last executing test programs: 4m50.090677262s ago: executing program 2 (id=223): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x2, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x3, 0x5, 0x1, 0xb9, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) (rerun: 32) r4 = socket$pppoe(0x18, 0x1, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x2, 0x5, 0x1, 0x1000, &(0x7f0000fed000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xda0, 0x0, 0x81}]}) (async, rerun: 64) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x2d0, 0x23e, 0x1, 0x0, 0xdd9f83, 0x8, 0x9, 0x1, 0x2, 0x9, 0x725, 0x13, 0x7, 0x7f, 0x3e, 0xb763599953cb0908, {0x0, 0x6fd8e845}, 0x6, 0xed}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x220, 0x3d, 0xab, 0xf0, 0x8, 0x5ac, 0x217, 0x7554, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x55, 0xe0, 0x1, [{{0x9, 0x4, 0x3c, 0xfe, 0x1, 0x3, 0x80, 0x2, 0x5c, [], [{{0x9, 0x5, 0x7, 0x7, 0x0, 0x2, 0x4f, 0x5}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x41, &(0x7f0000000500)=@string={0x41, 0x3, "d509139a60cd0df4fc98389ef6bf436f7b93864d1f9af5ab30464d0cfc495d3bf1ae747d14f17abdc2a8f4848db11bf57e3eda2b55addb81aec155ed58fa8c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x444}}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "f9e6a6a33df165d5085694bf020831416d1227f9417372aa1d2ef9130c5c77eaa827a81c1001d41aaceedafc8ffbba8d90d6712c1532ae52826288d9f2b52332232fbbb39db4d4411c4f2883857aa46bd9bb0b49f4ea695e085b8a69ac33f86d96d264885dad4d0325a9848e995db61fc1c0d82f72420cdbe981e2735280168cb077d881a74268a85a"}}, {0x93, &(0x7f00000002c0)=@string={0x93, 0x3, "811565e7e9fddcb4898c8fae7ffeff5b14d93d41b99ffd660f43103e715ca3de26f4da4068eea8f6c5ad099438923eba1ada3d71044b6a398ea36d91430bc77762f6863193a707182db237fae7411328f86bb6bd1a907b66e114842dc39f5f32a1743f3a6647c111eeec45fc2f6d0cefe90ada4099e60d13df97f62197d8e93dbe91b0a8a0dee5c8b2590f5a15df9a2d11"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x804}}]}) 4m49.446351217s ago: executing program 2 (id=226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) write$binfmt_elf32(r3, &(0x7f0000000e00)=ANY=[], 0x958) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x2c, r1, 0x109, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) 4m49.335172088s ago: executing program 2 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000043d8a0870272091776c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="005785e7b1c9"], 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)}], 0x2) poll(0x0, 0x0, 0xc) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f00000003c0)={0x36ac0080, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x0, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x0, 0x1, "ab640b05ded481c7c5a1246d2f2aff2da968a0c57672ba610027ee04729085afd2b2377b159a6c94dba52b7a508ad3bef6e26a85f63599bb5a5cc0c8b87ccf17b221cfc218f9416ef366333e99eceb769833e544497cbae9bfb62d295e5053ddeb72412fe43549f392644e15affbc62b374ef5d8de3836cd5d9fa9b312d43ecb2b5099de71f31417844843aa0d5f7f16ae2eed9411f2208d5468d9fd"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "5029f9993cd245ebee62b378d22b5c5bc77a2b3dc38ab7c4066fe5f923fcc65de0cd103902c60f87b9f4c2b8c06b9fd2bc7bbf6be802fef7bfee1c6fa203ad0d9f3f2dd6e6a5a7a7c28a9585a7b7112d820ca7c7b84c19e8131fade508359e0949b2d93cd2aab621c5ffbd4e9af24140d6458b198b51b8577fad82"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_MASK={0xffffff6a}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @log={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x0, 0x5, 0x1, 0x0, 0xffffffff}]}}}, {0x0, 0x1, 0x0, 0x1, @xfrm={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @notrack={{}, @void}}]}]}], {0x6d, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 4m47.270674756s ago: executing program 2 (id=237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 64) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @remote}, 0x3}}, 0x2e) (async, rerun: 64) syz_emit_vhci(&(0x7f0000001240)=ANY=[@ANYBLOB="040e0649130c"], 0x7) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async, rerun: 32) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0xfffffffffffffe3f) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) mount(0x0, 0x0, &(0x7f0000000040)='ubifs\x00', 0x0, &(0x7f0000000600)='uid=1\x00nk]e\t\xee\x00\x1a\xe1\x16U\xe1W\xf1#\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0') (async) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) (async) write$cgroup_pid(r4, &(0x7f00000004c0), 0x24) (async, rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x5, 0x10}, 0x9c) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x1}}, 0x2e) 4m47.239452622s ago: executing program 2 (id=238): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001040)=0x9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000480)={0xde, "340bd82535915f68e77d000600f568200000000018cf501922de974a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"00000000ffffffffffff00007297608800", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x80, 0x10, 0x0, 0x0, 0x2, 0x73b, &(0x7f0000000200)='A8'}) 4m47.036427388s ago: executing program 2 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m46.858037803s ago: executing program 32 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m12.763608201s ago: executing program 4 (id=957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002180)={0x44, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x29}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x91}, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m11.192553421s ago: executing program 4 (id=959): syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2a, 0x0, 0x100) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x7, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "370108e7fe1c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x5ea4, 0xf7}, {0x6, 0x24, 0x1a, 0x2, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfd, 0xd, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x9, 0xff}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x3, 0x7, 0x20, 0x9}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x26, &(0x7f00000001c0)=@string={0x26, 0x3, "28192036cbf4f9cfcd87ec15664744d192a917e1b089f93e52528341accfb2cdf3724963"}}, {0x6, &(0x7f0000000200)=@string={0x6, 0x3, "a9e9dcbb"}}, {0x6a, &(0x7f0000000240)=@string={0x6a, 0x3, "39c35101d69679d0901766d4b13f2d1fea146c57cbc4543cc99943a0c0e52b1ac2b70f2af9951fa871c2cd4c48dc7ca5fe05f6cead68653114174906d77f586ce47f3ef8a2d08258fe34006abd04608f6e27403f65c815d984a69287ab38048d2231bffd72f50519"}}, {0xdd, &(0x7f00000002c0)=@string={0xdd, 0x3, "060e6f549b4aba4117111e97568f9536ba0339ce2ba7a14318ea8eb7adfa3cf9a7fff901aee253f9e11ead1dc1589641c8555e88eb4a733b75dfd532acf67144f747712758da1c7155c508e41bb29dd1b7cda4e7bdfa58850ce0ca99d1c58a475848491d77e1d1672eb992853aa0080e1bb1f76ccec20aa273d8111c2ef5c00498d388434a097cad4c30e7ee62bd46de3c86051877f450687174133a870990cc516ff90202fb59efa3f612563da07a00344c1af5c7324d6624ec5de94e9631f4cbfb3ceaa46261b7752c64a7bcfa3daaa3f188ce80867a6ef79083"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0xc8, &(0x7f0000000440)=ANY=[@ANYBLOB="c803365295c106e29ce0f57cb603d86892c41e4c341877a4d0c28e9d8d760876b331e4c4fbedb644b5c3de4e0399f1b37efa6c60a5a18f6c2b514bc284925870d0348e9f60c8755818e70452eab6d7c0e6db4b2019ea15f5597fede88bc145baed06428d75b739f54853f0bd5584770ad94e5bf820a8ac54dd938e74ed03485e80e65a4c5f5e93730149e43cc620548f35e5c50411f1cb3a377c2f3107be4504016cf758b639018fb1b75f5685a438ed2250682cc64c870160f8001d5b924cc6231bfe18284f24db"]}]}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wlc\x00', 0x17, 0x80005, 0x6b}, 0x2c) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x8, 0x3, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f00000007c0)={r6}) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r7, &(0x7f0000000000)=""/35, 0x23) getdents(r7, 0xffffffffffffffff, 0x5a) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000040)) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x99, 0x37, 0xf0, 0x10, 0x413c, 0x81d2, 0x25e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x5, 0xde, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2a, 0x0, 0x100) (async) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[r3], 0x1}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x7, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "370108e7fe1c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x5ea4, 0xf7}, {0x6, 0x24, 0x1a, 0x2, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfd, 0xd, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x9, 0xff}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x3, 0x7, 0x20, 0x9}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x26, &(0x7f00000001c0)=@string={0x26, 0x3, "28192036cbf4f9cfcd87ec15664744d192a917e1b089f93e52528341accfb2cdf3724963"}}, {0x6, &(0x7f0000000200)=@string={0x6, 0x3, "a9e9dcbb"}}, {0x6a, &(0x7f0000000240)=@string={0x6a, 0x3, "39c35101d69679d0901766d4b13f2d1fea146c57cbc4543cc99943a0c0e52b1ac2b70f2af9951fa871c2cd4c48dc7ca5fe05f6cead68653114174906d77f586ce47f3ef8a2d08258fe34006abd04608f6e27403f65c815d984a69287ab38048d2231bffd72f50519"}}, {0xdd, &(0x7f00000002c0)=@string={0xdd, 0x3, "060e6f549b4aba4117111e97568f9536ba0339ce2ba7a14318ea8eb7adfa3cf9a7fff901aee253f9e11ead1dc1589641c8555e88eb4a733b75dfd532acf67144f747712758da1c7155c508e41bb29dd1b7cda4e7bdfa58850ce0ca99d1c58a475848491d77e1d1672eb992853aa0080e1bb1f76ccec20aa273d8111c2ef5c00498d388434a097cad4c30e7ee62bd46de3c86051877f450687174133a870990cc516ff90202fb59efa3f612563da07a00344c1af5c7324d6624ec5de94e9631f4cbfb3ceaa46261b7752c64a7bcfa3daaa3f188ce80867a6ef79083"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}, {0xc8, &(0x7f0000000440)=ANY=[@ANYBLOB="c803365295c106e29ce0f57cb603d86892c41e4c341877a4d0c28e9d8d760876b331e4c4fbedb644b5c3de4e0399f1b37efa6c60a5a18f6c2b514bc284925870d0348e9f60c8755818e70452eab6d7c0e6db4b2019ea15f5597fede88bc145baed06428d75b739f54853f0bd5584770ad94e5bf820a8ac54dd938e74ed03485e80e65a4c5f5e93730149e43cc620548f35e5c50411f1cb3a377c2f3107be4504016cf758b639018fb1b75f5685a438ed2250682cc64c870160f8001d5b924cc6231bfe18284f24db"]}]}) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wlc\x00', 0x17, 0x80005, 0x6b}, 0x2c) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x8, 0x3, 0x4, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f00000007c0)={r6}) (async) syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') (async) getdents64(r7, &(0x7f0000000000)=""/35, 0x23) (async) getdents(r7, 0xffffffffffffffff, 0x5a) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000040)) (async) 1m8.138342284s ago: executing program 4 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x21) open(&(0x7f00000000c0)='./bus\x00', 0x1c113e, 0x40) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x4000003) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 1m7.397295089s ago: executing program 4 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x51) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000000901010000000000000000070000010900010073797a310000000022000540000000153c0002002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14141a0c000280050001"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) 1m6.785295252s ago: executing program 4 (id=976): socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000000)='.\x00', 0x0, 0x14) (async) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200000000000000000000000600320003000000000000000000000010004a00000000000000000000000000ff020000000000000000000000000001030005000000000002000000ac1414aa000000000000000003000600000000000200ffff00"/128], 0x80}}, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x8, 0x401, 0x8, 0x9, 0xfffffffffffffffd, 0x9, 0x2, 0x1, 0x7, 0xd20, 0x5, 0xe671, 0x6, 0x6, 0x8000], 0x58000, 0x25282}) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x8, 0x401, 0x8, 0x9, 0xfffffffffffffffd, 0x9, 0x2, 0x1, 0x7, 0xd20, 0x5, 0xe671, 0x6, 0x6, 0x8000], 0x58000, 0x25282}) writev(r1, &(0x7f00000003c0), 0x0) 1m6.623558654s ago: executing program 4 (id=978): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x20004000) ioprio_set$pid(0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202"], 0x0) 51.618431774s ago: executing program 33 (id=978): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x20004000) ioprio_set$pid(0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r0, 0x0}]) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff0300000009058202"], 0x0) 7.230976346s ago: executing program 3 (id=1249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80841, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{}, {0x9, 0xc9, 0x94}}}}, 0xa) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000ac0)='./file1\x00', 0x1) mmap(&(0x7f00008b5000/0x2000)=nil, 0x2000, 0x7ffff5, 0x11, r2, 0x9145000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7.025618778s ago: executing program 1 (id=1250): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) socket$rxrpc(0x21, 0x2, 0x2) (async) socket$rxrpc(0x21, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000001c0)=""/4068, 0xfe4) 6.579384961s ago: executing program 1 (id=1251): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38102, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x2020a8, 0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x7b, 0x2) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000010c0)={&(0x7f00000000c0)=""/4096, 0x0, 0x0, 0xffffffc0, 0x2}, 0x20) getsockname$packet(r0, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001180)={{r0}, 0x800, 0x26, 0x2}) add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) (async) r1 = add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f00000011c0)='user\x00', &(0x7f0000001200)={'syz', 0x2}, &(0x7f0000001240)="983b1d04c42583ef7d36f1c3cd4c7a19778eccbbdd5f26894bb9a00e8fd34ab84737e2178b4f8a873711d945b7b2e41b69d1c223478252006f0e12ec10c0092f1b7102c70303ce230f91936c92d1b22b590861774f0cb221d69b6d69fb371ee2b845efe8b20c2de7c9cdfff45d2c015c4970eb7014a1c7ee9bb6c600468d39f47dd07331a72896a726571329c85d8456b66d9948e0722295d1d86925bedb8bcdd7228a8aa51da3efab2a6163c3c19b63985df477da79f1420e0a4d171bea48c72b3f739e8d301bac62431559797c37574d9c", 0xd2, r1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000013c0)=0xe) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001400)={0xd, 0x7, 0x2}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001400)={0xd, 0x7, 0x2}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ff) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ff) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) add_key$fscrypt_provisioning(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0)={0x2, 0x0, @b}, 0x48, r2) prctl$PR_MCE_KILL_GET(0x22) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001540)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001540)) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001580)=""/237) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001580)=""/237) r3 = socket$netlink(0x10, 0x3, 0xa) prctl$PR_MCE_KILL_GET(0x22) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000001680)=0x7, 0x4) socket$netlink(0x10, 0x3, 0xe) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001b80)=[{&(0x7f00000016c0)="4ce204b33f373d688247315742781be6cfbf8347aa107ba8d9034b2f38c080ae588da8006e39a80ce520a7f8b722d93e26c83932892f90a1a8f5d952564cc7f976971ade2004efc2f6d77b09e900b7e7d54bda8ad2397075f2461bd3f4983ee20a1fc15451789b70f53d8bc7dbc3722a2e5140d7bd0432d1c5cbec9f889b39200ad2ae550ff787be5c", 0x89}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="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", 0xfc}, {&(0x7f00000018c0)="489b641f2c27d2464fd55a2ee1a18363af40742252fab318f0e0e654b5fbc137c90a15d9c0f3d6c6b584888ac876fa3923760fcf4b1fe6bf9452e821567158cdc88cfa577892432c6149a2f8e0de63a5bad26211a143cccab680f76100abed1a174b869eb5c367d5b4128842d820c13068e178bd0f92134890933fabd6900d8d4630868d6c55ab0982e653814e9f01059ca0cc488e3a1fc3c85c7ad3c584411d4bcd9e", 0xa3}, {&(0x7f0000001980)="21da899481caf3ac2f5c9cb84951d82975733583d36d3ff2f19c1856c78e4298980a7f3dcabd1c76f2e07740d0553dff19790ddded62e763d398f2654842861aa9e206e14be4ab09827146e077b56cf1bfbdf9c15476e26c881a0b2c4a6eaef28a53a77453ea8bc1c6989cbe327efd4d2bc10945add637cba23a4b848b4ead2433238ee2260227a9930019d329d72d116c7137aac11351a4396d6351c74fa7092419915a1dd5c1de0d91eed35fa8ad878acbebbd26e7443a8660d79d100c8a929612f11df3ce89", 0xc7}, {&(0x7f0000001a80)="6055223851e55857bed7b9df2e20188a58564dd892254e31a51108", 0x1b}, {&(0x7f0000001ac0)="eb37662ac27c313111809568a2459aa53da584509ce644899fc1792e221a13066f8a215ba258f849b17c7e8119e6336df6e8b3e4a190dd0ab60024cc32d7a42fa7280fc1ae06375871df70ad5a4f0b20958854922020ecc2f07c107fc1ace34b586d8a74a172c105e39c16f4aa38e2e76e2abbc238f8ba996255b07792e5317bea998f001912ee6eb4ad611a907a", 0x8e}], 0x7, r2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001c00)=""/56) keyctl$read(0xb, r2, &(0x7f0000001c40)=""/248, 0xf8) (async) keyctl$read(0xb, r2, &(0x7f0000001c40)=""/248, 0xf8) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000001d40)={0x6, 0x92, "713eee97cd30aa690ff077a292884f9181552d52f38ccf7fced9a045eb0789c79e35a14cbf62063daa87f2d871a8ca4b619b25762ee22c27ac0ddb4661815528593b01682599f879e5e3838d325ed65c5bb4c460823a0f745e72ca37618323fe4bf777e6613d2a11535642718f23c5002087d6a7fa581c5f1e668f06c3f107f49d5fc92ca2b022f052469464780968b1bded"}) r4 = accept$netrom(r0, 0x0, &(0x7f0000001e00)) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000001e40)=0xa, &(0x7f0000001e80)=0x4) (async) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000001e40)=0xa, &(0x7f0000001e80)=0x4) prctl$PR_MCE_KILL_GET(0x22) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001f00)={0x1, 0x8, 0x3, &(0x7f0000001ec0)={0x20, "2cd7adf15de626fa574385f27ab30064549cbd30054cca9e0c4e4a1791f68a1cb7"}}) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001f00)={0x1, 0x8, 0x3, &(0x7f0000001ec0)={0x20, "2cd7adf15de626fa574385f27ab30064549cbd30054cca9e0c4e4a1791f68a1cb7"}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x4ed9c000) 6.426854475s ago: executing program 1 (id=1252): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060097b92422f9a30250a30def79e5ddb933b83b8f8f1a0daad1705db386", 0x20) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/109, 0x6d}], 0x2}, 0x1a3) sendmsg$alg(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="287665029622e0126664afba74b14be1f8", 0x11}], 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x50, 0x0, 0x560c, {0x805, 0x5d5}, {0xfffa, 0x2}, @cond=[{0xff6a, 0x1, 0xb619, 0x2, 0x7, 0x6}, {0x5c9, 0x0, 0x0, 0x3, 0x1000, 0xf5c9}]}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.254100489s ago: executing program 3 (id=1254): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x712a, r0}, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000004500)=""/4074, 0x1, 0xfea}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) landlock_restrict_self(r1, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee3, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="604c95"], 0x0, 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r9, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac04, 0xfac04, 0xfac0b, 0xfac0c, 0x2]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40040d0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x0, 0x6, 0x76, {0x76, 0xe, "2b0a822cfbc4c0b47dcf803c65fa95b9a50b92b2a0ec93f95f1d62a0038e29b2ff6098e5a9f611e3cb8f339a8ddf50c91faad5d082a9b76d462e25aec914d6dcfd169d07d95d2364fdd0fc85d91c1c4b01f524fa0e3072417789b6c93b3029ed65c4359502e273d86786fa2374f4775a4ae0a079"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xf0, 0x1, {0x22, 0x112}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x0, 0x3, 0xe, "e99df205d984125b80c7bdd01969"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x1, 0x10, "697647868edc2437895fd2120ea8cd22"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x9}}) openat$cgroup_ro(r0, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) 6.129880142s ago: executing program 5 (id=1256): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x27, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000800)={@local, 0x0}, &(0x7f0000000840)=0x14) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x9, @local}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="de19a4684aa89ee5dad03fe1d14d381ccce2ca24c9414bca34c2e1c5d8f798e2c399681c94de71ecbfd85d2ea0e319f1c56ed5ab09629921eb9dd8cd2c3c", 0x3e}, {&(0x7f00000002c0)="54033db77801e1952163751af5b8def012bdc489169e0a337e87e664c6689c2a15e097ce7fef1e7b732238b665d6027b01a829", 0x33}, {&(0x7f0000000300)="282accbb11389d9014d4d9f6606011cd69b2f3075062c6fb7170b5372ca96bafebfdb4bd96a67206944d079ebf20d2c57740fe10dceb5cc589189a6440a76ae1ceeb4c55769a45441c9037405fa8cb91097edab08401412f131dd157cbc43b600fd5c711116de629a741602224648dbb3e0a9c8bf513d61650225e1a8e5f1b5ecd076cd6a8dc178226ab07", 0x8b}, {&(0x7f00000003c0)="587e42f42bba5bb989d46f37d46588572b9b4b5672b94ea989b386cffa4a39075fafd3c3b5f1771a63742d843549889c5097ab6fffff129cdbe151d5f8b673d8a65455dcdfe92ce8f0457c3ecdd0023332ab01b39464c4e2bde07d11330417e6cbbd305c2cc275fc7a73c582365de7ec0485af68abd2b5a4693bc20d1d8b52f2f2775a2e38fa7feddb2eb7be48a3cb9ea9b856b5853bb858a0588984768061eb845420452f80cd07b101e292e081ecd6b58d951aa4a47a3ece92062d2bee31409d8a7ab24c966723704a1a6a58d063011074d1d7717b52840ecdbb77", 0xdc}, {&(0x7f00000004c0)="99c287a3b06e125dc5d37491ba8fd8531f35c3f9adf088911fd5cc5745a0fac0c9121ae866c0ac2f4a77d62e978da74facc1", 0x32}, {&(0x7f0000000500)="65171374d570ceab5aa6674d6b746897074bea5d1b01afea20aa8bc73d5b954f01", 0x21}, {&(0x7f0000000540)="388dde052aa16511b65f9b0a7a56a2b20eb15cb72dcd01cf73a8d8caebd1dfa8982f2495e3351aaad11885d1f37635121bd9", 0x32}, {&(0x7f0000000580)="58ce593196f2f33ef29b6c945d365fea52f2c55df14587c5d97299bd5a0131e2c895b48b1363f7060626bbfc77610bc1855a44a08a4d7718fa55ae117e499b423a0a77898f889ecd16e5936f4d2bf872774f6cc6d409083cdc5bdf15d10d07d6548e5accc6b5466e5ecf04b3841ff460b93175cf7a27c4dec2dd187f7f3e71ae2b529e49ae84586e05b8d0cc68c299584ef925e4ad03f8bdcc73ede55ee4f2a9e0a12aaae00634bb3746758f936665d8ed501a3eca9006d2ea1955a3e98da003256aa3ae7a4a30a819b8d087c2430f0d440f18827c6532dbf7449b48", 0xdc}, {&(0x7f0000000680)="20b9018070846707e12333b934345d63fc93aa594db69d0484468a697c0867f8fb6b8d46461c6ef78b421fbec5a1a9a6aa155f2d080459a8e4b50dffe1", 0x3d}], 0x9, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x1000}}, @hopopts_2292={{0x50, 0x29, 0x36, {0xa, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x0, 0x1b, '\x00', [@generic={0x53, 0xd2, "26f5ed41ed4baa336b4367972b57da2d252fac00971b7d710904b4f11017d7f26af4b4d83b0c69d1aefaa21a4525aeb37ac7a89d370b427feb8c10e0db213fb4259352cb235ab6bfa9fdbf363bef618e0fa20181246e27225f608c4936bf2c2a512bb84206df8c45187dd3e8616444db7c2955ba6c161967a0ce5037e083149b58ea28b3116daa9062cbea0b4b3f6b6b79d8021c98bb60d94bb4c19e63b9f8baaeb4764375a03bc0758cc95035dc9d889e545bd9a9e8458cbfc60c0d0e84a5a2f813db9c298a84ffd6c65ec7e82615e4e1ac"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ea9}}, @rthdr={{0x78, 0x29, 0x39, {0x2e, 0xc, 0x0, 0x2, 0x0, [@mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1a}}], 0x250}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x18}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000000bc0)=[@rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0xc1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r1}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}], 0x98}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private1, 0x1}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c80)="8748f1df75e6212e5afb784b927731d90a2df4a18da560fa86fc3df7c8a3d75b667d36fb80aaec35ed5e4967ebb8e70806677205df5d8ffb4527fd03849a0d5f4e5f19edd12f521d4430ce3cfde6c60f8ef5290a00f5fecfe3beb85c3ac2f1714274cb81e531219d2a588fad1d0a05f23db6a8146cff7378cfb69a96e19982359bbb56c5cf93e0b4fc92679faa3e2da48b7ccaa67c84da049b054d5016f1189464e6b48477ff2fe37eaac1d8c353c9a6805f99a35d78268469d4bc8d3845a010d2bd5c542f6a05dd1dd6b1875ffdc67dbea460bf715df605bc32f9f3b8868babf0", 0xe1}], 0x1, &(0x7f0000000dc0)}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="797e463589cf43dfe40b62d517deddaef8ac15c220cf73c673cf6482d5c965a85aefaacb1b478f3ac2b887121e2c71dae7045b73525218bf5288f459c8bab046a63bb6ffdfc6bcf58dd8fc01ce5b5c10bdaaf435eea73531b99d", 0x5a}, {&(0x7f0000000e80)="6e888b3f7ad66cfb71a42adb42438c9c6837acd19c8d34c649232a4e1332b4066b7a74218447450e30ddaeeea38401c9dcfd04a4446ebb6dbfeaf8655c8baf7413b3902b265f32cf5fd2235aab21a83cc8f988522eabb84db2492d75de8118ad65899a", 0x63}], 0x2, &(0x7f0000000f40)=[@hoplimit={{0x14}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x84, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x16, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xa, [0x8]}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xf74e, [0x0, 0xfff]}}]}}}], 0xa8}}], 0x4, 0x4080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000040)=0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400000, 0x4a, 0x2}, 0x18) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)={0x0, 0x6, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @broadcast, @broadcast, @local]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 5.679316238s ago: executing program 3 (id=1257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01014e5535bbf34155c74199d30000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000300500020007000000340001800c0001006269747769736500240002800800034000000004080001400000001408000240000000120800064000000002090001007379"], 0x108}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 5.470771138s ago: executing program 3 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) (async) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x6, [0xff, 0x7aa7, 0x10001, 0x9, 0xa0000000000000, 0x5]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100002700010000000000000000006401"], 0x140}}, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async, rerun: 64) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x29) (async, rerun: 32) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x4, 0x5, 0xfffffffc, 0xb, 0xfd, "00000816000001f6150000000100", 0x240000, 0x1fd}) (rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x8) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) 5.315574155s ago: executing program 3 (id=1259): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='::.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) tkill(0x0, 0x2) 5.156180894s ago: executing program 5 (id=1261): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) 3.955208099s ago: executing program 0 (id=1263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8018000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) fcntl$addseals(r3, 0x409, 0x2b43439fd6abeb77) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00fdff", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf251c00000008000100", @ANYRES32=0x0, @ANYBLOB="08000400010000000800030004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x8080) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r7, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x143201, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x100000, 0x2000, 0xd, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x5000, 0x9, 0x1, 0x3, 0x7, 0x2, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x1000, 0x25000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x5, 0xfc}, {0x6000, 0x4000, 0xf, 0x2, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x7, 0x6f}, {0x0, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x3, 0x2000, 0xe6e70c00, [0x3, 0x0, 0x7, 0xc5]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000a80)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) ftruncate(r10, 0x472e) write$FUSE_NOTIFY_RESEND(r10, &(0x7f0000000080)={0x14}, 0x14) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r11, @ANYBLOB="000425bd7000fddbdf250a000000080004000000000008000600030000005000028008000400030000800800090006000000080004000180000014000100fe80000000000000000000000000002a06000f000100e30fae3154aadb8730aba9c0fb000006000e004e21000008000800030000000800030003000000480001800800090052000000060001000200000008000600777272000c000700000000000400000008000800060000000600020088000000060002001d000000080005000400000004000180080005005c0700000c000180060002000100000060000380050008000f000000080003000200000014000600fe88000000000000000000000000000106000400030000000600040009000000060007004e24000008000100000000000800030002000000080005000000000008000500ac1414aa14000180060004004e24000008000b007369700008000500dc010000"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = socket(0x10, 0x2, 0x0) write(r12, &(0x7f0000000000)="240000001e005f80004000000000000002000000010081000000080008000100000303ff", 0x24) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0xfd, 0xb, 0xfa, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x2}, {0x9, 0xb, 0x80, '\x00', 0x5}, {0xfa, 0x8, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0x8d, 0xd, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x9, '\x00', 0x5}, {0x7, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x21, 0xe, 0x2, '\x00', 0x55}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0xc0, 0x8, '\x00', 0x5}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x6}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0x5, 0xc0}, {0x6, 0x5, 0x4, '\x00', 0xb}]}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.508101407s ago: executing program 5 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100", @ANYRES32], 0xd8}}, 0x8080) 3.330891228s ago: executing program 3 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x800, 0x7b, 0x1000}}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x30}}, 0x4) 3.3303768s ago: executing program 0 (id=1266): socket$inet6(0xa, 0x6, 0xffffcc87) r0 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x2) ioctl$LOOP_CONFIGURE(r0, 0xc010128e, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e000101000000000000001e08", @ANYRES64], 0x1c}], 0x1, 0x0, 0x0, 0x20000804}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x8, 0x2}], 0x3) 3.326903802s ago: executing program 1 (id=1267): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x0, 0xc, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x100000000) 2.820151203s ago: executing program 34 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x800, 0x7b, 0x1000}}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x30}}, 0x4) 2.774716246s ago: executing program 5 (id=1269): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x1, 0x2, 0x3}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000480)="ce9be92884bdac6fca5dad75fa765f9586a07f35c5436c", 0x17}], 0x2}}], 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r4, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4ac0, 0x40000000, 0x8000, 0x8001, 0x10000, 0x8, 0x0, 0x0, 0x4, 0x3}}, 0x50) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x3f) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) 2.11364215s ago: executing program 0 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x2, 0x7, 0x0, {0x6, 0xc, 0x0, 0xb6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0xfffffffc, 0xf9}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x3, 0x6, 0x0, {0x9, 0xbff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x4, 0x8}}, @NL80211_ATTR_SSID={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0xc00) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x6c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3bba618a473c1bca990373c856"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "100b1c8b5833fa0b0a5101dc6d"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 2.078094856s ago: executing program 1 (id=1271): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1, 0x6, 0x8001) syz_usb_connect(0x5, 0x117, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003b41e5408f8060430e537010203010902050101080910030904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x117, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003b41e5408f8060430e537010203010902050101080910030904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 1.81994147s ago: executing program 0 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="6c050956e8d1e9a8c86d7f2f1d2a4a192207dff24c1d12072f838ace35c1f6ea23689b17d83ea66750767f09fedca848168d0eed3aff5c29679d4eda5e2a32b744ab3df5fc11e2d84b976e02d246033563154f1483ebb6ad7cf72ccf65b5d9a5cee1c0", 0x63}, {&(0x7f0000000340)="b49829c533c53f841f7c9e85a5d9da50b59ee237436f6e442cc9549ce4208e6ed78d67b15754f438daabcc87d9bbd8a081cdee9950a81497c397d05f902bebbd97a10a9c86b3ffc4e7191ce0ffe768520d033411a56c39db49e1ba56e8be7b36171d6777a49defe5bd815f2a504e3af4912dd308c186a2831c9547797cd1d9e20072344dff", 0x85}, {&(0x7f0000000400)="d93315ccb30adb9b0c7244834e718a19296cd7f261737a3f354d123a99c07db3d5780a2bd2496930e2f3", 0x2a}, {&(0x7f0000000440)="fd2c133c9f2e804272696722961be21e1306ffca8083536a46614d98a6ae307b5f3ced8054c431e3baccb34e66a0906bdf65c8ba7dfdd98f3dd413d0eeef0a396878f6db67", 0x45}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="83062f770fbdbc995b6e3a5792c30ffd6e261c46e53e2d91ace51184d2b0c1337252c00beea4ca", 0x27}, {&(0x7f0000000600)="6e8ed8ba333eb7f3864d2b1c84fb0aaca1da7f6877df5149fc8e606ee1d2d7f0a2ba538d97b49d6c5e0dda26ab911375b59e2f9a7e46bf51a142894b98eed40c2fb496617169331f0602525d41639ea7b2c3511766f5d02130420ffacdd9ed95823d24d56663b955b130c176a6fa2f7d0b7d3adeac06eb9e744c0a6cf26967a12066ebe4c8d789dbe1ed1b0a96fac80c37593b935f6dbbe554e2b5b4ee4eeb9067f4b8fc742f", 0xa6}, {&(0x7f00000006c0)="854c2f1eff0c9ef3869b87bfa0b17de63f73434c8823e946e739127de9eb142b0b40a6b20d8bfc593c9b956d9db5d5d8eb685f2342e1ba949aa5ade93553555098a8f2b165eba06c666bcf623e7eb19885ad07d44974caf917849c304586dc992159874b78634e06aa7b590ef7709aad53007982248b768c07a33ae674b8e087d0a2315cd0dc11581bb12ef4dedd98338a343d4f06d463856f753fa435eff201a0a56ca8bf536308419fbe8b5603454bc65de5ca9f2a1afce983ecbc72fc6170bb4b953b4f79d5a30c9f755d83ad4345212dd692efe068f7cc56b2bb3e6d49a30b4ccf7bcbd3dcb3625bb6924205b1", 0xef}, {&(0x7f00000007c0)="9d70fa3e1e1922f6dcc69c7d6f85772326f02d7c347c63af4f2df0250270e45f58c54b6375410e9bd013cdea12cabb90d20e67f58a104396f4ba59e370de289e065d19d9ab5da2bb4dfa6a331c5475bd4fd30f0ce68dd38d752ee8d69eadee8ad5f58ed2d0b7d790c4066453e341db5f01ddbeae2cd9326157bb9165b6813361238ff96015d071ac411c835ce1c4d82930", 0x91}], 0x9}}, {{&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @random="5fcab73f1769"}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)="f9de18c8", 0x4}], 0x1, &(0x7f0000000b00)=[{0xf8, 0x101, 0x101, "e1d54cccf57c52fbcc0dbcf9f0d1292d68123f1c90f69a3729fbef0b512048d867a56496072666d4f97a900f8c2c57e4bd4fd803914ac4cc20c5610bb430e8d3010ea2f1e26b395dd196bdadb29472f0ffddc3ff71a13816b3e746d632315a0652f4c96ff27cec48d7ff6b5f5fd527833c750915f0fc285fcc4435c45efa3235012625100598351bbbb54f88fe0929ac9ebea074db46cf01a5d937c624fa1da9d4022cc656525f5064b7e13923b41fab8900a8f4141244de41a6a691c1c1d913301bf6ba526c0719ded25834cc2d374d72025e8c430d126205b4becc8000893fc4"}], 0xf8}}], 0x2, 0x20) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000ec0)={0x30, r2, 0x81, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xc, 0x5, 0xaa9, 0x1, 0x6, 0xf000, 0x5]}}]}]}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x188280903ea79479}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 1.725021021s ago: executing program 5 (id=1273): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x54, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000000901010000000000000000070000010900010073797a310000000022000540000000153c0002002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14141a0c000280050001"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.591243035s ago: executing program 0 (id=1274): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b}) syz_usb_connect(0x5, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="12011003446b2d1013204f0270e8010216010902120001ff02007f0904307e00013efda4"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="12011003446b2d1013204f0270e8010216010902120001ff02007f0904307e00013efda4"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) 1.154854105s ago: executing program 5 (id=1275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d3320000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000650000000000000000000000000000000000000000228404cd"], 0x138}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbf00cd0600000000000000080003004de9a429caebc536adf109b8c4cf2dde1a5125d324efa1837e28bb491938ec0e4854b761adda2733b588df6d889e05fe5075f4d5bbccf919a4b9144c598cdfbbe4ea9815d008fc20a80a685613829b98d9", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4004) move_mount(r5, 0x0, r4, 0x0, 0x46) write$uinput_user_dev(r4, &(0x7f0000000780)={'syz0\x00', {0x0, 0x0, 0x190}, 0x38, [0x9, 0x8, 0x0, 0x1, 0x5, 0x5, 0x1, 0x7, 0x0, 0x3, 0x6, 0x5e3779b4, 0x9, 0x4, 0xb, 0x2, 0xa, 0x82, 0x4, 0xfffffffa, 0x7fffffff, 0xdd1, 0xee, 0x5, 0xfffffff7, 0x4, 0x34, 0xbf1, 0x6, 0x2f668b, 0x3, 0x6f1ab36f, 0x0, 0x0, 0xc3f, 0x8, 0x7, 0xf, 0x4, 0x2, 0xfffffa66, 0x100, 0x8, 0x7, 0x6, 0x0, 0x0, 0x5, 0x9, 0x4, 0xe4a5, 0x100, 0x1, 0x7, 0xffffffc0, 0x68, 0x9, 0x7, 0xca, 0x5, 0x18000, 0x0, 0x6e1, 0x1e2], [0x1000, 0x1, 0x7, 0x0, 0x5, 0xf, 0x1, 0xa8, 0x35, 0x4, 0x5, 0x1, 0xfffffff8, 0x78000000, 0x428, 0x9, 0x9, 0x6, 0x3, 0x3, 0x2, 0xfff, 0x3, 0x8, 0xfff, 0x7, 0x1067943b, 0xfffffffe, 0x500000, 0x35, 0x100, 0x1, 0x1, 0x0, 0xb, 0x8, 0x776, 0x0, 0x9, 0x3, 0x100, 0x5, 0x8, 0x5, 0x6, 0xd6a7, 0x6, 0x6, 0x6, 0x10000, 0x3, 0x0, 0x3, 0x5, 0xd, 0x9, 0x4, 0x101, 0x9, 0x7, 0x0, 0x8000, 0x1, 0x8], [0x0, 0x9, 0x79d, 0x126e6748, 0x3, 0x8, 0x9, 0xffffffff, 0x9, 0x3, 0x6, 0x0, 0x30ba, 0x1, 0x4, 0x4, 0x10, 0x8, 0x5fed9849, 0x9, 0x4, 0x9, 0x3, 0x10, 0x2, 0x1, 0x5a6a, 0x57, 0x9, 0x2, 0x8f4b, 0x134, 0x5, 0xb, 0x9, 0x8, 0x2, 0x7, 0xb19, 0x0, 0x1, 0xfffffff9, 0x900000, 0x8, 0x4, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x5134, 0x800, 0x6, 0xcaad, 0x3ff, 0x8d6, 0x5, 0x7, 0x3, 0xd, 0x2c3, 0x1200000, 0x8, 0x2], [0x1, 0x4, 0x1, 0xffffffff, 0x400, 0xd3d, 0x0, 0x8, 0x8, 0x7, 0x3, 0x2, 0xe93, 0x8, 0x3, 0x3, 0x5c0, 0x80, 0x4, 0x8, 0x8001, 0x5743, 0x0, 0x5, 0x6e, 0x400000, 0x4, 0x1000, 0x5, 0x7, 0x401, 0xbc9b, 0x5, 0x200, 0x1, 0x9, 0x1, 0x1, 0x401, 0x81, 0x5, 0x5, 0x2, 0x4, 0x5388, 0x8000, 0x2, 0xffffff00, 0x5, 0x9, 0xd9cd, 0xffffffff, 0x401, 0xd, 0xfffff44f, 0x515a, 0x7, 0x2, 0x3, 0xadc, 0x1, 0x20, 0x7, 0x71a7c87f]}, 0x45c) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') getdents64(r10, &(0x7f0000000300)=""/44, 0x2b) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x1, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r11, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) getdents64(r10, &(0x7f0000000380)=""/103, 0x67) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r10], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x6425}}, {0x26, &(0x7f0000000100)=@string={0x26, 0x3, "867516d9e46df0707271be2a7ab695883af2a61b5e5427c6cfeeee077cdf476d704e999f"}}]}) 542.182524ms ago: executing program 1 (id=1276): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x20000851) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000100)) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000500)=@id, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) socket$inet6(0xa, 0x800, 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) syz_usb_control_io$uac1(r2, 0x0, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x20000851) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000100)) (async) socket(0x1e, 0x4, 0x0) (async) connect$tipc(r1, &(0x7f0000000500)=@id, 0x10) (async) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0) (async) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) (async) socket$inet6(0xa, 0x800, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10) (async) 0s ago: executing program 0 (id=1277): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x6c, 0xfffffffc, 0x8, 0xcd, 0x8}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x20e00, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x20e00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00242ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be000000021609660501000000000088a8"], 0x7a) (async) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00242ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be000000021609660501000000000088a8"], 0x7a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x200) listen(r7, 0x18002) (async) listen(r7, 0x18002) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00006002aaaaaaaaaa2aaaaa6450aa2608060018900006000002aaaaaaaaaa34ffffffa60774d1c18d1c694bffffff"], 0x26) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00006002aaaaaaaaaa2aaaaa6450aa2608060018900006000002aaaaaaaaaa34ffffffa60774d1c18d1c694bffffff"], 0x26) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r8 = socket(0x26, 0x6, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f0000000140)=0x2) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0xc, 0x6, 0x3, 0x4, 0x205, 0xcc9, 0xf, 0x5, 0x0, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000000, 0x2, 0xcaa7, 0x0, 0x20011e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x7, 0xfffffff8]}) kernel console output (not intermixed with test programs): 629.041104][ T5990] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 629.050316][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.059095][ T5990] usb 2-1: Product: syz [ 629.063748][ T5990] usb 2-1: Manufacturer: syz [ 629.068792][ T5990] usb 2-1: SerialNumber: syz [ 629.088252][ T9736] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 629.590796][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.600963][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.625389][ T123] gspca_stv06xx: I2C: Read error writing address: -71 [ 629.647318][ T123] usb 1-1: USB disconnect, device number 125 [ 630.077364][ T123] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 630.227968][ T123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.238166][ T123] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 630.247196][ T123] usb 1-1: config 1 has no interface number 1 [ 630.253408][ T123] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 630.266374][ T123] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 630.279553][ T123] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.288682][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.297714][ T123] usb 1-1: Product: syz [ 630.301902][ T123] usb 1-1: Manufacturer: syz [ 630.306626][ T123] usb 1-1: SerialNumber: syz [ 630.315472][ T9773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 630.662605][ T9779] support for cryptoloop has been removed. Use dm-crypt instead. [ 631.116402][ T5931] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 631.271171][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 631.280728][ T5931] usb 4-1: config 64 has an invalid interface number: 227 but max is 0 [ 631.289365][ T5931] usb 4-1: config 64 has no interface number 0 [ 631.296542][ T5931] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 631.307409][ T5931] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has an invalid bInterval 226, changing to 4 [ 631.319064][ T5931] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 631.330349][ T5931] usb 4-1: config 64 interface 227 has no altsetting 0 [ 631.341113][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 631.348014][ T5931] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 631.357829][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.370381][ T9786] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 631.380893][ T5931] imon_raw 4-1:64.227: IR endpoint missing [ 631.543883][ T5990] ti_usb_3410_5052 2-1:1.48: TI USB 3410 1 port adapter converter detected [ 631.566584][ T5990] usb 2-1: USB disconnect, device number 8 [ 631.582981][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 631.596033][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 631.601208][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.615702][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.635912][ T9786] program syz.3.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.647926][ T5931] usb 4-1: USB disconnect, device number 104 [ 631.770170][ T9790] fuse: Bad value for 'fd' [ 632.036517][ T5931] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 632.186423][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 632.193417][ T5931] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 632.204178][ T5931] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 632.220337][ T5931] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.233000][ T5931] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 632.248983][ T5931] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 632.258641][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.267315][ T5931] usb 2-1: Product: syz [ 632.271721][ T5931] usb 2-1: Manufacturer: syz [ 632.276765][ T5931] usb 2-1: SerialNumber: syz [ 632.292169][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 632.303308][ T5931] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input50 [ 632.516369][ T5931] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 632.536416][ T5931] (id 0x00) [ 632.616461][ T5931] rc_core: IR keymap rc-imon-pad not found [ 632.622563][ T5931] Registered IR keymap rc-empty [ 632.627726][ T5931] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 632.641465][ T9800] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1011'. [ 632.646437][ T5931] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 632.711119][ T5931] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 632.730650][ T5931] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input51 [ 632.757425][ T5931] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:9> initialized [ 633.074231][ T5931] usb 2-1: USB disconnect, device number 9 [ 633.230676][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.246639][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.456395][ T5931] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 633.586533][ T5931] usb 4-1: device descriptor read/64, error -71 [ 633.661497][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 633.671286][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 633.743353][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 633.846409][ T5931] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 633.979155][ T5931] usb 4-1: device descriptor read/64, error -71 [ 634.036399][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 634.087862][ T5931] usb usb4-port1: attempt power cycle [ 634.197159][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 634.206781][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 634.216136][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.224320][ T10] usb 2-1: Product: syz [ 634.228615][ T10] usb 2-1: Manufacturer: syz [ 634.233320][ T10] usb 2-1: SerialNumber: syz [ 634.240321][ T10] usb 2-1: config 0 descriptor?? [ 634.248648][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 634.426410][ T5931] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 634.447163][ T5931] usb 4-1: device descriptor read/8, error -71 [ 634.696474][ T5931] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 634.716912][ T5931] usb 4-1: device descriptor read/8, error -71 [ 634.772190][ T10] gspca_stk1135: reg_w 0x3 err -71 [ 634.779617][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.794669][ T10] gspca_stk1135: Sensor write failed [ 634.800527][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.808971][ T10] gspca_stk1135: Sensor write failed [ 634.814437][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.821551][ T10] gspca_stk1135: Sensor read failed [ 634.828986][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.835466][ T10] gspca_stk1135: Sensor read failed [ 634.836719][ T5931] usb usb4-port1: unable to enumerate USB device [ 634.841580][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 634.869902][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.878154][ T10] gspca_stk1135: Sensor read failed [ 634.883476][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.890498][ T10] gspca_stk1135: Sensor read failed [ 634.895879][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.904439][ T10] gspca_stk1135: Sensor write failed [ 634.913455][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 634.921100][ T10] gspca_stk1135: Sensor write failed [ 634.928146][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 634.940343][ T10] usb 2-1: USB disconnect, device number 10 [ 635.246452][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 635.334420][ T123] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 635.342578][ T123] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 635.413354][ T10] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 635.445455][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.463560][ T10] usb 2-1: config 0 descriptor?? [ 635.477416][ T10] pwc: Samsung MPC-C10 USB webcam detected. [ 635.546593][ T5960] usb 1-1: USB disconnect, device number 126 [ 635.670016][ T9828] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 635.671734][ T10] pwc: send_video_command error -71 [ 635.685357][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 635.695693][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 635.715058][ T10] usb 2-1: USB disconnect, device number 11 [ 635.865739][ T9838] overlayfs: failed lookup in lower (newroot/249, name='file0', err=-40): overlapping layers [ 635.880354][ T9838] overlayfs: failed lookup in lower (newroot/249, name='bus', err=-40): overlapping layers [ 635.894336][ T9838] netlink: 'syz.0.1022': attribute type 5 has an invalid length. [ 635.938177][ T9841] tmpfs: Unknown parameter '0x0000000000000003' [ 635.951100][ T9841] loop3: detected capacity change from 0 to 1 [ 635.963992][ T9841] Dev loop3: unable to read RDB block 1 [ 635.971115][ T9841] loop3: unable to read partition table [ 635.977084][ T9841] loop3: partition table beyond EOD, truncated [ 635.983268][ T9841] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.386480][ T5960] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 636.538765][ T5960] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 636.548695][ T5960] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 636.559554][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 636.570061][ T5960] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 636.581129][ T5960] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 636.593849][ T5960] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 636.603428][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 636.606419][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 636.611897][ T5960] usb 1-1: Product: syz [ 636.623466][ T5960] usb 1-1: Manufacturer: syz [ 636.633332][ T5960] cdc_wdm 1-1:1.0: skipping garbage [ 636.639549][ T5960] cdc_wdm 1-1:1.0: skipping garbage [ 636.648766][ T5960] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 636.654679][ T5960] cdc_wdm 1-1:1.0: Unknown control protocol [ 636.687277][ T123] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 636.746562][ T10] usb 2-1: device descriptor read/64, error -71 [ 636.837434][ T5960] usb 1-1: USB disconnect, device number 127 [ 636.849969][ T123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.864500][ T123] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 636.879013][ T123] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 636.889416][ T123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.900653][ T123] usb 4-1: config 0 descriptor?? [ 636.996513][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 637.126440][ T10] usb 2-1: device descriptor read/64, error -71 [ 637.237544][ T10] usb usb2-port1: attempt power cycle [ 637.312468][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.321505][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.340267][ T123] kovaplus 0003:1E7D:2D50.0024: item fetching failed at offset 2/5 [ 637.348839][ T123] kovaplus 0003:1E7D:2D50.0024: parse failed [ 637.354982][ T123] kovaplus 0003:1E7D:2D50.0024: probe with driver kovaplus failed with error -22 [ 637.486498][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 637.544390][ T123] usb 4-1: USB disconnect, device number 109 [ 637.576510][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 637.597160][ T10] usb 2-1: device descriptor read/8, error -71 [ 637.640115][ T5931] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 637.649337][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.657591][ T5931] usb 1-1: Product: syz [ 637.661855][ T5931] usb 1-1: Manufacturer: syz [ 637.666572][ T5931] usb 1-1: SerialNumber: syz [ 637.673117][ T5931] usb 1-1: config 0 descriptor?? [ 637.846424][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 637.867101][ T10] usb 2-1: device descriptor read/8, error -71 [ 637.881881][ T9848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.890989][ T9848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.903028][ T5931] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 637.913434][ T5931] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 637.921290][ T5931] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 637.933486][ T5931] usb 1-1: USB disconnect, device number 2 [ 637.988160][ T10] usb usb2-port1: unable to enumerate USB device [ 638.132299][ T9861] netlink: zone id is out of range [ 638.137859][ T9861] netlink: zone id is out of range [ 638.144244][ T9861] openvswitch: netlink: Tunnel attr 12 has unexpected len 8 expected 16 [ 638.345200][ T9866] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 638.365599][ T9866] kvm: kvm [9865]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 638.726396][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 638.888219][ T10] usb 1-1: config 12 has an invalid interface number: 145 but max is 0 [ 638.896774][ T10] usb 1-1: config 12 has no interface number 0 [ 638.903001][ T10] usb 1-1: config 12 interface 145 has no altsetting 0 [ 638.912688][ T10] usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=99.32 [ 638.921853][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.930841][ T10] usb 1-1: Product: syz [ 638.935039][ T10] usb 1-1: Manufacturer: syz [ 638.939697][ T10] usb 1-1: SerialNumber: syz [ 639.158981][ T10] plfxlc 1-1:12.145: Firmware Version: 0 [ 639.165686][ T10] plfxlc 1-1:12.145: Unit type is station [ 639.229233][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 639.250180][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 639.446458][ T10] plfxlc 1-1:12.145: vendor command failed (-71) [ 639.452974][ T10] plfxlc 1-1:12.145: FPGA download failed (-22) [ 639.481542][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 639.506776][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 639.554956][ T9884] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1038'. [ 639.557411][ T5931] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 639.589956][ T10] plfxlc 1-1:12.145: pureLifi:Device error [ 639.595796][ T10] plfxlc 1-1:12.145: probe with driver plfxlc failed with error -22 [ 639.610780][ T10] usb 1-1: USB disconnect, device number 3 [ 639.716379][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 639.723188][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 639.738925][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 639.748147][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 639.757315][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.767267][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.776984][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.790084][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 639.799542][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.812309][ T5931] usb 4-1: config 0 descriptor?? [ 639.928749][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 640.028466][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.043211][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.068634][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 640.089710][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 640.093880][ T5931] usb 4-1: USB disconnect, device number 110 [ 640.111170][ T5931] usblp0: removed [ 640.160507][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.169705][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.177828][ T10] usb 1-1: Product: Е [ 640.181928][ T10] usb 1-1: Manufacturer: è…ⶋê½î®ˆì¬–íŒâ˜‚á¦é¦¼æ§‹ê쀷 [ 640.406080][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.420720][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.441414][ T10] cdc_ncm 1-1:1.0: bind() failure [ 640.455153][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 640.462414][ T10] cdc_ncm 1-1:1.1: bind() failure [ 640.477656][ T10] usb 1-1: USB disconnect, device number 4 [ 640.586538][ T5931] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 640.610650][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 640.623126][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 640.740909][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 640.749536][ T5931] usb 4-1: not running at top speed; connect to a high speed hub [ 640.758901][ T5931] usb 4-1: config 1 has an invalid interface number: 23 but max is 0 [ 640.767711][ T5931] usb 4-1: config 1 has no interface number 0 [ 640.774011][ T5931] usb 4-1: config 1 interface 23 has no altsetting 0 [ 640.782439][ T5931] usb 4-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=99.bc [ 640.791550][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.799716][ T5931] usb 4-1: Product: syz [ 640.803895][ T5931] usb 4-1: Manufacturer: syz [ 640.808630][ T5931] usb 4-1: SerialNumber: syz [ 641.022456][ T30] audit: type=1800 audit(1767158686.458:1340): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1043" name="bus" dev="overlay" ino=1394 res=0 errno=0 [ 641.059134][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.074956][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.107963][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.117650][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.138205][ T5931] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 641.165933][ T5931] dvb-usb: bulk message failed: -22 (3/0) [ 641.189945][ T5931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 641.216817][ T5931] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 641.217080][ T9912] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1044'. [ 641.236418][ T5931] usb 4-1: media controller created [ 641.244240][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.269911][ T5931] dvb-usb: bulk message failed: -22 (6/0) [ 641.277249][ T5931] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 641.308616][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 641.341677][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 641.356755][ T5931] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 641.402157][ T5931] usb 4-1: USB disconnect, device number 111 [ 641.488025][ T5931] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 641.506383][ T5958] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 641.567229][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 641.580899][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.590346][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.600715][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.608644][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 641.656397][ T5960] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 641.669913][ T5958] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 641.712728][ T5958] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.732897][ T5958] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 641.768431][ T5958] usb 1-1: config 0 interface 0 has no altsetting 0 [ 641.775111][ T5958] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 641.786632][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 641.801512][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 641.814064][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.837758][ T5958] usb 1-1: config 0 descriptor?? [ 641.843131][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 641.851215][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.864825][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.890503][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.947957][ T5960] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.966411][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.991200][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 642.001173][ T5960] usb 2-1: config 0 descriptor?? [ 642.005670][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.006996][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 642.137852][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 642.139899][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.147666][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 642.232250][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 642.235776][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.242247][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 642.264105][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.279878][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.290815][ T9913] overlayfs: missing 'lowerdir' [ 642.298065][ T9914] overlayfs: missing 'lowerdir' [ 642.308761][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 642.315710][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 642.330617][ T5958] usb 1-1: USB disconnect, device number 5 [ 642.370759][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 642.372440][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.393143][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 642.478215][ T5960] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 642.485481][ T5960] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 642.516400][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 642.522057][ T5960] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0025/input/input54 [ 642.611849][ T5960] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 642.656610][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 642.704627][ T6391] usb 2-1: USB disconnect, device number 16 [ 642.722109][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 642.743014][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 642.753420][ T10] usb 4-1: config 0 has no interface number 0 [ 642.767715][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 642.782734][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 642.805573][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.814017][ T10] usb 4-1: Product: syz [ 642.818686][ T10] usb 4-1: Manufacturer: syz [ 642.823508][ T10] usb 4-1: SerialNumber: syz [ 642.833321][ T10] usb 4-1: config 0 descriptor?? [ 642.843698][ T10] smsc75xx v1.0.0 [ 642.856145][ T5995] bridge_slave_1: left allmulticast mode [ 642.867931][ T5995] bridge_slave_1: left promiscuous mode [ 642.873757][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.900936][ T5995] bridge_slave_0: left allmulticast mode [ 642.906726][ T5995] bridge_slave_0: left promiscuous mode [ 642.912550][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.001255][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.011892][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.039826][ T9937] overlayfs: missing 'lowerdir' [ 643.121535][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.137807][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.149714][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.162309][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.192278][ T5995] dvmrp0 (unregistering): left allmulticast mode [ 643.211900][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.221688][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.242286][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.254458][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.260266][ T5995] team0: Port device geneve0 removed [ 643.289294][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.302429][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.456196][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 643.475811][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 643.512936][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 643.523491][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.524173][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 643.550222][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.563182][ T5995] bond0 (unregistering): Released all slaves [ 643.655795][ T5871] Bluetooth: hci4: command tx timeout [ 643.718548][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.726116][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.734146][ T9917] bridge_slave_0: entered allmulticast mode [ 643.744566][ T9917] bridge_slave_0: entered promiscuous mode [ 643.754996][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.763237][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.773137][ T9917] bridge_slave_1: entered allmulticast mode [ 643.782478][ T9917] bridge_slave_1: entered promiscuous mode [ 643.862613][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.877338][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.993329][ T9917] team0: Port device team_slave_0 added [ 644.008043][ T9917] team0: Port device team_slave_1 added [ 644.096853][ T9965] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 644.112053][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.130317][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.161506][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.212836][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.229277][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.286432][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.375715][ T9917] hsr_slave_0: entered promiscuous mode [ 644.398079][ T9917] hsr_slave_1: entered promiscuous mode [ 644.404868][ T9917] debugfs: 'hsr0' already exists in 'hsr' [ 644.411680][ T9917] Cannot create hsr debugfs directory [ 644.447753][ T123] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 644.626370][ T123] usb 1-1: Using ep0 maxpacket: 32 [ 644.640822][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 644.668080][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 644.697381][ T123] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 644.728173][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.756291][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.770448][ T123] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 644.786562][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.794641][ T123] usb 1-1: Product: syz [ 644.817204][ T123] usb 1-1: Manufacturer: syz [ 644.821886][ T123] usb 1-1: SerialNumber: syz [ 644.842861][ T123] usb 1-1: config 0 descriptor?? [ 644.863794][ T9917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 644.880222][ T123] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input55 [ 644.925150][ T9917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 644.956483][ T9917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 644.995289][ T9917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.292489][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.323155][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 645.336208][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 645.352359][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 645.376506][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 645.387861][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 645.397533][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 645.410282][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 645.421586][ T10] usb 4-1: USB disconnect, device number 112 [ 645.444492][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 645.467915][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 645.477524][ T5960] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 645.477870][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.505241][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.512478][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.591504][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 645.605589][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.612836][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.636743][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 645.646556][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 645.653341][ T5960] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.674481][ T5960] usb 2-1: config 1 has no interface number 1 [ 645.693726][ T5960] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.719788][ T5960] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 645.733717][ T5960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.736404][ T5871] Bluetooth: hci4: command tx timeout [ 645.753920][ T5960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.773469][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.789824][ T5960] usb 2-1: Product: syz [ 645.794075][ T5960] usb 2-1: Manufacturer: syz [ 645.799674][ T5960] usb 2-1: SerialNumber: syz [ 646.036208][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.080173][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.141640][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.157966][ T5995] hsr_slave_0: left promiscuous mode [ 646.173764][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.192073][ T5995] hsr_slave_1: left promiscuous mode [ 646.202172][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.220580][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.220723][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.245794][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.256199][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.264088][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.308459][ T5995] veth1_macvtap: left promiscuous mode [ 646.319806][ T5995] veth0_macvtap: left promiscuous mode [ 646.331271][ T5960] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 646.339150][ T5995] veth1_vlan: left promiscuous mode [ 646.344552][ T5995] veth0_vlan: left promiscuous mode [ 646.354328][ T5960] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 646.447397][ T5931] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 646.512241][ T5960] usb 2-1: USB disconnect, device number 17 [ 646.596329][ T5931] usb 4-1: device descriptor read/64, error -71 [ 646.598337][ T8324] udevd[8324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.643386][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.657709][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.690953][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.711023][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.730227][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.754840][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.780951][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.790982][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.801001][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.811288][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.822379][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.849432][ T5931] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 646.857321][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.879433][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.890396][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.913745][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.942200][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.952679][ T5960] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 646.966643][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 646.977117][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 646.986646][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.009983][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.011705][ T5931] usb 4-1: device descriptor read/64, error -71 [ 647.021354][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.038147][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.049465][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.060111][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.070224][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.079850][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.090223][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.100244][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.109881][ T5960] usb 2-1: device descriptor read/64, error -71 [ 647.116386][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.134453][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.144560][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.154543][ T5931] usb usb4-port1: attempt power cycle [ 647.161745][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.171401][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.196403][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.206140][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.216094][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.243595][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.256446][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.266012][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.278112][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.289038][ T5958] usb 1-1: USB disconnect, device number 6 [ 647.297147][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.324332][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.335476][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.364365][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.379735][ T5960] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 647.411215][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.424515][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.440102][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 647.444034][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.457457][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.476854][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.486824][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.505909][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.506414][ T5931] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 647.515634][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.533103][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 647.540781][ T5960] usb 2-1: device descriptor read/64, error -71 [ 647.547651][ T5931] usb 4-1: device descriptor read/8, error -71 [ 647.573225][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.588307][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.598481][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.608118][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.626457][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.637414][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.656893][ T5960] usb usb2-port1: attempt power cycle [ 647.664857][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.679476][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.690366][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.704594][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.717022][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.733219][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.743289][ T5958] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 647.764762][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.775903][ T5952] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.786189][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.786361][ T5931] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 647.795989][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.813177][ T5871] Bluetooth: hci4: command tx timeout [ 647.835722][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.845833][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.855036][ T5931] usb 4-1: device descriptor read/8, error -71 [ 647.897082][ T5958] usb 1-1: too many configurations: 18, using maximum allowed: 8 [ 647.914671][ T5958] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 647.924309][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.934218][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.948099][ T5958] usb 1-1: Product: syz [ 647.952335][ T5958] usb 1-1: Manufacturer: syz [ 647.957317][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 647.972107][ T5931] usb usb4-port1: unable to enumerate USB device [ 647.973258][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 647.979081][ T5958] usb 1-1: SerialNumber: syz [ 648.005006][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 648.016061][ T5960] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 648.025596][ T5958] usb 1-1: config 0 descriptor?? [ 648.040326][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 648.050781][ T5960] usb 2-1: device descriptor read/8, error -71 [ 648.058726][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 648.075425][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 648.085932][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 648.235186][ T5958] usb 1-1: Firmware version (0.0) predates our first public release. [ 648.244876][ T5958] usb 1-1: Please update to version 0.2 or newer [ 648.261853][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 648.273952][ T3463] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 648.304534][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 648.306477][ T5960] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 648.375313][ T5960] usb 2-1: device descriptor read/8, error -71 [ 648.388145][ T5958] usb 1-1: USB disconnect, device number 7 [ 648.407763][ T9917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.514288][ T5960] usb usb2-port1: unable to enumerate USB device [ 648.896391][ T30] audit: type=1326 audit(1767158694.328:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 648.925075][ T9917] veth0_vlan: entered promiscuous mode [ 648.942341][ T30] audit: type=1326 audit(1767158694.328:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 648.975722][ T9917] veth1_vlan: entered promiscuous mode [ 649.016450][ T30] audit: type=1326 audit(1767158694.378:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016a92b829 code=0x7ffc0000 [ 649.041941][ T30] audit: type=1326 audit(1767158694.378:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 649.069441][ T9917] veth0_macvtap: entered promiscuous mode [ 649.079844][ T9917] veth1_macvtap: entered promiscuous mode [ 649.098343][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.110419][ T30] audit: type=1326 audit(1767158694.378:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 649.136042][ T9917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.149264][ T30] audit: type=1326 audit(1767158694.418:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 649.224464][ T5910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.248589][ T30] audit: type=1326 audit(1767158694.428:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016a92b829 code=0x7ffc0000 [ 649.272477][ T5910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.294386][ T30] audit: type=1326 audit(1767158694.428:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 649.324247][T10079] fuse: Bad value for 'user_id' [ 649.335753][ T5910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.347012][T10079] fuse: Bad value for 'user_id' [ 649.365259][T10079] hpfs: Bad magic ... probably not HPFS [ 649.372658][ T5910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.376377][ T30] audit: type=1326 audit(1767158694.428:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f749 code=0x7ffc0000 [ 649.441005][ T30] audit: type=1326 audit(1767158694.428:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.0.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f016a92b829 code=0x7ffc0000 [ 649.555747][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.575454][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.616341][ T5958] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 649.657878][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.673177][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.780267][ T5958] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 649.800655][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.829387][ T5958] usb 4-1: config 0 descriptor?? [ 649.844468][ T5958] asix 4-1:0.0: probe with driver asix failed with error -22 [ 649.846462][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1046'. [ 649.888408][ T5871] Bluetooth: hci4: command tx timeout [ 650.033624][T10104] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 650.057003][ T5958] usb 4-1: USB disconnect, device number 117 [ 650.070436][T10105] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 650.347020][ T5931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 650.506560][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 650.514917][ T5931] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 650.526003][ T5931] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 650.526548][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 650.539996][ T5931] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.563899][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.577078][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.585229][ T5931] usb 2-1: Product: syz [ 650.589574][ T5931] usb 2-1: Manufacturer: syz [ 650.594197][ T5931] usb 2-1: SerialNumber: syz [ 650.718304][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.730152][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.740798][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 650.750511][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.766740][ T10] usb 6-1: config 0 descriptor?? [ 650.903178][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.916587][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.948391][ T5931] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 650.972998][T10132] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 651.016201][T10132] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.045499][ T5931] usb 2-1: USB disconnect, device number 22 [ 651.065342][T10132] bond0: (slave team0): Enslaving as an active interface with an up link [ 651.184659][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.199506][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.209112][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.216194][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.224573][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.231895][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.240401][ T10] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 651.256928][ T10] arvo 0003:1E7D:30D4.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 651.429274][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'. [ 651.519804][ T5931] usb 6-1: USB disconnect, device number 2 [ 651.696584][ T5958] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 651.861046][ T5958] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 651.885726][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.906354][ T5931] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 651.914128][ T5958] usb 1-1: Product: syz [ 651.919561][ T5958] usb 1-1: Manufacturer: syz [ 651.924779][ T5958] usb 1-1: SerialNumber: syz [ 651.948514][ T5958] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 651.988362][ T5960] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 652.052662][ T5989] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 652.068940][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.084635][ T5931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.097902][ T5931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.108659][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 652.115556][ T5931] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 652.126860][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.147967][ T5931] usb 2-1: config 0 descriptor?? [ 652.158187][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 652.178306][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.190398][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.200833][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.214814][ T5960] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 652.224953][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.250294][ T5960] usb 4-1: config 0 descriptor?? [ 652.369432][T10169] pimreg: entered allmulticast mode [ 652.562671][ T5931] kye 0003:0458:5015.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 652.575337][ T5931] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 652.583540][ T5931] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 652.596017][ T5931] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 652.626511][ T5931] kye 0003:0458:5015.0027: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 652.639488][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.655444][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.666813][ T5931] kye 0003:0458:5015.0027: tablet-enabling feature report not found [ 652.694771][ T5960] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 652.716746][ T5931] kye 0003:0458:5015.0027: tablet enabling failed [ 652.773427][ T5931] usb 2-1: USB disconnect, device number 23 [ 652.783102][ T5960] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0028/input/input57 [ 652.824067][T10179] fido_id[10179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 652.889206][ T5960] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 652.890770][T10159] input: syz1 as /devices/virtual/input/input58 [ 653.087346][ T5989] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 653.101854][ T5989] ath9k_htc: Failed to initialize the device [ 653.142605][ T5989] usb 1-1: ath9k_htc: USB layer deinitialized [ 653.317378][T10189] loop7: detected capacity change from 0 to 7 [ 653.325696][T10189] buffer_io_error: 10 callbacks suppressed [ 653.325714][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.344312][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.354599][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.364373][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.367062][ T5989] usb 1-1: USB disconnect, device number 8 [ 653.374842][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.391478][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.401117][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.413586][T10189] ldm_validate_partition_table(): Disk read failed. [ 653.422089][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.433991][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.442908][T10189] Buffer I/O error on dev loop7, logical block 0, async page read [ 653.454323][T10189] Dev loop7: unable to read RDB block 0 [ 653.462733][T10189] loop7: unable to read partition table [ 653.470970][T10189] loop7: partition table beyond EOD, truncated [ 653.487243][T10189] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 653.546381][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 653.699312][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 653.718247][ T10] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 653.738618][ T10] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 653.747811][ T10] usb 2-1: config 14 descriptor has 1 excess byte, ignoring [ 653.755606][ T10] usb 2-1: config 14 has no interface number 0 [ 653.768615][ T10] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 653.780256][ T10] usb 2-1: config 14 interface 21 has no altsetting 0 [ 653.792132][ T10] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 653.802097][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.811188][ T10] usb 2-1: Product: syz [ 653.815728][ T10] usb 2-1: Manufacturer: syz [ 653.820619][ T10] usb 2-1: SerialNumber: syz [ 653.842240][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 653.856190][T10193] program syz.5.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.940264][T10195] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 654.036391][ T5989] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 654.071875][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.086882][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 654.116984][ T5960] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 654.186628][ T10] usb 2-1: USB disconnect, device number 24 [ 654.260760][ T8324] udevd[8324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.276395][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 654.298360][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.317447][ T5960] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 654.336820][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.352919][ T5960] usb 6-1: config 0 descriptor?? [ 654.731544][T10213] XFS (nullb0): Invalid superblock magic number [ 654.967400][T10224] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 655.052815][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.053219][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.090756][ T5960] usbhid 6-1:0.0: can't add hid device: -71 [ 655.108328][ T5960] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 655.133106][ T5960] usb 6-1: USB disconnect, device number 3 [ 655.163100][T10231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.784662][T10249] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 655.796452][ T5989] usb 4-1: device descriptor read/64, error -71 [ 655.803082][T10249] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1117'. [ 655.813483][T10249] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1117'. [ 655.823609][T10249] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1117'. [ 656.038545][ T5989] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 656.196425][ T123] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 656.207213][ T5989] usb 4-1: device firmware changed [ 656.213850][ T5931] usb 4-1: USB disconnect, device number 118 [ 656.347680][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 656.359581][ T123] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 656.370353][ T123] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 656.377009][ T5931] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 656.379864][ T123] usb 6-1: config 1 has no interface number 1 [ 656.394112][ T123] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 656.407630][ T123] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 656.421719][ T123] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.431456][ T123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.440349][ T123] usb 6-1: Product: syz [ 656.444629][ T123] usb 6-1: Manufacturer: syz [ 656.449992][ T123] usb 6-1: SerialNumber: syz [ 656.459807][T10257] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 656.516392][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 656.525741][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.540288][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.547601][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 656.551311][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 656.559264][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.567292][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.581943][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.599867][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 656.604442][ T10] usb 1-1: config 0 descriptor?? [ 656.616705][ T5931] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 656.629140][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.641691][ T5931] usb 4-1: config 0 descriptor?? [ 656.702604][ T123] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 656.712239][ T123] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 656.799885][ T123] usb 6-1: USB disconnect, device number 4 [ 656.881484][ T8323] udevd[8323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.059249][ T10] savu 0003:1E7D:2D5A.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 657.131016][ T5931] hid_parser_main: 5 callbacks suppressed [ 657.131041][ T5931] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 657.146066][ T5931] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 657.155125][ T5931] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 657.166598][ T5931] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 657.174228][ T5931] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 657.188253][ T5931] input: HID 0955:7214 Haptics as /devices/virtual/input/input59 [ 657.261609][ T5931] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 657.275109][ T5931] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 657.325266][T10243] netlink: 'syz.3.1114': attribute type 2 has an invalid length. [ 657.338205][T10243] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1114'. [ 657.402097][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 657.402116][ T30] audit: type=1326 audit(1767158702.838:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.0.1121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f016a98f749 code=0x0 [ 657.455667][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.479349][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.610396][ T6171] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 657.610785][ T10] usb 4-1: USB disconnect, device number 119 [ 657.623481][ T6171] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 657.655376][ T6171] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 657.736819][ T5931] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 657.899208][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 657.907374][ T5931] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 657.916493][ T5931] usb 6-1: config 4 has no interface number 0 [ 657.922625][ T5931] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.934280][ T5931] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.944848][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 657.955154][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.972391][ T5931] hub 6-1:4.128: USB hub found [ 658.169795][ T5931] hub 6-1:4.128: 2 ports detected [ 658.176078][ T5931] hub 6-1:4.128: Using single TT (err -22) [ 658.298313][T10273] 9pnet_fd: Insufficient options for proto=fd [ 658.506725][ T6171] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 658.572558][T10276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 658.599280][ T5931] usb 6-1: USB disconnect, device number 5 [ 659.183819][T10282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1127'. [ 659.216415][ T5931] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 659.391416][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.414739][ T5931] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 659.436332][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.464757][ T5931] usb 2-1: Product: syz [ 659.471402][ T5931] usb 2-1: Manufacturer: syz [ 659.476060][ T5931] usb 2-1: SerialNumber: syz [ 659.543443][T10293] block device autoloading is deprecated and will be removed. [ 659.723726][T10305] loop6: detected capacity change from 0 to 2640 [ 659.747601][T10305] buffer_io_error: 14 callbacks suppressed [ 659.747618][T10305] Buffer I/O error on dev loop6, logical block 0, async page read [ 659.767423][T10279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.780601][ T5931] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 659.782552][T10305] Buffer I/O error on dev loop6, logical block 0, async page read [ 659.835956][T10308] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 659.845938][T10305] Buffer I/O error on dev loop6, logical block 1, async page read [ 659.855200][T10305] Dev loop6: unable to read RDB block 8 [ 659.862101][T10305] Buffer I/O error on dev loop6, logical block 3, async page read [ 659.872071][T10305] loop6: unable to read partition table [ 659.879880][T10305] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 659.890164][ T9548] Buffer I/O error on dev loop6, logical block 3, async page read [ 659.917668][ T5960] usb 1-1: USB disconnect, device number 9 [ 659.929832][T10312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.980411][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 659.983934][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.006316][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.142206][ T6171] usb 2-1: USB disconnect, device number 25 [ 660.160808][ T6171] usblp1: removed [ 660.396388][ T5960] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 660.439175][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 660.558267][ T5960] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 660.567412][ T5960] usb 1-1: config 0 has no interface number 0 [ 660.573555][ T5960] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 660.589833][ T5960] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 660.601296][ T5960] usb 1-1: config 0 interface 113 has no altsetting 0 [ 660.612634][ T5960] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 660.621342][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 660.626948][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.637602][ T5960] usb 1-1: Product: syz [ 660.641892][ T5960] usb 1-1: Manufacturer: syz [ 660.644662][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 660.648244][ T5960] usb 1-1: SerialNumber: syz [ 660.664420][ T5960] usb 1-1: config 0 descriptor?? [ 660.670649][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.683989][ C1] usb 1-1: NFC: Urb failure (status -71) [ 660.690111][ T10] usb 6-1: Product: syz [ 660.692709][ T5960] usb 1-1: NFC: Unable to get FW version [ 660.701369][ T10] usb 6-1: Manufacturer: syz [ 660.712139][ T10] usb 6-1: SerialNumber: syz [ 660.719118][ T5960] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 660.736481][ T10] usb 6-1: config 0 descriptor?? [ 660.881187][ T5848] usb 1-1: USB disconnect, device number 10 [ 660.975043][T10322] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 660.985647][T10322] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 660.994327][T10322] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 661.089384][T10350] fuse: Bad value for 'fd' [ 661.584772][ T10] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 661.600099][ T10] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 661.609311][ T10] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 661.657148][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 662.286621][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.286633][T10325] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 662.302264][T10325] Bluetooth: hci4: Opcode 0x0406 failed: -110 [ 663.209532][T10325] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 663.255733][ T5931] usb 6-1: USB disconnect, device number 6 [ 663.476416][ T123] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 663.484924][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 663.596475][ T5960] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 663.648784][ T123] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.658569][ T123] usb 2-1: config 0 has no interface number 0 [ 663.665086][ T123] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 663.674832][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.686077][ T123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.694299][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.705570][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 663.716749][ T123] usb 2-1: config 0 descriptor?? [ 663.717933][ T5931] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 663.722243][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.744737][ T123] usb 2-1: selecting invalid altsetting 1 [ 663.751052][ T123] dvb_ttusb_budget: ttusb_init_controller: error [ 663.759590][ T123] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 663.766705][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 663.770435][ T10] usb 1-1: config 0 descriptor?? [ 663.781701][ T5960] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 663.791362][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.799810][ T5960] usb 4-1: Product: syz [ 663.807106][ T5960] usb 4-1: Manufacturer: syz [ 663.813947][ T5960] usb 4-1: SerialNumber: syz [ 663.839809][ T5960] usb 4-1: config 0 descriptor?? [ 663.851615][ T5960] gspca_main: se401-2.14.0 probing 047d:5003 [ 663.884247][ T123] DVB: Unable to find symbol ves1820_attach() [ 663.900501][ T5931] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 663.911808][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 663.924921][ T5931] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 663.939205][ T5931] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 663.945909][ T123] DVB: Unable to find symbol stv0297_attach() [ 663.951334][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.962780][ T123] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 663.979210][ T5931] usb 6-1: Product: syz [ 663.984430][ T123] usb 2-1: USB disconnect, device number 26 [ 663.987296][ T5931] usb 6-1: Manufacturer: syz [ 663.996636][ T5931] usb 6-1: SerialNumber: syz [ 664.006170][ T5931] usb 6-1: config 0 descriptor?? [ 664.013646][T10396] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 664.021859][T10396] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 664.035303][ T5931] usb 6-1: ucan: probing device on interface #0 [ 664.201366][ T10] pyra 0003:1E7D:2CF6.002B: item fetching failed at offset 3/7 [ 664.210212][ T10] pyra 0003:1E7D:2CF6.002B: parse failed [ 664.215970][ T10] pyra 0003:1E7D:2CF6.002B: probe with driver pyra failed with error -22 [ 664.236491][ T5931] usb 6-1: ucan: device protocol version 0 is not supported [ 664.244437][ T5931] usb 6-1: ucan: probe failed; try to update the device firmware [ 664.366387][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 664.438917][ T10] usb 6-1: USB disconnect, device number 7 [ 664.460988][T10394] netlink: 'syz.3.1144': attribute type 2 has an invalid length. [ 664.497629][ T5960] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 664.776472][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 664.961116][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 664.986303][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 664.995506][ T10] usb 2-1: config 1 has no interface number 1 [ 665.001780][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 665.020621][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.033968][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.043510][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.051626][ T10] usb 2-1: Product: syz [ 665.055867][ T10] usb 2-1: Manufacturer: syz [ 665.060625][ T10] usb 2-1: SerialNumber: syz [ 665.131966][T10411] vxcan0: tx address claim with dest, not broadcast [ 665.254646][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.265533][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.332851][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.343320][ T123] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 665.346756][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.476403][ T123] usb 6-1: device descriptor read/64, error -71 [ 665.484932][ T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 665.521733][ T10] usb 2-1: USB disconnect, device number 27 [ 665.544222][ T8290] udevd[8290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.716424][ T123] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 665.846521][ T123] usb 6-1: device descriptor read/64, error -71 [ 665.960640][ T123] usb usb6-port1: attempt power cycle [ 666.221251][ T5960] usb 1-1: USB disconnect, device number 11 [ 666.256911][ T5848] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 666.310096][T10425] kvm: Disabled LAPIC found during irq injection [ 666.317195][ T123] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 666.337309][ T123] usb 6-1: device descriptor read/8, error -71 [ 666.416443][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 666.424906][ T5848] usb 2-1: config 162 has an invalid interface number: 188 but max is 0 [ 666.433489][ T5848] usb 2-1: config 162 has no interface number 0 [ 666.440486][ T5848] usb 2-1: config 162 interface 188 has no altsetting 0 [ 666.450722][ T5848] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=56.74 [ 666.456445][ T5880] Bluetooth: hci4: command 0x0c1a tx timeout [ 666.460099][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.474338][ T5848] usb 2-1: Product: syz [ 666.478688][ T5848] usb 2-1: Manufacturer: syz [ 666.483408][ T5848] usb 2-1: SerialNumber: syz [ 666.576406][ T123] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 666.596988][ T123] usb 6-1: device descriptor read/8, error -71 [ 666.666351][ T5960] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 666.694079][T10422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.704753][T10422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.721695][ T5848] peak_usb 2-1:162.188 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 666.731014][ T123] usb usb6-port1: unable to enumerate USB device [ 666.739966][ T5848] peak_usb 2-1:162.188: unable to read PCAN-USB serial number (err -22) [ 666.787651][ T5848] peak_usb 2-1:162.188: probe with driver peak_usb failed with error -22 [ 666.802602][ T5848] usb 2-1: USB disconnect, device number 28 [ 666.806361][ T5960] usb 1-1: device descriptor read/64, error -71 [ 666.891495][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.901208][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.056462][ T5960] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 667.186402][ T5960] usb 1-1: device descriptor read/64, error -71 [ 667.298802][ T5960] usb usb1-port1: attempt power cycle [ 667.616228][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.633440][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.638424][ T5960] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 667.653056][ T5958] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 667.697365][ T5960] usb 1-1: device descriptor read/8, error -71 [ 667.806659][ T5958] usb 2-1: device descriptor read/64, error -71 [ 667.946493][ T5960] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 667.969370][ T5960] usb 1-1: device descriptor read/8, error -71 [ 668.056357][ T5958] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 668.087127][ T5960] usb usb1-port1: unable to enumerate USB device [ 668.186572][ T5958] usb 2-1: device descriptor read/64, error -71 [ 668.316782][ T5958] usb usb2-port1: attempt power cycle [ 668.445837][T10457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.459474][T10457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.485257][T10457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.497280][T10457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.526581][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 668.687099][ T5958] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 668.707061][ T5958] usb 2-1: device descriptor read/8, error -71 [ 668.956488][ T5958] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 668.997056][ T5958] usb 2-1: device descriptor read/8, error -71 [ 669.108600][ T5958] usb usb2-port1: unable to enumerate USB device [ 669.126774][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 669.215755][T10461] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 670.004804][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.017907][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.026410][ T5958] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 670.179425][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 670.188136][ T5958] usb 1-1: not running at top speed; connect to a high speed hub [ 670.197915][ T5958] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 670.206776][ T5958] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 670.217899][ T5958] usb 1-1: config 4 has no interface number 0 [ 670.228057][ T5958] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 670.237667][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.247021][ T5958] usb 1-1: Product: syz [ 670.251383][ T5958] usb 1-1: Manufacturer: syz [ 670.256662][ T5958] usb 1-1: SerialNumber: syz [ 670.500211][ T5958] uvcvideo 1-1:4.147: Found UVC 0.00 device syz (04f2:b746) [ 670.508464][ T5958] uvcvideo 1-1:4.147: No valid video chain found. [ 670.518161][ T5958] usb 1-1: USB disconnect, device number 16 [ 670.641613][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.650543][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.663180][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.674134][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.696380][ T5848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 670.708290][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.720500][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.846525][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 670.852554][ T5848] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 670.862438][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 670.870465][ T5848] usb 2-1: can't read configurations, error -61 [ 671.033893][ T5848] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 671.198936][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 671.204781][ T5848] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 671.215087][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 671.223217][ T5848] usb 2-1: can't read configurations, error -61 [ 671.230348][ T5848] usb usb2-port1: attempt power cycle [ 671.416440][ T5960] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 671.435399][T10505] fuse: Bad value for 'user_id' [ 671.442043][T10505] fuse: Bad value for 'user_id' [ 671.568337][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.580379][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.586520][ T5848] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 671.591739][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.611769][ T5960] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.621577][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.635453][ T5960] usb 1-1: config 0 descriptor?? [ 671.637027][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 671.647549][ T5848] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 671.666817][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 671.674612][ T5848] usb 2-1: can't read configurations, error -61 [ 671.806923][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 671.812156][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 671.816438][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 671.870299][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 671.889162][ T5848] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 671.909229][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 671.924149][ T5848] usb 2-1: can't read configurations, error -61 [ 671.932109][ T5848] usb usb2-port1: unable to enumerate USB device [ 671.948239][T10514] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 672.068058][ T5960] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 672.358082][T10528] XFS (nullb0): Invalid superblock magic number [ 673.578145][T10545] binder: 10542:10545 ioctl c0306201 200000000640 returned -22 [ 674.119547][ T5848] usb 1-1: USB disconnect, device number 17 [ 674.331371][T10562] syz.1.1189 uses old SIOCAX25GETINFO [ 674.344216][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 674.430650][T10569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1190'. [ 674.447940][T10569] syzkaller0: entered promiscuous mode [ 674.453779][T10569] syzkaller0: entered allmulticast mode [ 674.726621][ T5848] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 674.786404][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 674.876341][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 674.883532][ T5848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 674.892750][ T5848] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 674.903543][ T5848] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 674.915327][ T5848] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 674.925469][ T5848] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 674.938274][ T5848] usb 1-1: config 1 interface 0 has no altsetting 0 [ 674.945019][ T5848] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 674.954541][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.964894][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.978799][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.989283][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.004400][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.006107][ T5848] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 675.031908][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.044341][ T10] usb 2-1: config 0 descriptor?? [ 675.170389][T10582] bpf: Bad value for 'gid' [ 675.253331][ T5848] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 675.284231][ T5848] usb 1-1: USB disconnect, device number 18 [ 675.465790][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.481716][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.489553][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.497242][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.504864][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.512496][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.521562][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.529649][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.537965][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.545450][ T10] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 675.573719][ T10] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 675.748984][ T10] usb 2-1: USB disconnect, device number 37 [ 675.869365][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 675.899302][ T5995] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 675.975980][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.985139][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.016846][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 676.146705][ T5960] usb 1-1: device descriptor read/64, error -71 [ 676.386418][ T5960] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 676.535434][ T5960] usb 1-1: device descriptor read/64, error -71 [ 676.581918][T10613] kAFS: Can only specify source 'none' with -o dyn [ 676.656690][ T5960] usb usb1-port1: attempt power cycle [ 676.696666][ T5931] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 676.743227][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.752834][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.859089][ T5931] usb 2-1: config 4 has an invalid interface number: 64 but max is 0 [ 676.869431][ T5931] usb 2-1: config 4 has no interface number 0 [ 676.878799][ T5931] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 676.889407][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.897921][ T5931] usb 2-1: Product: syz [ 676.902325][ T5931] usb 2-1: Manufacturer: syz [ 676.907234][ T5931] usb 2-1: SerialNumber: syz [ 676.996400][ T5960] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 677.016981][ T5960] usb 1-1: device descriptor read/8, error -71 [ 677.050785][T10632] Can't find a SQUASHFS superblock on nullb0 [ 677.064438][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.077467][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.124638][ T5931] usb 2-1: USB disconnect, device number 38 [ 677.256702][ T5960] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 677.278064][ T5960] usb 1-1: device descriptor read/8, error -71 [ 677.381136][T10658] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1207'. [ 677.389418][ T5960] usb usb1-port1: unable to enumerate USB device [ 677.516539][ T5958] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 677.647711][ T5958] usb 6-1: device descriptor read/64, error -71 [ 677.668474][T10662] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1208'. [ 677.906472][ T5958] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 677.916401][ T5960] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 678.036388][ T5958] usb 6-1: device descriptor read/64, error -71 [ 678.076508][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 678.085963][ T5960] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 678.094486][ T5960] usb 2-1: config 0 has no interface number 0 [ 678.102958][ T5960] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 678.112686][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.120872][ T5960] usb 2-1: Product: syz [ 678.129286][ T5960] usb 2-1: Manufacturer: syz [ 678.134028][ T5960] usb 2-1: SerialNumber: syz [ 678.141152][ T5960] usb 2-1: config 0 descriptor?? [ 678.147318][ T5958] usb usb6-port1: attempt power cycle [ 678.154688][ T5960] mcba_usb 2-1:0.29: Can't find endpoints [ 678.363382][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.374206][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.387652][ T5848] usb 2-1: USB disconnect, device number 39 [ 678.486412][ T5958] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 678.509121][ T5958] usb 6-1: device descriptor read/8, error -71 [ 678.746411][ T5958] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 678.767405][ T5958] usb 6-1: device descriptor read/8, error -71 [ 678.876664][ T5958] usb usb6-port1: unable to enumerate USB device [ 679.093079][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.112629][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.316361][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 679.337733][ T5958] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 679.466377][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 679.474098][ T10] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 679.482840][ T10] usb 1-1: config 0 has no interface number 0 [ 679.489426][ T10] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 679.502309][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 679.509785][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.512638][ T10] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 679.524632][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.542418][ T5958] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 679.545418][ T10] usb 1-1: Product: syz [ 679.555268][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.565283][ T10] usb 1-1: Manufacturer: syz [ 679.570114][ T5958] usb 2-1: config 0 descriptor?? [ 679.588308][ T10] usb 1-1: SerialNumber: syz [ 679.606939][ T10] usb 1-1: config 0 descriptor?? [ 679.612994][T10692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 679.829363][ T10] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 679.837737][ T10] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 679.848852][ T10] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 679.868678][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 679.885777][ T10] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 679.897994][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 679.909216][ T10] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 679.922215][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 679.942693][ T10] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 679.954021][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 679.985005][ T10] usb 1-1: USB disconnect, device number 23 [ 680.008580][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 680.012033][ T5958] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 680.070080][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 680.124391][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 680.142967][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 680.156757][ T10] keyspan 1-1:0.107: device disconnected [ 680.268676][T10759] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.291898][T10755] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1215'. [ 680.306827][ T5958] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 680.567927][T10776] syzkaller1: entered promiscuous mode [ 680.574449][T10776] syzkaller1: entered allmulticast mode [ 680.634008][T10787] vivid-000: ================= START STATUS ================= [ 680.643335][T10787] vivid-000: Test Pattern: 75% Colorbar [ 680.650686][T10787] vivid-000: Fill Percentage of Frame: 100 [ 680.658696][T10787] vivid-000: Horizontal Movement: No Movement [ 680.665387][T10787] vivid-000: Vertical Movement: No Movement [ 680.672405][T10787] vivid-000: OSD Text Mode: All [ 680.677769][T10787] vivid-000: Show Border: true [ 680.683879][T10787] vivid-000: Show Square: false [ 680.688491][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.696839][T10787] vivid-000: Sensor Flipped Horizontally: false [ 680.705545][T10787] vivid-000: Sensor Flipped Vertically: false [ 680.706026][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.712995][T10787] vivid-000: Insert SAV Code in Image: false [ 680.725870][ T5958] cp2112 0003:10C4:EA90.002E: error requesting SMBus config [ 680.735145][T10787] vivid-000: Insert EAV Code in Image: false [ 680.742063][T10787] vivid-000: Insert Video Guard Band: false [ 680.750398][ T5958] cp2112 0003:10C4:EA90.002E: probe with driver cp2112 failed with error -71 [ 680.756420][T10787] vivid-000: Reduced Framerate: [ 680.759433][ T6171] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 680.759455][T10787] false [ 680.771687][ T5958] usb 2-1: USB disconnect, device number 40 [ 680.789773][T10787] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 680.798550][T10787] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 000-0 [ 680.808065][T10787] vivid-000: Enable Capture Cropping: true [ 680.814666][T10787] vivid-000: Enable Capture Composing: true [ 680.821389][T10787] vivid-000: Enable Capture Scaler: true [ 680.827785][ T10] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 680.841359][T10787] vivid-000: Timestamp Source: End of Frame [ 680.848351][T10787] vivid-000: Colorspace: Rec. 709 [ 680.853434][T10787] vivid-000: Transfer Function: Default [ 680.859368][T10787] vivid-000: Y'CbCr Encoding: Default [ 680.864778][T10787] vivid-000: HSV Encoding: Hue 0-179 [ 680.870771][T10787] vivid-000: Quantization: Default [ 680.875951][T10787] vivid-000: Apply Alpha To Red Only: false [ 680.882566][T10787] vivid-000: Standard Aspect Ratio: 4x3 [ 680.888279][T10787] vivid-000: DV Timings Signal Mode: Current DV Timings [ 680.895363][T10787] vivid-000: DV Timings: 640x480p59 inactive [ 680.901547][T10787] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 680.910032][ T6171] usb 1-1: device descriptor read/64, error -71 [ 680.911131][T10787] vivid-000: Maximum EDID Blocks: 2 [ 680.922293][T10787] vivid-000: Limited RGB Range (16-235): true [ 680.929434][T10787] vivid-000: Rx RGB Quantization Range: Automatic [ 680.935947][T10787] vivid-000: Power Present: 0x00000001 [ 680.941710][T10787] tpg source WxH: 1280x720 (Y'CbCr) [ 680.946999][T10787] tpg field: 1 [ 680.950438][T10787] tpg crop: (0,0)/64x64 [ 680.954715][T10787] tpg compose: (0,0)/16x16 [ 680.959375][T10787] tpg colorspace: 3 [ 680.963195][T10787] tpg transfer function: 0/0 [ 680.967878][T10787] tpg Y'CbCr encoding: 0/0 [ 680.972379][T10787] tpg quantization: 0/0 [ 680.976737][T10787] tpg RGB range: 0/1 [ 680.980658][T10787] vivid-000: ================== END STATUS ================== [ 681.008432][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 681.026218][ T10] usb 6-1: config 1 has an invalid interface number: 131 but max is 0 [ 681.030609][T10806] tipc: Trying to set illegal importance in message [ 681.034654][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.034678][ T10] usb 6-1: config 1 has no interface number 0 [ 681.034723][ T10] usb 6-1: config 1 interface 131 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.034744][ T10] usb 6-1: config 1 interface 131 has no altsetting 0 [ 681.085427][ T10] usb 6-1: string descriptor 0 read error: -22 [ 681.099149][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.115499][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.152701][ T10] usb 6-1: bad CDC descriptors [ 681.161442][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 681.174886][ T6171] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 681.306961][ T6171] usb 1-1: device descriptor read/64, error -71 [ 681.359978][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.375711][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.391097][ T5958] usb 6-1: USB disconnect, device number 16 [ 681.417646][ T6171] usb usb1-port1: attempt power cycle [ 681.462161][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.479476][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.776580][ T6171] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 681.807798][ T6171] usb 1-1: device descriptor read/8, error -71 [ 681.827322][ T5958] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 681.914344][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 681.941437][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 681.951446][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 681.961153][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 682.016934][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 682.032468][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 682.065396][ T6171] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 682.083473][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 682.109662][ T5958] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 682.119629][ T6171] usb 1-1: device descriptor read/8, error -71 [ 682.126089][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.137393][ T5958] usb 2-1: Product: syz [ 682.141588][ T5958] usb 2-1: Manufacturer: syz [ 682.146973][ T5958] usb 2-1: SerialNumber: syz [ 682.158151][ T5958] usb 2-1: config 0 descriptor?? [ 682.169882][ T5958] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 682.179837][ T5958] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 682.204275][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 682.219588][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1228'. [ 682.235378][ T6171] usb usb1-port1: unable to enumerate USB device [ 682.329281][T10877] netlink: 'syz.5.1228': attribute type 10 has an invalid length. [ 682.394249][T10877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 682.775828][ T5958] em28xx 2-1:0.0: chip ID is em2710 [ 682.978129][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.987121][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.995891][ T5958] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 683.010301][ T5958] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 683.025378][ T5958] em28xx 2-1:0.0: No AC97 audio processor [ 683.061127][T10891] 9p: Bad value for 'rfdno' [ 683.072336][ T5943] Bluetooth: hci0: Frame reassembly failed (-84) [ 683.085085][ T5958] usb 2-1: USB disconnect, device number 41 [ 683.105723][ T5958] em28xx 2-1:0.0: Disconnecting em28xx [ 683.118086][ T5958] em28xx 2-1:0.0: Freeing device [ 683.166694][T10914] KVM: debugfs: duplicate directory 10914-6 [ 683.616362][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.633819][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.701620][T10948] netlink: 'syz.0.1238': attribute type 2 has an invalid length. [ 683.709669][T10948] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 683.718004][ T6171] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 683.723399][T10948] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1238'. [ 683.826389][ T10] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 683.888728][ T6171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.907654][ T6171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.926843][ T6171] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 683.936003][ T6171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.957658][ T6171] usb 6-1: config 0 descriptor?? [ 683.988473][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 684.004265][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 684.034932][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 684.057788][ T10] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 684.067280][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.079370][ T10] usb 2-1: config 0 descriptor?? [ 684.085647][T10938] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 684.373259][ T6171] bigben 0003:146B:0902.002F: unexpected rdesc, please submit for review [ 684.395024][ T6171] bigben 0003:146B:0902.002F: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 684.426695][ T6171] bigben 0003:146B:0902.002F: missing HID_OUTPUT_REPORT 0 [ 684.433861][ T6171] bigben 0003:146B:0902.002F: no output report found [ 684.520204][ T10] megaworld 0003:07B5:0312.0030: hidraw0: USB HID v20.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 684.550548][ T10] megaworld 0003:07B5:0312.0030: no inputs found [ 684.574109][ T6171] usb 6-1: USB disconnect, device number 17 [ 684.688649][T10993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 684.695629][T10993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 684.709639][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.720628][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.752317][ T10] usb 2-1: USB disconnect, device number 42 [ 685.047435][T11012] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 685.086424][ T5871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 685.296799][ T5958] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 685.476340][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 685.485045][ T5958] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 685.499637][ T5958] usb 1-1: config 0 has no interface number 0 [ 685.506586][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 685.546327][ T30] audit: type=1804 audit(1767158730.958:1365): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1247" name="/newroot/324/file1" dev="fuse" ino=1 res=1 errno=0 [ 685.585236][ T30] audit: type=1800 audit(1767158730.958:1366): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1247" name="/" dev="fuse" ino=1 res=0 errno=0 [ 685.609959][ T5958] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 685.626591][ T30] audit: type=1800 audit(1767158730.958:1367): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1247" name="/" dev="fuse" ino=1 res=0 errno=0 [ 685.628135][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.656764][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 685.666341][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 685.666817][ T5958] usb 1-1: Product: syz [ 685.675134][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 685.675641][ T5958] usb 1-1: Manufacturer: syz [ 685.685286][ T10] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 685.714807][ T5958] usb 1-1: SerialNumber: syz [ 685.715520][ T10] usb 6-1: Product: syz [ 685.723995][ T10] usb 6-1: Manufacturer: syz [ 685.729216][ T10] usb 6-1: SerialNumber: syz [ 685.749445][ T10] usb 6-1: config 0 descriptor?? [ 685.761269][ T5958] usb 1-1: config 0 descriptor?? [ 685.765202][ T10] usb 6-1: selecting invalid altsetting 1 [ 685.829137][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.835620][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.881390][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 685.934041][ T9548] udevd[9548]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.967311][ T10] usb 6-1: USB disconnect, device number 18 [ 685.993538][ T5958] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 686.057835][ T5958] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 686.070181][ T5958] uvcvideo 1-1:0.31: Failed to create links for entity 5 [ 686.078027][ T5958] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 686.106648][ T5958] usb 1-1: USB disconnect, device number 28 [ 686.597201][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 686.766441][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 686.773185][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 686.785649][ T10] usb 2-1: config 179 has no interface number 0 [ 686.792041][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 686.803209][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 686.814554][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 686.826671][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 686.838659][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 686.855850][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 686.865246][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.882685][T11090] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 687.179914][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input62 [ 687.359864][T11121] netlink: 'syz.1.1252': attribute type 3 has an invalid length. [ 687.363829][T11133] overlayfs: failed lookup in lower (newroot/358, name='file1', err=-40): overlapping layers [ 687.369293][T11121] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 687.380446][T11132] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1258'. [ 687.387587][T11121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1252'. [ 687.399737][T11132] unsupported nlmsg_type 40 [ 687.404855][T11121] NCSI netlink: No device for ifindex 0 [ 687.616977][ T5958] usb 4-1: USB disconnect, device number 120 [ 687.791883][ T5969] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 687.806591][ T5969] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 687.809303][ T5995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.828993][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 688.019721][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.028913][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 688.031830][ T5995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.059831][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.075956][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 688.078308][ T5910] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 688.087169][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 688.127304][ T10] usb 1-1: Manufacturer: syz [ 688.198658][ T10] usb 1-1: config 0 descriptor?? [ 688.363025][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 688.373368][ T5995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.392283][ T5975] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 688.416392][ T10] rc_core: IR keymap rc-hauppauge not found [ 688.434556][ T10] Registered IR keymap rc-empty [ 688.467880][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 688.550918][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input63 [ 688.589533][ T5969] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 688.602667][ T5995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.646429][ T5969] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 688.677900][ T10] usb 1-1: USB disconnect, device number 29 [ 689.149766][ T5995] bridge_slave_1: left allmulticast mode [ 689.180584][ T5995] bridge_slave_1: left promiscuous mode [ 689.201894][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.267453][ T5995] bridge_slave_0: left allmulticast mode [ 689.296744][ T5995] bridge_slave_0: left promiscuous mode [ 689.303920][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.398600][ T5931] usb 2-1: USB disconnect, device number 43 [ 689.398661][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 689.413053][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 689.471083][ T10] hid_parser_main: 35 callbacks suppressed [ 689.471105][ T10] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 689.548753][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 689.683735][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 689.768507][T11365] fido_id[11365]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 689.811850][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 689.842179][ T5895] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 689.980572][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.022885][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.044290][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.066181][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.128230][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.159499][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.212766][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.242556][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.252434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 690.261449][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.279989][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.360272][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.373591][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.399490][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.407939][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.450466][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.579582][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.589492][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 690.589916][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.610938][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.621313][ T5995] bond0 (unregistering): Released all slaves [ 690.730822][ T5995] tipc: Left network mode [ 690.766804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 690.801786][T11404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.807958][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 690.821113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 690.848263][T11404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.856305][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 690.865820][T11333] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 691.050264][ T3422] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 691.090110][ T6171] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 691.101331][ T3422] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 691.276733][ T6171] usb 2-1: Using ep0 maxpacket: 8 [ 691.288877][ T6171] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.302316][T11435] netlink: 'syz.5.1273': attribute type 5 has an invalid length. [ 691.312989][ T6171] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 691.321491][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1273'. [ 691.342661][ T6171] usb 2-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=37.e5 [ 691.355423][T11435] netlink: 'syz.5.1273': attribute type 1 has an invalid length. [ 691.360512][ T6171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.393614][ T6171] usb 2-1: Product: syz [ 691.405969][ T6171] usb 2-1: Manufacturer: syz [ 691.423977][ T6171] usb 2-1: SerialNumber: syz [ 691.507418][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 691.670808][ T6171] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 691.678674][ T6171] gspca_sonixj: reg_w1 err -71 [ 691.683582][ T6171] sonixj 2-1:8.0: probe with driver sonixj failed with error -71 [ 691.696352][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 691.706163][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.712749][ T6171] usb 2-1: USB disconnect, device number 44 [ 691.805060][ T10] usb 1-1: config 255 has an invalid interface number: 48 but max is 0 [ 691.851454][ T10] usb 1-1: config 255 has no interface number 0 [ 691.871022][ T10] usb 1-1: config 255 interface 48 has no altsetting 0 [ 691.892273][ T10] usb 1-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 691.903190][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=22 [ 691.943321][ T10] usb 1-1: Product: syz [ 691.949754][ T10] usb 1-1: Manufacturer: syz [ 691.954388][ T10] usb 1-1: SerialNumber: syz [ 691.966826][ T5995] hsr_slave_0: left promiscuous mode [ 691.974503][ T5995] hsr_slave_1: left promiscuous mode [ 691.983432][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.991532][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.003411][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.011351][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.039512][ T5995] veth1_macvtap: left promiscuous mode [ 692.045103][ T5995] veth0_macvtap: left promiscuous mode [ 692.051740][ T5995] veth1_vlan: left promiscuous mode [ 692.057262][ T5995] veth0_vlan: left promiscuous mode [ 692.158157][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.173098][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.184751][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.195551][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.215828][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.229501][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.250838][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.270813][ T10] em28xx 1-1:255.48: audio device (2013:024f): interface 48, class 1 [ 692.280715][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.298491][ T3422] netdevice_event(NETDEV_UNREGISTER) on ffff888033c34000 start [ 692.298985][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.316602][ T123] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 692.318252][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.327073][ T10] usb 1-1: USB disconnect, device number 30 [ 692.339443][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.350434][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.364307][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.405479][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.417942][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.428786][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.440523][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 start [ 692.450507][ T123] usb 6-1: device descriptor read/64, error -71 [ 692.457134][ T5943] netdevice_event(NETDEV_UNREGISTER) for ffff88805cb02000 on ffff888033c34000 end [ 692.467948][ T3422] smc: removing ib device syz1 [ 692.546100][ T5880] Bluetooth: hci0: command tx timeout [ 692.630623][ T6171] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 692.691393][ T123] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 692.768767][ T6171] usb 2-1: device descriptor read/64, error -71 [ 692.835662][ T123] usb 6-1: device descriptor read/64, error -71 [ 692.960453][ T123] usb usb6-port1: attempt power cycle [ 693.013933][ T6171] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 693.146649][ T6171] usb 2-1: device descriptor read/64, error -71 [ 693.265210][ T6171] usb usb2-port1: attempt power cycle [ 693.281231][ T6391] ================================================================== [ 693.289331][ T6391] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 693.298128][ T6391] Read of size 8 at addr ffff88805cf9c2e8 by task kworker/0:8/6391 [ 693.306009][ T6391] [ 693.308441][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.308467][ T6391] Tainted: [L]=SOFTLOCKUP [ 693.308474][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.308485][ T6391] Workqueue: events smc_ib_port_event_work [ 693.308519][ T6391] Call Trace: [ 693.308526][ T6391] [ 693.308532][ T6391] dump_stack_lvl+0x189/0x250 [ 693.308550][ T6391] ? rcu_is_watching+0x15/0xb0 [ 693.308566][ T6391] ? __kasan_check_byte+0x12/0x40 [ 693.308582][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.308597][ T6391] ? rcu_is_watching+0x15/0xb0 [ 693.308612][ T6391] ? lock_release+0x4b/0x3b0 [ 693.308635][ T6391] ? __virt_addr_valid+0x1c8/0x5c0 [ 693.308653][ T6391] ? __virt_addr_valid+0x4a5/0x5c0 [ 693.308670][ T6391] print_report+0xca/0x240 [ 693.308688][ T6391] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 693.308710][ T6391] kasan_report+0x118/0x150 [ 693.308727][ T6391] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 693.308751][ T6391] __ethtool_get_link_ksettings+0x5e/0x170 [ 693.308774][ T6391] ib_get_eth_speed+0x15e/0x7c0 [ 693.308796][ T6391] ? ret_from_fork_asm+0x1a/0x30 [ 693.308815][ T6391] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 693.308836][ T6391] ? do_raw_spin_unlock+0x122/0x240 [ 693.308857][ T6391] rxe_query_port+0x93/0x3e0 [ 693.308875][ T6391] ib_query_port+0x170/0x840 [ 693.308895][ T6391] smc_ib_port_event_work+0x15a/0x940 [ 693.308920][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.308937][ T6391] ? process_one_work+0x868/0x15a0 [ 693.308958][ T6391] process_one_work+0x93a/0x15a0 [ 693.308986][ T6391] ? __pfx_process_one_work+0x10/0x10 [ 693.309010][ T6391] ? assign_work+0x3c7/0x5b0 [ 693.309031][ T6391] worker_thread+0x9b0/0xee0 [ 693.309062][ T6391] kthread+0x711/0x8a0 [ 693.309080][ T6391] ? __pfx_worker_thread+0x10/0x10 [ 693.309101][ T6391] ? __pfx_kthread+0x10/0x10 [ 693.309118][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.309132][ T6391] ? lockdep_hardirqs_on+0x98/0x140 [ 693.309148][ T6391] ? __pfx_kthread+0x10/0x10 [ 693.309164][ T6391] ret_from_fork+0x599/0xb30 [ 693.309186][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 693.309210][ T6391] ? __switch_to_asm+0x39/0x70 [ 693.309226][ T6391] ? __switch_to_asm+0x33/0x70 [ 693.309242][ T6391] ? __pfx_kthread+0x10/0x10 [ 693.309258][ T6391] ret_from_fork_asm+0x1a/0x30 [ 693.309282][ T6391] [ 693.309288][ T6391] [ 693.540491][ T6391] Allocated by task 5867: [ 693.544978][ T6391] kasan_save_track+0x3e/0x80 [ 693.549650][ T6391] __kasan_kmalloc+0x93/0xb0 [ 693.554312][ T6391] __kvmalloc_node_noprof+0x5d5/0x920 [ 693.559776][ T6391] alloc_netdev_mqs+0xa8/0x1200 [ 693.564617][ T6391] rtnl_create_link+0x31f/0xcf0 [ 693.569544][ T6391] rtnl_newlink_create+0x25c/0xb00 [ 693.574729][ T6391] rtnl_newlink+0x16e7/0x1c90 [ 693.579393][ T6391] rtnetlink_rcv_msg+0x7cf/0xb70 [ 693.584315][ T6391] netlink_rcv_skb+0x208/0x470 [ 693.589069][ T6391] netlink_unicast+0x82f/0x9e0 [ 693.593843][ T6391] netlink_sendmsg+0x805/0xb30 [ 693.598596][ T6391] sock_sendmsg_nosec+0x18f/0x1d0 [ 693.603611][ T6391] __sys_sendto+0x3ce/0x540 [ 693.608099][ T6391] __x64_sys_sendto+0xde/0x100 [ 693.612938][ T6391] do_syscall_64+0xfa/0xf80 [ 693.617425][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.623310][ T6391] [ 693.625618][ T6391] Freed by task 5995: [ 693.629578][ T6391] kasan_save_track+0x3e/0x80 [ 693.634313][ T6391] kasan_save_free_info+0x46/0x50 [ 693.639328][ T6391] __kasan_slab_free+0x5c/0x80 [ 693.644094][ T6391] kfree+0x1c0/0x660 [ 693.647981][ T6391] device_release+0x9e/0x1d0 [ 693.652576][ T6391] kobject_put+0x228/0x570 [ 693.656994][ T6391] netdev_run_todo+0xf68/0x10d0 [ 693.661843][ T6391] default_device_exit_batch+0x969/0x9e0 [ 693.667470][ T6391] ops_undo_list+0x525/0x990 [ 693.672049][ T6391] cleanup_net+0x4d8/0x7a0 [ 693.676449][ T6391] process_one_work+0x93a/0x15a0 [ 693.681379][ T6391] worker_thread+0x9b0/0xee0 [ 693.685967][ T6391] kthread+0x711/0x8a0 [ 693.690039][ T6391] ret_from_fork+0x599/0xb30 [ 693.694634][ T6391] ret_from_fork_asm+0x1a/0x30 [ 693.699413][ T6391] [ 693.701731][ T6391] The buggy address belongs to the object at ffff88805cf9c000 [ 693.701731][ T6391] which belongs to the cache kmalloc-cg-4k of size 4096 [ 693.716217][ T6391] The buggy address is located 744 bytes inside of [ 693.716217][ T6391] freed 4096-byte region [ffff88805cf9c000, ffff88805cf9d000) [ 693.730105][ T6391] [ 693.732422][ T6391] The buggy address belongs to the physical page: [ 693.738823][ T6391] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cf98 [ 693.747574][ T6391] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 693.756057][ T6391] memcg:ffff888034ac7841 [ 693.760300][ T6391] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 693.767843][ T6391] page_type: f5(slab) [ 693.771814][ T6391] raw: 00fff00000000040 ffff88813fe30500 dead000000000100 dead000000000122 [ 693.780384][ T6391] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888034ac7841 [ 693.788962][ T6391] head: 00fff00000000040 ffff88813fe30500 dead000000000100 dead000000000122 [ 693.797617][ T6391] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888034ac7841 [ 693.806326][ T6391] head: 00fff00000000003 ffffea000173e601 00000000ffffffff 00000000ffffffff [ 693.814985][ T6391] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 693.823642][ T6391] page dumped because: kasan: bad access detected [ 693.830064][ T6391] page_owner tracks the page as allocated [ 693.835773][ T6391] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 351623350761, free_ts 22412042513 [ 693.857220][ T6391] post_alloc_hook+0x234/0x290 [ 693.862040][ T6391] get_page_from_freelist+0x2365/0x2440 [ 693.867594][ T6391] __alloc_frozen_pages_noprof+0x181/0x370 [ 693.873401][ T6391] alloc_pages_mpol+0x232/0x4a0 [ 693.878256][ T6391] allocate_slab+0x86/0x3b0 [ 693.882843][ T6391] ___slab_alloc+0xf2b/0x1960 [ 693.887595][ T6391] __slab_alloc+0x65/0x100 [ 693.892067][ T6391] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 693.898481][ T6391] kmemdup_noprof+0x2b/0x70 [ 693.902977][ T6391] __addrconf_sysctl_register+0x9e/0x4c0 [ 693.908598][ T6391] addrconf_sysctl_register+0x168/0x1c0 [ 693.914133][ T6391] ipv6_add_dev+0xd44/0x13c0 [ 693.918708][ T6391] addrconf_notify+0x771/0x1050 [ 693.923552][ T6391] notifier_call_chain+0x19d/0x3a0 [ 693.928737][ T6391] register_netdevice+0x15bd/0x1a70 [ 693.933959][ T6391] veth_newlink+0x5d4/0xa60 [ 693.938453][ T6391] page last free pid 1 tgid 1 stack trace: [ 693.944268][ T6391] __free_frozen_pages+0xbc8/0xd30 [ 693.949371][ T6391] free_contig_range+0x1bd/0x490 [ 693.954323][ T6391] destroy_args+0x69/0x660 [ 693.958723][ T6391] debug_vm_pgtable+0x38f/0x3a0 [ 693.963565][ T6391] do_one_initcall+0x1fb/0x820 [ 693.968318][ T6391] do_initcall_level+0x104/0x190 [ 693.973244][ T6391] do_initcalls+0x59/0xa0 [ 693.977563][ T6391] kernel_init_freeable+0x334/0x4b0 [ 693.982834][ T6391] kernel_init+0x1d/0x1d0 [ 693.987160][ T6391] ret_from_fork+0x599/0xb30 [ 693.991745][ T6391] ret_from_fork_asm+0x1a/0x30 [ 693.996495][ T6391] [ 693.998807][ T6391] Memory state around the buggy address: [ 694.004423][ T6391] ffff88805cf9c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.012469][ T6391] ffff88805cf9c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.020532][ T6391] >ffff88805cf9c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.028584][ T6391] ^ [ 694.036025][ T6391] ffff88805cf9c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.044595][ T6391] ffff88805cf9c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.052646][ T6391] ================================================================== [ 694.069895][ T123] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 694.085080][ T6391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 694.092316][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.103278][ T6391] Tainted: [L]=SOFTLOCKUP [ 694.107629][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.117788][ T6391] Workqueue: events smc_ib_port_event_work [ 694.123611][ T6391] Call Trace: [ 694.126894][ T6391] [ 694.129822][ T6391] dump_stack_lvl+0x99/0x250 [ 694.134401][ T6391] ? __asan_memcpy+0x40/0x70 [ 694.138985][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.144169][ T6391] ? __pfx__printk+0x10/0x10 [ 694.148845][ T6391] vpanic+0x237/0x6d0 [ 694.152823][ T6391] ? __pfx_vpanic+0x10/0x10 [ 694.157311][ T6391] ? preempt_schedule+0xae/0xc0 [ 694.162144][ T6391] ? __pfx_preempt_schedule+0x10/0x10 [ 694.167509][ T6391] panic+0xb9/0xc0 [ 694.171280][ T6391] ? __pfx_panic+0x10/0x10 [ 694.175729][ T6391] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 694.181626][ T6391] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 694.187614][ T6391] check_panic_on_warn+0x89/0xb0 [ 694.192553][ T6391] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 694.198549][ T6391] end_report+0x6f/0x140 [ 694.202796][ T6391] kasan_report+0x129/0x150 [ 694.207290][ T6391] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 694.213278][ T6391] __ethtool_get_link_ksettings+0x5e/0x170 [ 694.219077][ T6391] ib_get_eth_speed+0x15e/0x7c0 [ 694.223919][ T6391] ? ret_from_fork_asm+0x1a/0x30 [ 694.228847][ T6391] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 694.234242][ T6391] ? do_raw_spin_unlock+0x122/0x240 [ 694.239522][ T6391] rxe_query_port+0x93/0x3e0 [ 694.244135][ T6391] ib_query_port+0x170/0x840 [ 694.248749][ T6391] smc_ib_port_event_work+0x15a/0x940 [ 694.254159][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.259444][ T6391] ? process_one_work+0x868/0x15a0 [ 694.265016][ T6391] process_one_work+0x93a/0x15a0 [ 694.270151][ T6391] ? __pfx_process_one_work+0x10/0x10 [ 694.275610][ T6391] ? assign_work+0x3c7/0x5b0 [ 694.280199][ T6391] worker_thread+0x9b0/0xee0 [ 694.284806][ T6391] kthread+0x711/0x8a0 [ 694.288881][ T6391] ? __pfx_worker_thread+0x10/0x10 [ 694.293993][ T6391] ? __pfx_kthread+0x10/0x10 [ 694.298582][ T6391] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.303766][ T6391] ? lockdep_hardirqs_on+0x98/0x140 [ 694.309037][ T6391] ? __pfx_kthread+0x10/0x10 [ 694.313617][ T6391] ret_from_fork+0x599/0xb30 [ 694.318242][ T6391] ? __pfx_ret_from_fork+0x10/0x10 [ 694.323362][ T6391] ? __switch_to_asm+0x39/0x70 [ 694.328121][ T6391] ? __switch_to_asm+0x33/0x70 [ 694.332876][ T6391] ? __pfx_kthread+0x10/0x10 [ 694.337453][ T6391] ret_from_fork_asm+0x1a/0x30 [ 694.342213][ T6391] [ 694.345655][ T6391] Kernel Offset: disabled [ 694.349965][ T6391] Rebooting in 86400 seconds..