 0x47}], 0x3, 0xd, 0x0, {0x2, r5}}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001040)={0x7, 0xffffffffffffffff, 0x1}) r7 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, r7, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001100)={0x0, r6, 0x9, 0xffffffffffff8000, 0x0, 0x4}) fcntl$getown(r0, 0x9) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001140), 0x80003, 0x0) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000001180)={0x8, @raw_data="29b00f4207e9a2eefe5ccb52615ae1350a38637b5ceea0c56eb6426a39c0f771ec4584f5c226db24b50beaf536b84dfa1140e71c0b08ec4be9d564d0c70bee685780cb6f707a4f41e67ef88506c7460e382d33ee5da659026ef99f1255d502e8df762a4512e5573f7b97407005f2772dff85afba7e8b8310309321712972bc4112564451c6fff25dac6c0d1d4ff8b08c300338de2051b223ace0d96d1341690361b8ccc5a3df946458d33205ffcc30e9153b717bf8a01a36d1661f914476c44e173533495344f349"}) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000001280)=0x80000001) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000012c0)={0x4, r6, 0x80000}) ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000001300)={0x1, 0x8, 0x3}) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000001380)={0x3, 0x0, &(0x7f0000001340)={&(0x7f0000ffc000/0x1000)=nil, 0x9000, 0x60}}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f00000013c0)={0x0, 0x0, 0x1, 0x7, {0xc, 0x0, 0xb8d0, 0xb}}) write$cgroup_pid(r9, &(0x7f0000001400)=r2, 0x12) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000001480)={0x11, 0x10, 0xfa00, {&(0x7f0000001440)}}, 0x18) 2m56.758339891s ago: executing program 1 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.660004939s ago: executing program 1 (id=234): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x2, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x2}, 0xe, 0x5, 0x0, 0x0, 0xef3, 0x8000000, 0x5, 0x41977996, 0x403, 0x0}) r2 = socket(0x22, 0x2, 0x2) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.291192051s ago: executing program 1 (id=236): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) r2 = dup(r0) sendmsg$nl_route_sched(r2, 0x0, 0x50044) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000940)={0x7, &(0x7f0000000840)=[{0x7, 0xcd, &(0x7f0000000300)="81c88476943fe4519c82e645d5a6dbb4934272e2348d4b00caaf812e0352635ffa65b8b1dda62e6140f259dba3ea21bfe83fd160d037dfcf733dd13b6bfdf223e001a91c2b901d6f48ad29c583c940ed833707f467bd6a6352b4e5fbcd5cf07e678958fb651de0edb6df448b5287a3a7913687750af93e0fe56578cc7e70aedafc7885b8df96d18b6dd3baf20e4379f011957cc1bdde941bfbb40e65ad246494283c8653ca0f896074fbe7225b2c954c7a624a7ba39f9f5d1738e0ed6c1efb2bcb10a11f2351991f4ad4a8635b", 0x1, 0x1}, {0xac, 0xe6, &(0x7f0000000400)="bb6777078fb33b0e97074c9cccd5269d5ce50c330f14c3d5481e65ad929de39dfcefb57601aad4a12cf62de58c32915c7cb25d582d68a6e051783b1b4ddaf0be9cce06b5be25a4290a9da4363a2deaaa0e79bd8d52aa083ed355c9dc704235e8aad8827ead2dffe103772e5678151dd912f60d5de31955970215130f3fb2aac96c18d2b8cbd8f9a1bac419a7caa7f027d913a9b55c5b0c7fb3ea1b876fce5e519609f81b13e91689dc6f339d5c37d0080246562e464c9032c0c29ed0fc76f182df3c77f99923cc7d728686f6cf187a1cc3a09e5483c9606a1b60a310efe965320389eac45e8c", 0x0, 0x1}, {0x7a6b, 0xc8, &(0x7f00000005c0)="b5db0dcccd641a657c346bb8e159a6cd072ce1ff8e6d21d182281488cd666f03c7c012914c56e8e2437092da152d687fe7a726d9d2eabe348e627e1f694d1dcc5bf3af7bd16bf92add196f35da162aef596522a66d0b5d43a8896250870948accad5df3cfd84ef49a64ca7f7992acd036471d60623996a473435fccc3908a2d7ec9cacd9276a98a794be92d3785839e99e97f9551559857dff5b449bff6545a284749bd5cdf95486d37961663a013ae1f4dd746213b87f107f48ca7be421f55850ad05d9c735c32b", 0x1, 0x1}, {0x7, 0x32, &(0x7f0000000280)="6f62747fee01e137e1c53b6bf29d756b9a2b2af750e9e74158d23fe89b427008d994bf713a698650d6b4df8d166b962c7ea5", 0x0, 0x1}, {0x8, 0xa, &(0x7f0000000500)="7612b12c75c0eec2c8bb"}, {0x9, 0x78, &(0x7f00000006c0)="c2a835ec79ec345da6ba0e7eb4cdc69620871345f1e6e9ff9e049d42bae63d162f9b12d738495681b13157c97505c113fa5ff10754c6c4bab018168b96a04ff966a1b4629ae0d555d95cbcba6f72eb68110473eac0965afdab36a6a1db349804d229df6b84e64b04ecebfb7a58a9b125bae5d446d4f55484"}, {0x7, 0xce, &(0x7f0000000740)="4361cb0b6f78d590aad04db798fb635893fef5f77bc5246d86a6261af6a048b939402b19a009dfc2b519af794049ac4b411a3f57e8a39cfbfb6c0513e3c44e7e44e087525d699a2b7359aeb6fa930712d2b0d35b51f262bf0a523cc4e6749873d5d46981d07e3cc04206850df15df01a826fabd5f9f3327548bf8b53c2c97673544e4278c8bdf84f7488b2919a1e7c751e2204471f458347dbdf0eac92e99a9099880beacb5b839c1823fb6977f19dc68aed6912b16f430cedf4faed5e282548edce38e67cfb9a67100cf7ed0b4a", 0x0, 0x1}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000036c0), r2) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfc, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x40, 0x2}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x62, &(0x7f0000000540)=@string={0x62, 0x3, "947d7804ee264c7bef8c99e535b0750bb182adc35b098d7e3ace25f513e7f4ecefd5a4b2ff1c1090e9fc35d69cc4be4c114660ae8a6d3c446946341df8aa47fb935c39226cf708bfd880ec4013f7e4db20dbe0dce9cf7048a5369b4c8fb344d9"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40e}}, {0x72, &(0x7f0000000040)=@string={0x72, 0x3, "126329bcff739bc287e803a70bc093f16afb1b0a146f9e3c0a2c47420d9f0cd6429bf40242d7d6f39e4afb42952430dab632b54491368aae85bd5c440ef5771bbcc3f82501bffd9ed713e4c97113321895be5e939fc0eac6c19d803eb234f42fb9c5f48081c244e78a86a70518a5a99f"}}, {0x39, &(0x7f00000000c0)=@string={0x39, 0x3, "da979172c9a867a3492a2efc8196443867ce606611ddadad840e07ede68a1f306d840cbb5c9ac9e3a383c0383a05c257049e97d3ea6946"}}]}) 2m48.650395967s ago: executing program 1 (id=243): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0xe, 0x5, 0xd}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) lseek(r1, 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x6, {0x6c, 0x9, 0x6, 0x4, 0x6, 0x7}}) 2m27.635652336s ago: executing program 32 (id=243): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0xe, 0x5, 0xd}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) lseek(r1, 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x6, {0x6c, 0x9, 0x6, 0x4, 0x6, 0x7}}) 13.394815374s ago: executing program 5 (id=561): r0 = syz_clone(0x1a00080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)={0xf0, r4, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0xffffffffffffff9b, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc800}, 0x40011) (async) r5 = syz_open_procfs(r0, &(0x7f0000000000)='projid_map\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) 13.115863891s ago: executing program 3 (id=564): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x80, 0x0, 0x77}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 12.98224922s ago: executing program 5 (id=565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = inotify_init1(0x0) fcntl$dupfd(r0, 0x0, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 12.15041163s ago: executing program 0 (id=568): clock_nanosleep(0xb5f7790af3591ce3, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 12.149466715s ago: executing program 3 (id=569): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0xfffffffc}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c1105c9000000000000f606000006020d0004"], 0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000005}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r7], &(0x7f0000000180)=[0x100000000000035], 0x0, 0x8000000000009}) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30008001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x7fffffffffffffff, 0x10480) 11.872817995s ago: executing program 0 (id=571): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000800000000000000000000008500009100200000001801000020696c250000000000200d86ef63d978dc9420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 10.027504741s ago: executing program 0 (id=572): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ea70d3d20"], 0xf) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r3, 0xd01, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x20000004) (async) fanotify_init(0x4, 0x800) 8.345284557s ago: executing program 5 (id=576): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x1000000081fe, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) syz_clone3(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x80000001, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000003000000b68abb5491a0a478adc64895000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x16, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x3c31, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r4, r4, r5, r5], &(0x7f0000000480)=[{0x2, 0x1, 0x4, 0xa}, {0x3, 0x5, 0x9, 0x5}], 0x10, 0x7}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300240000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) 8.052429795s ago: executing program 4 (id=578): socket$unix(0x1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async, rerun: 64) syz_usb_connect(0x0, 0x48, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100004e4aa92082053300578e010203010902360002000000000904"], 0x0) (rerun: 64) 7.839583321s ago: executing program 4 (id=579): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x100, 0x9, 0x9, 0x9, 0x2, 0xb}, 0xc) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.305154598s ago: executing program 5 (id=581): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x8, "01bb9dba5793eb6efb75b87189c3b24fcaddba1a354f6ba3ba5bccfd625c1286", 0x3, 0x4, 0x7, 0x0, 0x0, 0x3, 0x2486, 0x5}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000780)={r1, 0x6, 0xc}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xca, 0x6, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000280)="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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.115494024s ago: executing program 3 (id=582): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000800000000000000000000008500009100200000001801000020696c250000000000200d86ef63d978dc9420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 6.87463531s ago: executing program 0 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000800000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.193548922s ago: executing program 3 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100c2f3000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x14c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) poll(&(0x7f0000000180)=[{r3, 0x8000}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000411}, 0x800) close(r2) r4 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) setresuid(0xee01, 0xee01, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r5, 0x1) (async, rerun: 64) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000580)={r7, 0x4}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140)={r8, 0x3}, &(0x7f00000001c0)=0x8) syz_emit_ethernet(0x58, &(0x7f0000000040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@generic={0x6003, "71d9023bee5aadb65235b4cfb70a20d93646320546ed97905cdb65822f0e62334902bee56a146acd9fd5bb4d25740f205d664df2f80578d824d8e6a3a83c57d4abef43e59c3897bd47d1"}}}, &(0x7f00000000c0)={0x1, 0x3, [0xbbe, 0x280, 0xe53, 0x2ac]}) (async) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000540)=0x400000061) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 32) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5.147368098s ago: executing program 5 (id=585): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x6, 0x11, r1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000004e80)="82a85b3cc4", 0x5}, {0x0}, {&(0x7f0000000240)="aa683a75b6f0641937e3f13563fb17fec6d1d2586799e7b1f9e05faa896e6ed6a42d481d0b1289b4bf6ebdb45a4bc2fce309000000e84ff95fe61d19f2c72a", 0x3f}], 0x3) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) (async) r4 = dup(r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) (async) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x7f, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x5, &(0x7f0000000040)=0x29) (async) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000250000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x12, 0xffffffffffffffff, 0x8950000) (async) r7 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x4e, 0x14322, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x89a, 0x0) 5.034407576s ago: executing program 4 (id=586): getpid() (async) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000800)=0x67ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000002c0)=0x8, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000002c0)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x9, @remote, 0x200}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000300)="2bd17efe31ca30de1a6492b8a4e12d6db8ff95695f0afae1ff0b9f96c853c4c6be127f5ef2da66236f65c8c11140f2d73156bd3f2eb92560a6764bead4aa3d0caf2214f8ff1ca2d91dd2a8fc77a6f7f348fb481cc409c73203e8b81b91848ed563be337a8d6601871b1711a6e4957f611d68caca05e5dc0b3fdd1d10a0dea9c1415e4b481aca276041", 0x89}, {&(0x7f0000000680)="b00ed19f8a29d286bb5df447dd3c799addbf56f072512c3d7285ecafdafad568c3503b0f9e7f86c86c867f141fe574ab854bdda675e0374f1d4aa7d6aab81a6d23a44e9794971b390520bc0c5cea2b0a3f430c950f40bb332cac6016128d678d7990ebeb3369d3cf96bad5dcb20137d171f83772b27968e3955cb143b36c23699e42935fc48f88fe8aceaf3bde1f89157c9d61766bb725af7543dddf2c98537c4940339e31b1cd607796805cb7f46d1058e9f215eb39e25aa2e4398ce4498509a4fc260b72e7d99553dba3f0b0", 0xcd}], 0x2, &(0x7f0000000240)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}}}], 0x20}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0xe, @loopback, 0xfb}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000008c0)="c642bf2e95872a176d3d1c716e3cc60cc349bab9387805ef624e35cb838607984ffb88e0573ba63fdbd16e5ca086020f0872e6e99c20af9d1b636c5ea3c5a9579d3556fc6d80586f315e1d298080eee4052d57571900a951587c1328786d43a6cb396fdf9d21b0d875e471db13e9f8cf11622426542cef0bf9523aa733a7ce60a467ea1c217f94d4b5faac5fbdf6f985787f7a1aa8dc0be34360f94ee9d4ef5584d57040125d95021827dbe02b7852ead6d28c5886b992da2e8c52cfe86639fffd96cfafa148f91ec060aa2db52b4beae0a617423cbdf1398551ddf1e50a5f84b9be544376b955e500d74eedbfc702e7b354bf94391d8b5081", 0xf9}, {&(0x7f00000009c0)="a0cd4d89aba31144aa269ae09f68e766a3608c435a6db80a196a3267241d5f30696e5969e6e01c63b6af1ffce3aa497de74890cfca52e441fce9bf34143e90a2d72dec0497238af79080b62efe38cc3629a9ab8663dc13740c0d5f023072bd69719b4a164546a14125c90e7af1e2a6e5ae33ca38eea975e87a7ae107c8e7369d19856ee47eec5dfa8f177c2a1a97d2c16fa02e4d74c34c5ec8a7ca717b2bdbe3afdb41a05c23379487cb80597bd7f71488eff5ab62e1bf9c4a52a1a298286896135824b201e960f3e5ff4a7dc562f526", 0xd0}, {&(0x7f0000000400)="0edcb09807801340309072d912104b88fc2d93133aabdb0085994ae065ef6fd8", 0x20}, {&(0x7f0000000ac0)="dddd58f356b65c6c8e749c340adfc6e0ed1210825ebfeeb22190311863cee562977f5502108df58aa1cac14644c5d03eb63e14bd665873970438c5bc49fd59969e31d76d423e4b3b01b075d41ae482bff53a7988a471e565806a16fab421b0130c9f517e48edc0a79dfe0947a372c8220ba8fb3724cd3f4ce32ca638a70d5fff00d9ba2ab970c826ae296cb6cb1a337789cd2420b9bcd8", 0x97}, {&(0x7f0000000b80)="241b94765764d5fa1b3eb5988e86f6768619f7cb83cbbfb9df2017fcd099545b649ebf46ceb37a5195311dd8d68fff6f81cc96c0e5d1c15cbdfa2a178609047b7f0c2736152510b51fd50a43d0ff0929cd6cdec575c6cdb98614e8f62b3cd2970809d1007ca8aebc17b7be43e59298ca39dec55de430d7f03beef56fde374cbaecef1ee1b2533874cba35c8c4b408109f66b176164b41139c74e21d0ed9fb757f60c30256ce780f3fb05f7ecaa5088e942254003bbadd914eb2c5343159a28c07777bcce3942532e5705d925e1a836203864835fc4c1", 0xd6}, {&(0x7f0000000c80)="eb5de756a70e405f968bfedf802d24122d9f49ea9e7d4dbaffa18dee7c62b68986d05bbd1f1f32a05aa8963fccc63e23676e8e02c6f6afb5058c6ff5a01aa3ac0fbb7c74aea34c0484695bba3bd79f01f3febca71e06eef1a6227220a0cd9c0025dbcb9de6e5d4ffdfc220827249aa2dd344a7264d3ad4f31bdda721b92e8a273fa3dc2143dc908d9846cd601211a21fcb13461e73152022ef416600"/165, 0xa5}, {&(0x7f0000000e40)="79f311fcbb914c087fb243c7b2c7a27e095e08000000cef5f784d9ad2ee22a90e18494951494b90593f382413e16076942db92759af3de5f0e5241b8bb86b03a96c823e6ca02caab550f7a0ae782f88c8f19512bbda307fa233cfeed491b0b160e287b018d61c166676b1beb83a1cde5f5438d6a10083851adb57cf4dbfa50a78c0c0ebc30187ce721f47fefdec01450a30eb7b3444aa525a51e1face8db43f0c6798f445eb115ec268393bba4623493301e197fbcf2bff31e5c414edad707e04b2a858692ffda4004c94d1d6ebc4ecdfd6e22490f6406bc9802f5af8a54e451f921fd8e4bbea48543fb6502bc64433f68acf450da", 0xfffffffffffffe45}, {&(0x7f0000000d80)="368ab578591b34009a998b320742e3afb0a40fc5f5825782ae275464b1b6c5c7d8023868389b3268c15c41aeb9d6795571f872cf86a45c5c3c96be41e2798512e0eed74309e3fcfa248cad3924cc1872d81cc3196a8ce109556352320e5b553a337bd3f016b732d03fa681aee5c2bf2e5a6d59c767c3a5687db33f3b04eb0b639451baa8fe9ebc15048d49afcad41475", 0x90}], 0x8, &(0x7f0000001100)=[@rthdrdstopts={{0x80, 0x29, 0x37, {0x3a, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0xb76, [0x2f1, 0x0, 0x7fffffff, 0x2, 0xf1, 0xfffffffffffffffc, 0x1, 0x3f]}}]}}}, @dstopts={{0x170, 0x29, 0x37, {0x0, 0x2a, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0xf800, [0x2, 0x1, 0x6, 0x7ff, 0x8, 0xcc1, 0x8]}}, @pad1, @hao={0xc9, 0x10, @local}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x9}, @generic={0x5, 0xf1, "712f87da0018ddeb05d450b379e0c2b15f5743035f96dd5ac1ff2b675fe70e4c3605ea69f1387a331b6fd45e154342d9c0bbe5ff3c5833d6381ce7d53e207614b52c633ec9f075f2d459cbb33cd7291d60f2d33ebac33b5ee06a2a667b9602f3a33593e372343047ba65b1de7417932c971fb20f98d2047ba1a339449ec3d1f4c85a4dcaf00f1ee147b8bbfc94cca3b18b4908b45d710d57342f1e1c040e36282f32526f7a93464c440e93d965e2107d8ceb2ea7f0f2e7e515834867e958b6d3699bba18e132349d4b81513330a9da4a27bfd21cc7d3bde9a909429f0c4260fcae59381ad2d4a78702d953d245161e129a"}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x6, 0x0, [@loopback, @mcast2]}}}, @dstopts={{0x68, 0x29, 0x37, {0x84, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x47}, @calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x4, [0x3, 0x5, 0x7fffffffffffffff, 0x9, 0x2, 0x401]}}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @tclass={{0x14, 0x29, 0x43, 0xf}}], 0x2d8}}], 0x3, 0x44040044) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x2015}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x2015}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r4, 0x0, 0x0) 5.033998165s ago: executing program 2 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x13, r1, 0x8cee000) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fc8000/0x1000)=nil) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x6000000000) 4.73783659s ago: executing program 5 (id=588): write$sndseq(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x22000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x36) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r5, 0x101, 0x1) getdents(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close(r6) r7 = userfaultfd(0x801) epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 4.705025926s ago: executing program 2 (id=589): syz_emit_vhci(0x0, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x11, 0x0, 0x4000}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) clock_adjtime(0x3, &(0x7f0000000380)={0x3ff, 0x3, 0x20000000004100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x1000000000000002, 0x0, 0x0, 0x8, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x30, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffd, 0x16, 0x0, 0x0, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="12909fb228e272b4395f2f659e664ea322fe23a4b4fc070a15225c7438c11a767eac3c01890a479e484b8127653c8121c6973ae8487293cd4812375965ebf3510cc53dc5dd86115a02008111c7081da64cb6f91b096d065dbdf2bae4102e6ad0b89da5a2d792c65300000000", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="050034006e00000008002600f4150000"], 0x2c}}, 0x20004800) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000200), 0x4001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYRESOCT=r5], 0xe) statx(0xffffffffffffffff, 0x0, 0x100, 0x7ff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10) getgroups(0x4, &(0x7f0000000540)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, r6, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, 0x0, 0x26}) 4.597860858s ago: executing program 4 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000a40)=""/203, 0xcb}, {&(0x7f0000000340)=""/48, 0x30}], 0xa, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x80010000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@deltaction={0x198, 0x31, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x733}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcf6}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 3.859094707s ago: executing program 4 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001d40)="eb54f638970abf6e13e278b4799413f1", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) (async) sendmmsg$sock(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="7c2f6a5a22a89dc00a20e065a884e9fc7ed95ff9a9ba142f02eb114c9a83ab747f640ae5f5ffe728ab9da619dc1cdcbae86ffe47881c387cbd5df806231bb539eb3ba9c46bffdc5435515f618484ca18922906e317468f45d96fe43d03ea540b8c74406ef0bc780995f7c48c99679346bd22050784cbae35", 0x78}], 0x1}}], 0x3fffffffffffcf9, 0x48011) (async) socket$inet(0x2, 0x1, 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) 3.480287628s ago: executing program 4 (id=592): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0xfffffffc}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c1105c9000000000000f606000006020d0004"], 0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000005}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r6], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r7], &(0x7f0000000180)=[0x100000000000035], 0x0, 0x8000000000009}) sendmmsg$inet(r4, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30008001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x7fffffffffffffff, 0x10480) 3.353962055s ago: executing program 2 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) (async) 2.958438167s ago: executing program 0 (id=594): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000800000000000000000000008500009100200000001801000020696c250000000000200d86ef63d978dc9420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 2.759564682s ago: executing program 2 (id=595): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 726.052886ms ago: executing program 2 (id=596): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$packet(0x11, 0x2, 0x300) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x6000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r0 = syz_open_dev$vbi(&(0x7f00000011c0), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000018c0)=@multiplanar_fd={0xe0, 0x7, 0x4, 0x20, 0x40, {0x77359400}, {0x2, 0x2, 0x3, 0xe3, 0x4, 0x4, "03aa307b"}, 0x4, 0x4, {0x0}, 0x1}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 250.69544ms ago: executing program 3 (id=597): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x500}, 0xffffffffffffffc2}, 0x48) 151.981376ms ago: executing program 2 (id=598): r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000300000001"], 0x35) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x259, 0x0, 0x9, 0x2}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x8000}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0xc9}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x24, 0x60, 0x8065, 0x0, 0x2, 0x1, 0x0, @multicast2, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xf, 0x4, 0x3, 0x1, 0xffff, 0x65, 0x1000, 0xd3, 0x16, 0x200, @rand_addr=0x64010101, @private=0xa010101, {[@timestamp_addr={0x44, 0x4, 0x3e, 0x1, 0x7}, @timestamp={0x44, 0x10, 0x12, 0x0, 0x8, [0x3f6b, 0x5, 0x9]}, @timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x4, [{@private=0xa010101, 0x5}, {@broadcast, 0x1}]}]}}, "0e90b9f5416d3168"}}}}}, 0x0) 50.201471ms ago: executing program 3 (id=599): r0 = syz_io_uring_setup(0x61, &(0x7f0000000200)={0x0, 0xdc1b, 0x3050, 0x1, 0xfd}, &(0x7f0000000280), &(0x7f00000002c0)) poll(&(0x7f0000000400)=[{r0, 0x1}], 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x402}, {{0x18, 0x4, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=600): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): turer: syz [ 169.855220][ T5934] usb 4-1: SerialNumber: syz [ 169.901000][ T31] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 169.974024][ T31] usb 5-1: USB disconnect, device number 12 [ 169.986045][ T5934] usb 4-1: config 0 descriptor?? [ 170.006473][ T5934] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 170.006922][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 170.099414][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.102585][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 170.102761][ T5934] usb 4-1: media controller created [ 170.249443][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.268641][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.350722][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.367764][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.379694][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.380764][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.381137][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.382007][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.382373][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.542189][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.542595][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.753964][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 171.036775][ T5934] DVB: Unable to find symbol mt352_attach() [ 171.036792][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 171.338219][ T5934] rc_core: IR keymap rc-dvico-portable not found [ 171.338242][ T5934] Registered IR keymap rc-empty [ 171.360804][ T5934] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 171.404052][ T5934] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 171.579066][ T5934] dvb-usb: schedule remote query interval to 100 msecs. [ 171.579093][ T5934] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 171.691235][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 171.799886][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 172.019946][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 173.043621][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 173.157712][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 173.270568][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 173.380686][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 173.428073][ T5803] usb 4-1: USB disconnect, device number 5 [ 173.633283][ T6562] loop8: detected capacity change from 0 to 7 [ 173.748294][ T6562] Dev loop8: unable to read RDB block 7 [ 173.748348][ T6562] loop8: unable to read partition table [ 173.748569][ T6562] loop8: partition table beyond EOD, truncated [ 173.748611][ T6562] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 174.032838][ T5803] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 177.749269][ T6595] netlink: 'syz.0.191': attribute type 2 has an invalid length. [ 177.750246][ T6595] netlink: 212 bytes leftover after parsing attributes in process `syz.0.191'. [ 178.188239][ T5803] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 178.364180][ T5803] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 178.364232][ T5803] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.364257][ T5803] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.364286][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.364321][ T5803] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 178.364351][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.446526][ T5803] usb 2-1: config 0 descriptor?? [ 179.072467][ T5803] usbhid 2-1:0.0: can't add hid device: -71 [ 179.072658][ T5803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.106023][ T5803] usb 2-1: USB disconnect, device number 8 [ 180.196624][ T6610] loop2: detected capacity change from 0 to 7 [ 180.197589][ T6610] Dev loop2: unable to read RDB block 7 [ 180.197618][ T6610] loop2: AHDI p2 p3 [ 180.197645][ T6610] loop2: partition table partially beyond EOD, truncated [ 180.198342][ T6610] loop2: p3 start 335544320 is beyond EOD, truncated [ 180.251346][ T6611] loop5: detected capacity change from 0 to 7 [ 180.257669][ T6611] Dev loop5: unable to read RDB block 7 [ 180.257701][ T6611] loop5: AHDI p2 p3 [ 180.257730][ T6611] loop5: partition table partially beyond EOD, truncated [ 183.290857][ T6650] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.207'. [ 184.631490][ T6660] loop2: detected capacity change from 0 to 7 [ 184.637541][ T6660] Dev loop2: unable to read RDB block 7 [ 184.637575][ T6660] loop2: AHDI p2 p3 [ 184.637605][ T6660] loop2: partition table partially beyond EOD, truncated [ 184.657302][ T6660] loop2: p3 start 335544320 is beyond EOD, truncated [ 185.258065][ T5803] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 185.398560][ T5803] usb 2-1: device descriptor read/64, error -71 [ 185.671816][ T5803] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 185.831551][ T5803] usb 2-1: device descriptor read/64, error -71 [ 185.958095][ T5803] usb usb2-port1: attempt power cycle [ 186.318060][ T5803] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 186.338929][ T5803] usb 2-1: device descriptor read/8, error -71 [ 186.601410][ T5803] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 186.624965][ T5803] usb 2-1: device descriptor read/8, error -71 [ 186.734535][ T5803] usb usb2-port1: unable to enumerate USB device [ 187.101946][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 187.104836][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 188.565049][ T36] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 188.726616][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 188.745976][ T36] usb 2-1: config 88 has an invalid interface number: 19 but max is 2 [ 188.746007][ T36] usb 2-1: config 88 has an invalid interface number: 167 but max is 2 [ 188.746033][ T36] usb 2-1: config 88 has an invalid interface number: 211 but max is 2 [ 188.746053][ T36] usb 2-1: config 88 has an invalid interface number: 248 but max is 2 [ 188.746069][ T36] usb 2-1: config 88 contains an unexpected descriptor of type 0x2, skipping [ 188.746083][ T36] usb 2-1: config 88 has 4 interfaces, different from the descriptor's value: 3 [ 188.746119][ T36] usb 2-1: config 88 has no interface number 0 [ 188.746136][ T36] usb 2-1: config 88 has no interface number 1 [ 188.746154][ T36] usb 2-1: config 88 has no interface number 2 [ 188.746166][ T36] usb 2-1: config 88 has no interface number 3 [ 188.746231][ T36] usb 2-1: config 88 interface 19 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 188.746249][ T36] usb 2-1: config 88 interface 19 altsetting 80 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 188.746269][ T36] usb 2-1: config 88 interface 19 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 188.746286][ T36] usb 2-1: config 88 interface 19 altsetting 80 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 188.746315][ T36] usb 2-1: config 88 interface 167 altsetting 128 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 188.746335][ T36] usb 2-1: config 88 interface 167 altsetting 128 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 188.746366][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 188.748981][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 188.749065][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 188.749129][ T36] usb 2-1: config 88 interface 167 altsetting 128 endpoint 0xE has an invalid bInterval 155, changing to 7 [ 188.749228][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 188.749314][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 188.749371][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 188.749437][ T36] usb 2-1: config 88 interface 167 altsetting 128 endpoint 0x7 has an invalid bInterval 190, changing to 11 [ 188.749516][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 188.749561][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 188.749625][ T36] usb 2-1: config 88 interface 167 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 188.749682][ T36] usb 2-1: config 88 interface 167 altsetting 128 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 188.749725][ T36] usb 2-1: too many endpoints for config 88 interface 211 altsetting 52: 236, using maximum allowed: 30 [ 188.749766][ T36] usb 2-1: config 88 interface 211 altsetting 52 has a duplicate endpoint with address 0x2, skipping [ 188.749790][ T36] usb 2-1: config 88 interface 211 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 236 [ 188.749831][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0x6, skipping [ 188.749857][ T36] usb 2-1: config 88 interface 248 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 188.749878][ T36] usb 2-1: config 88 interface 248 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 188.749901][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0xD, skipping [ 188.749960][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0xF, skipping [ 188.750053][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0x8, skipping [ 188.750118][ T36] usb 2-1: config 88 interface 248 altsetting 183 bulk endpoint 0xC has invalid maxpacket 520 [ 188.750191][ T36] usb 2-1: config 88 interface 248 altsetting 183 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 188.750263][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0xD, skipping [ 188.750330][ T36] usb 2-1: config 88 interface 248 altsetting 183 has a duplicate endpoint with address 0x7, skipping [ 188.750388][ T36] usb 2-1: config 88 interface 19 has no altsetting 0 [ 188.750440][ T36] usb 2-1: config 88 interface 167 has no altsetting 0 [ 188.750488][ T36] usb 2-1: config 88 interface 211 has no altsetting 0 [ 188.750539][ T36] usb 2-1: config 88 interface 248 has no altsetting 0 [ 188.798785][ T36] usb 2-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=6d.70 [ 188.798871][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.798927][ T36] usb 2-1: Product: syz [ 188.798979][ T36] usb 2-1: Manufacturer: syz [ 188.799021][ T36] usb 2-1: SerialNumber: syz [ 189.750542][ T6692] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 190.332445][ T6694] veth0_macvtap: left promiscuous mode [ 190.512119][ T36] usb 2-1: USB disconnect, device number 13 [ 190.534906][ T6702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.222'. [ 190.535618][ T6702] netlink: 59 bytes leftover after parsing attributes in process `syz.4.222'. [ 190.749323][ T6704] loop2: detected capacity change from 0 to 7 [ 190.754470][ T6704] Dev loop2: unable to read RDB block 7 [ 190.754504][ T6704] loop2: AHDI p2 p3 [ 190.754535][ T6704] loop2: partition table partially beyond EOD, truncated [ 190.754785][ T6704] loop2: p3 start 335544320 is beyond EOD, truncated [ 191.539420][ T6721] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.227'. [ 192.804415][ T6727] loop2: detected capacity change from 0 to 7 [ 192.817543][ T6727] Dev loop2: unable to read RDB block 7 [ 192.817650][ T6727] loop2: AHDI p1 p2 p3 [ 192.817719][ T6727] loop2: partition table partially beyond EOD, truncated [ 192.818342][ T6727] loop2: p1 start 1818582900 is beyond EOD, truncated [ 192.818399][ T6727] loop2: p3 start 335544320 is beyond EOD, truncated [ 196.932654][ T58] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 60 seconds [ 196.932708][ T58] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 60 seconds [ 196.932741][ T58] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 60 seconds [ 196.932773][ T58] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 60 seconds [ 197.191116][ T5959] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.319269][ T6744] can0: slcan on pty24. [ 197.362513][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 197.366262][ T5959] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 197.366292][ T5959] usb 2-1: config 1 interface 0 has no altsetting 0 [ 197.367058][ T5959] usb 2-1: language id specifier not provided by device, defaulting to English [ 197.371097][ T5959] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 197.371127][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.371148][ T5959] usb 2-1: Product: ÐŽ [ 197.371162][ T5959] usb 2-1: Manufacturer: 綔Ѹ⛮筌賯뀵୵花쎭ज़çºì¸ºï”¥îœ“헯늤᳿é€ï³©í˜µì’œä²¾ä˜‘깠涊ä¼ä™©á´´ê«¸ï­‡å²“∹ï¬ë¼ˆèƒ˜äƒ¬ïœ“ó˜ƒ ì¿©ä¡°ãš¥ä²›ëŽ [ 197.371184][ T5959] usb 2-1: SerialNumber: 挒방ç¿ìŠ›î¢‡êœƒì€‹ï†“ﭪਛ演㲞Ⰺ䉇é¼í˜Œé­‚Ë´í‚ï–䪞䋻⒕㊶䒵㚑꺊붅䑜᭷쎼◸ë¼é»½á—짤á±á ²ëº•éžì‚Ÿì›ªé·ãº€ã’²â¿´ì–¹èƒ´ìŠî„蚊֧ꔘ龩 [ 197.487143][ T6752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.879541][ T6744] can0 (unregistered): slcan off pty24. [ 197.948539][ T6760] loop2: detected capacity change from 0 to 7 [ 197.982389][ T6760] Dev loop2: unable to read RDB block 7 [ 197.982429][ T6760] loop2: AHDI p2 p3 [ 197.982458][ T6760] loop2: partition table partially beyond EOD, truncated [ 197.982745][ T6760] loop2: p3 start 335544320 is beyond EOD, truncated [ 198.822506][ T6770] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 199.011055][ T5959] usb 2-1: USB disconnect, device number 14 [ 200.487045][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.487099][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.492244][ T6781] warning: `syz.1.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.791464][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.792042][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.445349][ T5959] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 201.961804][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.967427][ T5959] usb 1-1: not running at top speed; connect to a high speed hub [ 202.028600][ T5959] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 202.028640][ T5959] usb 1-1: config 251 has no interface number 0 [ 202.028676][ T5959] usb 1-1: config 251 interface 156 has no altsetting 0 [ 202.184547][ T5959] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 202.184616][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.184686][ T5959] usb 1-1: Product: syz [ 202.184703][ T5959] usb 1-1: Manufacturer: syz [ 202.184718][ T5959] usb 1-1: SerialNumber: syz [ 206.013238][ T5162] udevd[5162]: worker [5808] /devices/virtual/block/nbd1 is taking a long time [ 206.805471][ T5959] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 206.805491][ T5959] usb 1-1: cannot find UAC_HEADER [ 207.039755][ T5959] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 207.078981][ T5959] usb 1-1: USB disconnect, device number 9 [ 207.142468][ T6801] loop2: detected capacity change from 0 to 7 [ 207.200558][ T6801] Dev loop2: unable to read RDB block 7 [ 207.200587][ T6801] loop2: AHDI p2 p3 [ 207.200608][ T6801] loop2: partition table partially beyond EOD, truncated [ 207.200782][ T6801] loop2: p3 start 335544320 is beyond EOD, truncated [ 207.253575][ T5162] Dev loop2: unable to read RDB block 7 [ 207.253606][ T5162] loop2: AHDI p2 p3 [ 207.253637][ T5162] loop2: partition table partially beyond EOD, truncated [ 207.253898][ T5162] loop2: p3 start 335544320 is beyond EOD, truncated [ 207.328199][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.909133][ T6818] loop2: detected capacity change from 0 to 7 [ 207.925256][ T6818] Dev loop2: unable to read RDB block 7 [ 207.925290][ T6818] loop2: AHDI p2 p3 [ 207.925320][ T6818] loop2: partition table partially beyond EOD, truncated [ 207.926101][ T6818] loop2: p3 start 335544320 is beyond EOD, truncated [ 208.171777][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 208.266649][ T6823] loop5: detected capacity change from 0 to 7 [ 208.281453][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 208.294707][ T6823] Dev loop5: unable to read RDB block 7 [ 208.294743][ T6823] loop5: AHDI p2 p3 [ 208.294773][ T6823] loop5: partition table partially beyond EOD, truncated [ 210.706191][ T6851] loop2: detected capacity change from 0 to 7 [ 210.707478][ T6851] Dev loop2: unable to read RDB block 7 [ 210.707511][ T6851] loop2: AHDI p2 p3 [ 210.707538][ T6851] loop2: partition table partially beyond EOD, truncated [ 210.707761][ T6851] loop2: p3 start 335544320 is beyond EOD, truncated [ 211.434244][ T6856] vlan2: entered allmulticast mode [ 211.434267][ T6856] macsec0: entered allmulticast mode [ 211.434281][ T6856] veth1_macvtap: entered allmulticast mode [ 211.527647][ T6861] loop2: detected capacity change from 0 to 7 [ 211.528642][ T6861] Dev loop2: unable to read RDB block 7 [ 211.528663][ T6861] loop2: AHDI p2 p3 [ 211.528681][ T6861] loop2: partition table partially beyond EOD, truncated [ 211.528859][ T6861] loop2: p3 start 335544320 is beyond EOD, truncated [ 212.126881][ T6866] loop5: detected capacity change from 0 to 7 [ 212.156361][ T6866] Dev loop5: unable to read RDB block 7 [ 212.156395][ T6866] loop5: AHDI p2 p3 [ 212.156429][ T6866] loop5: partition table partially beyond EOD, truncated [ 214.768247][ T6896] syz.3.270 uses obsolete (PF_INET,SOCK_PACKET) [ 215.364809][ T31] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 216.095534][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.136560][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 216.184574][ T31] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 216.185144][ T31] usb 1-1: config 251 has no interface number 0 [ 216.211797][ T31] usb 1-1: config 251 interface 156 has no altsetting 0 [ 216.365583][ T31] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 216.365672][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.365754][ T31] usb 1-1: Product: syz [ 216.366102][ T31] usb 1-1: Manufacturer: syz [ 216.366186][ T31] usb 1-1: SerialNumber: syz [ 220.660551][ T31] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 220.660613][ T31] usb 1-1: cannot find UAC_HEADER [ 220.988834][ T6904] loop2: detected capacity change from 0 to 7 [ 220.990375][ T6904] Dev loop2: unable to read RDB block 7 [ 220.990404][ T6904] loop2: AHDI p2 p3 [ 220.990431][ T6904] loop2: partition table partially beyond EOD, truncated [ 220.990680][ T6904] loop2: p3 start 335544320 is beyond EOD, truncated [ 221.105125][ T31] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 221.140520][ T31] usb 1-1: USB disconnect, device number 10 [ 222.382693][ T6916] loop5: detected capacity change from 0 to 7 [ 222.429319][ T6916] Dev loop5: unable to read RDB block 7 [ 222.429358][ T6916] loop5: AHDI p2 p3 [ 222.429393][ T6916] loop5: partition table partially beyond EOD, truncated [ 222.588658][ T807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 222.718904][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.751422][ T807] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 222.751496][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.751524][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.751550][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.751594][ T807] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.751619][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.757502][ T807] usb 4-1: config 0 descriptor?? [ 222.867651][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.890340][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.891699][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.895622][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.896759][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.131221][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.131780][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.300595][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.397266][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.398149][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398185][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398212][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398240][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398267][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398294][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398320][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398347][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398375][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.398402][ T807] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.539326][ T807] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 223.758508][ T807] usb 4-1: USB disconnect, device number 6 [ 223.785848][ T5959] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.998496][ T5959] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.998530][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.998551][ T5959] usb 1-1: Product: syz [ 223.998566][ T5959] usb 1-1: Manufacturer: syz [ 223.998580][ T5959] usb 1-1: SerialNumber: syz [ 224.066049][ T5959] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.477581][ T826] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.857444][ T5112] Bluetooth: hci3: command 0x0406 tx timeout [ 224.857584][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 224.860093][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 224.860216][ T5112] Bluetooth: hci0: command 0x0406 tx timeout [ 224.861064][ T5112] Bluetooth: hci4: command 0x0406 tx timeout [ 225.379106][ T5807] Bluetooth: hci5: command tx timeout [ 225.709429][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 225.855896][ T807] usb 1-1: USB disconnect, device number 11 [ 226.490845][ T5803] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 227.124188][ T826] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 227.124948][ T826] ath9k_htc: Failed to initialize the device [ 227.130610][ T807] usb 1-1: ath9k_htc: USB layer deinitialized [ 227.318514][ T5803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.320304][ T5803] usb 4-1: not running at top speed; connect to a high speed hub [ 227.323007][ T5803] usb 4-1: config 251 has an invalid interface number: 156 but max is 0 [ 227.323036][ T5803] usb 4-1: config 251 has no interface number 0 [ 227.323070][ T5803] usb 4-1: config 251 interface 156 has no altsetting 0 [ 227.366837][ T5803] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 227.366870][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.366891][ T5803] usb 4-1: Product: syz [ 227.366906][ T5803] usb 4-1: Manufacturer: syz [ 227.366921][ T5803] usb 4-1: SerialNumber: syz [ 227.767923][ T5800] Bluetooth: hci5: command tx timeout [ 229.953577][ T5800] Bluetooth: hci5: command tx timeout [ 229.989060][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 230.003182][ T5803] usb 4-1: unknown interface protocol 0x2c, assuming v1 [ 230.003207][ T5803] usb 4-1: cannot find UAC_HEADER [ 230.039672][ T58] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 90 seconds [ 230.039721][ T58] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 90 seconds [ 230.039754][ T58] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 90 seconds [ 230.039786][ T58] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 90 seconds [ 230.376843][ T5803] snd-usb-audio 4-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 230.380151][ T5803] usb 4-1: USB disconnect, device number 7 [ 231.186357][ T6977] netlink: 'syz.0.292': attribute type 7 has an invalid length. [ 232.352752][ T5800] Bluetooth: hci5: command tx timeout [ 233.152362][ T37] audit: type=1326 audit(1771208593.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.0.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x0 [ 233.217032][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.332760][ T807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.444268][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.444456][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.444658][ T6918] bridge_slave_0: entered allmulticast mode [ 233.447620][ T6918] bridge_slave_0: entered promiscuous mode [ 233.484639][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.484779][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.485060][ T6918] bridge_slave_1: entered allmulticast mode [ 233.488095][ T6918] bridge_slave_1: entered promiscuous mode [ 233.515835][ T807] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 233.526214][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.526291][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.526346][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.554803][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.554879][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.554927][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.584023][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.584098][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.584149][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.641688][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.641709][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.641722][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.642852][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.642868][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.642881][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.651793][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.656017][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.656083][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.671836][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.671909][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.671966][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.732656][ T807] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 233.732732][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.732786][ T807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.732885][ T807] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 233.732949][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.861540][ T807] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 233.861562][ T807] usb 4-1: no configuration chosen from 8 choices [ 234.063034][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.099207][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.306317][ T6918] team0: Port device team_slave_0 added [ 234.310018][ T6918] team0: Port device team_slave_1 added [ 234.364894][ T6995] loop5: detected capacity change from 0 to 7 [ 234.374537][ T6995] Dev loop5: unable to read RDB block 7 [ 234.374574][ T6995] loop5: AHDI p2 p3 [ 234.374605][ T6995] loop5: partition table partially beyond EOD, truncated [ 234.533196][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.533760][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.876715][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.876730][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.876751][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.883621][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.883635][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.883654][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.970446][ T5803] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 236.100301][ T807] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 236.147784][ T5803] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.148945][ T5803] usb 1-1: not running at top speed; connect to a high speed hub [ 236.150982][ T5803] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 236.151009][ T5803] usb 1-1: config 251 has no interface number 0 [ 236.151043][ T5803] usb 1-1: config 251 interface 156 has no altsetting 0 [ 236.154797][ T5803] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 236.154829][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.154851][ T5803] usb 1-1: Product: syz [ 236.154866][ T5803] usb 1-1: Manufacturer: syz [ 236.154880][ T5803] usb 1-1: SerialNumber: syz [ 236.313567][ T807] usb 5-1: config 0 has no interfaces? [ 236.331043][ T31] usb 4-1: USB disconnect, device number 8 [ 236.355405][ T807] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 236.355461][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.355483][ T807] usb 5-1: Product: syz [ 236.355533][ T807] usb 5-1: Manufacturer: syz [ 236.355550][ T807] usb 5-1: SerialNumber: syz [ 236.515341][ T807] usb 5-1: config 0 descriptor?? [ 236.550518][ T5803] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 236.550546][ T5803] usb 1-1: cannot find UAC_HEADER [ 236.618552][ T6918] hsr_slave_0: entered promiscuous mode [ 236.632661][ T6918] hsr_slave_1: entered promiscuous mode [ 236.670488][ T6918] debugfs: 'hsr0' already exists in 'hsr' [ 236.670521][ T6918] Cannot create hsr debugfs directory [ 236.830034][ T5803] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 236.851159][ T7006] bond0: entered allmulticast mode [ 236.851179][ T7006] bond_slave_0: entered allmulticast mode [ 236.851193][ T7006] bond_slave_1: entered allmulticast mode [ 236.856706][ T5803] usb 1-1: USB disconnect, device number 12 [ 236.950435][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.008797][ T807] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 237.171900][ T807] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 237.171967][ T807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.171987][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.172006][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.172026][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.172056][ T807] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.172072][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.294254][ T807] usb 4-1: config 0 descriptor?? [ 237.311044][ T7007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.332590][ T7010] FAULT_INJECTION: forcing a failure. [ 237.332590][ T7010] name failslab, interval 1, probability 0, space 0, times 1 [ 237.332618][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.332636][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.332646][ T7010] Call Trace: [ 237.332652][ T7010] [ 237.332668][ T7010] dump_stack_lvl+0xe8/0x150 [ 237.332696][ T7010] should_fail_ex+0x46b/0x600 [ 237.332719][ T7010] should_failslab+0xa8/0x100 [ 237.332739][ T7010] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 237.332758][ T7010] ? __kasan_kmalloc+0x93/0xb0 [ 237.332773][ T7010] ? v9fs_init_fs_context+0xcf/0x500 [ 237.332801][ T7010] kstrdup+0x42/0x100 [ 237.332826][ T7010] v9fs_init_fs_context+0xcf/0x500 [ 237.332852][ T7010] alloc_fs_context+0x9d5/0xd50 [ 237.332883][ T7010] do_new_mount+0x187/0xd30 [ 237.332903][ T7010] ? safesetid_security_capable+0xa9/0x1a0 [ 237.332931][ T7010] ? security_capable+0x7e/0x2c0 [ 237.332948][ T7010] ? __pfx_do_new_mount+0x10/0x10 [ 237.332968][ T7010] ? ns_capable+0x89/0xe0 [ 237.332988][ T7010] ? path_mount+0x690/0x10e0 [ 237.333034][ T7010] ? user_path_at+0xd4/0x160 [ 237.333088][ T7010] ? user_path_at+0xd4/0x160 [ 237.333124][ T7010] __se_sys_mount+0x31d/0x420 [ 237.333161][ T7010] ? __pfx___se_sys_mount+0x10/0x10 [ 237.333195][ T7010] ? __x64_sys_mount+0x20/0xc0 [ 237.333217][ T7010] do_syscall_64+0x14d/0xf80 [ 237.333239][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.333254][ T7010] ? trace_irq_disable+0x37/0x100 [ 237.333267][ T7010] ? clear_bhb_loop+0x40/0x90 [ 237.333286][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.333301][ T7010] RIP: 0033:0x7f2be914bf79 [ 237.333318][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.333332][ T7010] RSP: 002b:00007f2be739e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.333348][ T7010] RAX: ffffffffffffffda RBX: 00007f2be93c5fa0 RCX: 00007f2be914bf79 [ 237.333359][ T7010] RDX: 0000200000000040 RSI: 0000200000000440 RDI: 0000000000000000 [ 237.333369][ T7010] RBP: 00007f2be739e090 R08: 0000200000000480 R09: 0000000000000000 [ 237.333379][ T7010] R10: 0000000003000084 R11: 0000000000000246 R12: 0000000000000002 [ 237.333389][ T7010] R13: 00007f2be93c6038 R14: 00007f2be93c5fa0 R15: 00007ffcfa0778c8 [ 237.333412][ T7010] [ 237.801818][ T807] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 237.944523][ T807] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 238.302587][ T7015] netlink: 'syz.2.304': attribute type 3 has an invalid length. [ 238.346781][ T807] usb 4-1: USB disconnect, device number 9 [ 239.766980][ T7019] fido_id[7019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 239.980053][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.004087][ T7027] 9p: Bad value for 'wfdno' [ 240.006577][ T7027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.308'. [ 240.036875][ T7027] macvlan0: entered promiscuous mode [ 240.037084][ T7027] macvlan0: entered allmulticast mode [ 240.037097][ T7027] veth1_vlan: entered allmulticast mode [ 240.170301][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 240.191456][ T10] usb 1-1: config 0 has an invalid interface number: 158 but max is 0 [ 240.191487][ T10] usb 1-1: config 0 has no interface number 0 [ 240.208987][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=704c, bcdDevice=32.51 [ 240.209020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.209041][ T10] usb 1-1: Product: syz [ 240.209056][ T10] usb 1-1: Manufacturer: syz [ 240.209071][ T10] usb 1-1: SerialNumber: syz [ 240.258743][ T10] usb 1-1: config 0 descriptor?? [ 240.263210][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704c [ 240.452815][ T7031] loop5: detected capacity change from 0 to 7 [ 240.489716][ T5813] Dev loop5: unable to read RDB block 7 [ 240.489753][ T5813] loop5: AHDI p2 p3 [ 240.489783][ T5813] loop5: partition table partially beyond EOD, truncated [ 240.492514][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 240.492543][ T10] gspca_sn9c20x: Device initialization failed [ 240.492633][ T10] gspca_sn9c20x 1-1:0.158: probe with driver gspca_sn9c20x failed with error -71 [ 240.522197][ T7031] Dev loop5: unable to read RDB block 7 [ 240.522292][ T7031] loop5: AHDI p2 p3 [ 240.522354][ T7031] loop5: partition table partially beyond EOD, truncated [ 240.589861][ T10] usb 1-1: USB disconnect, device number 13 [ 240.749251][ T7033] loop8: detected capacity change from 0 to 7 [ 240.763274][ T7033] Dev loop8: unable to read RDB block 7 [ 240.763323][ T7033] loop8: unable to read partition table [ 240.763558][ T7033] loop8: partition table beyond EOD, truncated [ 240.763578][ T7033] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 241.187371][ T6918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.201697][ T826] usb 5-1: USB disconnect, device number 13 [ 241.209498][ T807] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 241.278725][ T6918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.350045][ T6918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.362376][ T7039] FAULT_INJECTION: forcing a failure. [ 241.362376][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 241.362489][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.362555][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.362588][ T7039] Call Trace: [ 241.362609][ T7039] [ 241.362631][ T7039] dump_stack_lvl+0xe8/0x150 [ 241.362727][ T7039] should_fail_ex+0x46b/0x600 [ 241.362811][ T7039] should_failslab+0xa8/0x100 [ 241.362885][ T7039] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 241.362958][ T7039] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 241.363056][ T7039] kmemdup_nul+0x36/0xf0 [ 241.363149][ T7039] vfs_parse_monolithic_sep+0x21d/0x360 [ 241.363235][ T7039] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 241.363326][ T7039] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 241.363415][ T7039] ? alloc_fs_context+0x9e9/0xd50 [ 241.363465][ T7039] do_new_mount+0x304/0xd30 [ 241.363493][ T7039] ? safesetid_security_capable+0xa9/0x1a0 [ 241.363563][ T7039] ? security_capable+0x7e/0x2c0 [ 241.363619][ T7039] ? __pfx_do_new_mount+0x10/0x10 [ 241.363694][ T7039] ? ns_capable+0x89/0xe0 [ 241.363787][ T7039] ? path_mount+0x690/0x10e0 [ 241.363866][ T7039] ? user_path_at+0xd4/0x160 [ 241.363960][ T7039] ? user_path_at+0xd4/0x160 [ 241.364046][ T7039] __se_sys_mount+0x31d/0x420 [ 241.364128][ T7039] ? __pfx___se_sys_mount+0x10/0x10 [ 241.364191][ T7039] ? __x64_sys_mount+0x20/0xc0 [ 241.364243][ T7039] do_syscall_64+0x14d/0xf80 [ 241.364310][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.364364][ T7039] ? trace_irq_disable+0x37/0x100 [ 241.364409][ T7039] ? clear_bhb_loop+0x40/0x90 [ 241.364481][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.364535][ T7039] RIP: 0033:0x7f1fd85fbf79 [ 241.364592][ T7039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.364636][ T7039] RSP: 002b:00007f1fd684e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.364699][ T7039] RAX: ffffffffffffffda RBX: 00007f1fd8875fa0 RCX: 00007f1fd85fbf79 [ 241.364736][ T7039] RDX: 0000200000000040 RSI: 0000200000000440 RDI: 0000000000000000 [ 241.364776][ T7039] RBP: 00007f1fd684e090 R08: 0000200000000480 R09: 0000000000000000 [ 241.364816][ T7039] R10: 0000000003000084 R11: 0000000000000246 R12: 0000000000000002 [ 241.364849][ T7039] R13: 00007f1fd8876038 R14: 00007f1fd8875fa0 R15: 00007ffc160c57e8 [ 241.364935][ T7039] [ 241.383239][ T807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.384180][ T807] usb 4-1: not running at top speed; connect to a high speed hub [ 241.386022][ T807] usb 4-1: config 251 has an invalid interface number: 156 but max is 0 [ 241.386048][ T807] usb 4-1: config 251 has no interface number 0 [ 241.386082][ T807] usb 4-1: config 251 interface 156 has no altsetting 0 [ 241.389737][ T807] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 241.389767][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.389789][ T807] usb 4-1: Product: syz [ 241.389804][ T807] usb 4-1: Manufacturer: syz [ 241.389820][ T807] usb 4-1: SerialNumber: syz [ 241.414341][ T36] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 241.431559][ T6918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.731665][ T36] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 241.731727][ T36] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.731751][ T36] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 241.731780][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.731815][ T36] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 241.731840][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.868936][ T36] usb 1-1: config 0 descriptor?? [ 242.702585][ T807] usb 4-1: unknown interface protocol 0x2c, assuming v1 [ 242.703439][ T807] usb 4-1: cannot find UAC_HEADER [ 244.043702][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.069448][ T807] snd-usb-audio 4-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 244.142124][ T807] usb 4-1: USB disconnect, device number 10 [ 244.203353][ T5935] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.342064][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.373895][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 244.397044][ T5935] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 244.397919][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.397946][ T5935] usb 5-1: config 0 has no interface number 0 [ 244.398091][ T5935] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 12544, setting to 1024 [ 244.398112][ T5935] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 244.398130][ T5935] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.398740][ T5935] usb 5-1: config 0 interface 12 has no altsetting 0 [ 244.486922][ T5935] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 244.487427][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.487454][ T5935] usb 5-1: Product: syz [ 244.487465][ T5935] usb 5-1: Manufacturer: syz [ 244.487475][ T5935] usb 5-1: SerialNumber: syz [ 244.498268][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.556666][ T5935] usb 5-1: config 0 descriptor?? [ 244.559608][ T7057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.561005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.561803][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.599757][ T5935] f81534 5-1:0.12: required endpoints missing [ 244.698106][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 244.698250][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 244.702660][ T36] usb 1-1: USB disconnect, device number 14 [ 244.890511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.890653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.031142][ T7068] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.318'. [ 245.994570][ T36] usb 5-1: USB disconnect, device number 14 [ 246.032533][ T12] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 246.411599][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.412268][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.423908][ T7083] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 246.423972][ T7083] netlink: 160 bytes leftover after parsing attributes in process `syz.2.307'. [ 246.443761][ T7082] loop5: detected capacity change from 0 to 7 [ 246.470512][ T7082] Dev loop5: unable to read RDB block 7 [ 246.470544][ T7082] loop5: AHDI p2 p3 [ 246.470572][ T7082] loop5: partition table partially beyond EOD, truncated [ 246.475747][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.476309][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.544201][ T36] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.704457][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 246.716584][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.728616][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.728644][ T36] usb 5-1: config 0 has no interfaces? [ 246.753003][ T36] usb 5-1: New USB device found, idVendor=016d, idProduct=0000, bcdDevice=67.00 [ 246.753035][ T36] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 246.753069][ T36] usb 5-1: Product: syz [ 246.753087][ T36] usb 5-1: Manufacturer: syz [ 246.753103][ T36] usb 5-1: SerialNumber: syz [ 246.794648][ T36] usb 5-1: config 0 descriptor?? [ 247.031254][ T36] usb 5-1: USB disconnect, device number 15 [ 247.278025][ T7103] FAULT_INJECTION: forcing a failure. [ 247.278025][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 247.278061][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.2.324 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 247.278084][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.278106][ T7103] Call Trace: [ 247.278115][ T7103] [ 247.278124][ T7103] dump_stack_lvl+0xe8/0x150 [ 247.278161][ T7103] should_fail_ex+0x46b/0x600 [ 247.278190][ T7103] should_failslab+0xa8/0x100 [ 247.278216][ T7103] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 247.278244][ T7103] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 247.278282][ T7103] kmemdup_nul+0x36/0xf0 [ 247.278316][ T7103] vfs_parse_monolithic_sep+0x21d/0x360 [ 247.278347][ T7103] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 247.278378][ T7103] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 247.278417][ T7103] ? alloc_fs_context+0x9e9/0xd50 [ 247.278458][ T7103] do_new_mount+0x304/0xd30 [ 247.278484][ T7103] ? safesetid_security_capable+0xa9/0x1a0 [ 247.278520][ T7103] ? security_capable+0x7e/0x2c0 [ 247.278543][ T7103] ? __pfx_do_new_mount+0x10/0x10 [ 247.278571][ T7103] ? ns_capable+0x89/0xe0 [ 247.278598][ T7103] ? path_mount+0x690/0x10e0 [ 247.278623][ T7103] ? user_path_at+0xd4/0x160 [ 247.278659][ T7103] ? user_path_at+0xd4/0x160 [ 247.278694][ T7103] __se_sys_mount+0x31d/0x420 [ 247.278740][ T7103] ? __pfx___se_sys_mount+0x10/0x10 [ 247.278775][ T7103] ? __x64_sys_mount+0x20/0xc0 [ 247.278807][ T7103] do_syscall_64+0x14d/0xf80 [ 247.278836][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.278859][ T7103] ? clear_bhb_loop+0x40/0x90 [ 247.278886][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.278908][ T7103] RIP: 0033:0x7fac5de0bf79 [ 247.278929][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.278946][ T7103] RSP: 002b:00007fac5c05e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.278968][ T7103] RAX: ffffffffffffffda RBX: 00007fac5e085fa0 RCX: 00007fac5de0bf79 [ 247.278993][ T7103] RDX: 0000200000000040 RSI: 0000200000000440 RDI: 0000000000000000 [ 247.279008][ T7103] RBP: 00007fac5c05e090 R08: 0000200000000480 R09: 0000000000000000 [ 247.279022][ T7103] R10: 0000000003000084 R11: 0000000000000246 R12: 0000000000000002 [ 247.279036][ T7103] R13: 00007fac5e086038 R14: 00007fac5e085fa0 R15: 00007ffd3977c3a8 [ 247.279071][ T7103] [ 247.599606][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.981033][ T7121] loop2: detected capacity change from 0 to 7 [ 247.985112][ T7121] Dev loop2: unable to read RDB block 7 [ 247.985149][ T7121] loop2: AHDI p2 p3 [ 247.985178][ T7121] loop2: partition table partially beyond EOD, truncated [ 247.985431][ T7121] loop2: p3 start 335544320 is beyond EOD, truncated [ 248.115701][ T5882] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 248.279433][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.280338][ T5882] usb 5-1: not running at top speed; connect to a high speed hub [ 248.282409][ T5882] usb 5-1: config 251 has an invalid interface number: 156 but max is 0 [ 248.282438][ T5882] usb 5-1: config 251 has no interface number 0 [ 248.282471][ T5882] usb 5-1: config 251 interface 156 has no altsetting 0 [ 248.286247][ T5882] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 248.286275][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.286295][ T5882] usb 5-1: Product: syz [ 248.286309][ T5882] usb 5-1: Manufacturer: syz [ 248.286323][ T5882] usb 5-1: SerialNumber: syz [ 248.558116][ T37] audit: type=1326 audit(2000000008.306:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.560955][ T37] audit: type=1326 audit(2000000008.306:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.561860][ T37] audit: type=1326 audit(2000000008.306:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.562173][ T37] audit: type=1326 audit(2000000008.306:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.562527][ T37] audit: type=1326 audit(2000000008.306:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.563097][ T37] audit: type=1326 audit(2000000008.306:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 248.781054][ T5882] usb 5-1: unknown interface protocol 0x2c, assuming v1 [ 248.781074][ T5882] usb 5-1: cannot find UAC_HEADER [ 248.865794][ T7132] loop2: detected capacity change from 0 to 7 [ 248.866851][ T7132] Dev loop2: unable to read RDB block 7 [ 248.866877][ T7132] loop2: AHDI p2 [ 248.866913][ T7132] loop2: partition table partially beyond EOD, truncated [ 248.929824][ T6918] veth0_vlan: entered promiscuous mode [ 248.957205][ T6918] veth1_vlan: entered promiscuous mode [ 249.093480][ T7134] loop5: detected capacity change from 0 to 7 [ 249.094807][ T7134] Dev loop5: unable to read RDB block 7 [ 249.094836][ T7134] loop5: AHDI p2 p3 [ 249.094863][ T7134] loop5: partition table partially beyond EOD, truncated [ 249.127821][ T6918] veth0_macvtap: entered promiscuous mode [ 249.150490][ T5882] snd-usb-audio 5-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 249.224515][ T5882] usb 5-1: USB disconnect, device number 16 [ 249.258930][ T6918] veth1_macvtap: entered promiscuous mode [ 249.350528][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.394650][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.434903][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.519473][ T5998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.519974][ T5998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.521211][ T5998] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.523478][ T5998] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.296474][ T7146] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 251.314255][ T37] audit: type=1326 audit(2000000010.869:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 251.316817][ T37] audit: type=1326 audit(2000000010.888:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 251.458360][ T37] audit: type=1326 audit(2000000011.019:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 251.458416][ T37] audit: type=1326 audit(2000000011.019:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7129 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be914bf79 code=0x7ffc0000 [ 258.776061][ T7146] syz.4.335 (7146) used greatest stack depth: 18640 bytes left [ 258.954249][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.954274][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.033219][ T7157] netlink: 'syz.3.338': attribute type 7 has an invalid length. [ 259.131105][ T7160] loop2: detected capacity change from 0 to 7 [ 259.150902][ T7160] Dev loop2: unable to read RDB block 7 [ 259.150935][ T7160] loop2: AHDI p2 p3 [ 259.150966][ T7160] loop2: partition table partially beyond EOD, truncated [ 259.151225][ T7160] loop2: p3 start 335544320 is beyond EOD, truncated [ 259.241751][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.241871][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.372834][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.547419][ T10] usb 5-1: config index 0 descriptor too short (expected 38, got 36) [ 259.547451][ T10] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 259.547474][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 259.547526][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.547554][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.547578][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.547623][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 259.547648][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.714202][ T10] usb 5-1: config 0 descriptor?? [ 259.765039][ T7167] loop9: detected capacity change from 0 to 7 [ 259.807113][ T5943] Dev loop9: unable to read RDB block 7 [ 259.807163][ T5943] loop9: unable to read partition table [ 259.807511][ T5943] loop9: partition table beyond EOD, truncated [ 259.841517][ T7167] Dev loop9: unable to read RDB block 7 [ 259.841566][ T7167] loop9: unable to read partition table [ 259.841794][ T7167] loop9: partition table beyond EOD, truncated [ 259.841830][ T7167] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 260.178458][ T5943] Dev loop9: unable to read RDB block 7 [ 260.178508][ T5943] loop9: unable to read partition table [ 260.178757][ T5943] loop9: partition table beyond EOD, truncated [ 260.212489][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.216121][ T7168] Dev loop9: unable to read RDB block 7 [ 260.216177][ T7168] loop9: unable to read partition table [ 260.216404][ T7168] loop9: partition table beyond EOD, truncated [ 260.216424][ T7168] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 260.219527][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.346389][ T7170] loop5: detected capacity change from 0 to 7 [ 260.349608][ T7170] Dev loop5: unable to read RDB block 7 [ 260.349639][ T7170] loop5: AHDI p2 p3 [ 260.349667][ T7170] loop5: partition table partially beyond EOD, truncated [ 260.355771][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0008/input/input8 [ 260.421176][ T10] uclogic 0003:28BD:0909.0008: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 260.460504][ T7174] loop2: detected capacity change from 0 to 7 [ 260.471113][ T7174] Dev loop2: unable to read RDB block 7 [ 260.471199][ T7174] loop2: AHDI p2 p3 [ 260.471287][ T7174] loop2: partition table partially beyond EOD, truncated [ 260.471962][ T7174] loop2: p3 start 335544320 is beyond EOD, truncated [ 261.041687][ T36] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 261.226017][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.226922][ T36] usb 1-1: not running at top speed; connect to a high speed hub [ 261.231748][ T36] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 261.231776][ T36] usb 1-1: config 251 has no interface number 0 [ 261.231815][ T36] usb 1-1: config 251 interface 156 has no altsetting 0 [ 261.241038][ T36] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 261.241125][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.241180][ T36] usb 1-1: Product: syz [ 261.241222][ T36] usb 1-1: Manufacturer: syz [ 261.241257][ T36] usb 1-1: SerialNumber: syz [ 261.584781][ T36] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 261.584814][ T36] usb 1-1: cannot find UAC_HEADER [ 261.734292][ T36] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 261.762935][ T36] usb 1-1: USB disconnect, device number 15 [ 261.796987][ T826] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 261.859906][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.970766][ T826] usb 5-1: device descriptor read/64, error -32 [ 262.334069][ T826] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 262.390420][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.390990][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.579033][ T7202] loop2: detected capacity change from 0 to 7 [ 262.608665][ T7202] Dev loop2: unable to read RDB block 7 [ 262.608696][ T7202] loop2: AHDI p2 p3 [ 262.608725][ T7202] loop2: partition table partially beyond EOD, truncated [ 262.608976][ T7202] loop2: p3 start 335544320 is beyond EOD, truncated [ 262.751231][ T58] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 120 seconds [ 262.751284][ T58] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 120 seconds [ 262.751317][ T58] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 120 seconds [ 262.751349][ T58] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 120 seconds [ 262.937043][ T7212] loop5: detected capacity change from 0 to 7 [ 262.946590][ T7212] Dev loop5: unable to read RDB block 7 [ 262.946677][ T7212] loop5: AHDI p2 p3 [ 262.946756][ T7212] loop5: partition table partially beyond EOD, truncated [ 263.214563][ T10] usb 5-1: USB disconnect, device number 17 [ 263.400240][ T7218] loop2: detected capacity change from 0 to 7 [ 263.466798][ T7218] Dev loop2: unable to read RDB block 7 [ 263.466840][ T7218] loop2: AHDI p2 p3 [ 263.466873][ T7218] loop2: partition table partially beyond EOD, truncated [ 263.467528][ T7218] loop2: p3 start 335544320 is beyond EOD, truncated [ 263.892915][ T7223] kAFS: unable to lookup cell '' [ 263.893070][ T7223] kAFS: unable to lookup cell '' [ 264.557738][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 264.732227][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 264.733107][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 264.734770][ T10] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 264.734798][ T10] usb 1-1: config 251 has no interface number 0 [ 264.734832][ T10] usb 1-1: config 251 interface 156 has no altsetting 0 [ 264.738523][ T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 264.738545][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.738560][ T10] usb 1-1: Product: syz [ 264.738573][ T10] usb 1-1: Manufacturer: syz [ 264.738583][ T10] usb 1-1: SerialNumber: syz [ 265.055164][ T10] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 265.055192][ T10] usb 1-1: cannot find UAC_HEADER [ 265.300527][ T10] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 265.338677][ T10] usb 1-1: USB disconnect, device number 16 [ 265.462788][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.225607][ T5959] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 266.411812][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.411899][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.428981][ T5959] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 266.429040][ T5959] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.429066][ T5959] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 266.429097][ T5959] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.429134][ T5959] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 266.429160][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.362216][ T5959] usb 5-1: config 0 descriptor?? [ 267.467458][ T7263] loop2: detected capacity change from 0 to 7 [ 267.498537][ T5943] Dev loop2: unable to read RDB block 7 [ 267.498830][ T5943] loop2: AHDI p2 p3 [ 267.498866][ T5943] loop2: partition table partially beyond EOD, truncated [ 267.533856][ T5943] loop2: p3 start 335544320 is beyond EOD, truncated [ 267.539664][ T7263] Dev loop2: unable to read RDB block 7 [ 267.539696][ T7263] loop2: AHDI p2 p3 [ 267.539724][ T7263] loop2: partition table partially beyond EOD, truncated [ 267.540014][ T7263] loop2: p3 start 335544320 is beyond EOD, truncated [ 267.599355][ T5162] Dev loop2: unable to read RDB block 7 [ 267.599392][ T5162] loop2: AHDI p2 p3 [ 267.599421][ T5162] loop2: partition table partially beyond EOD, truncated [ 267.599701][ T5162] loop2: p3 start 335544320 is beyond EOD, truncated [ 267.944799][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.960155][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.229844][ T5959] usbhid 5-1:0.0: can't add hid device: -71 [ 270.229980][ T5959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.323469][ T5959] usb 5-1: USB disconnect, device number 18 [ 270.644563][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 270.804036][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 270.810961][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 270.811002][ T10] usb 1-1: config 0 has no interface number 0 [ 270.811069][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.811095][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 270.821205][ T7285] fuse: Bad value for 'user_id' [ 270.821226][ T7285] fuse: Bad value for 'user_id' [ 270.854480][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 270.854516][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.854531][ T10] usb 1-1: Product: syz [ 270.854542][ T10] usb 1-1: Manufacturer: syz [ 270.854552][ T10] usb 1-1: SerialNumber: syz [ 270.915358][ T10] usb 1-1: config 0 descriptor?? [ 270.931516][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 270.931623][ T10] em28xx 1-1:0.89: Video interface 89 found: [ 270.954680][ T5935] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.139241][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.139277][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.139303][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.139352][ T5935] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.139377][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.164527][ T5910] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 271.200076][ T5935] usb 5-1: config 0 descriptor?? [ 271.328882][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 271.330079][ T5910] usb 6-1: not running at top speed; connect to a high speed hub [ 271.332344][ T5910] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 271.332371][ T5910] usb 6-1: config 251 has no interface number 0 [ 271.332509][ T5910] usb 6-1: config 251 interface 156 has no altsetting 0 [ 271.343142][ T5910] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 271.344263][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.344323][ T5910] usb 6-1: Product: syz [ 271.345839][ T5910] usb 6-1: Manufacturer: syz [ 271.345879][ T5910] usb 6-1: SerialNumber: syz [ 271.575633][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 271.705229][ T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 271.705265][ T10] em28xx 1-1:0.89: board has no eeprom [ 271.766788][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 271.766837][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 271.770588][ T826] em28xx 1-1:0.89: Registering V4L2 extension [ 271.858198][ T7295] 9pnet_fd: Insufficient options for proto=fd [ 271.930093][ T5910] usb 6-1: unknown interface protocol 0x2c, assuming v1 [ 271.930120][ T5910] usb 6-1: cannot find UAC_HEADER [ 271.950984][ T10] usb 1-1: USB disconnect, device number 17 [ 271.979324][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 271.999047][ T826] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 271.999074][ T826] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 271.999090][ T826] em28xx 1-1:0.89: No AC97 audio processor [ 272.046612][ T826] usb 1-1: Decoder not found [ 272.046634][ T826] em28xx 1-1:0.89: failed to create media graph [ 272.046692][ T826] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 272.107524][ T826] em28xx 1-1:0.89: Registering snapshot button... [ 272.403999][ T5935] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 272.428444][ T826] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9 [ 272.479470][ T826] em28xx 1-1:0.89: Remote control support is not available for this card. [ 272.480290][ T10] em28xx 1-1:0.89: Closing input extension [ 272.507695][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 272.534751][ T5935] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 272.893402][ T5910] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 272.956792][ T5910] usb 6-1: USB disconnect, device number 2 [ 273.626080][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.682380][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.889764][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.891764][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.183980][ T5803] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 274.323864][ T10] em28xx 1-1:0.89: Freeing device [ 274.609355][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.920741][ T7324] program syz.5.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.158586][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.159153][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.192395][ T7328] loop2: detected capacity change from 0 to 7 [ 275.213540][ T7328] Dev loop2: unable to read RDB block 7 [ 275.213571][ T7328] loop2: AHDI p2 [ 275.213601][ T7328] loop2: partition table partially beyond EOD, truncated [ 275.719809][ T5800] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 276.146465][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 276.333886][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.333921][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.333945][ T10] usb 6-1: Product: syz [ 276.333960][ T10] usb 6-1: Manufacturer: syz [ 276.333976][ T10] usb 6-1: SerialNumber: syz [ 276.445795][ T5959] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 277.050599][ T7345] dvmrp0: entered allmulticast mode [ 277.338854][ T5882] usb 5-1: USB disconnect, device number 19 [ 277.588489][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.591537][ T5959] usb 4-1: not running at top speed; connect to a high speed hub [ 277.592848][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 277.593018][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 277.610312][ T5959] usb 4-1: config 251 has an invalid interface number: 156 but max is 0 [ 277.610394][ T5959] usb 4-1: config 251 has no interface number 0 [ 277.610480][ T5959] usb 4-1: config 251 interface 156 has no altsetting 0 [ 277.635466][ T5959] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 277.635572][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.635627][ T5959] usb 4-1: Product: syz [ 277.635670][ T5959] usb 4-1: Manufacturer: syz [ 277.635713][ T5959] usb 4-1: SerialNumber: syz [ 277.681399][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 277.863206][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 278.098049][ T7349] loop2: detected capacity change from 0 to 7 [ 278.121870][ T7349] Dev loop2: unable to read RDB block 7 [ 278.121907][ T7349] loop2: AHDI p2 p3 [ 278.121941][ T7349] loop2: partition table partially beyond EOD, truncated [ 278.122205][ T7349] loop2: p3 start 335544320 is beyond EOD, truncated [ 278.132126][ T5959] usb 4-1: unknown interface protocol 0x2c, assuming v1 [ 278.132153][ T5959] usb 4-1: cannot find UAC_HEADER [ 278.419620][ T5959] snd-usb-audio 4-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 278.466563][ T5959] usb 4-1: USB disconnect, device number 11 [ 278.553201][ T10] usb 6-1: USB disconnect, device number 3 [ 278.639760][ T7355] loop5: detected capacity change from 0 to 7 [ 278.644726][ T7355] Dev loop5: unable to read RDB block 7 [ 278.644759][ T7355] loop5: AHDI p2 p3 [ 278.644789][ T7355] loop5: partition table partially beyond EOD, truncated [ 278.834639][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.977332][ T7360] netlink: 52 bytes leftover after parsing attributes in process `syz.0.398'. [ 280.088878][ T7364] loop8: detected capacity change from 0 to 7 [ 280.090070][ T7364] Dev loop8: unable to read RDB block 7 [ 280.090114][ T7364] loop8: unable to read partition table [ 280.090347][ T7364] loop8: partition table beyond EOD, truncated [ 280.090366][ T7364] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 280.220963][ T7367] IPVS: length: 105 != 24 [ 280.540199][ T5959] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.748523][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 280.748560][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 280.748586][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 280.748615][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 280.794820][ T5959] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 280.794924][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.794979][ T5959] usb 5-1: Product: syz [ 280.795020][ T5959] usb 5-1: Manufacturer: syz [ 280.795063][ T5959] usb 5-1: SerialNumber: syz [ 280.868570][ T5959] usb 5-1: config 0 descriptor?? [ 281.089414][ T7379] macvtap1: entered promiscuous mode [ 281.090168][ T7379] dummy0: entered promiscuous mode [ 281.123117][ T7379] team0: Device macvtap1 failed to register rx_handler [ 281.164421][ T7379] dummy0: left promiscuous mode [ 281.266136][ T5959] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 281.416106][ T7368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.653059][ T5959] usb 5-1: USB disconnect, device number 20 [ 282.336488][ T7397] loop5: detected capacity change from 0 to 7 [ 282.338744][ T7397] Dev loop5: unable to read RDB block 7 [ 282.338783][ T7397] loop5: AHDI p2 p3 [ 282.338810][ T7397] loop5: partition table partially beyond EOD, truncated [ 282.479056][ T5882] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 282.651112][ T5882] usb 6-1: unable to get BOS descriptor or descriptor too short [ 282.651993][ T5882] usb 6-1: not running at top speed; connect to a high speed hub [ 282.654083][ T5882] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 282.654113][ T5882] usb 6-1: config 251 has no interface number 0 [ 282.654150][ T5882] usb 6-1: config 251 interface 156 has no altsetting 0 [ 282.659110][ T5882] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 282.659197][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.659260][ T5882] usb 6-1: Product: syz [ 282.659295][ T5882] usb 6-1: Manufacturer: syz [ 282.659337][ T5882] usb 6-1: SerialNumber: syz [ 283.005452][ T5882] usb 6-1: unknown interface protocol 0x2c, assuming v1 [ 283.005473][ T5882] usb 6-1: cannot find UAC_HEADER [ 283.142138][ T7399] loop2: detected capacity change from 0 to 7 [ 283.187442][ T7399] Dev loop2: unable to read RDB block 7 [ 283.187467][ T7399] loop2: AHDI p2 p3 [ 283.187489][ T7399] loop2: partition table partially beyond EOD, truncated [ 283.187677][ T7399] loop2: p3 start 335544320 is beyond EOD, truncated [ 283.243173][ T5882] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 283.302115][ T5882] usb 6-1: USB disconnect, device number 4 [ 283.445111][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.769417][ T5910] kernel read not supported for file bpf-prog (pid: 5910 comm: kworker/1:5) [ 284.146578][ T7406] loop8: detected capacity change from 0 to 7 [ 284.164435][ T7406] Dev loop8: unable to read RDB block 7 [ 284.164496][ T7406] loop8: unable to read partition table [ 284.164727][ T7406] loop8: partition table beyond EOD, truncated [ 284.164747][ T7406] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 285.957174][ T7420] xt_l2tp: unknown flags: 7d [ 287.532395][ T7435] loop5: detected capacity change from 0 to 7 [ 287.570850][ T7435] Dev loop5: unable to read RDB block 7 [ 287.570880][ T7435] loop5: AHDI p2 p3 [ 287.570902][ T7435] loop5: partition table partially beyond EOD, truncated [ 288.229272][ T7442] loop2: detected capacity change from 0 to 7 [ 288.230292][ T7442] Dev loop2: unable to read RDB block 7 [ 288.230313][ T7442] loop2: AHDI p2 p3 [ 288.230333][ T7442] loop2: partition table partially beyond EOD, truncated [ 288.230609][ T7442] loop2: p3 start 335544320 is beyond EOD, truncated [ 289.000511][ T7448] loop2: detected capacity change from 0 to 7 [ 289.004674][ T7448] Dev loop2: unable to read RDB block 7 [ 289.004706][ T7448] loop2: AHDI p2 p3 [ 289.004735][ T7448] loop2: partition table partially beyond EOD, truncated [ 289.004976][ T7448] loop2: p3 start 335544320 is beyond EOD, truncated [ 289.053335][ T5882] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 289.219884][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 289.222461][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 289.236363][ T5882] usb 4-1: config 251 has an invalid interface number: 156 but max is 0 [ 289.236521][ T5882] usb 4-1: config 251 has no interface number 0 [ 289.236588][ T5882] usb 4-1: config 251 interface 156 has no altsetting 0 [ 289.284568][ T5882] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 289.284601][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.284623][ T5882] usb 4-1: Product: syz [ 289.284638][ T5882] usb 4-1: Manufacturer: syz [ 289.284653][ T5882] usb 4-1: SerialNumber: syz [ 289.663611][ T5882] usb 4-1: unknown interface protocol 0x2c, assuming v1 [ 289.663637][ T5882] usb 4-1: cannot find UAC_HEADER [ 289.918201][ T5882] snd-usb-audio 4-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 289.990477][ T5882] usb 4-1: USB disconnect, device number 12 [ 290.125452][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.344764][ T7472] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 290.346378][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.348171][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.425364][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.447010][ T7472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.448279][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.448459][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.508172][ T7472] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 290.513559][ T7478] loop2: detected capacity change from 0 to 7 [ 290.537881][ T7478] Dev loop2: unable to read RDB block 7 [ 290.537917][ T7478] loop2: AHDI p2 p3 [ 290.537950][ T7478] loop2: partition table partially beyond EOD, truncated [ 290.538213][ T7478] loop2: p3 start 335544320 is beyond EOD, truncated [ 290.721420][ T7474] loop5: detected capacity change from 0 to 7 [ 290.736885][ T7474] Dev loop5: unable to read RDB block 7 [ 290.736923][ T7474] loop5: AHDI p2 p3 [ 290.736952][ T7474] loop5: partition table partially beyond EOD, truncated [ 290.927353][ T7483] loop8: detected capacity change from 0 to 7 [ 290.953209][ T7483] Dev loop8: unable to read RDB block 7 [ 290.953266][ T7483] loop8: unable to read partition table [ 290.953489][ T7483] loop8: partition table beyond EOD, truncated [ 290.953511][ T7483] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 291.045214][ T7489] loop2: detected capacity change from 0 to 7 [ 291.056565][ T7489] Dev loop2: unable to read RDB block 7 [ 291.056597][ T7489] loop2: AHDI p2 p3 [ 291.056625][ T7489] loop2: partition table partially beyond EOD, truncated [ 291.056882][ T7489] loop2: p3 start 335544320 is beyond EOD, truncated [ 291.218466][ T7487] ptrace attach of "./syz-executor exec"[7492] was attempted by "./syz-executor exec"[7487] [ 291.953139][ T7494] netlink: 'syz.4.439': attribute type 7 has an invalid length. [ 293.540098][ T5803] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 293.679042][ T5803] usb 1-1: device descriptor read/64, error -71 [ 295.186390][ T58] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 150 seconds [ 295.186444][ T58] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 150 seconds [ 295.186478][ T58] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 150 seconds [ 295.186511][ T58] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 150 seconds [ 295.218008][ T5803] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 295.218387][ T5910] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 295.389557][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 295.449394][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 295.449435][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 295.449463][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.449489][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.449542][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.449567][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.807276][ T5910] usb 4-1: usb_control_msg returned -32 [ 295.807330][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 295.915779][ T7504] loop2: detected capacity change from 0 to 7 [ 295.923059][ T7504] Dev loop2: unable to read RDB block 7 [ 295.923091][ T7504] loop2: AHDI p2 p3 [ 295.923121][ T7504] loop2: partition table partially beyond EOD, truncated [ 295.925904][ T7504] loop2: p3 start 335544320 is beyond EOD, truncated [ 296.106392][ T5882] usb 4-1: USB disconnect, device number 13 [ 298.329331][ T5803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 298.497373][ T5803] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 298.497408][ T5803] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 298.497429][ T5803] usb 1-1: Product: syz [ 298.497444][ T5803] usb 1-1: Manufacturer: syz [ 298.497468][ T5803] usb 1-1: SerialNumber: syz [ 298.541657][ T5803] usb 1-1: config 0 descriptor?? [ 298.557418][ T5803] ch341 1-1:0.0: ch341-uart converter detected [ 298.652574][ T7515] loop5: detected capacity change from 0 to 7 [ 298.653653][ T7515] Dev loop5: unable to read RDB block 7 [ 298.653682][ T7515] loop5: AHDI p2 p3 [ 298.653711][ T7515] loop5: partition table partially beyond EOD, truncated [ 300.717891][ T36] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 300.719008][ T5803] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 300.910912][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.911714][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 300.914117][ T36] usb 6-1: config 251 has an invalid interface number: 156 but max is 0 [ 300.914145][ T36] usb 6-1: config 251 has no interface number 0 [ 300.914180][ T36] usb 6-1: config 251 interface 156 has no altsetting 0 [ 300.960993][ T36] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 300.961028][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.961052][ T36] usb 6-1: Product: syz [ 300.961067][ T36] usb 6-1: Manufacturer: syz [ 300.961083][ T36] usb 6-1: SerialNumber: syz [ 301.002242][ T5910] usb 1-1: USB disconnect, device number 20 [ 301.015219][ T7529] loop2: detected capacity change from 0 to 7 [ 301.050584][ T7529] Dev loop2: unable to read RDB block 7 [ 301.050618][ T7529] loop2: AHDI p2 p3 [ 301.050650][ T7529] loop2: partition table partially beyond EOD, truncated [ 301.050917][ T7529] loop2: p3 start 335544320 is beyond EOD, truncated [ 301.124801][ T5910] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 301.141880][ T5910] ch341 1-1:0.0: device disconnected [ 301.243010][ T36] usb 6-1: unknown interface protocol 0x2c, assuming v1 [ 301.243040][ T36] usb 6-1: cannot find UAC_HEADER [ 301.338722][ T36] snd-usb-audio 6-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 301.342058][ T36] usb 6-1: USB disconnect, device number 5 [ 301.448073][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.697661][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 302.017683][ T5959] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.057155][ T7543] loop2: detected capacity change from 0 to 7 [ 302.063748][ T7543] Dev loop2: unable to read RDB block 7 [ 302.063826][ T7543] loop2: AHDI p2 p3 [ 302.063909][ T7543] loop2: partition table partially beyond EOD, truncated [ 302.064550][ T7543] loop2: p3 start 335544320 is beyond EOD, truncated [ 302.182115][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 302.182149][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 302.182181][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 302.182197][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 302.184679][ T5959] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 302.184709][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.184731][ T5959] usb 1-1: Product: syz [ 302.184749][ T5959] usb 1-1: Manufacturer: syz [ 302.184759][ T5959] usb 1-1: SerialNumber: syz [ 302.235195][ T5959] usb 1-1: config 0 descriptor?? [ 302.272798][ T5959] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 302.680529][ T36] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 302.833729][ T36] usb 6-1: device descriptor read/64, error -71 [ 303.086739][ T36] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 303.249489][ T36] usb 6-1: device descriptor read/64, error -71 [ 303.366593][ T36] usb usb6-port1: attempt power cycle [ 303.773712][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 303.801636][ T7557] kvm: emulating exchange as write [ 304.089739][ T36] usb 6-1: device descriptor read/8, error -71 [ 304.360873][ T5803] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.195059][ T5959] scsi host1: usb-storage 1-1:0.0 [ 305.243075][ T36] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 305.267620][ T5959] usb 1-1: USB disconnect, device number 21 [ 305.268448][ T36] usb 6-1: device descriptor read/8, error -71 [ 305.363942][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 305.366429][ T5803] usb 4-1: config 15 has an invalid interface number: 217 but max is 0 [ 305.366460][ T5803] usb 4-1: config 15 has no interface number 0 [ 305.366529][ T5803] usb 4-1: config 15 interface 217 altsetting 9 endpoint 0xA has an invalid bInterval 58, changing to 9 [ 305.366561][ T5803] usb 4-1: config 15 interface 217 has no altsetting 0 [ 305.369767][ T5803] usb 4-1: New USB device found, idVendor=2001, idProduct=3c05, bcdDevice=ab.ab [ 305.369800][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.369822][ T5803] usb 4-1: Product: syz [ 305.369837][ T5803] usb 4-1: Manufacturer: syz [ 305.369853][ T5803] usb 4-1: SerialNumber: syz [ 305.526604][ T36] usb usb6-port1: unable to enumerate USB device [ 306.801409][ T7564] seq_file: buggy .next function m_next did not update position index [ 307.728870][ T5803] asix 4-1:15.217: probe with driver asix failed with error -22 [ 307.774623][ T5803] usb 4-1: USB disconnect, device number 14 [ 308.033046][ T7581] loop2: detected capacity change from 0 to 7 [ 308.035209][ T7581] Dev loop2: unable to read RDB block 7 [ 308.035240][ T7581] loop2: AHDI p2 p3 [ 308.054363][ T7581] loop2: partition table partially beyond EOD, truncated [ 308.054661][ T7581] loop2: p3 start 335544320 is beyond EOD, truncated [ 308.612029][ T7589] loop5: detected capacity change from 0 to 7 [ 308.646383][ T7589] Dev loop5: unable to read RDB block 7 [ 308.646420][ T7589] loop5: AHDI p2 p3 [ 308.646452][ T7589] loop5: partition table partially beyond EOD, truncated [ 309.415599][ T5803] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 309.589022][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.589053][ T5803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 309.589106][ T5803] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 309.589132][ T5803] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 309.668942][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.683146][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.716770][ T5803] usb 4-1: string descriptor 0 read error: -71 [ 309.716927][ T5803] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.717028][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.757924][ T5803] usb 4-1: can't set config #1, error -71 [ 309.765235][ T5803] usb 4-1: USB disconnect, device number 15 [ 312.882130][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.476'. [ 312.914072][ T7624] binfmt_misc: register: failed to install interpreter file ./file0 [ 313.054665][ T7626] loop2: detected capacity change from 0 to 7 [ 313.055618][ T7626] Dev loop2: unable to read RDB block 7 [ 313.055648][ T7626] loop2: AHDI p2 p3 [ 313.055675][ T7626] loop2: partition table partially beyond EOD, truncated [ 313.055906][ T7626] loop2: p3 start 335544320 is beyond EOD, truncated [ 313.807783][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.808406][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.928714][ T7638] netlink: 'syz.2.485': attribute type 29 has an invalid length. [ 314.186703][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.187275][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.619126][ T7650] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.486'. [ 317.284165][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.480'. [ 317.579791][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.581380][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.723579][ T7660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.014000][ T7668] netlink: 'syz.0.491': attribute type 8 has an invalid length. [ 318.053598][ T5803] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 318.213919][ T5803] usb 4-1: Using ep0 maxpacket: 8 [ 318.220573][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.235903][ T5803] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 318.235938][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.235960][ T5803] usb 4-1: Product: syz [ 318.235976][ T5803] usb 4-1: Manufacturer: syz [ 318.235993][ T5803] usb 4-1: SerialNumber: syz [ 318.301844][ T5803] usb 4-1: config 0 descriptor?? [ 318.345835][ T5803] usb 4-1: bad CDC descriptors [ 318.347180][ T5803] usb 4-1: unsupported MDLM descriptors [ 318.593025][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.593636][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.623605][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.644935][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.464779][ T5935] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 319.643180][ T5935] usb 6-1: Using ep0 maxpacket: 16 [ 319.652914][ T5935] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 319.652948][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.652971][ T5935] usb 6-1: Product: syz [ 319.652987][ T5935] usb 6-1: Manufacturer: syz [ 319.653003][ T5935] usb 6-1: SerialNumber: syz [ 319.705660][ T5935] usb 6-1: config 0 descriptor?? [ 319.716745][ T5910] usb 4-1: USB disconnect, device number 16 [ 319.758845][ T5935] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 319.781484][ T7683] loop2: detected capacity change from 0 to 7 [ 319.793157][ T7683] Dev loop2: unable to read RDB block 7 [ 319.793192][ T7683] loop2: AHDI p2 p3 [ 319.793223][ T7683] loop2: partition table partially beyond EOD, truncated [ 319.793485][ T7683] loop2: p3 start 335544320 is beyond EOD, truncated [ 319.795922][ T5935] usb 6-1: Detected FT-X [ 321.144630][ T7686] netlink: 'syz.3.496': attribute type 4 has an invalid length. [ 322.256206][ T5935] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 322.256732][ T5935] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 322.279026][ T5935] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 322.314348][ T5935] usb 6-1: USB disconnect, device number 10 [ 322.384243][ T5935] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 322.384838][ T5935] ftdi_sio 6-1:0.0: device disconnected [ 323.070191][ T7697] loop5: detected capacity change from 0 to 7 [ 323.094285][ T5943] Dev loop5: unable to read RDB block 7 [ 323.094319][ T5943] loop5: AHDI p2 p3 [ 323.094350][ T5943] loop5: partition table partially beyond EOD, truncated [ 323.136009][ T7697] Dev loop5: unable to read RDB block 7 [ 323.136044][ T7697] loop5: AHDI p2 p3 [ 323.136074][ T7697] loop5: partition table partially beyond EOD, truncated [ 324.226952][ T5935] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 324.393127][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 324.399147][ T5935] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 324.399188][ T5935] usb 6-1: config 0 has no interface number 0 [ 324.411961][ T5935] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 324.412077][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.412139][ T5935] usb 6-1: Product: syz [ 324.412183][ T5935] usb 6-1: Manufacturer: syz [ 324.412225][ T5935] usb 6-1: SerialNumber: syz [ 324.465184][ T5935] usb 6-1: config 0 descriptor?? [ 324.511724][ T5935] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 324.934756][ T5935] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 324.941588][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 325.156419][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 325.173655][ T5935] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 325.208863][ T5935] usb 6-1: USB disconnect, device number 11 [ 325.235505][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.236030][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.325436][ T5935] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 325.355062][ T5935] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 325.372876][ T5935] quatech2 6-1:0.51: device disconnected [ 325.514857][ T7723] SQUASHFS error: Failed to read block 0x0: -5 [ 325.514919][ T7723] unable to read squashfs_super_block [ 325.551566][ T7727] loop2: detected capacity change from 0 to 7 [ 325.552695][ T7727] Dev loop2: unable to read RDB block 7 [ 325.552726][ T7727] loop2: AHDI p2 p3 [ 325.552747][ T7727] loop2: partition table partially beyond EOD, truncated [ 325.553071][ T7727] loop2: p3 start 335544320 is beyond EOD, truncated [ 326.178421][ T7738] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.508'. [ 327.176825][ T7742] loop5: detected capacity change from 0 to 7 [ 327.178651][ T7742] Dev loop5: unable to read RDB block 7 [ 327.178681][ T7742] loop5: AHDI p2 p3 [ 327.178709][ T7742] loop5: partition table partially beyond EOD, truncated [ 327.964014][ T5992] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 180 seconds [ 327.964067][ T5992] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 180 seconds [ 327.964102][ T5992] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 180 seconds [ 327.964136][ T5992] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 180 seconds [ 329.203993][ T5959] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 330.809629][ T7756] autofs: Bad value for 'fd' [ 331.005436][ T7761] evm: overlay not supported [ 331.103170][ T7763] loop8: detected capacity change from 0 to 7 [ 331.106088][ T7763] Dev loop8: unable to read RDB block 7 [ 331.106136][ T7763] loop8: unable to read partition table [ 331.106372][ T7763] loop8: partition table beyond EOD, truncated [ 331.106392][ T7763] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 331.610053][ T7768] loop2: detected capacity change from 0 to 7 [ 331.612887][ T7768] Dev loop2: unable to read RDB block 7 [ 331.612918][ T7768] loop2: AHDI p2 p3 [ 331.612947][ T7768] loop2: partition table partially beyond EOD, truncated [ 331.613341][ T7768] loop2: p3 start 335544320 is beyond EOD, truncated [ 331.822604][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.822680][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.185728][ T5910] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 334.239168][ T36] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 334.324877][ T5910] usb 6-1: device descriptor read/64, error -71 [ 334.401882][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 334.415661][ T36] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 334.415690][ T36] usb 4-1: config 0 has no interface number 0 [ 334.415725][ T36] usb 4-1: config 0 interface 182 has no altsetting 0 [ 334.454970][ T36] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.07 [ 334.455004][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.455026][ T36] usb 4-1: Product: syz [ 334.455042][ T36] usb 4-1: Manufacturer: syz [ 334.455057][ T36] usb 4-1: SerialNumber: syz [ 334.460844][ T36] usb 4-1: config 0 descriptor?? [ 334.517716][ T36] hub 4-1:0.182: bad descriptor, ignoring hub [ 334.517760][ T36] hub 4-1:0.182: probe with driver hub failed with error -5 [ 334.582010][ T5910] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 334.725177][ T36] kaweth 4-1:0.182: Firmware present in device. [ 334.731402][ T36] kaweth 4-1:0.182: Error reading configuration (-71), no net device created [ 334.731832][ T36] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 334.837945][ T5910] usb 6-1: device descriptor read/64, error -71 [ 334.839557][ T36] usb 4-1: USB disconnect, device number 17 [ 334.957960][ T5910] usb usb6-port1: attempt power cycle [ 335.404529][ T5965] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 335.493717][ T7798] loop8: detected capacity change from 0 to 7 [ 335.507300][ T7798] Dev loop8: unable to read RDB block 7 [ 335.507346][ T7798] loop8: unable to read partition table [ 335.507577][ T7798] loop8: partition table beyond EOD, truncated [ 335.507597][ T7798] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 335.543368][ T5965] usb 5-1: device descriptor read/64, error -71 [ 336.399502][ T7805] netlink: 'syz.5.528': attribute type 7 has an invalid length. [ 337.606737][ T36] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 338.066394][ T5965] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 338.249310][ T7808] loop2: detected capacity change from 0 to 7 [ 338.265752][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 338.265787][ T36] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 338.265815][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 338.302544][ T36] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 338.302577][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.302598][ T36] usb 4-1: Product: syz [ 338.302613][ T36] usb 4-1: Manufacturer: syz [ 338.302629][ T36] usb 4-1: SerialNumber: syz [ 338.335939][ T5799] Dev loop2: unable to read RDB block 7 [ 338.336036][ T5799] loop2: AHDI p2 p3 [ 338.336160][ T5799] loop2: partition table partially beyond EOD, truncated [ 338.336943][ T5799] loop2: p3 start 335544320 is beyond EOD, truncated [ 338.346632][ T7808] Dev loop2: unable to read RDB block 7 [ 338.346719][ T7808] loop2: AHDI p2 p3 [ 338.346812][ T7808] loop2: partition table partially beyond EOD, truncated [ 338.347594][ T7808] loop2: p3 start 335544320 is beyond EOD, truncated [ 338.361024][ T36] usb 4-1: config 0 descriptor?? [ 338.366074][ T7801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.366209][ T7801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.403244][ T36] usb 4-1: ucan: probing device on interface #0 [ 338.936240][ T7817] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 340.111533][ T7817] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 340.320219][ T36] usb 4-1: ucan: could not read protocol version, ret=-110 [ 340.320250][ T36] usb 4-1: ucan: probe failed; try to update the device firmware [ 340.370409][ T36] usb 4-1: USB disconnect, device number 18 [ 340.760382][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 340.781789][ T5935] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 341.837956][ T7812] netlink: 'syz.4.531': attribute type 7 has an invalid length. [ 342.192952][ T36] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.225041][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 342.231421][ T5935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.231521][ T5935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.231546][ T5935] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 342.231590][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.231616][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.238184][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.238253][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.238283][ T31] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.238307][ T31] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 342.238337][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.238372][ T31] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 342.238396][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.379308][ T31] usb 6-1: config 0 descriptor?? [ 342.408479][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.450627][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 342.453953][ T36] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 342.453984][ T36] usb 4-1: config 1 has no interface number 0 [ 342.454108][ T36] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 342.454139][ T36] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 342.454165][ T36] usb 4-1: config 1 interface 214 has no altsetting 0 [ 342.495794][ T36] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 342.495830][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.495853][ T36] usb 4-1: Product: syz [ 342.495926][ T36] usb 4-1: Manufacturer: syz [ 342.495942][ T36] usb 4-1: SerialNumber: syz [ 342.591197][ T7824] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 342.591320][ T7824] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 342.940735][ T36] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 342.976675][ T36] scsi host1: usb-storage 4-1:1.214 [ 342.992596][ T31] uclogic 0003:5543:0781.000A: item fetching failed at offset 5/7 [ 342.993398][ T31] uclogic 0003:5543:0781.000A: parse failed [ 342.993506][ T31] uclogic 0003:5543:0781.000A: probe with driver uclogic failed with error -22 [ 343.017326][ T5800] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 343.173795][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 343.173862][ T7823] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 343.195808][ T5959] usb 6-1: USB disconnect, device number 15 [ 343.449780][ T5935] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 343.915787][ T7846] loop8: detected capacity change from 0 to 7 [ 343.921058][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 343.921150][ T7846] Dev loop8: unable to read RDB block 7 [ 343.921176][ T37] audit: type=1326 audit(2000000097.506:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.921200][ T7846] loop8: unable to read partition table [ 343.921424][ T7846] loop8: partition table beyond EOD, truncated [ 343.921458][ T7846] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 343.921574][ T37] audit: type=1326 audit(2000000097.506:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed88fcc84e code=0x7ffc0000 [ 343.922856][ T37] audit: type=1326 audit(2000000097.506:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.923191][ T37] audit: type=1326 audit(2000000097.506:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.923746][ T37] audit: type=1326 audit(2000000097.506:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.924143][ T37] audit: type=1326 audit(2000000097.506:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.924631][ T37] audit: type=1326 audit(2000000097.506:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.958036][ T37] audit: type=1326 audit(2000000097.543:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8900bf79 code=0x7ffc0000 [ 343.990729][ T37] audit: type=1326 audit(2000000097.580:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed88fcc84e code=0x7ffc0000 [ 344.013363][ T37] audit: type=1326 audit(2000000097.580:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7845 comm="syz.5.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed88fcc84e code=0x7ffc0000 [ 344.310216][ T5935] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 344.340921][ T36] usb 1-1: USB disconnect, device number 22 [ 344.367512][ T5994] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 344.427905][ T5994] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 344.488592][ T5935] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 344.488627][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 344.488649][ T5935] usb 5-1: Product: syz [ 344.488670][ T5935] usb 5-1: Manufacturer: syz [ 344.488686][ T5935] usb 5-1: SerialNumber: syz [ 344.561655][ T5935] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 344.663890][ T36] usb 4-1: USB disconnect, device number 19 [ 344.837855][ T7855] loop2: detected capacity change from 0 to 7 [ 344.861076][ T7855] Dev loop2: unable to read RDB block 7 [ 344.861113][ T7855] loop2: AHDI p2 p3 [ 344.861145][ T7855] loop2: partition table partially beyond EOD, truncated [ 344.861414][ T7855] loop2: p3 start 335544320 is beyond EOD, truncated [ 344.917285][ T1459] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 344.926590][ T5994] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 344.965564][ T1459] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 344.965631][ T1459] sd 1:0:0:0: [sdb] Sense not available. [ 344.966049][ T1459] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 344.966102][ T1459] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 344.966371][ T1459] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 345.016378][ T1459] sd 1:0:0:0: [sdb] Asking for cache data failed [ 345.016443][ T1459] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 345.068955][ T5935] vp7045: USB control message 'in' went wrong. [ 345.068971][ T5935] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 345.068999][ T5935] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 345.132937][ T5935] usb 5-1: USB disconnect, device number 24 [ 345.201458][ T5994] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 345.219842][ T5997] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 345.252962][ T5997] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 345.253008][ T5997] sd 1:0:0:1: [sdc] Sense not available. [ 345.254896][ T5997] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 345.254937][ T5997] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 345.255304][ T5997] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 345.259892][ T5997] sd 1:0:0:1: [sdc] Asking for cache data failed [ 345.259931][ T5997] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 345.261635][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 345.423390][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 345.423415][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 345.423429][ T31] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 345.423443][ T31] usb 6-1: config 220 has no interface number 2 [ 345.423491][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 345.423512][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 345.423526][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 345.423539][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 345.425705][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 345.425733][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.425749][ T31] usb 6-1: Product: syz [ 345.425759][ T31] usb 6-1: Manufacturer: syz [ 345.425770][ T31] usb 6-1: SerialNumber: syz [ 345.869085][ T7866] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.545'. [ 346.792964][ T1459] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 348.521496][ T7870] loop8: detected capacity change from 0 to 8 [ 348.593068][ T7870] Dev loop8: unable to read RDB block 8 [ 348.593108][ T7870] loop8: unable to read partition table [ 348.593266][ T7870] loop8: partition table beyond EOD, truncated [ 348.593280][ T7870] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 348.778866][ T7874] loop2: detected capacity change from 0 to 7 [ 348.786613][ T5997] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 348.810522][ T7874] Dev loop2: unable to read RDB block 7 [ 348.810556][ T7874] loop2: AHDI p2 p3 [ 348.810589][ T7874] loop2: partition table partially beyond EOD, truncated [ 348.810837][ T7874] loop2: p3 start 335544320 is beyond EOD, truncated [ 348.879656][ T7875] netlink: 'syz.2.547': attribute type 10 has an invalid length. [ 348.879676][ T7875] netlink: 2 bytes leftover after parsing attributes in process `syz.2.547'. [ 348.879715][ T7875] bond0: entered promiscuous mode [ 348.879727][ T7875] bond_slave_0: entered promiscuous mode [ 348.879887][ T7875] bond_slave_1: entered promiscuous mode [ 348.880270][ T7875] bridge0: port 3(bond0) entered blocking state [ 348.880434][ T7875] bridge0: port 3(bond0) entered disabled state [ 348.880602][ T7875] bond0: entered allmulticast mode [ 348.880613][ T7875] bond_slave_0: entered allmulticast mode [ 348.880626][ T7875] bond_slave_1: entered allmulticast mode [ 348.883703][ T7875] bridge0: port 3(bond0) entered blocking state [ 348.883803][ T7875] bridge0: port 3(bond0) entered forwarding state [ 349.069160][ T31] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 349.069207][ T31] uvcvideo 6-1:220.0: No valid video chain found. [ 349.069360][ T31] usb 6-1: selecting invalid altsetting 0 [ 349.270290][ T31] usb 6-1: selecting invalid altsetting 0 [ 349.270340][ T31] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 349.286530][ T5791] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 349.362905][ T31] usb 6-1: USB disconnect, device number 16 [ 349.596776][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.597621][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.041461][ T807] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 350.093269][ T5965] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 350.151334][ T5943] udevd[5943]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 350.202963][ T807] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.203004][ T807] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 350.203028][ T807] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 350.203069][ T807] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.203095][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.283290][ T807] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.358971][ T5965] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.359002][ T5965] usb 5-1: config 0 has no interface number 0 [ 350.393828][ T5965] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 350.393860][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.393882][ T5965] usb 5-1: Product: syz [ 350.393898][ T5965] usb 5-1: Manufacturer: syz [ 350.393913][ T5965] usb 5-1: SerialNumber: syz [ 350.439891][ T5965] usb 5-1: config 0 descriptor?? [ 350.612736][ T7899] loop2: detected capacity change from 0 to 7 [ 350.803617][ T5965] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 350.806459][ T7899] Dev loop2: unable to read RDB block 7 [ 350.806495][ T7899] loop2: AHDI p2 p3 [ 350.806528][ T7899] loop2: partition table partially beyond EOD, truncated [ 350.806782][ T7899] loop2: p3 start 335544320 is beyond EOD, truncated [ 350.851588][ T5800] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 350.917238][ T5965] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 350.917774][ T5965] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 350.917831][ T5965] usb 5-1: media controller created [ 350.997288][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.154534][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.184205][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.503396][ T807] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 351.653556][ T5965] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 351.838735][ T5965] usb 5-1: USB disconnect, device number 25 [ 352.184090][ T7914] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.557'. [ 353.513216][ T5935] usb 6-1: USB disconnect, device number 17 [ 354.702674][ T7919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 354.857877][ T7938] loop2: detected capacity change from 0 to 7 [ 354.861515][ T7938] Dev loop2: unable to read RDB block 7 [ 354.861549][ T7938] loop2: AHDI p2 p3 [ 354.861580][ T7938] loop2: partition table partially beyond EOD, truncated [ 354.861799][ T7938] loop2: p3 start 335544320 is beyond EOD, truncated [ 355.209492][ T7948] netlink: 'syz.4.567': attribute type 33 has an invalid length. [ 355.209517][ T7948] netlink: 152 bytes leftover after parsing attributes in process `syz.4.567'. [ 355.213760][ T7948] netlink: 14 bytes leftover after parsing attributes in process `syz.4.567'. [ 355.866284][ T5882] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 357.608712][ T5795] Bluetooth: hci5: command 0x0406 tx timeout [ 357.731003][ T5882] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.731045][ T5882] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 357.731071][ T5882] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 357.731114][ T5882] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.731140][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.825178][ T5882] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.907394][ T7973] netlink: 'syz.4.574': attribute type 9 has an invalid length. [ 358.369033][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.662523][ T5800] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 359.353827][ T5882] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 359.570991][ T7987] xt_socket: unknown flags 0x20 [ 359.600485][ T5803] IPVS: starting estimator thread 0... [ 359.704584][ T7988] IPVS: using max 7 ests per chain, 16800 per kthread [ 360.112988][ T8001] loop2: detected capacity change from 0 to 7 [ 360.114918][ T8001] Dev loop2: unable to read RDB block 7 [ 360.114964][ T8001] loop2: AHDI p2 p3 [ 360.114992][ T8001] loop2: partition table partially beyond EOD, truncated [ 360.115852][ T8001] loop2: p3 start 335544320 is beyond EOD, truncated [ 360.338894][ T5800] Bluetooth: hci0: unexpected cc 0x203d length: 9 > 1 [ 360.338944][ T5800] Bluetooth: hci0: unexpected event for opcode 0x203d [ 360.523257][ T5935] usb 4-1: USB disconnect, device number 20 [ 360.608884][ T58] block nbd1: Possible stuck request ffff8880260c5080: control (read@0,1024B). Runtime 210 seconds [ 360.608937][ T58] block nbd1: Possible stuck request ffff8880260c5240: control (read@1024,1024B). Runtime 210 seconds [ 360.608972][ T58] block nbd1: Possible stuck request ffff8880260c5400: control (read@2048,1024B). Runtime 210 seconds [ 360.609006][ T58] block nbd1: Possible stuck request ffff8880260c55c0: control (read@3072,1024B). Runtime 210 seconds [ 362.660696][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 362.660716][ T37] audit: type=1800 audit(2000000115.035:41): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.585" name="file1" dev="tmpfs" ino=309 res=0 errno=0 [ 364.536408][ T5965] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 364.710394][ T5965] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.710436][ T5965] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 364.710460][ T5965] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 364.710503][ T5965] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.710528][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.858855][ T5965] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.132823][ T5800] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 367.206535][ T5965] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 367.300304][ T5800] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 367.761998][ T8069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 367.762029][ T8069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.762198][ T8069] vhci_hcd vhci_hcd.0: Device attached [ 367.794202][ T8070] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 367.814518][ T5994] vhci_hcd vhci_hcd.2: stop threads [ 367.814547][ T5994] vhci_hcd vhci_hcd.2: release socket [ 367.814590][ T5994] vhci_hcd vhci_hcd.2: disconnect device [ 368.079677][ T38] INFO: task syz.1.243:6778 blocked for more than 143 seconds. [ 368.079698][ T38] Not tainted syzkaller #0 [ 368.079706][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.079714][ T38] task:syz.1.243 state:D stack:28056 pid:6778 tgid:6777 ppid:5793 task_flags:0x400040 flags:0x00080002 [ 368.079769][ T38] Call Trace: [ 368.079778][ T38] [ 368.079788][ T38] __schedule+0x14de/0x5210 [ 368.079835][ T38] ? __pfx___schedule+0x10/0x10 [ 368.079853][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 368.079881][ T38] rt_mutex_schedule+0x76/0xf0 [ 368.079897][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 368.079923][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 368.079941][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 368.079959][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 368.079976][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 368.080001][ T38] ? bdev_open+0xe0/0xcc0 [ 368.080022][ T38] ? bdev_open+0xe0/0xcc0 [ 368.080042][ T38] ? bdev_open+0xe0/0xcc0 [ 368.080057][ T38] mutex_lock_nested+0x168/0x1d0 [ 368.080077][ T38] bdev_open+0xe0/0xcc0 [ 368.080102][ T38] blkdev_open+0x485/0x620 [ 368.080124][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 368.080143][ T38] do_dentry_open+0x83d/0x13e0 [ 368.080174][ T38] vfs_open+0x3b/0x350 [ 368.080192][ T38] ? path_openat+0x2e25/0x38a0 [ 368.080210][ T38] path_openat+0x2e3d/0x38a0 [ 368.080251][ T38] ? __pfx_path_openat+0x10/0x10 [ 368.080269][ T38] ? kasan_save_track+0x4f/0x80 [ 368.080283][ T38] ? kasan_save_track+0x3e/0x80 [ 368.080296][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 368.080310][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 368.080333][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.080360][ T38] do_file_open+0x23e/0x4a0 [ 368.080375][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.080400][ T38] ? __pfx_do_file_open+0x10/0x10 [ 368.080414][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 368.080447][ T38] ? alloc_fd+0x64e/0x6c0 [ 368.080482][ T38] do_sys_openat2+0x113/0x200 [ 368.080506][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.080528][ T38] ? exc_page_fault+0x6a/0xc0 [ 368.080551][ T38] ? do_user_addr_fault+0xc7c/0x1360 [ 368.080574][ T38] __x64_sys_openat+0x138/0x170 [ 368.080600][ T38] do_syscall_64+0x14d/0xf80 [ 368.080621][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.080636][ T38] ? trace_irq_disable+0x37/0x100 [ 368.080650][ T38] ? clear_bhb_loop+0x40/0x90 [ 368.080669][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.080685][ T38] RIP: 0033:0x7f928ad6c84e [ 368.080699][ T38] RSP: 002b:00007f9289005b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.080716][ T38] RAX: ffffffffffffffda RBX: 00007f92890066c0 RCX: 00007f928ad6c84e [ 368.080728][ T38] RDX: 0000000000000080 RSI: 00007f9289005c00 RDI: ffffffffffffff9c [ 368.080739][ T38] RBP: 00007f9289005c00 R08: 0000000000000000 R09: 0000000000000000 [ 368.080750][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 368.080760][ T38] R13: 00007f928b026038 R14: 00007f928b025fa0 R15: 00007ffea5aed708 [ 368.080786][ T38] [ 368.080805][ T38] [ 368.080805][ T38] Showing all locks held in the system: [ 368.080815][ T38] 1 lock held by khungtaskd/38: [ 368.080824][ T38] #0: ffffffff8dbcd480 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 368.080880][ T38] 2 locks held by getty/5549: [ 368.080889][ T38] #0: ffff8880323fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 368.080927][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 368.080972][ T38] 1 lock held by udevd/5808: [ 368.080980][ T38] #0: ffff888025fa54c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 368.081027][ T38] 3 locks held by kworker/1:5/5910: [ 368.081037][ T38] 2 locks held by kworker/u8:15/5996: [ 368.081046][ T38] 1 lock held by syz.1.243/6778: [ 368.081055][ T38] #0: ffff888025fa54c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 368.081092][ T38] 3 locks held by syz.2.558/7965: [ 368.081101][ T38] 4 locks held by syz.5.588/8029: [ 368.081110][ T38] 2 locks held by syz.0.583/8043: [ 368.081119][ T38] 3 locks held by syz.0.594/8055: [ 368.081128][ T38] 1 lock held by syz.3.599/8074: [ 368.081136][ T38] 1 lock held by syz.0.600/8076: [ 368.081145][ T38] #0: ffff888028130cd8 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_wait_for_rcvmsg+0x345/0x640 [ 368.081187][ T38] 4 locks held by syz.0.600/8077: [ 368.081196][ T38] [ 368.081200][ T38] ============================================= [ 368.081200][ T38] [ 368.081215][ T38] NMI backtrace for cpu 1 [ 368.081229][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.081247][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.081256][ T38] Call Trace: [ 368.081262][ T38] [ 368.081267][ T38] dump_stack_lvl+0xe8/0x150 [ 368.081291][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 368.081307][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.081328][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 368.081346][ T38] sys_info+0x135/0x170 [ 368.081368][ T38] watchdog+0xf90/0xfe0 [ 368.081387][ T38] ? watchdog+0x209/0xfe0 [ 368.081406][ T38] kthread+0x388/0x470 [ 368.081429][ T38] ? __pfx_watchdog+0x10/0x10 [ 368.081442][ T38] ? __pfx_kthread+0x10/0x10 [ 368.081466][ T38] ret_from_fork+0x51e/0xb90 [ 368.081493][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 368.081511][ T38] ? __switch_to+0xc7d/0x1400 [ 368.081531][ T38] ? __pfx_kthread+0x10/0x10 [ 368.081554][ T38] ret_from_fork_asm+0x1a/0x30 [ 368.081590][ T38] [ 368.081595][ T38] Sending NMI from CPU 1 to CPUs 0: [ 368.081649][ C0] NMI backtrace for cpu 0 [ 368.081663][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.081684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.081695][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 368.081727][ C0] Code: 14 4c 02 e9 53 c2 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 32 17 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 368.081743][ C0] RSP: 0018:ffffffff8d807dc0 EFLAGS: 00000246 [ 368.081758][ C0] RAX: 00000000005805b7 RBX: ffffffff819849cd RCX: 0000000080000001 [ 368.081771][ C0] RDX: 0000000000000001 RSI: ffffffff8d34722c RDI: ffffffff8b861580 [ 368.081783][ C0] RBP: ffffffff8d807eb0 R08: ffff8880b8833cdb R09: 1ffff1101710679b [ 368.081796][ C0] R10: dffffc0000000000 R11: ffffed101710679c R12: ffffffff8f492870 [ 368.081809][ C0] R13: 1ffffffff1b205d8 R14: 0000000000000000 R15: 0000000000000000 [ 368.081820][ C0] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 368.081835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.081847][ C0] CR2: 0000200000010000 CR3: 0000000040328000 CR4: 00000000003526f0 [ 368.081862][ C0] Call Trace: [ 368.081869][ C0] [ 368.081875][ C0] default_idle+0x9/0x20 [ 368.081901][ C0] default_idle_call+0x72/0xb0 [ 368.081928][ C0] do_idle+0x1bd/0x500 [ 368.081944][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.081970][ C0] ? __pfx_do_idle+0x10/0x10 [ 368.081993][ C0] cpu_startup_entry+0x43/0x60 [ 368.082011][ C0] rest_init+0x2de/0x300 [ 368.082028][ C0] start_kernel+0x380/0x3d0 [ 368.082050][ C0] x86_64_start_reservations+0x24/0x30 [ 368.082076][ C0] x86_64_start_kernel+0x143/0x1c0 [ 368.082102][ C0] common_startup_64+0x13e/0x147 [ 368.082140][ C0] [ 368.082650][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 368.082665][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.082683][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.082692][ T38] Call Trace: [ 368.082698][ T38] [ 368.082704][ T38] vpanic+0x1e0/0x670 [ 368.082733][ T38] panic+0xc5/0xd0 [ 368.082755][ T38] ? __pfx_panic+0x10/0x10 [ 368.082775][ T38] ? printk_trigger_flush+0x117/0x180 [ 368.082795][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.082821][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 368.082840][ T38] watchdog+0xfda/0xfe0 [ 368.082858][ T38] ? watchdog+0x209/0xfe0 [ 368.082877][ T38] kthread+0x388/0x470 [ 368.082900][ T38] ? __pfx_watchdog+0x10/0x10 [ 368.082913][ T38] ? __pfx_kthread+0x10/0x10 [ 368.082937][ T38] ret_from_fork+0x51e/0xb90 [ 368.082959][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 368.082977][ T38] ? __switch_to+0xc7d/0x1400 [ 368.082996][ T38] ? __pfx_kthread+0x10/0x10 [ 368.083020][ T38] ret_from_fork_asm+0x1a/0x30 [ 368.083055][ T38] [ 368.083232][ T38] Kernel Offset: disabled