last executing test programs: 1m20.264934807s ago: executing program 1 (id=488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff2, 0x10}, {0xffff, 0xfff1}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m20.120058682s ago: executing program 1 (id=489): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffd) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500280600fe8000000000000007000000000000bbfe8000000500000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200"], 0x0) 1m19.932690161s ago: executing program 1 (id=490): r0 = socket(0x2a, 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=@reiserfs_5={0x14, 0x5, {0x7fff, 0xf, 0x6, 0x8, 0x9}}, 0x1) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0101000000d2000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="0400080105003400c6000000080026006c090000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x82ca}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x40804) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, 0x0) unshare(0x42040200) r9 = io_uring_setup(0x7f6b, &(0x7f0000000500)={0x0, 0x91bc, 0x1, 0x6, 0x5d}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r9, 0x1e, &(0x7f00000003c0), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}]}}]}, 0x3c}}, 0x4000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r10, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40600c4}, 0x4000000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.612853114s ago: executing program 1 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="edb9800000c00f3235000800000f30b9b7020000b815d10000ba000000000f30c744240064000000c744240200000000c7442406000000000f011c2466ba4100ed2e64410faee80f01f866ba610066edc4c1b1febe08000100262ef30f09", 0x5e}], 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000001, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x84, 0x0, &(0x7f0000001200)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x6, 0x4, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc5, 0x19, 0xc7, 0x8, 0x733, 0x430, 0xd70c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xdf, 0x77, 0xd3}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x64, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1m17.795618742s ago: executing program 1 (id=506): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3d10, 0x1, 0xfffffffd, 0x4000}) io_uring_setup(0x1de0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000280)=""/145) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000010000d04040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0001006d6163766c616e0020000280080003000100000008000100100000000a000400aaaa01aaaabb0000140035006d6163766c616e300000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000003800)=ANY=[@ANYBLOB="041300002c00010026bd7000fcdbdf25040000000800180005ac0f00f500098028"], 0x1304}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@remote, @loopback, r12}, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="1352509a3652477ea617f15014c2cbc58d35e14baa7d0afed91ab3b37a18"], 0x44}}, 0x0) 1m14.968078402s ago: executing program 1 (id=518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8) r1 = io_uring_setup(0x2237, &(0x7f00000009c0)={0x0, 0xfffffffb, 0x800, 0x4, 0x8}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x5400, 0x0) 59.612713006s ago: executing program 32 (id=518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8) r1 = io_uring_setup(0x2237, &(0x7f00000009c0)={0x0, 0xfffffffb, 0x800, 0x4, 0x8}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x5400, 0x0) 14.784836558s ago: executing program 4 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) syz_emit_ethernet(0x376, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20e573c3a1000c24000086cbdc508b1d6900385b484a1c458b6013049979655e779112d1f09ef040abd1f8c4f3456c4d7ac6b7be3971b47d50ce8a7326d9eb65627abf7d848bcb89942d83362ab412b30bf970410bb32cb85431bb27e04d722feb06b1704de6214bb05c62ef6a7903443189ff2fc87338"], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.651301248s ago: executing program 4 (id=830): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x100) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000125bd70b7d396d791100e7204"], 0xfffffdea}, 0x1, 0x0, 0x0, 0x24008040}, 0x80) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0xf9, 0xde, 0x50, 0x8, 0x1b3d, 0x1cd, 0x800, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc, 0x190, 0x6, [{{0x9, 0x4, 0x48, 0xfa, 0x0, 0xcc, 0x6a, 0xec, 0x61}}]}}]}}, 0x0) 10.832612867s ago: executing program 3 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x3, 0x3, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000240)=0x1100001, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES8=r2], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000090000002c0004801300010042726f6164636173742d6c696e6b0000140007800800067b525ecd"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3", @ANYRES32], 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000800000001000000ceaa88483aa6c2b36b000000000900000000060015000800000014001680100008800c0001c0050002000900"/65], 0x38}}, 0x20040040) 10.540243697s ago: executing program 2 (id=832): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffd) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500280600fe8000000000000000000000000000bbfe8000000500000000000000080000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200"], 0x0) 10.456565212s ago: executing program 2 (id=833): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "9aac93e7e7246edd6a26b05aa5df61abdde82dba794eb881aed49d0ee0f77e84bb3fd0909552697d8eedad56a2bc2ebf103834d6647ab13c718134dcfdf7ce42", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r0, 0xbe, 0x93}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'hmac(sha1-neon)\x00'}}, &(0x7f00000001c0)="42fcff53cf7a4bf4149132d1f581212a057bfa4f64129b87ca69c7a6c2901f67e6cf25c7db58b319a6fd84b1d64b27c5ac94bed98693dd3a6927c80360ca3fc3dda66d99f2b1cbba4bf4d13c4e6d5940fab312838cf18132806ca1f9115a30d313151449a4e0fbb414cc6cc7537546a30f805f22a41ea6c791ce7ee04c67f99557c01918787f4415e4941f5260a2a712ecfd83f3b24ca8a2bb53f6a8cd9dc376dfd130778954cdd90937e3f826cf384300b1931fa5b2b745a188d2741f7f", &(0x7f0000000280)=""/147) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x7, 0x1, r1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$update(0x2, r2, &(0x7f0000000440)="4aabccb7a21bc3b182fcb717ce94f5773d50ba1e8380d889b8f0635d4cd56cccf18910695eb92f42bd23e966ffdbd929074d3cf2c01a68077342505b3c657f787f21bf03f99d1097364273ef07c4440d307d483d701415132f0250005d65f6e56c0d980bcb50a9ad8e597216d4709ef80b21f7c37f0c1423256995e82e4c6dd943e3c9", 0x83) (async, rerun: 32) keyctl$link(0x8, r1, r0) (rerun: 32) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000500)={r0, 0x63, 0xca}, &(0x7f0000000540)={'enc=', 'raw', ' hash=', {'tgr128\x00'}}, &(0x7f00000005c0)="c75c29025ec88638aa115bf963e4ee2f4b44ecd8ebfbf6a7a117d6fbf1076957ca0fce18a012e746c43fe24fc85911bed17350ca3bf715e61db12d3e5a4dac89c4e77a6380bf5f7710c925b6e10fa00a9003e51a7dfc9f3a28ab1225ce9af782f8c30c", &(0x7f0000000640)=""/202) keyctl$get_security(0x11, r0, &(0x7f0000000740)=""/201, 0xc9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000840)={r1, 0x9a, 0x51}, 0x0, &(0x7f0000000880)="6c524eafab98a76a9482f5444f1d1db265fc6bae930306a9e40b21727aace90795249d8abfd7108d67f5ed8930cbc47bfb03f94e3e6bedf48dccbd9a5b7577ef01f575519cb080df513775a6595c7712cb12290d7002b1c092fd5cb8c660b801ac9cfd219e2fb0837791cec0030aa7a8c12d47b2d6b345d17cb753134832f6fc70fb0c1084238c9e5dec0bf892134c95a9c46ba0cf854627a402", &(0x7f0000000940)=""/81) (async) keyctl$get_keyring_id(0x0, r0, 0x4) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000009c0)={r2, 0x21, 0x1000}, 0x0, &(0x7f0000000a00)="8478f40262992bde24e26245f2e2fbd90c4e171cce5762e0f4afeddf16bbadae7f", &(0x7f0000000a40)=""/4096) (async) keyctl$negate(0xd, r2, 0x6, r1) (async) clock_settime(0x7, &(0x7f0000001a40)={0x0, 0x3938700}) keyctl$get_keyring_id(0x0, r1, 0x2) (async) keyctl$describe(0x6, r2, &(0x7f0000001a80), 0x0) (async, rerun: 32) keyctl$invalidate(0x15, r0) (rerun: 32) keyctl$instantiate(0xc, r2, &(0x7f0000001ac0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'fscrypt:', 0x20, 0x5, 0x20, [0x0]}, 0x33, r0) (async, rerun: 64) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001b00)={r1, 0x1c, 0x1000}, &(0x7f0000001b40)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-generic\x00'}}, &(0x7f0000001bc0)="75727a9436e6febd363c2db8c578a364c10960e5001c7c31eb87e5ef", &(0x7f0000001c00)=""/4096) (async, rerun: 64) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002c00)={r1, 0x1d, 0x66}, 0x0, &(0x7f0000002c40)="b926d3986798aee52dede4aa1696954ceab2c660650e0d686a29aa4f71", &(0x7f0000002c80)=""/102) (async) r3 = syz_open_dev$cec(&(0x7f0000002d00), 0x0, 0x18d202) ioctl$CEC_G_MODE(r3, 0x80046108, &(0x7f0000002d40)) keyctl$read(0xb, 0x0, &(0x7f0000002d80)=""/125, 0x7d) (async) keyctl$setperm(0x5, r1, 0x6042002) keyctl$read(0xb, r2, &(0x7f0000002e00)=""/39, 0x27) keyctl$link(0x8, r1, r2) r4 = add_key$fscrypt_provisioning(&(0x7f0000002e40), &(0x7f0000002e80)={'syz', 0x0}, &(0x7f0000002ec0)={0x0, 0x0, @a}, 0x48, r1) keyctl$instantiate_iov(0x14, r4, &(0x7f0000004380)=[{&(0x7f0000002f40)="0a56ec6404d6ea60b3dfef1038f302cbc7f0354f7f2ee34535585e7072d06929d686023a69046de9027950726f57efd938614577f967611ac8ececfb03e94870018fef7634700fa9cf5b0ac8b048716770e1672a1d791cdb655473ae6c972a40fe1cb32cc174a2ae80dfcc64bf7a03fc1ba42a7d0a015c7c9301fa7eb5cd0a4a1a2fdae5d593570646fdf18b", 0x8c}, {&(0x7f0000003000)="7f0c6fdc9bc48bcc439c622ad3ba130d916dca7c92410a58f3ef6a5fa854c7a7e8b31ac88b75a021279c2fcb498181926844e1c3c0dec05fc0f9bc674e0a748e3bef127699020f41a669a0e16f4e60", 0x4f}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="9e59c76c87fa2d45646e3ca842847ff7f155321de6bcd3deecc8dfdbcd011d5db0e338b67e4be086fe819660047fb74cf5880c70f3d7357b5e9b74f730105605f458fc9de8aeb47c48c7abec03368700ce0a1c7a03ee7494881a0d9cab28b58c9f716450f5df326a6d5defaaa8f3d7dd8fd7e7fd1209cc42d75de204fea1b8bc469b4c42807e085cd7d9a92558a362", 0x8f}, {&(0x7f0000004140)="fb5f86815ea95591289c981dd13a67f5506d911ed7a19c100637d52b705016cb59d637e675a7f0bbee1fb4b5c98a37b1cf453d564cbb84f505eff9e703d722d43fe2f73d9bbdec6ec0b462607259030cd2c94d3ec0b2", 0x56}, {&(0x7f00000041c0)="b58a5986a45560c5bfc12ab2", 0xc}, {&(0x7f0000004200)="84323ff1214b0e139694a9dcff7d7979b7ee2e87283485660fea32d5a6c55f84de77d3b7aeff930cb89d7b236dcf499d4aa1247da286d734d341b3ed127ef006cc3fdfa0b396aa68b7aede268d39fcb5e480118bbc9b21a35bc3567ac20680472e59267ca629489ae5ea9dd4133b9d346405ec46693c0e1d81145c8c9b241699ea5a4b3fde0362fc8f3ef92a5a9db3ac62c6fb49b18ee11360d6525c2d67004435502ac3ee63dc38cb88b5e31bce627ace54aeb2fcbcd558fcbf7969e025130753e240da9b44", 0xc6}, {&(0x7f0000004300)="0444a2044c87b87edec3f1dfdd18915a638055e1055cf6aa02327ada120688fc93ccd5368ea9dd001d12", 0x2a}, {&(0x7f0000004340)="62bb9da88f240b4df70595c6b00e400d0cb1864ba70646d190bf36963c9c607b8a6640789012cfe00cefaafb328d33fee59add1a9afc87d221", 0x39}], 0x9, r1) (async, rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000004440)='rxrpc\x00', &(0x7f0000004480)=@chain={'key_or_keyring:', r2}) (rerun: 64) 10.456164019s ago: executing program 2 (id=834): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.523943664s ago: executing program 3 (id=835): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xa4, 0x69, 0x60, 0x10, 0x602, 0x1001, 0xe904, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xff, 0x7e, 0xd0, 0x7, [{{0x9, 0x4, 0xbe, 0xe, 0x0, 0x87, 0x30, 0x2, 0x4}}, {{0x9, 0x4, 0x89, 0x9, 0x0, 0x31, 0x75, 0xee, 0x8}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}]) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 9.461130136s ago: executing program 2 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="0000000a010000001800120008000100736974000c000200080003003688"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x64403, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4008040) 9.421996344s ago: executing program 2 (id=837): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a4, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00014f0000004f07f9d9855d539b05fbda5947591a8b5930526c8923930e4730e422629a3c5679f3d678"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.608431217s ago: executing program 4 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x2, 0x140142) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x3d, 0x7c, 0xc9, 0x10, 0x61d, 0xc160, 0x8f9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x79, 0x24, 0x2e, 0x0, [], [{{0x9, 0x5, 0x8b, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x5) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265"], 0x48}}, 0x0) 8.156902943s ago: executing program 3 (id=840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xfb8d, 0x2, 0x10000001, 0xffdff7fd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3d, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x81}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RGETLOCK(r8, &(0x7f0000002380)=ANY=[], 0xffffff6a) tee(r7, r2, 0x8, 0xb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.195803141s ago: executing program 3 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffffc2920102030109021b0001e5000000000904f40001ff027200cd33553f4a09fb8102"], 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) 6.347789592s ago: executing program 2 (id=843): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="010000007c00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000800300"/16], 0x48}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1ba5cd01c161", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0xfffffe95}], 0xa, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)) r6 = io_uring_setup(0x3028, &(0x7f0000000200)={0x0, 0x3a2b, 0x800, 0x1, 0x175, 0x0, r4}) r7 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x10, 0x3, 0x0, 0x0, r6}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e0008001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mkdir(&(0x7f0000000500)='./file0\x00', 0x5d) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f00000000c0)='.\x00', 0xe04) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xed) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x3f, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.430517016s ago: executing program 3 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'bond_slave_1\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563"], 0xffdd) 5.179949332s ago: executing program 4 (id=845): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x3e}, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc, 0x400) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8, 0x7, [0x401, 0x8, 0x0, 0x3, 0x5, 0x2, 0xc]}, &(0x7f0000000100)=0x16) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4, 0x3dd}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000180)={0x1e, 0x1, {0x3, @usage, 0x0, 0x0, 0x6, 0x5, 0xd, 0x100000000, 0x2, @struct={0x8, 0x2}, 0xfffffc00, 0x0, [0x9, 0x2, 0x101, 0x0, 0x7, 0x2]}, {0x10001, @usage, 0x0, 0x6, 0x5, 0x2, 0x6, 0x1, 0xb4, @usage=0xcad, 0x101, 0x200, [0x3, 0x3, 0x6, 0xe, 0x8, 0x6]}, {0x4, @struct={0x6, 0x7}, 0x0, 0x7, 0x10, 0x6, 0xf8, 0x7ff, 0xb, @usage=0xcce5, 0x7fff, 0x2, [0x8, 0x1000, 0x3, 0xffffffffffffff00, 0x10000, 0x5]}, {0x8, 0x8, 0x200}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000580)={0x0, "67ba1c62f59c4a06bbf774ff00864675"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001580)={0x10, 0x0, {0x30e4, @struct={0x800, 0x87e9}, r5, 0x3ff, 0x3, 0x2, 0x4, 0x1, 0x68, @usage=0x757351d9, 0x8, 0x3, [0x7, 0x6, 0x9, 0xf32, 0x5, 0x3]}, {0x0, @struct={0x1, 0x2}, r6, 0x100000001, 0x67e4, 0xd, 0x8, 0xe, 0x435, @usage=0x8000000000000001, 0x9, 0x5, [0xe, 0x6, 0x400, 0x2, 0x4, 0x2]}, {0xa, @usage=0x5, 0x0, 0x5, 0x0, 0x2, 0xfc87, 0x1, 0x2, @struct={0x91, 0x5}, 0x7ff, 0x3, [0xb, 0xfffffffffffffffc, 0x5, 0x7, 0x6, 0x15]}, {0x5, 0x800, 0xffffffffffff8001}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001980)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000019c0)={r4, 0xc, 0x0, 0xc, 0x6}, &(0x7f0000001a00)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001a40)={r8, 0x80, 0xfffffffa, 0x9}, &(0x7f0000001a80)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001ac0)={0x0, 0x5, 0x1da, 0x1, r9}, &(0x7f0000001b00)=0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, 0x140c, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x80) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x44) getpeername$inet(r10, &(0x7f0000001d40)={0x2, 0x0, @private}, &(0x7f0000001d80)=0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000002400)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001e40)={0x544, r12, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x5, 0x16, 0x6c, 0x18, 0xc, 0x6c, 0x27, 0x12, 0xc, 0x9, 0x3, 0x1b, 0xc, 0x3, 0xc, 0x5, 0x30, 0x1b, 0x6, 0x2, 0x3, 0x36, 0x36, 0x6]}]}, @NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x5, 0x1b, 0x36, 0x3, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x2, 0x2}, {0x3}, {0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x2}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x3, 0x2}, {0x7, 0x8}, {0x5}, {0x4, 0x8}, {0x6}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x2}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0xa}, {0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x1}, {0x0, 0x5}, {}, {0x1, 0x4}, {0x2, 0x6}, {0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x5}, {0x7}, {0x6}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x6}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x8}, {0x5, 0x2}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x8}, {}, {0x3, 0xa}, {0x3, 0x8}, {0x0, 0x4}, {0x4}, {0x3}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x3}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x9, 0x0, 0x1, 0x8, 0x8, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xbef, 0x200, 0x4, 0xc1, 0x5, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x60, 0x6c, 0x9, 0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4f}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x8000, 0x6, 0x1, 0x40, 0x2, 0x69]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea86, 0x81, 0x2, 0x9, 0x5, 0x101, 0x40, 0xfffd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x4}, {0x5}, {0x6, 0x3}, {0x7, 0x1}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x5}, {0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x1}, {0x7}, {0x2, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x7, 0x4, 0x24, 0x30, 0x3, 0x36, 0x30, 0x18, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x9, 0x6c, 0xc, 0x6, 0x1, 0x6, 0xc, 0x6c, 0x5, 0x5, 0xc, 0x4, 0x2, 0x5, 0x24, 0x1b, 0xc, 0xb, 0x36, 0x6c, 0x2, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x18, 0x3, 0x18, 0x5, 0x18, 0x48, 0x1b, 0x2, 0x1, 0x30, 0x6c, 0x12, 0x6, 0x3, 0x48, 0x4, 0x9, 0x5, 0x30, 0x6c, 0x16, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xee, 0x4, 0x6, 0x1, 0x3, 0xc, 0xe591, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xffe2, 0x95, 0xa9, 0x8a3, 0x400, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x1, 0x10, 0x18, 0x30, 0x4, 0x18, 0x35, 0x5, 0x16, 0x18]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x4, 0x8, 0x1, 0xf1b3, 0xcf, 0xc]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff9, 0x8, 0x3, 0x8df, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x3}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x4, 0x5, 0x800, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x4, 0x24, 0x36, 0x6, 0x0, 0x0, 0x9, 0x12, 0x30, 0x9, 0x3d, 0x16, 0x0, 0x6c, 0x3, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x3}, {0x7, 0x8}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x4}, {0x5, 0x4}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x4}, {0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x7}, {0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x2, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x5, 0x1, 0x4, 0x2, 0x2, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x3, 0x60, 0x2, 0x4, 0x6, 0xfb5ad9e387690ca1, 0x1f559c2fd158804, 0x3, 0xc, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0x5, 0x401, 0x4, 0x4, 0x2, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xa5c, 0x9c, 0x6, 0x80, 0x4, 0x9]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3c, 0x8, 0x5, 0x3ad, 0x5, 0x9, 0x8000, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x5}, {0x5}, {0x4}, {0x6, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x8}, {0x7, 0x3}, {0x5, 0x8}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x4, 0x7b, 0x4, 0x200, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0xa}]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x4}, {0x4, 0x5}, {0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2}, {}, {0x2, 0xa}, {0x1, 0x3}, {0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x5, 0x10}, {0x2, 0x5}, {}, {0x5, 0x2}, {0x1, 0x2}, {0x7}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffa7, 0x0, 0x9, 0x3, 0x5, 0x6, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x30, 0x18, 0x16, 0x48, 0x30, 0x2, 0x6, 0x60, 0x5, 0x1b, 0x5, 0x6c, 0x5, 0x18]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x7a3f12f81e42f6b5}, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002440)={0x4, 0x1ff, 0x2, 0x2, 0x400}) close(0xffffffffffffffff) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002480), 0x4) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f00000024c0)=0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000002500)={{0x0, @empty, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x2, 0x2f}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4e23, 0x1, 0xfffffff9, 0x97, 0xcc13}}, 0x44) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x19) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002580)={0x0, 0x0}) syz_open_procfs(r14, &(0x7f0000002600)='net/ip6_tables_targets\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, 0x3, 0x8, 0x4, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt(r1, 0x5, 0x5, &(0x7f0000002740)="c79f8b3abca951f3d5c5b9ef32691d0ddf8ac2f1245f799e08f4edde95af8c01d3b0b01d189769fa267bb6c9d05df74459028b70a6435665feaa2a48b9c5aaf3b8151292a2f4c558d797694ac5f6bdbe4614e630a3fedeb88459c9e31fbfef54dde293f0fb4214487ba86f7ccc77aa9be0845529eb608fd3a3464cafae19474f5d1d15b7705a55297093eafeecc5887160a9b989914a624e990deaf64790ded88b1d2da369db235fc980bb95f31eb0a5c3ee303687321a686e569e7c006d3eeb", 0xc0) 5.179113537s ago: executing program 3 (id=846): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="95050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @local, 0xff, 0xffffffff, 'vcan0\x00', 'veth1_macvtap\x00', {}, {}, 0xff, 0x0, 0x10}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7f81, 0x0, '\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88}, {0x0, 0x0, 0x9, 0x0, 0xb, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) close(r6) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000005c80)=""/4105, 0x1009}, {0x0}, {0x0}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}], 0x5}, 0x80000000}], 0x4, 0x8060, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x402602, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r7, 0x80044df9, &(0x7f00000001c0)) 5.064779062s ago: executing program 4 (id=847): ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000000)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="9d0048028f6d568fe99f299004000c55", 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="2bcacabbcb3e65579e696503f8e74cbb", 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x45) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='freezer.self_freezing\x00', 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) close(r6) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/clear_refs\x00', 0x1, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000400)={0x2, 0x6c, "c0bf6f50c0a701746b97c8a3e8abf71825d5fcc7d0b082fb1c95fc36c9cac95cb47872ee26fca0acca1eadfa5ba27ee4e91be239a51752b3e6cc4cbba455c2952832b615afe9a7f5df2e16f2a535b1690e0da2d73d6f256953f480c84d682ecce34d6ba13b1faf6f03795bf2"}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000000) listen(r2, 0x8) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000480)=0x20, 0x4) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000500)={0xa3, 0x0, &(0x7f00000004c0)}) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000580)={0x4, r7, 0x2, {0x1, 0x7}}, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000005c0)={0x7, 0x0, [{0x4000009c, 0x0, 0x2}, {0x91c, 0x0, 0x6}, {0xb10, 0x0, 0xfffffffffffffbff}, {0xa6b, 0x0, 0x6}, {0x39a, 0x0, 0x2}, {0xc0011034, 0x0, 0x8}, {0xabb, 0x0, 0x7}]}) syz_usb_connect$cdc_ncm(0x3, 0xb4, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x2, 0x1, 0x5, 0x80, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'pC'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x2a4c, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0xed31, 0x1}, [@obex={0x5, 0x24, 0x15, 0x1000}, @country_functional={0x10, 0x24, 0x7, 0x7, 0x8, [0x6, 0x3, 0x5, 0x6, 0xd]}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x5, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x1, 0x58d, [0x9, 0xfff, 0x3, 0x3ff]}, @acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0xf2, 0xb}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x5, 0x1, 0xfe, 0x40, 0x81}, 0x32, &(0x7f0000000740)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0xcf, 0xd, 0xf14a, 0x62}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xb, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xf00f, 0x68c4, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x6, 0x50, 0x3, 0x2, 0x3, 0x2}]}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x426}}, {0x7c, &(0x7f0000000800)=@string={0x7c, 0x3, "8c1dec5cbd1b7a955f39973379cbbd0c59e028b0353b69b3f37b6f16424b557a12631434245508eed3c6bd2466f35895be1f6c55f17388e672f3e88ac7e3c122788f920a8eb257b2bc3481867b9cfc4c6da03929e092b088aa5276e07b723e668416daac20135a6ba4a8104f7e75cd98a4384d8d3c9c114b6567"}}, {0xd7, &(0x7f0000000880)=@string={0xd7, 0x3, "c5d7214e263b82ee1aa240ca6fa92d60cfb8fc9b0e7fa95bdbaa756521573d61d42c2c09cf25d87ea5ff057e83c3d79f90f6fe11b1a1adf28b5b628461eb6b6be36b115bdf0a5c44f649f65a3fc359b13ff8e73238a26ca343b2e082f6922efea7d75c170519d54a34dd7cda43aa978f2df88828d45ad0d4f14a4d71f285c43876b1215ab41ee40ac30183c905ea2f2465260ce43384cfda2376e737aa8aac850a076d80096161c8926c4a26885611b21037ae4c444c01718418c7bedf8ef911e1614d44b0543918735cc30a4d60accf2cca7fb4a5"}}]}) bind$inet(r8, &(0x7f0000000a00)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x1, &(0x7f0000000a40)=0xb, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000a80)={"22b9825724f8f375f8a9fe06fb8a9b15", 0x0, 0x0, {0x9}, {0x38e19078, 0xfff}, 0x3, [0x6, 0x0, 0x9, 0x3, 0x0, 0x1000, 0x6, 0x6, 0xcf, 0x0, 0x2, 0x4, 0xe, 0xfffffffffffffffd, 0xc79, 0x1ff]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000c00)={{r0}, r11, 0x8, @inherit={0x60, &(0x7f0000000b80)={0x1, 0x3, 0x36, 0x1, {0x0, 0x2, 0x59, 0x6, 0xfffffffffffffff7}, [0x7, 0x7, 0x8000000000000000]}}, @name="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"}) statx(r1, &(0x7f0000001c00)='./file0\x00', 0x0, 0x10, &(0x7f0000001c40)) 2.237875527s ago: executing program 0 (id=854): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="26640f01c90f01c1f0470fc718c7442400e00000fdff2c240f01c91f20e035080000000f22e0c744240081000000ff1c24660f388a660066baa000b8a7a3ffff0f01f8", 0x43}], 0x1, 0x5f, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x1c, 0x68, 0x1, 0x70bd2a, 0x80100000, {0x0, 0x0, 0x2}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x4000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.004101316s ago: executing program 4 (id=855): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240)) ptrace(0x10, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe026}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x6, 0x1, 0x2af, 0xa1e, 0x8, 0x1, 0x3, 0x3, 0x101}, 0x0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) 1.288710467s ago: executing program 0 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00a70000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x38fff, 0x0) r7 = memfd_create(&(0x7f0000000080), 0x0) splice(r5, 0x0, r7, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) renameat2(r5, &(0x7f0000000080)='./bus\x00', r9, &(0x7f0000000280)='./file0\x00', 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000040)={0x200, 0xffffff6a, 0x0, 0x0, 0x0, 0x0, 0x20}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2140, 0x0) 438.178361ms ago: executing program 0 (id=857): write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x20, 0x2, 0x7}}, 0x14) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"e5ba116472453fbb31ace714644fe814", 0x0, 0x0, {0xa50, 0x800}, {0x3, 0x7edc}, 0x0, [0x9, 0xe, 0x3, 0x7, 0x8, 0xff, 0x7f, 0xfffffffffffffffe, 0xe13, 0x9, 0x8, 0x5, 0x8, 0x5, 0x5, 0x3]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"d39bb582ebf2b57762575a742f1e2b2a", r1, r2, {0xfbd, 0x7d}, {0x4, 0x6ea0}, 0x1ff, [0x7, 0xffffffff, 0xffffffffffffffff, 0x1, 0xa, 0x8001, 0x6, 0x7, 0x4, 0xc79, 0x47a9000000, 0x7, 0xe08, 0x7, 0xe2d, 0x5]}) r3 = io_uring_setup(0x798, &(0x7f0000000480)={0x0, 0x5b79, 0x4, 0x1, 0x8c}) r4 = io_uring_setup(0x8e6, &(0x7f0000000500)={0x0, 0xe37b, 0x0, 0x3, 0x9a, 0x0, r3}) socket$can_raw(0x1d, 0x3, 0x1) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x2) sendmsg$nl_route_sched(r5, &(0x7f0000001a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000000600)=@newtaction={0x13bc, 0x30, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{0x1e0, 0x1, [@m_simple={0xf8, 0x7, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffe01, 0x9, 0x10000000, 0x7, 0x3}}]}, {0xb3, 0x6, "897232024b5b95120812bff9d7109af00cbc1c044e13de7b7f2f01051d997a9d4c83a559b74d3eb975e11595faad9a7c7839ecef3070ccc0175ea42791c94e62daf43b4468670df4fb296112318a4a135afa5b8dd30d413837b2a54d71dda5f70a6c81e2c757d6281bce8ae03c8d331e75929e0b7a4b5cb9fea83464ea3324b2722b25acdf6e2a5c8045e0179ad3073c5251485fd33c83448c5debb972047e125bee9e503681fde8df6f4b40ace5a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xe4, 0x13, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x60, 0x6, "aed9f51903f05be0dda429e17611f8860766cf3564afda6abc42ae3f89970e3e8193a3c4fe7d1ef46fc621e42ecad663bd619eb8793de7faf90526609eacd9ed0ae1f1294492e9bdde0e555d17ce35e681cc7215d0d675dc9e6067a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x11c8, 0x1, [@m_skbmod={0x109c, 0x14, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xd7a, 0x6, 0x4, 0x4}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x6, 0x2, 0x7, 0x3}}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x128, 0x19, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf7d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x4, 0x0, 0x5}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2000, 0xfffffe00, 0x6, 0x3, 0xfff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xa9, 0x6, "67d3c6ff19eff93059fdf5395ef95d4031dddf36be920849b94ff7c6608b7cc0fa5cf86891c7638eb32ca33d4fca246a62766727f901f3b7ee63e5daaabb1f0b82b0426d325ddbee947dc816ee2da346ae7ea44af5b0f9a4c654c5b32ed9d35619b3031fd276ce58422d40bdb4c5e05e7e9f47dc6857bfa11e836d731b414381de9e4b749ac0328b0ac82635783af4e88efd00e7d091a8a58be0aaac3aa1cf3e9261fb694f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x40045}, 0x4008091) write$cgroup_freezer_state(r5, &(0x7f0000001a40)='FROZEN\x00', 0x7) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000001a80), 0x541242, 0x0) r7 = signalfd(r6, &(0x7f0000001ac0)={[0x3]}, 0x8) write$cgroup_freezer_state(r5, &(0x7f0000001b00)='FROZEN\x00', 0x7) r8 = accept(r5, &(0x7f0000001b40)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000001bc0)=0x80) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000001c40)='THAWED\x00', 0x7) write$P9_RSETATTR(r7, &(0x7f0000001c80)={0x7, 0x1b, 0x1}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000001d40)={r11, r12+10000000}, &(0x7f0000001d80)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, r13, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xec, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "0ae3bb9c5b11e286f399aa6889553c7a552b416d360a54"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x800c) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f00000020c0)) sendmsg$unix(r5, &(0x7f0000002280)={&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002180)="9f5c258b48db55e0731c18a817b9b973be259bbc27d3211137c804581f474f2539f32e83f3512fb533b26e79138051ee68b0868c1f47361bbefffda118ae29d94caa3356d416e781ecd20b419d0c5072c17ecfee51c186288c3232331631fd6f225a84a20ee10718190b2517b467427ce0a4c4d61423", 0x76}, {&(0x7f0000002200)="2fe2cb1139f7b008295832a4dfbab97ac3dd24fa43", 0x15}], 0x2, 0x0, 0x0, 0x4}, 0x4000800) write$cgroup_freezer_state(r0, &(0x7f00000022c0)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f0000002300)='syz0\x00', 0x1ff) ioctl$sock_SIOCGSKNS(r10, 0x894c, &(0x7f0000002340)=0x7) 395.029488ms ago: executing program 0 (id=858): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x1f, 0x8a, 0x61}, 0x2c) 258.759368ms ago: executing program 0 (id=859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x7, 0x4, 0x1, 0x40, 0x8, 0x83, 0x7, 0x2, 0x8, 0x0, 0x4, 0x5}, 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) 0s ago: executing program 0 (id=860): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x28a, &(0x7f0000000c40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ab4108", 0x254, 0x21, 0x1, @empty, @remote, {[@srh={0x87, 0x8, 0x4, 0x4, 0x3, 0x8, 0x6f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x34}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x1d, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @padn, @calipso={0x7, 0x8, {0x0, 0x0, 0x12, 0x9352}}, @enc_lim={0x4, 0x1, 0x7f}]}, @fragment={0x2b, 0x0, 0xf6, 0x1, 0x0, 0x0, 0x67}, @hopopts={0x1d, 0x22, '\x00', [@ra={0x5, 0x2, 0xfe01}, @generic={0x1, 0x35, "239a33293a13aeb52b84c7fc6241193d0ff7d0338d74e19222c079914da2f4925514e79e7fbd413c09908843104e5dadfaabe037f2"}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x8, 0x35, "da6f23809023bed5a22bf419601476be5c065e7e20b07192a515d0b5c52e2cf883f926ecae1aeb71c1def61871b65e20f0edef97a5"}, @pad1, @generic={0x8, 0x94, "5bdf64a17e26db69a2fc6f7fc4f52dd275c9818c42a40b64bcb263aae9fc3a3e08db0793c3fdb9c7c4a68b4fc6d7ddf82a4028f61be2ef64745d88e6a3b9d719b0344354b48b7e2b31545feb20a3c83ad39f4785c4270809b88f848e5b5a1f3d588e155d60390519a2b0d8161f1962c2cb2623d37cfb1c83700bebefa5f9c1e604c1f3eb88f1bb396a8fefe353c5f1f02402f36c"}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x7, 0x5, "eb1603", 0xcc, "919a5a"}, "2297eb7325eceddd6ab6a472a4bcc7934bb8b3daff999f3be172d613112d7f937b59994fd38849fe188900daa6c55a8e26ab5d3cafbd4a33ca867a5ac2c851d04904b75b5827a5b7f3ddba0c9b530a5945b6cbcf40a4d92810ce1cca22c2870306e45c149b61fbe61217a0a5914e317cff698bd7e3893a3363c8c2bc45745d85c17a00261cccb5b02c752e1c75bb66524da48a7a4b4cc9c371e75158a976affc320caaf2776a857d929ed3fcbdb4f73a500888b5"}}}}}}, 0x0) (async) syz_emit_ethernet(0x28a, &(0x7f0000000c40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ab4108", 0x254, 0x21, 0x1, @empty, @remote, {[@srh={0x87, 0x8, 0x4, 0x4, 0x3, 0x8, 0x6f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x34}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x1d, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @padn, @calipso={0x7, 0x8, {0x0, 0x0, 0x12, 0x9352}}, @enc_lim={0x4, 0x1, 0x7f}]}, @fragment={0x2b, 0x0, 0xf6, 0x1, 0x0, 0x0, 0x67}, @hopopts={0x1d, 0x22, '\x00', [@ra={0x5, 0x2, 0xfe01}, @generic={0x1, 0x35, "239a33293a13aeb52b84c7fc6241193d0ff7d0338d74e19222c079914da2f4925514e79e7fbd413c09908843104e5dadfaabe037f2"}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x8, 0x35, "da6f23809023bed5a22bf419601476be5c065e7e20b07192a515d0b5c52e2cf883f926ecae1aeb71c1def61871b65e20f0edef97a5"}, @pad1, @generic={0x8, 0x94, "5bdf64a17e26db69a2fc6f7fc4f52dd275c9818c42a40b64bcb263aae9fc3a3e08db0793c3fdb9c7c4a68b4fc6d7ddf82a4028f61be2ef64745d88e6a3b9d719b0344354b48b7e2b31545feb20a3c83ad39f4785c4270809b88f848e5b5a1f3d588e155d60390519a2b0d8161f1962c2cb2623d37cfb1c83700bebefa5f9c1e604c1f3eb88f1bb396a8fefe353c5f1f02402f36c"}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x7, 0x5, "eb1603", 0xcc, "919a5a"}, "2297eb7325eceddd6ab6a472a4bcc7934bb8b3daff999f3be172d613112d7f937b59994fd38849fe188900daa6c55a8e26ab5d3cafbd4a33ca867a5ac2c851d04904b75b5827a5b7f3ddba0c9b530a5945b6cbcf40a4d92810ce1cca22c2870306e45c149b61fbe61217a0a5914e317cff698bd7e3893a3363c8c2bc45745d85c17a00261cccb5b02c752e1c75bb66524da48a7a4b4cc9c371e75158a976affc320caaf2776a857d929ed3fcbdb4f73a500888b5"}}}}}}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x3201}], 0x1, 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r6 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_usb_connect(0x4, 0x4b7, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xce, 0x32, 0x65, 0xff, 0x1a8d, 0x1002, 0x80b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a5, 0x2, 0x6, 0x2, 0x20, 0x7, [{{0x9, 0x4, 0xeb, 0x8, 0x7, 0xff, 0xfb, 0xf7, 0x9, [@hid_hid={0x9, 0x21, 0x85e2, 0x8, 0x1, {0x22, 0x25c}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0e6412d6d4ee"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x917, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x1a}, [@country_functional={0x8, 0x24, 0x7, 0x72, 0x7fff, [0x1c]}, @dmm={0x7, 0x24, 0x14, 0x1, 0x1000}, @acm={0x4}]}], [{{0x9, 0x5, 0xb, 0x0, 0x0, 0x8, 0x6, 0xd}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x6, 0x8, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x6, 0xb, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x40}}, {{0x9, 0x5, 0x6, 0x1c, 0x8, 0x2, 0xa, 0x3}}, {{0x9, 0x5, 0x100, 0x0, 0x10, 0x3, 0x4, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0xb1e0}, @generic={0x97, 0xf, "1b388106328fbb97832c039cbd66c6a9e4503a20bfa8c451ce3def9b8a7cbf4435017cd82426f24fcd47ed68fe16a74ccc5d93efcffd28c6409e8652aedb799e270131cff7cd6aca428dc9be916d73ade4cdf929e5ddc98ba2f754d6dcf92342ca09eadb45e2558f0b547b32294adac4edb3ef97e0c99fa69426caee6d933227c05029592d7cc90d4f212d78c7bacb3f46b78d4dd0"}]}}]}}, {{0x9, 0x4, 0x1e, 0xc8, 0x6, 0xef, 0x75, 0x0, 0xa2, [@generic={0xbc, 0xe, "1bfcb0d536d47e407f7fc57e7251adb5f7905f2d077b50fbcfdd798eb358eb2354d338d2ac4cd6b64488a025de53ac4af7c9fff42a6bd0c6967b95a394c08d65765e980663ec97a7836fe3ab49935b3c61a8c46b6df5dd92e8150d1855524c309839c84ed2d6059d2a0504705d19711c752bbcbb24299545f56a4d293e57d4465a2560d96515010e7bf21a17f69ab1888ba8dbaa51bcceea491405be55474e18c2a3fe2b070a425c581c3eea379b8a31d0b815f1c5b9085e5e12"}, @uac_control={{0xa, 0x24, 0x1, 0x4548, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x3, 0xd2, 0x3ff, 0x8, 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x9, 0x4f}]}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}, {{0x9, 0x5, 0x2, 0x11, 0x3ff, 0xff, 0x7, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x98, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3}, @generic={0x9e, 0x37, "bd32c4771c54b76e7a5af09fb8c0dddb7f323a99fef4dc494286f40150dbb40850118561ccaf2c4fa264c0325d78215d341ccdb09024edde186cd867fdd6bca9b800c5e29f90ce4bbe6dac1ced4bc762e7478fe5f4cae6e0f21639c4c9cb8364950bb2ed9915ca398639a59b52ba8773dc93b18c1dee3fa7a50fb5ac5986f6b0871ac53f57c99be9bcc849d096a2f145e8fc67319aa974689d0e5e7f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xb, 0x5, 0x46, [@generic={0xd5, 0x4, "9ec23646d9bc42141272f79b54c5f37a5cda4a4b127292c109e2f3d2baa7a595566959aa308eece2ad2c3cf3b41b8815b8caae0d8038b4deaca829264afb62cc590f6c5b7cdb5e259b13b20f56603161cfc3cda62038f2882bae5538d7c404f84da75bf810777c986f2d79a7cb5637fd558ef938068c83d9fac24a1edb2c833e05d4b31d61f2a5b166fa74ceb02bb3958ca005bbc5de9049f26af28aeb3e1108d0178da06b9481e074294e13104babc8926f3cd8d988ae72cc1c673286abb4194481f6653f9ca4ab07a66b908fcd0401b6e7fe"}, @generic={0xb, 0xf, "8767d5edd2cc10f365"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x8, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9c03}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0xf1, 0xff, 0x3, [@generic={0xcd, 0x31, "c9a1e66ca926572e58532fb2ea65a96e272f28b1b955ccf58fff4b8df21bf32f7e69921bfeb34b6b6cebd5a9bc8e4c32c8168965c111c3da491804142cd3c1224b6e98beeceb04e2220fe790a57385bc6cc924a48b89df1a5b4a570b8ff146488a3086aeafdfc078fb6af62f6e3652aa0ba7e9e918c2ab999332b05a5e6215584d63086c4d2f1f9b4fbf24941b2942365b40b26de57c31bccdc4e34ab72e46a191e3eddc9a6a35d0acfba6613fd68616d4497ddd9356c4592dfc4fdd9506a23a6780856471ab373279403d"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x26, 0x47, 0x614431806170c4d1, 0x3}, 0x2c, &(0x7f00000004c0)={0x5, 0xf, 0x2c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "0bc82bfebe34d34b0ff85fc2d8fd68c1"}, @ssp_cap={0x10, 0x10, 0xa, 0x45, 0x1, 0x2, 0x78f, 0x6, [0x3f00]}, @ptm_cap={0x3}]}, 0x2, [{0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="34030ee81a1f5c7c508dd86702a54f1c0695c8b8b7aa2d790616bdce89642f35f9b92ba5cef107c44446ea9e67e5cdbb5008c7be"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd70f7fbdbb6fa0900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48019}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000c215000008009f0005000000080026000816"], 0x40}}, 0x200040b4) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000c215000008009f0005000000080026000816"], 0x40}}, 0x200040b4) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xb13, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40d1) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xb13, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x40d1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000280)={0x100, r8}, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r12}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r12}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): g=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.085319][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.108968][ T30] audit: type=1326 audit(1742989491.824:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.165684][ T30] audit: type=1326 audit(1742989491.824:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.165764][ T5882] usb usb5-port1: unable to enumerate USB device [ 155.201183][ T7402] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 155.202179][ T30] audit: type=1326 audit(1742989491.824:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.247298][ T7402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.257506][ T30] audit: type=1326 audit(1742989491.824:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.280173][ T30] audit: type=1326 audit(1742989491.824:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 155.306036][ T47] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 155.320157][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.329033][ T47] usb 2-1: Product: syz [ 155.333938][ T47] usb 2-1: Manufacturer: syz [ 155.338576][ T47] usb 2-1: SerialNumber: syz [ 155.357904][ T47] usb 2-1: config 0 descriptor?? [ 155.364861][ T47] ch341 2-1:0.0: ch341-uart converter detected [ 155.671650][ T5882] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 155.678962][ T7419] syz.2.423 uses obsolete (PF_INET,SOCK_PACKET) [ 155.701230][ T7422] loop2: detected capacity change from 0 to 7 [ 155.703028][ T7420] netlink: 80 bytes leftover after parsing attributes in process `syz.2.423'. [ 155.710426][ T7422] Dev loop2: unable to read RDB block 7 [ 155.727282][ T7422] loop2: unable to read partition table [ 155.734590][ T7422] loop2: partition table beyond EOD, truncated [ 155.741055][ T7422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.844234][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.871148][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.885546][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 155.894590][ T5882] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice=40.00 [ 155.906715][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.945372][ T5882] usb 1-1: config 0 descriptor?? [ 156.053183][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 156.082420][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 156.091470][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 156.136268][ T7432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 156.159976][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 156.191528][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 156.366707][ T47] usb 2-1: failed to send control message: -71 [ 156.373815][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 156.377043][ T5882] holtek 0003:1241:5015.0007: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 156.392281][ T47] usb 2-1: USB disconnect, device number 14 [ 156.402876][ T47] ch341 2-1:0.0: device disconnected [ 156.460487][ T5882] holtek 0003:1241:5015.0007: no inputs found [ 156.671341][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.681422][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.803974][ T5882] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 156.843078][ T945] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.962263][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 156.973846][ T5882] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 156.992184][ T5882] usb 5-1: config 0 has no interface number 0 [ 156.998605][ T5882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 157.012284][ T945] usb 3-1: Using ep0 maxpacket: 32 [ 157.031180][ T5882] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.055859][ T945] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 157.065563][ T945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.074392][ T945] usb 3-1: Product: syz [ 157.079194][ T945] usb 3-1: Manufacturer: syz [ 157.084380][ T945] usb 3-1: SerialNumber: syz [ 157.089243][ T5882] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 157.109088][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 157.118017][ T5882] usb 5-1: Product: syz [ 157.123124][ T945] usb 3-1: config 0 descriptor?? [ 157.132772][ T5882] usb 5-1: SerialNumber: syz [ 157.150134][ T5882] usb 5-1: config 0 descriptor?? [ 157.160612][ T5882] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 157.192292][ T2153] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 157.364536][ T47] usb 5-1: USB disconnect, device number 40 [ 157.374603][ T2153] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 157.388738][ T945] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 022 [ 157.418418][ T2153] usb 4-1: string descriptor 0 read error: -71 [ 157.434395][ T2153] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.444389][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.457124][ T2153] usb 4-1: can't set config #1, error -71 [ 157.468963][ T2153] usb 4-1: USB disconnect, device number 29 [ 157.515491][ T7466] bridge0: Device is already in use. [ 157.586875][ T7471] tun0: tun_chr_ioctl cmd 35111 [ 157.615407][ T945] usb 3-1: USB disconnect, device number 22 [ 157.936656][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.097577][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 158.104568][ T5882] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 158.113401][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.123884][ T5882] usb 2-1: config 0 has no interface number 0 [ 158.142468][ T5882] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 158.161969][ T5882] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 158.191745][ T5882] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 158.221732][ T5882] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 158.245403][ T2153] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 158.251613][ T5882] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 158.268437][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.302165][ T5882] usb 2-1: Product: syz [ 158.310242][ T5882] usb 2-1: Manufacturer: syz [ 158.325364][ T5882] usb 2-1: SerialNumber: syz [ 158.348524][ T5882] usb 2-1: config 0 descriptor?? [ 158.422188][ T2153] usb 4-1: Using ep0 maxpacket: 32 [ 158.432909][ T2153] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 158.472319][ T7490] @: renamed from vlan0 [ 158.489077][ T945] usb 1-1: USB disconnect, device number 25 [ 158.534485][ T2153] usb 4-1: config 0 has no interface number 0 [ 158.638193][ T5882] usb 2-1: NFC: intf ffff8880759b1000 id ffffffff8f525c20 [ 158.646796][ T2153] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=b6.d1 [ 158.667237][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.683726][ T5882] usb 2-1: USB disconnect, device number 15 [ 158.691261][ T2153] usb 4-1: Product: syz [ 158.704343][ T2153] usb 4-1: Manufacturer: syz [ 158.723076][ T2153] usb 4-1: SerialNumber: syz [ 158.782645][ T2153] usb 4-1: config 0 descriptor?? [ 158.808373][ T2153] pl2303 4-1:0.160: required interrupt-in endpoint missing [ 158.962202][ T2153] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 159.126164][ T2153] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 159.142295][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.156071][ T2153] usb 1-1: Product: syz [ 159.166158][ T2153] usb 1-1: Manufacturer: syz [ 159.177647][ T2153] usb 1-1: SerialNumber: syz [ 159.200119][ T2153] usb 1-1: config 0 descriptor?? [ 159.213107][ T2153] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 159.458584][ T7507] __nla_validate_parse: 66 callbacks suppressed [ 159.458606][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 159.683119][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 159.822382][ T945] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 159.832718][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 159.840807][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 159.854403][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.867604][ T5882] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 159.877115][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.885390][ T5882] usb 3-1: Product: syz [ 159.889854][ T5882] usb 3-1: Manufacturer: syz [ 159.894875][ T5882] usb 3-1: SerialNumber: syz [ 159.903519][ T5882] usb 3-1: config 0 descriptor?? [ 159.911446][ T5882] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 159.919711][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 159.928187][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 159.939218][ T5882] keyspan 3-1:0.0: unsupported endpoint type 0 [ 159.948216][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 159.958938][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 159.969593][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 159.977574][ T945] usb 2-1: Invalid ep0 maxpacket: 16 [ 159.984066][ T5882] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 159.993697][ T5882] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 160.112131][ T945] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 160.137116][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.145618][ T7518] loop2: detected capacity change from 0 to 7 [ 160.153940][ T7518] Dev loop2: unable to read RDB block 7 [ 160.158473][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.160554][ T7518] loop2: unable to read partition table [ 160.174325][ T7518] loop2: partition table beyond EOD, truncated [ 160.176756][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.181790][ T7518] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.195786][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.266362][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 160.276048][ T945] usb 2-1: Invalid ep0 maxpacket: 16 [ 160.281707][ T945] usb usb2-port1: attempt power cycle [ 160.289442][ T7522] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 160.297959][ T7521] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 160.306758][ T7522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.454'. [ 160.325834][ T7522] team0: Port device geneve0 added [ 160.444998][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.455066][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.468066][ T2153] usb 3-1: USB disconnect, device number 23 [ 160.482505][ T2153] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 160.492828][ T2153] keyspan 3-1:0.0: device disconnected [ 160.622191][ T945] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 160.647145][ T945] usb 2-1: Invalid ep0 maxpacket: 16 [ 160.783662][ T945] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 160.802934][ T945] usb 2-1: Invalid ep0 maxpacket: 16 [ 160.808735][ T945] usb usb2-port1: unable to enumerate USB device [ 161.176776][ T2153] usb 4-1: USB disconnect, device number 30 [ 161.662252][ T2153] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 161.696005][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 161.706465][ T7536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.738315][ T5884] usb 1-1: USB disconnect, device number 26 [ 161.800613][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 161.845923][ T2153] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 161.855604][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.883609][ T2153] usb 4-1: Product: syz [ 161.898105][ T2153] usb 4-1: Manufacturer: syz [ 161.909325][ T2153] usb 4-1: SerialNumber: syz [ 161.919399][ T7542] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 161.929742][ T2153] usb 4-1: config 0 descriptor?? [ 161.947587][ T2153] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 161.965467][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 161.982571][ T2153] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 161.989421][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.017030][ T7542] ip6erspan0: entered promiscuous mode [ 162.055352][ T7542] bond2: (slave ip6erspan0): making interface the new active one [ 162.069740][ T7542] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 162.148053][ T2153] usb 4-1: USB disconnect, device number 31 [ 162.244863][ T5885] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 162.403479][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 162.424006][ T5885] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 162.438616][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 162.451440][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 162.470459][ T5885] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 162.479755][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.498375][ T5885] usb 5-1: config 0 descriptor?? [ 162.572356][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 162.578382][ T5884] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 162.587937][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.597372][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.608398][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.634861][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.650637][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.661399][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.672506][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.681643][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.697946][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.713243][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.746631][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.776400][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.804050][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.813452][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.830402][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.831622][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.831649][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.831671][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.832700][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.832725][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.832747][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.833739][ T5884] usb 1-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 162.833763][ T5884] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 162.833784][ T5884] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 162.835834][ T5884] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=bb.00 [ 162.835863][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=177, SerialNumber=183 [ 162.835885][ T5884] usb 1-1: Product: syz [ 162.835901][ T5884] usb 1-1: Manufacturer: syz [ 162.835917][ T5884] usb 1-1: SerialNumber: syz [ 162.923567][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 162.923672][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.925353][ T5885] usb 5-1: USB disconnect, device number 41 [ 162.933085][ T7567] program syz.3.467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.941044][ T7567] input: syz0 as /devices/virtual/input/input12 [ 162.953469][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 162.953549][ T7567] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 163.059275][ T9] usb 1-1: USB disconnect, device number 27 [ 163.062283][ T5882] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 163.192279][ T5882] usb 2-1: device descriptor read/64, error -71 [ 163.258951][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 163.387915][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 163.432565][ T5882] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 163.502219][ T2153] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 163.572611][ T5882] usb 2-1: device descriptor read/64, error -71 [ 163.665663][ T2153] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.675131][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.682641][ T5882] usb usb2-port1: attempt power cycle [ 163.683263][ T2153] usb 4-1: Product: syz [ 163.693216][ T5884] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 163.701010][ T2153] usb 4-1: Manufacturer: syz [ 163.706568][ T2153] usb 4-1: SerialNumber: syz [ 163.718074][ T2153] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.740561][ T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.782310][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 163.852279][ T945] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 163.864318][ T5884] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 50660, setting to 1024 [ 163.876126][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.883383][ T5884] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 163.892693][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.902901][ T5884] usb 3-1: config 0 descriptor?? [ 163.908704][ T7580] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 163.932214][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 163.939224][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.955365][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.965461][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.972854][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 163.982199][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.995241][ T9] usb 5-1: config 0 descriptor?? [ 164.003641][ T945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 164.016319][ T945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 164.028410][ T945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 164.039570][ T5882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 164.050173][ T945] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 164.059477][ T945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.069133][ T945] usb 1-1: Product: syz [ 164.074111][ T5882] usb 2-1: device descriptor read/8, error -71 [ 164.080395][ T945] usb 1-1: Manufacturer: syz [ 164.085484][ T945] usb 1-1: SerialNumber: syz [ 164.092697][ T945] usb 1-1: config 0 descriptor?? [ 164.099382][ T7587] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 164.106992][ T7587] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 164.115781][ T945] usb 1-1: ucan: probing device on interface #0 [ 164.163461][ T5885] usb 4-1: USB disconnect, device number 32 [ 164.322188][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 164.341589][ T5884] nintendo 0003:057E:200E.0008: unknown main item tag 0x0 [ 164.342852][ T5882] usb 2-1: device descriptor read/8, error -71 [ 164.348861][ T5884] nintendo 0003:057E:200E.0008: unknown main item tag 0x0 [ 164.364216][ T5884] nintendo 0003:057E:200E.0008: unknown main item tag 0x0 [ 164.375183][ T5884] nintendo 0003:057E:200E.0008: hidraw0: USB HID v81.04 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 164.408920][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 164.416121][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 164.423861][ T9] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 164.431413][ T9] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 164.440566][ T9] corsair 0003:1B1C:1B3E.0009: hidraw1: USB HID v0.7f Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 164.453016][ T5884] nintendo 0003:057E:200E.0008: Failed charging grip handshake [ 164.462684][ T5882] usb usb2-port1: unable to enumerate USB device [ 164.466283][ T5884] nintendo 0003:057E:200E.0008: Failed to initialize controller; ret=-110 [ 164.497356][ T5884] nintendo 0003:057E:200E.0008: probe - fail = -110 [ 164.504362][ T5884] nintendo 0003:057E:200E.0008: probe with driver nintendo failed with error -110 [ 164.541354][ T5882] usb 3-1: USB disconnect, device number 24 [ 164.608904][ T5884] usb 5-1: USB disconnect, device number 42 [ 164.725765][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.741520][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.755580][ T945] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 164.787959][ T945] usb 1-1: USB disconnect, device number 28 [ 164.803498][ T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 164.811593][ T47] ath9k_htc: Failed to initialize the device [ 164.821679][ T5885] usb 4-1: ath9k_htc: USB layer deinitialized [ 165.244876][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 165.330138][ T5885] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 165.413725][ T7610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.450927][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 165.512735][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 165.528840][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.549213][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.565787][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 165.577325][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.593938][ T5885] usb 4-1: config 0 descriptor?? [ 166.035748][ T5885] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x2 [ 166.045612][ T5885] savu 0003:1E7D:2D5A.000A: unknown global tag 0xc [ 166.052441][ T5885] savu 0003:1E7D:2D5A.000A: item 0 2 1 12 parsing failed [ 166.061158][ T5885] savu 0003:1E7D:2D5A.000A: parse failed [ 166.068517][ T5885] savu 0003:1E7D:2D5A.000A: probe with driver savu failed with error -22 [ 166.216556][ T5885] usb 4-1: USB disconnect, device number 33 [ 166.682241][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 166.695032][ T7635] netlink: 'syz.4.494': attribute type 12 has an invalid length. [ 166.714128][ T7635] hsr0: entered promiscuous mode [ 166.723203][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 166.790933][ T7635] hsr_slave_0: left promiscuous mode [ 166.816570][ T7635] hsr_slave_1: left promiscuous mode [ 166.850401][ T7635] hsr0 (unregistering): left promiscuous mode [ 166.982173][ T47] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 167.012196][ T5923] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 167.148557][ T47] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 167.157095][ T47] usb 2-1: config 4 has no interface number 0 [ 167.193706][ T5923] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 167.220354][ T47] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 167.229512][ T5923] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 167.242821][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.256667][ T47] usb 2-1: Product: syz [ 167.260895][ T47] usb 2-1: Manufacturer: syz [ 167.265601][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 167.285531][ T47] usb 2-1: SerialNumber: syz [ 167.291027][ T5923] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 167.313117][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 167.328224][ T47] gspca_main: spca505-2.14.0 probing 0733:0430 [ 167.359630][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 167.377580][ T5923] usb 5-1: string descriptor 0 read error: -22 [ 167.384722][ T5923] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 167.400670][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.411179][ T7659] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 167.419323][ T7659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.501'. [ 167.440016][ T5923] usb 5-1: config 0 descriptor?? [ 167.448833][ T7640] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.457834][ T5923] hub 5-1:0.0: bad descriptor, ignoring hub [ 167.472223][ T5923] hub 5-1:0.0: probe with driver hub failed with error -5 [ 167.487235][ T5923] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 167.582280][ T5882] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 167.733945][ T47] gspca_spca505: reg write: error -71 [ 167.739556][ T47] spca505 2-1:4.9: probe with driver spca505 failed with error -5 [ 167.760430][ T47] usb 2-1: USB disconnect, device number 24 [ 167.764153][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.814648][ T5885] usb 5-1: USB disconnect, device number 43 [ 167.834442][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.855704][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 167.874170][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.889423][ T5882] usb 1-1: config 0 descriptor?? [ 168.390838][ T5882] logitech 0003:046D:C29C.000B: invalid report_size 28452 [ 168.428011][ T5882] logitech 0003:046D:C29C.000B: item 0 2 1 7 parsing failed [ 168.454546][ T5882] logitech 0003:046D:C29C.000B: parse failed [ 168.464793][ T5882] logitech 0003:046D:C29C.000B: probe with driver logitech failed with error -22 [ 168.482245][ T5885] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 168.634535][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 168.656109][ T5885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.688246][ T5885] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.710381][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.720921][ T5885] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.752428][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.767689][ T5885] usb 4-1: config 0 descriptor?? [ 168.855493][ T7677] capability: warning: `syz.4.507' uses 32-bit capabilities (legacy support in use) [ 169.082164][ T5882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 169.122226][ T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 169.253962][ T5882] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.272192][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.282724][ T945] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.293349][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 169.304825][ T47] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 169.306766][ T5882] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.319950][ T47] usb 5-1: config 0 has no interface number 0 [ 169.332107][ T5882] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.343121][ T47] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.350562][ T5882] usb 3-1: Manufacturer: syz [ 169.373000][ T5882] usb 3-1: config 0 descriptor?? [ 169.375606][ T47] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 169.392140][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.420758][ T47] usb 5-1: Product: syz [ 169.426155][ T47] usb 5-1: Manufacturer: syz [ 169.438817][ T47] usb 5-1: SerialNumber: syz [ 169.458042][ T47] usb 5-1: config 0 descriptor?? [ 169.474404][ T47] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 169.475984][ T945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.500048][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.524163][ T945] usb 2-1: config 0 descriptor?? [ 169.530592][ T47] em28xx 5-1:0.132: Video interface 132 found: [ 169.532246][ T5882] rc_core: IR keymap rc-hauppauge not found [ 169.552408][ T5882] Registered IR keymap rc-empty [ 169.559552][ T945] cp210x 2-1:0.0: cp210x converter detected [ 169.571103][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 169.590336][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 169.602222][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.644203][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.733702][ T47] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 169.889574][ T2153] usb 3-1: USB disconnect, device number 25 [ 169.986272][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.001514][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.019852][ T7679] netlink: 68 bytes leftover after parsing attributes in process `syz.1.506'. [ 170.037283][ T7679] netlink: 'syz.1.506': attribute type 9 has an invalid length. [ 170.047648][ T7679] netlink: 4592 bytes leftover after parsing attributes in process `syz.1.506'. [ 170.113493][ T7688] syz_tun: entered promiscuous mode [ 170.119167][ T7688] macsec1: entered allmulticast mode [ 170.149280][ T7688] syz_tun: entered allmulticast mode [ 170.155051][ T47] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 170.178100][ T7688] syz_tun: left allmulticast mode [ 170.182223][ T47] em28xx 5-1:0.132: board has no eeprom [ 170.188856][ T7688] syz_tun: left promiscuous mode [ 170.226274][ T7678] netlink: 'syz.4.507': attribute type 8 has an invalid length. [ 170.268063][ T945] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 170.280003][ T945] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 170.292200][ T47] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 170.297458][ T945] usb 2-1: cp210x converter now attached to ttyUSB0 [ 170.304553][ T47] em28xx 5-1:0.132: analog set to bulk mode. [ 170.316829][ T5923] em28xx 5-1:0.132: Registering V4L2 extension [ 170.339078][ T945] usb 2-1: USB disconnect, device number 25 [ 170.348459][ T47] usb 5-1: USB disconnect, device number 44 [ 170.373171][ T945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.378010][ T47] em28xx 5-1:0.132: Disconnecting em28xx [ 170.381565][ T945] cp210x 2-1:0.0: device disconnected [ 170.396508][ T2153] usb 1-1: USB disconnect, device number 29 [ 170.547717][ T7697] warning: `syz.0.510' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.580731][ T5923] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 170.589144][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.511'. [ 170.598819][ T5923] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 170.601919][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 170.622809][ T5923] em28xx 5-1:0.132: No AC97 audio processor [ 170.647385][ T5923] usb 5-1: Decoder not found [ 170.662200][ T5923] em28xx 5-1:0.132: failed to create media graph [ 170.676990][ T5923] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 170.706569][ T5923] em28xx 5-1:0.132: Remote control support is not available for this card. [ 170.772915][ T47] em28xx 5-1:0.132: Closing input extension [ 170.828286][ T47] em28xx 5-1:0.132: Freeing device [ 171.047870][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 171.064220][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.132280][ T5885] usb 4-1: USB disconnect, device number 34 [ 171.333654][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 171.497166][ T47] usb 3-1: config 0 has no interfaces? [ 171.504632][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 171.516348][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.529669][ T47] usb 3-1: config 0 descriptor?? [ 171.534933][ T5923] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 171.591118][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.600469][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.692301][ T5840] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 171.700108][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 171.709046][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 171.719794][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.730157][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.740563][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.753052][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.763373][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.764018][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.783498][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 171.793470][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.806663][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.807270][ T5923] usb 5-1: config 0 descriptor?? [ 171.824373][ T5884] usb 3-1: USB disconnect, device number 26 [ 171.833638][ T7722] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 171.862169][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 171.868858][ T5840] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.880974][ T5840] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.895062][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.901872][ T5840] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 171.912008][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.922583][ T5840] usb 1-1: config 0 descriptor?? [ 172.037104][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.047414][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.098810][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.107740][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.282339][ T5884] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 172.452338][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 172.460154][ T5884] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 172.469535][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 172.498163][ T5884] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 172.513560][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.522175][ T5884] usb 3-1: Product: syz [ 172.544197][ T5884] usb 3-1: Manufacturer: syz [ 172.548990][ T5884] usb 3-1: SerialNumber: syz [ 172.574581][ T5840] chicony 0003:04F2:1421.000C: unbalanced delimiter at end of report description [ 172.597709][ T5840] chicony 0003:04F2:1421.000C: Chicony hid parse failed: -22 [ 172.606127][ T5840] chicony 0003:04F2:1421.000C: probe with driver chicony failed with error -22 [ 173.171777][ T7772] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 173.180418][ T7772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.217938][ T7772] netlink: 'syz.3.533': attribute type 3 has an invalid length. [ 173.227950][ T7772] netlink: 232 bytes leftover after parsing attributes in process `syz.3.533'. [ 173.243140][ T7772] macvtap1: entered promiscuous mode [ 173.249123][ T7772] bond_slave_0: entered promiscuous mode [ 173.255151][ T7772] bond_slave_1: entered promiscuous mode [ 173.261337][ T7772] bond0: entered promiscuous mode [ 173.271843][ T7772] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 173.281116][ T7772] team0: Device macvtap1 failed to register rx_handler [ 173.299253][ T7772] bond0: left promiscuous mode [ 173.307598][ T7772] bond_slave_0: left promiscuous mode [ 173.313158][ T7772] bond_slave_1: left promiscuous mode [ 173.712285][ T5887] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 173.862142][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 173.868864][ T5887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 173.880255][ T5887] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 173.889803][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.897932][ T5887] usb 4-1: Product: syz [ 173.902233][ T5887] usb 4-1: Manufacturer: syz [ 173.906868][ T5887] usb 4-1: SerialNumber: syz [ 173.913867][ T5887] usb 4-1: config 0 descriptor?? [ 173.920785][ T5887] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 173.931447][ T5887] usb 4-1: Detected FT232R [ 174.126605][ T5887] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 174.339504][ T5887] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 174.581481][ T5883] usb 1-1: USB disconnect, device number 30 [ 174.621851][ T7786] input: syz0 as /devices/virtual/input/input16 [ 174.952275][ T5883] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 175.103227][ T5883] usb 1-1: no configurations [ 175.107979][ T5883] usb 1-1: can't read configurations, error -22 [ 175.252210][ T5883] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 175.412901][ T5883] usb 1-1: no configurations [ 175.417556][ T5883] usb 1-1: can't read configurations, error -22 [ 175.424370][ T5883] usb usb1-port1: attempt power cycle [ 175.772236][ T5883] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 175.793327][ T5883] usb 1-1: no configurations [ 175.797992][ T5883] usb 1-1: can't read configurations, error -22 [ 175.932205][ T5883] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 175.958844][ T5883] usb 1-1: no configurations [ 175.963812][ T5883] usb 1-1: can't read configurations, error -22 [ 175.972799][ T5883] usb usb1-port1: unable to enumerate USB device [ 176.512384][ T5883] usb 4-1: USB disconnect, device number 35 [ 176.542357][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 176.559389][ T5883] ftdi_sio 4-1:0.0: device disconnected [ 177.512951][ T5885] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 177.668458][ T7827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.679561][ T7827] netem: incorrect ge model size [ 177.688569][ T7827] netem: change failed [ 177.692352][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 177.700759][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.716122][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.743845][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.753643][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.761682][ T5885] usb 4-1: Product: syz [ 177.766334][ T5885] usb 4-1: Manufacturer: syz [ 177.770968][ T5885] usb 4-1: SerialNumber: syz [ 177.992161][ T5840] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 178.010197][ T2153] usb 4-1: USB disconnect, device number 36 [ 178.164576][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.174656][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.188250][ T5840] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 178.197482][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.206868][ T5840] usb 1-1: config 0 descriptor?? [ 178.625642][ T5840] lenovo 0003:17EF:6067.000D: unknown main item tag 0xd [ 178.635714][ T5840] lenovo 0003:17EF:6067.000D: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 178.836140][ T10] usb 1-1: USB disconnect, device number 35 [ 178.846880][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 178.984381][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'. [ 179.239049][ T7844] loop6: detected capacity change from 0 to 63 [ 179.246530][ C0] blk_print_req_error: 75 callbacks suppressed [ 179.246551][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.262217][ C0] buffer_io_error: 74 callbacks suppressed [ 179.262234][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.276931][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.286172][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.295307][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.304884][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.313545][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.322840][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.330945][ T5840] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 179.331015][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.347916][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.356272][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.365551][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.374156][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.383400][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.391988][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.401220][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.410250][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.419456][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.429860][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.439079][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.449202][ T7844] ldm_validate_partition_table(): Disk read failed. [ 179.456942][ T7844] Dev loop6: unable to read RDB block 0 [ 179.467790][ T7844] loop6: unable to read partition table [ 179.475857][ T7844] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 179.488752][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 179.500980][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.514298][ T5840] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 179.542359][ T5840] usb 4-1: can't read configurations, error -71 [ 179.620928][ T7850] kvm: MWAIT instruction emulated as NOP! [ 180.346324][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 180.355366][ T7861] bridge_slave_1: left allmulticast mode [ 180.361179][ T7861] bridge_slave_1: left promiscuous mode [ 180.369802][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.381765][ T7861] bridge_slave_0: left allmulticast mode [ 180.388974][ T7861] bridge_slave_0: left promiscuous mode [ 180.395216][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.592437][ T5840] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 180.763613][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.775133][ T5840] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 180.787213][ T5840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 4.40 [ 180.796626][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.804829][ T5840] usb 4-1: Product: syz [ 180.809143][ T5840] usb 4-1: Manufacturer: syz [ 180.813939][ T5840] usb 4-1: SerialNumber: syz [ 180.862254][ T5885] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 181.003318][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.012713][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.017418][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.030983][ T5840] usb 4-1: USB disconnect, device number 38 [ 181.054178][ T5885] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 181.063898][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.073681][ T5885] usb 1-1: config 0 descriptor?? [ 181.084984][ T5885] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 181.092449][ T5885] command write [95] error -22 [ 181.159006][ T7870] fuse: Bad value for 'fd' [ 181.288395][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.297427][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.376890][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.385828][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.832285][ T5885] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 182.002291][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 182.009928][ T5885] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 182.019147][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.028910][ T5885] usb 4-1: config 0 descriptor?? [ 182.035837][ T5885] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 182.044274][ T5885] usb 4-1: Detected FT4232H [ 182.236251][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.248876][ T5885] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.447319][ T7879] input: syz0 as /devices/virtual/input/input17 [ 182.465515][ T2153] usb 4-1: USB disconnect, device number 39 [ 182.477694][ T2153] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.487616][ T2153] ftdi_sio 4-1:0.0: device disconnected [ 183.134821][ T7885] loop6: detected capacity change from 0 to 63 [ 183.144574][ T7885] ldm_validate_partition_table(): Disk read failed. [ 183.154427][ T7885] Dev loop6: unable to read RDB block 0 [ 183.161070][ T7885] loop6: unable to read partition table [ 183.171741][ T7885] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 183.240161][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 183.554309][ T5885] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 183.705231][ T5840] usb 1-1: USB disconnect, device number 36 [ 183.713610][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 183.723284][ T5885] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 183.742214][ T5885] usb 4-1: config 0 has no interface number 0 [ 183.749138][ T7892] netlink: 'syz.0.574': attribute type 10 has an invalid length. [ 183.754815][ T5885] usb 4-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=2a.c4 [ 183.766358][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.774259][ T7892] team0: Cannot enslave team device to itself [ 183.774810][ T5885] usb 4-1: Product: syz [ 183.784763][ T5885] usb 4-1: Manufacturer: syz [ 183.791028][ T5885] usb 4-1: SerialNumber: syz [ 183.798150][ T5885] usb 4-1: config 0 descriptor?? [ 183.806154][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 184.018293][ T5885] gspca_sonixj: reg_w1 err -71 [ 184.026145][ T5885] sonixj 4-1:0.128: probe with driver sonixj failed with error -71 [ 184.036423][ T5885] usb 4-1: USB disconnect, device number 40 [ 184.112806][ T7899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.575'. [ 184.972312][ T5840] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 185.051197][ T7914] loop6: detected capacity change from 0 to 63 [ 185.057892][ C1] blk_print_req_error: 32 callbacks suppressed [ 185.057911][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.073385][ C1] buffer_io_error: 32 callbacks suppressed [ 185.073402][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.088140][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.097446][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.107014][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.116433][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.122213][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 185.132177][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.133086][ T5840] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 185.141505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.151018][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.161280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.167356][ T5840] usb 4-1: Product: syz [ 185.176390][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.180651][ T5840] usb 4-1: Manufacturer: syz [ 185.194559][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.203804][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.212997][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.222216][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.230188][ T5840] usb 4-1: SerialNumber: syz [ 185.232204][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.244125][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.252248][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.261486][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.270165][ T5840] usb 4-1: config 0 descriptor?? [ 185.275530][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.284745][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.299568][ T5840] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 185.304311][ T7914] ldm_validate_partition_table(): Disk read failed. [ 185.317957][ T7914] Dev loop6: unable to read RDB block 0 [ 185.324955][ T7914] loop6: unable to read partition table [ 185.330896][ T7914] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 185.379690][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 185.501301][ T47] usb 4-1: USB disconnect, device number 41 [ 185.662322][ T5840] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 185.812211][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 185.820624][ T5840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.830062][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.838161][ T5840] usb 1-1: Product: syz [ 185.842496][ T5840] usb 1-1: Manufacturer: syz [ 185.847130][ T5840] usb 1-1: SerialNumber: syz [ 185.856628][ T5840] usb 1-1: config 0 descriptor?? [ 186.068562][ T5840] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.073713][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 187.213901][ T10] usb 4-1: device descriptor read/64, error -71 [ 187.452286][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 187.488302][ T5840] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 187.499474][ T5840] usb 1-1: USB disconnect, device number 37 [ 187.592159][ T10] usb 4-1: device descriptor read/64, error -71 [ 187.702819][ T10] usb usb4-port1: attempt power cycle [ 188.054516][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 188.092940][ T10] usb 4-1: device descriptor read/8, error -71 [ 188.352257][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 188.392750][ T10] usb 4-1: device descriptor read/8, error -71 [ 188.506313][ T10] usb usb4-port1: unable to enumerate USB device [ 188.968380][ T7948] netem: unknown loss type 0 [ 188.973975][ T7948] netem: change failed [ 189.652294][ T5887] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 189.802166][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 189.809112][ T5887] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.820324][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.827495][ T5887] usb 1-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 189.836742][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.847264][ T5887] usb 1-1: config 0 descriptor?? [ 190.081610][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 190.264232][ T5887] ortek 0003:05A4:8003.000E: unknown global tag 0xd [ 190.271239][ T5887] ortek 0003:05A4:8003.000E: item 0 2 1 13 parsing failed [ 190.281913][ T5887] ortek 0003:05A4:8003.000E: probe with driver ortek failed with error -22 [ 190.372170][ T5885] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 190.534175][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.557994][ T5887] usb 1-1: USB disconnect, device number 38 [ 190.564957][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.569578][ T7975] trusted_key: encrypted_key: keyword 'l' not recognized [ 190.580177][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.596739][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.606793][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.618477][ T5885] usb 4-1: config 0 descriptor?? [ 190.647288][ T7972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.673070][ T7972] bond2: entered promiscuous mode [ 190.678249][ T7972] bond2: entered allmulticast mode [ 190.686254][ T7972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.031038][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 191.039818][ T5885] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 191.061602][ T5885] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 191.906626][ T2153] usb 4-1: USB disconnect, device number 46 [ 192.422229][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 192.582253][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 192.589141][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.607330][ T5885] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 192.616582][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.624719][ T5885] usb 1-1: Product: syz [ 192.629054][ T5885] usb 1-1: Manufacturer: syz [ 192.636225][ T5885] usb 1-1: SerialNumber: syz [ 192.649199][ T5885] usb 1-1: config 0 descriptor?? [ 192.656592][ T5885] xr_serial 1-1:0.0: failed to claim sibling interface: -16 [ 192.664097][ T5885] xr_serial 1-1:0.0: probe with driver xr_serial failed with error -16 [ 192.712248][ T2153] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 192.858719][ T5883] usb 1-1: USB disconnect, device number 39 [ 192.885089][ T2153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.895602][ T2153] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.910558][ T2153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.919818][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.928655][ T2153] usb 4-1: Product: syz [ 192.932920][ T2153] usb 4-1: Manufacturer: syz [ 192.937536][ T2153] usb 4-1: SerialNumber: syz [ 193.147502][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.156510][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.166801][ T2153] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 193.178454][ T2153] usb 4-1: USB disconnect, device number 47 [ 193.402355][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 193.411538][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 193.612166][ T2153] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 193.792163][ T2153] usb 4-1: Using ep0 maxpacket: 8 [ 193.798663][ T2153] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 193.807001][ T2153] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 193.817425][ T2153] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.827245][ T2153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.837139][ T2153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 193.847659][ T2153] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49680, setting to 1024 [ 193.859031][ T2153] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.868179][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.080374][ T2153] usb 4-1: usb_control_msg returned -71 [ 194.086304][ T2153] usbtmc 4-1:16.0: can't read capabilities [ 194.095764][ T2153] usb 4-1: USB disconnect, device number 48 [ 194.327029][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338014][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.365683][ T8031] IPv6: sit1: Disabled Multicast RS [ 194.371726][ T8031] sit1: entered allmulticast mode [ 194.469960][ T8036] netlink: 'syz.0.623': attribute type 5 has an invalid length. [ 194.478470][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'. [ 194.792227][ T5887] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 194.942278][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 194.950514][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 194.959789][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.968288][ T5887] usb 1-1: Product: syz [ 194.973730][ T5887] usb 1-1: Manufacturer: syz [ 194.978409][ T5887] usb 1-1: SerialNumber: syz [ 194.984488][ T5887] usb 1-1: config 0 descriptor?? [ 194.992602][ T5840] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 195.144565][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.154953][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.165150][ T5840] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.174466][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.182925][ T5840] usb 4-1: SerialNumber: syz [ 195.191128][ T5887] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 195.202110][ T5887] eb 9a 47 80 9b f8 7a f0 [ 195.206722][ T5887] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 195.393760][ T5883] usb 1-1: USB disconnect, device number 40 [ 195.430653][ T5840] usb 4-1: 0:2 : does not exist [ 195.455594][ T5840] usb 4-1: USB disconnect, device number 49 [ 195.566079][ T8061] JFS: charset not found [ 195.932265][ T5887] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 196.094960][ T5887] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 196.103850][ T5887] usb 4-1: config 252 has no interface number 0 [ 196.110277][ T5887] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 196.122064][ T5887] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.134231][ T5887] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 196.143653][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.151689][ T5887] usb 4-1: Product: syz [ 196.160479][ T5887] usb 4-1: Manufacturer: syz [ 196.165885][ T5887] usb 4-1: SerialNumber: syz [ 196.266618][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.275513][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.378262][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.387012][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.397284][ T5840] usb 4-1: USB disconnect, device number 50 [ 196.572132][ T5885] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 196.740069][ T5885] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 196.749328][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.759210][ T5885] usb 1-1: config 0 descriptor?? [ 196.766432][ T5885] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 196.974657][ T5885] gspca_cpia1: usb_control_msg 05, error -71 [ 196.981121][ T5885] gspca_cpia1: usb_control_msg 01, error -71 [ 196.987378][ T5885] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 196.996910][ T5885] usb 1-1: USB disconnect, device number 41 [ 197.061673][ T8090] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 197.070419][ T8090] veth1_vlan: entered allmulticast mode [ 197.081647][ T8090] team0: Device veth1_vlan failed to register rx_handler [ 197.888375][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.643'. [ 198.442469][ T47] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 198.603029][ T8107] misc userio: Invalid payload size [ 198.611906][ T8107] misc userio: Can't change port type on an already running userio instance [ 198.622169][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 198.638039][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.651057][ T47] usb 4-1: config 1 has an invalid interface number: 26 but max is 1 [ 198.660679][ T47] usb 4-1: config 1 has an invalid interface number: 89 but max is 1 [ 198.669213][ T47] usb 4-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 198.686907][ T47] usb 4-1: config 1 has no interface number 0 [ 198.706461][ T47] usb 4-1: config 1 has no interface number 1 [ 198.715762][ T47] usb 4-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 198.726360][ T47] usb 4-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 198.737748][ T47] usb 4-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 198.747766][ T47] usb 4-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 198.759026][ T47] usb 4-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 198.772407][ T47] usb 4-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.786222][ T47] usb 4-1: config 1 interface 26 has no altsetting 0 [ 198.795737][ T47] usb 4-1: config 1 interface 89 has no altsetting 0 [ 198.814055][ T47] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 198.823868][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.831999][ T47] usb 4-1: Product: syz [ 198.836735][ T47] usb 4-1: Manufacturer: syz [ 198.841375][ T47] usb 4-1: SerialNumber: syz [ 198.849100][ T8102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 198.856923][ T8102] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 199.027957][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 199.038690][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 199.101425][ T47] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 199.111660][ T47] usb 4-1: 26:2 : does not exist [ 199.134220][ T47] usb 4-1: unknown interface protocol 0x13, assuming v1 [ 199.141485][ T47] usb 4-1: 89:2 : does not exist [ 199.169030][ T47] usb 4-1: USB disconnect, device number 51 [ 199.224964][ T8124] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 199.241847][ T8124] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 199.257376][ T8124] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 199.270392][ T8124] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 199.414373][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 199.483246][ T8128] loop2: detected capacity change from 0 to 7 [ 199.490262][ T8128] Dev loop2: unable to read RDB block 7 [ 199.500397][ T8128] loop2: unable to read partition table [ 199.507443][ T8128] loop2: partition table beyond EOD, truncated [ 199.517741][ T8128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.122267][ T5887] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 200.282136][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 200.295489][ T5887] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 200.316398][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.326883][ T5887] usb 4-1: config 0 descriptor?? [ 200.338949][ T5887] usblcd 4-1:0.0: USBLCD model not supported. [ 200.551279][ T5885] usb 4-1: USB disconnect, device number 52 [ 200.775214][ T5887] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 200.942364][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 200.959224][ T5887] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.995567][ T5887] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.042360][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.056475][ T5887] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 201.082297][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.112955][ T5887] usb 1-1: config 0 descriptor?? [ 201.344693][ T8168] trusted_key: encrypted_key: master key parameter '' is invalid [ 201.416375][ T8168] netlink: 'syz.3.669': attribute type 2 has an invalid length. [ 201.428646][ T8168] bridge0: port 3(macsec1) entered blocking state [ 201.440669][ T8168] bridge0: port 3(macsec1) entered disabled state [ 201.471358][ T8168] macsec1: entered allmulticast mode [ 201.488365][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 201.488384][ T30] audit: type=1326 audit(1742989539.044:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8167 comm="syz.3.669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dfdf8d169 code=0x0 [ 201.522709][ T8168] macsec1: left allmulticast mode [ 201.537836][ T5887] wacom 0003:056A:0094.0010: Using device in hidraw-only mode [ 201.553987][ T5887] wacom 0003:056A:0094.0010: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 201.736853][ T47] usb 1-1: USB disconnect, device number 42 [ 202.203401][ T8175] netdevsim netdevsim3 : renamed from netdevsim0 [ 202.211325][ T8175] netdevsim netdevsim3 : left promiscuous mode [ 202.592905][ T5885] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 202.742227][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 202.749346][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.759608][ T5885] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 202.768643][ T5885] usb 1-1: config 1 has no interface number 1 [ 202.775004][ T5885] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 202.788105][ T5885] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.797315][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.805441][ T5885] usb 1-1: Product: syz [ 202.809677][ T5885] usb 1-1: Manufacturer: syz [ 202.814401][ T5885] usb 1-1: SerialNumber: syz [ 202.969259][ T47] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 203.027090][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 203.036040][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 203.142223][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 203.149927][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.161243][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.171164][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.184641][ T47] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 203.194420][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.204808][ T47] usb 4-1: config 0 descriptor?? [ 203.372814][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.729853][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.738989][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.928248][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 203.949874][ T8208] delete_channel: no stack [ 203.965627][ T5885] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 203.970395][ T47] hid-generic 0003:18D1:503C.0011: unbalanced collection at end of report description [ 203.974337][ T5885] usb 1-1: 2:1 : format type 6 is not supported yet [ 204.038357][ T47] hid-generic 0003:18D1:503C.0011: probe with driver hid-generic failed with error -22 [ 204.076797][ T5885] usb 1-1: USB disconnect, device number 43 [ 204.213078][ T8216] netlink: 76 bytes leftover after parsing attributes in process `syz.0.685'. [ 204.402365][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.155172][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 205.453274][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.522460][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.838501][ T5887] usb 4-1: USB disconnect, device number 53 [ 205.967852][ T8259] loop2: detected capacity change from 0 to 7 [ 205.974725][ T8259] Dev loop2: unable to read RDB block 7 [ 205.980379][ T8259] loop2: unable to read partition table [ 205.986870][ T8259] loop2: partition table beyond EOD, truncated [ 205.994194][ T8259] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.044346][ T30] audit: type=1326 audit(1742989543.604:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.3.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x0 [ 206.066237][ T5899] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 206.246434][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.255127][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 206.264211][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.274564][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.285513][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.294967][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.303088][ T5899] usb 1-1: Product: syz [ 206.307392][ T5899] usb 1-1: Manufacturer: syz [ 206.312086][ T5899] usb 1-1: SerialNumber: syz [ 206.482425][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.490716][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.526366][ T5899] usb 1-1: 0:2 : does not exist [ 206.534694][ T5899] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 206.548414][ T5899] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.559105][ T5899] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.570507][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 206.581247][ T5899] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 206.597169][ T5899] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 206.608354][ T5899] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 206.618564][ T5899] usb 1-1: USB disconnect, device number 44 [ 206.913014][ T30] audit: type=1326 audit(1742989544.474:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 206.935800][ T30] audit: type=1326 audit(1742989544.474:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 206.958928][ T30] audit: type=1326 audit(1742989544.474:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 206.981967][ T30] audit: type=1326 audit(1742989544.474:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.004861][ T30] audit: type=1326 audit(1742989544.474:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.020728][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.028762][ T30] audit: type=1326 audit(1742989544.474:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.058859][ T30] audit: type=1326 audit(1742989544.474:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.098357][ T30] audit: type=1326 audit(1742989544.474:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.121781][ T30] audit: type=1326 audit(1742989544.474:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.149301][ T30] audit: type=1326 audit(1742989544.474:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8263 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 207.183762][ T8270] loop2: detected capacity change from 0 to 7 [ 207.190701][ T8270] Dev loop2: unable to read RDB block 7 [ 207.196755][ T8270] loop2: unable to read partition table [ 207.204355][ T8270] loop2: partition table beyond EOD, truncated [ 207.210657][ T8270] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.522402][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.069502][ T8279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.078617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.148924][ T8284] loop2: detected capacity change from 0 to 7 [ 208.156744][ T8284] Dev loop2: unable to read RDB block 7 [ 208.166052][ T8284] loop2: unable to read partition table [ 208.174735][ T8284] loop2: partition table beyond EOD, truncated [ 208.180954][ T8284] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.562378][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.627469][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.650428][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.663625][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.683913][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.689395][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.723950][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.562427][ T8318] x_tables: duplicate underflow at hook 2 [ 210.678913][ T8320] loop2: detected capacity change from 0 to 7 [ 210.698360][ T8320] Dev loop2: unable to read RDB block 7 [ 210.712154][ T8320] loop2: unable to read partition table [ 210.722290][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.728258][ T8320] loop2: partition table beyond EOD, truncated [ 210.759005][ T8320] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.039258][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 211.587980][ T8340] input: syz0 as /devices/virtual/input/input20 [ 211.756246][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 211.767549][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.783445][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.032181][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 212.182259][ T9] usb 4-1: device descriptor read/64, error -71 [ 212.432272][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 212.572136][ T9] usb 4-1: device descriptor read/64, error -71 [ 212.683008][ T9] usb usb4-port1: attempt power cycle [ 213.022203][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 213.043784][ T9] usb 4-1: device descriptor read/8, error -71 [ 213.282249][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 213.302664][ T9] usb 4-1: device descriptor read/8, error -71 [ 213.372273][ T5887] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 213.415659][ T9] usb usb4-port1: unable to enumerate USB device [ 213.522445][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 213.529348][ T5887] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.540539][ T5887] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.550448][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.560741][ T5887] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.570097][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.580013][ T5887] usb 1-1: config 0 descriptor?? [ 213.762651][ T1162] net_ratelimit: 2 callbacks suppressed [ 213.762675][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.778359][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.787711][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.842346][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.201546][ T5887] usbhid 1-1:0.0: can't add hid device: -71 [ 214.207917][ T5887] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 214.218110][ T5887] usb 1-1: USB disconnect, device number 45 [ 214.882607][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.942145][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.702269][ T5899] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 216.782161][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 216.812269][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.874243][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.884634][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.895821][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.905028][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.913125][ T5899] usb 1-1: Product: syz [ 216.917393][ T5899] usb 1-1: Manufacturer: syz [ 216.922057][ T5899] usb 1-1: SerialNumber: syz [ 216.933979][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.945471][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.956645][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.970464][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.972450][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.980071][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.997913][ T5887] usb 4-1: config 0 descriptor?? [ 217.132640][ T8411] x_tables: duplicate underflow at hook 3 [ 217.414735][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'. [ 217.428198][ T5899] usb 1-1: cannot find UAC_HEADER [ 217.459674][ T5899] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 217.478341][ T5887] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 217.485800][ T5899] usb 1-1: USB disconnect, device number 46 [ 217.503239][ T5887] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.515990][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 217.516007][ T30] audit: type=1400 audit(1742989555.064:129): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=8421 comm="syz.0.747" [ 218.003518][ T8416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.012179][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.031108][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.039787][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.065129][ T5899] usb 4-1: USB disconnect, device number 58 [ 219.042410][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.081872][ T8440] openvswitch: netlink: Message has 16 unknown bytes. [ 219.089665][ T8440] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.122378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.335787][ T8447] tipc: Started in network mode [ 219.340733][ T8447] tipc: Node identity , cluster identity 4711 [ 219.347750][ T8448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(66) [ 219.348181][ T8447] tipc: Failed to set node id, please configure manually [ 219.354586][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.361176][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 219.364752][ T8447] tipc: Enabling of bearer rejected, failed to enable media [ 219.374266][ T8448] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(70) [ 219.376090][ T8447] tipc: Started in network mode [ 219.383212][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.388455][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 219.391894][ T8447] tipc: Node identity , cluster identity 4711 [ 219.396608][ T8448] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(72) [ 219.403651][ T8447] tipc: Failed to set node id, please configure manually [ 219.407717][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.435580][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 219.441442][ T8447] tipc: Enabling of bearer rejected, failed to enable media [ 219.464622][ T8455] vhci_hcd: connection closed [ 219.466011][ T8449] vhci_hcd: connection closed [ 219.471726][ T8451] vhci_hcd: connection closed [ 219.479611][ T8416] vhci_hcd: stop threads [ 219.491155][ T8416] vhci_hcd: release socket [ 219.497020][ T8416] vhci_hcd: disconnect device [ 219.503839][ T8416] vhci_hcd: stop threads [ 219.508164][ T8416] vhci_hcd: release socket [ 219.514226][ T8416] vhci_hcd: disconnect device [ 219.519728][ T8416] vhci_hcd: stop threads [ 219.524865][ T8416] vhci_hcd: release socket [ 219.529396][ T8416] vhci_hcd: disconnect device [ 219.552293][ T5887] vhci_hcd: vhci_device speed not set [ 219.574786][ T8460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.583581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.842328][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.082316][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.759711][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 220.936553][ T8489] sctp: [Deprecated]: syz.0.764 (pid 8489) Use of int in max_burst socket option deprecated. [ 220.936553][ T8489] Use struct sctp_assoc_value instead [ 220.975476][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 221.102340][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 221.122912][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.292284][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 221.302504][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.313921][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=34.8e [ 221.326523][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.334740][ T10] usb 4-1: Product: syz [ 221.338998][ T10] usb 4-1: Manufacturer: syz [ 221.344518][ T10] usb 4-1: SerialNumber: syz [ 221.351512][ T10] usb 4-1: config 0 descriptor?? [ 221.361677][ T10] hso 4-1:0.0: Not our interface [ 221.613963][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.654727][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.676161][ T5885] usb 4-1: USB disconnect, device number 59 [ 222.162364][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.410201][ T30] audit: type=1326 audit(1742989559.964:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.468426][ T30] audit: type=1326 audit(1742989559.964:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.503074][ T30] audit: type=1326 audit(1742989559.964:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.529938][ T30] audit: type=1326 audit(1742989559.964:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.558250][ T30] audit: type=1326 audit(1742989559.964:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.582436][ T30] audit: type=1326 audit(1742989559.964:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.604648][ T30] audit: type=1326 audit(1742989559.964:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.627390][ T30] audit: type=1326 audit(1742989559.964:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.649834][ T30] audit: type=1326 audit(1742989559.964:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.678459][ T30] audit: type=1326 audit(1742989559.964:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.745395][ T30] audit: type=1326 audit(1742989559.964:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.790577][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.776'. [ 222.799864][ T30] audit: type=1326 audit(1742989559.964:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 222.799914][ T30] audit: type=1326 audit(1742989559.964:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dfdf8d169 code=0x7ffc0000 [ 223.022207][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 223.162190][ T10] usb 4-1: device descriptor read/64, error -71 [ 223.415235][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 223.552222][ T10] usb 4-1: device descriptor read/64, error -71 [ 223.592204][ T5885] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 223.663328][ T10] usb usb4-port1: attempt power cycle [ 223.742330][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 223.748951][ T5885] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 223.757172][ T5885] usb 1-1: config 0 has no interface number 0 [ 223.766291][ T5885] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.775626][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.783716][ T5885] usb 1-1: Product: syz [ 223.787942][ T5885] usb 1-1: Manufacturer: syz [ 223.792645][ T5885] usb 1-1: SerialNumber: syz [ 223.798610][ T5885] usb 1-1: config 0 descriptor?? [ 223.806586][ T5885] smsc95xx v2.0.0 [ 224.012181][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 224.042783][ T10] usb 4-1: device descriptor read/8, error -71 [ 224.242728][ T5899] net_ratelimit: 4 callbacks suppressed [ 224.242751][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.312120][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 224.342730][ T10] usb 4-1: device descriptor read/8, error -71 [ 224.458183][ T10] usb usb4-port1: unable to enumerate USB device [ 225.282482][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.930028][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.999558][ T8546] netlink: 92 bytes leftover after parsing attributes in process `syz.2.784'. [ 226.253987][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'. [ 226.296001][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 226.310245][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.322763][ T5885] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 226.325718][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.344300][ T5885] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.358198][ T5885] usb 1-1: USB disconnect, device number 47 [ 226.632228][ T5840] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 226.732222][ T5885] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 226.762903][ T5840] usb 4-1: device descriptor read/64, error -71 [ 226.902355][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 226.909073][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 226.922551][ T5885] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 226.931635][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.939732][ T5885] usb 1-1: Product: syz [ 226.943966][ T5885] usb 1-1: Manufacturer: syz [ 226.948583][ T5885] usb 1-1: SerialNumber: syz [ 226.954754][ T5885] usb 1-1: config 0 descriptor?? [ 226.988462][ T5885] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 227.002354][ T5840] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 227.142153][ T5840] usb 4-1: device descriptor read/64, error -71 [ 227.166512][ T53] usb 1-1: Failed to submit usb control message: -71 [ 227.166777][ T10] usb 1-1: USB disconnect, device number 48 [ 227.173864][ T53] usb 1-1: unable to send the bmi data to the device: -71 [ 227.187058][ T53] usb 1-1: unable to get target info from device [ 227.193906][ T53] usb 1-1: could not get target info (-71) [ 227.199949][ T53] usb 1-1: could not probe fw (-71) [ 227.253484][ T5840] usb usb4-port1: attempt power cycle [ 227.366063][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.592237][ T5840] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 227.615414][ T5840] usb 4-1: device descriptor read/8, error -71 [ 227.740440][ T8564] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 227.749479][ T8564] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 227.852967][ T5840] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 227.878064][ T5840] usb 4-1: device descriptor read/8, error -71 [ 227.992570][ T5840] usb usb4-port1: unable to enumerate USB device [ 228.162248][ T10] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 228.314619][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 228.323300][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 228.331542][ T10] usb 1-1: config 0 has no interface number 0 [ 228.337775][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.350092][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.361431][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.371357][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 228.380515][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.389934][ T10] usb 1-1: config 0 descriptor?? [ 228.402417][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.883018][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.969886][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.130686][ T10] usb 1-1: USB disconnect, device number 49 [ 229.442313][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.453386][ T8592] netlink: 56 bytes leftover after parsing attributes in process `syz.3.801'. [ 230.482294][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.524697][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 230.533667][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 230.830079][ T8617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.809'. [ 230.839658][ T8617] netlink: 'syz.4.809': attribute type 7 has an invalid length. [ 230.847981][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 231.099748][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.4.813'. [ 231.172176][ T5883] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 231.239716][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 231.239731][ T30] audit: type=1326 audit(1742989568.794:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.282687][ T8632] netlink: 48 bytes leftover after parsing attributes in process `syz.4.814'. [ 231.287727][ T30] audit: type=1326 audit(1742989568.834:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.320268][ T30] audit: type=1326 audit(1742989568.834:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.357161][ T30] audit: type=1326 audit(1742989568.834:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.383305][ T30] audit: type=1326 audit(1742989568.834:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.411158][ T8634] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 231.435701][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 231.464165][ T8634] IPv6: addrconf: prefix option has invalid lifetime [ 231.477728][ T30] audit: type=1326 audit(1742989568.834:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.487242][ T5883] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 231.522404][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.537561][ T5883] usb 4-1: config 0 has no interface number 0 [ 231.551332][ T5883] usb 4-1: config 0 interface 12 has no altsetting 0 [ 231.574126][ T5883] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 231.583749][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.591778][ T5883] usb 4-1: Product: syz [ 231.605615][ T30] audit: type=1326 audit(1742989568.834:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.664011][ T30] audit: type=1326 audit(1742989568.834:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.697206][ T5883] usb 4-1: Manufacturer: syz [ 231.722313][ T5883] usb 4-1: SerialNumber: syz [ 231.729818][ T5883] usb 4-1: config 0 descriptor?? [ 231.741797][ T30] audit: type=1326 audit(1742989568.834:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.781510][ T30] audit: type=1326 audit(1742989568.834:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.4.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f886798d169 code=0x7ffc0000 [ 231.945065][ T5883] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 231.958179][ T5883] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 231.966701][ T5883] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 231.978094][ T5883] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 231.989931][ T5883] usb 4-1: USB disconnect, device number 68 [ 232.002499][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.227625][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.816'. [ 232.562433][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.587363][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 232.642260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.650920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.019659][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.029099][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.041251][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.827'. [ 233.082480][ T5885] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 233.234393][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 233.246130][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1023, setting to 64 [ 233.256227][ T5883] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 233.257232][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 233.277973][ T5885] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 233.287639][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.295863][ T5885] usb 4-1: Product: syz [ 233.300208][ T5885] usb 4-1: Manufacturer: syz [ 233.304878][ T5885] usb 4-1: SerialNumber: syz [ 233.310957][ T5885] usb 4-1: config 0 descriptor?? [ 233.318828][ T5885] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 233.412121][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 233.418600][ T5883] usb 1-1: config 0 has an invalid interface number: 206 but max is 1 [ 233.428105][ T5883] usb 1-1: config 0 has no interface number 1 [ 233.435841][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.446795][ T5883] usb 1-1: config 0 interface 206 has no altsetting 0 [ 233.455892][ T5883] usb 1-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 233.465366][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.473554][ T5883] usb 1-1: Product: syz [ 233.477912][ T5883] usb 1-1: Manufacturer: syz [ 233.482648][ T5883] usb 1-1: SerialNumber: syz [ 233.488804][ T5883] usb 1-1: config 0 descriptor?? [ 233.520777][ T5883] usb 4-1: USB disconnect, device number 69 [ 233.605974][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.696251][ T5899] usb 1-1: USB disconnect, device number 50 [ 234.312171][ T5885] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 234.462144][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 234.469027][ T5885] usb 4-1: config 2 interface 0 has no altsetting 0 [ 234.472243][ T5899] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 234.480721][ T5885] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 234.493880][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.505921][ T5885] usb 4-1: Product: syz [ 234.510142][ T5885] usb 4-1: Manufacturer: syz [ 234.515429][ T5885] usb 4-1: SerialNumber: syz [ 234.642435][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.650912][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.660447][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 234.666587][ T5899] usb 1-1: no configurations [ 234.671539][ T5899] usb 1-1: can't read configurations, error -22 [ 234.729850][ T5885] usb 4-1: USB disconnect, device number 70 [ 234.802236][ T5899] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 234.952295][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 234.958143][ T5899] usb 1-1: no configurations [ 234.963258][ T5899] usb 1-1: can't read configurations, error -22 [ 234.969765][ T5899] usb usb1-port1: attempt power cycle [ 235.043751][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.312242][ T5899] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 235.343696][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 235.349326][ T5899] usb 1-1: no configurations [ 235.354343][ T5899] usb 1-1: can't read configurations, error -22 [ 235.482314][ T5899] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 235.503033][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 235.508946][ T5899] usb 1-1: no configurations [ 235.513800][ T5899] usb 1-1: can't read configurations, error -22 [ 235.520425][ T5899] usb usb1-port1: unable to enumerate USB device [ 235.562164][ T47] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 235.683286][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.712174][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 235.718737][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 235.728671][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 235.740309][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 235.751520][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 235.766438][ T47] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 235.780669][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.789860][ T47] usb 4-1: Product: syz [ 235.798553][ T47] usb 4-1: Manufacturer: syz [ 235.803328][ T47] usb 4-1: SerialNumber: syz [ 235.811287][ T47] usb 4-1: config 0 descriptor?? [ 235.822568][ T8679] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 235.835297][ T47] radioshark2 4-1:0.0: Invalid radioSHARK2 device [ 235.842478][ T47] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22 [ 236.053619][ T47] usb 4-1: USB disconnect, device number 71 [ 236.722576][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.882261][ T47] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 237.032254][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 237.039352][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.048326][ T47] usb 4-1: config 255 has an invalid interface number: 190 but max is 1 [ 237.056868][ T47] usb 4-1: config 255 has an invalid interface number: 137 but max is 1 [ 237.065667][ T47] usb 4-1: config 255 has no interface number 0 [ 237.072119][ T47] usb 4-1: config 255 has no interface number 1 [ 237.078548][ T47] usb 4-1: config 255 interface 190 has no altsetting 0 [ 237.085715][ T47] usb 4-1: config 255 interface 137 has no altsetting 0 [ 237.094847][ T47] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 237.104371][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.112478][ T47] usb 4-1: Product: syz [ 237.116788][ T47] usb 4-1: Manufacturer: syz [ 237.121415][ T47] usb 4-1: SerialNumber: syz [ 237.352370][ T47] usb 4-1: USB disconnect, device number 72 [ 237.736786][ T8702] futex_wake_op: syz.0.838 tries to shift op by -33; fix this program [ 237.773126][ T8702] netdevsim netdevsim0: Direct firmware load for . [ 237.773126][ T8702] failed with error -2 [ 237.785153][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.797639][ T8702] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 237.797639][ T8702] [ 238.082340][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.560002][ T8712] netlink: 'syz.0.841': attribute type 25 has an invalid length. [ 238.571352][ T8712] netlink: 'syz.0.841': attribute type 28 has an invalid length. [ 238.606206][ T8712] tipc: Enabling of bearer rejected, failed to enable media [ 238.807940][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.003071][ T47] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 239.028020][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 239.058189][ T8716] bridge_slave_1: left allmulticast mode [ 239.068324][ T8716] bridge_slave_1: left promiscuous mode [ 239.088801][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.139722][ T8716] bridge_slave_0: left allmulticast mode [ 239.150065][ T8716] bridge_slave_0: left promiscuous mode [ 239.167298][ T47] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 239.180355][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.190093][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.205659][ T47] usb 1-1: config 0 descriptor?? [ 239.230118][ T47] usb 1-1: selecting invalid altsetting 1 [ 239.238350][ T47] flexcop_usb: set interface failed. [ 239.253407][ T47] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 239.383132][ T5840] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 239.543873][ T5840] usb 4-1: config 229 has an invalid descriptor of length 0, skipping remainder of the config [ 239.558849][ T5840] usb 4-1: config 229 has 0 interfaces, different from the descriptor's value: 1 [ 239.582998][ T5840] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 239.592656][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.612084][ T5840] usb 4-1: Product: syz [ 239.622411][ T5840] usb 4-1: Manufacturer: syz [ 239.636198][ T5840] usb 4-1: SerialNumber: syz [ 239.843830][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.042976][ T5840] usb 4-1: USB disconnect, device number 73 [ 240.413490][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.882381][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.027076][ T8725] netlink: 104 bytes leftover after parsing attributes in process `syz.3.846'. [ 241.133056][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.575574][ T5899] usb 1-1: USB disconnect, device number 55 [ 241.922325][ T5899] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 241.930145][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.082802][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 242.090239][ T5899] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 242.101683][ T5899] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.114762][ T5899] usb 1-1: config 1 interface 0 has no altsetting 0 [ 242.124704][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.40 [ 242.133899][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.141895][ T5899] usb 1-1: Product: syz [ 242.146239][ T5899] usb 1-1: Manufacturer: syz [ 242.150862][ T5899] usb 1-1: SerialNumber: syz [ 242.365849][ T5899] appletouch 1-1:1.0: Failed to read mode from device. [ 242.373176][ T5899] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 242.385149][ T5899] usb 1-1: USB disconnect, device number 56 [ 242.928818][ T8732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.963763][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.012280][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.177301][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.821863][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'. [ 245.042388][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.809013][ T8766] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.813276][ T10] IPVS: starting estimator thread 0... [ 245.912903][ T8768] IPVS: using max 30 ests per chain, 72000 per kthread [ 246.082451][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.165325][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.452102][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 246.582208][ T10] usb 1-1: device descriptor read/64, error -71 [ 246.852122][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 247.012195][ T10] usb 1-1: device descriptor read/64, error -71 [ 247.122932][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.132755][ T10] usb usb1-port1: attempt power cycle [ 247.202400][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.502128][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 247.533580][ T10] usb 1-1: device descriptor read/8, error -71 [ 247.782587][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 247.803679][ T10] usb 1-1: device descriptor read/8, error -71 [ 247.916556][ T10] usb usb1-port1: unable to enumerate USB device [ 248.162368][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.203262][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.242427][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.250803][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.285749][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.922862][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.322395][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.282851][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.362361][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.402415][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.442465][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.764163][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.770544][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.324148][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.482773][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.522323][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.682957][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.562444][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.362813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.605584][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.642421][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.685686][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.408095][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.722466][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.442940][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.762390][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.802438][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.442370][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.842314][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.882815][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.922421][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.484216][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.962375][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.202722][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.003222][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.042422][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.522542][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.082745][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.562689][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.962670][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.522737][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.602383][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.164122][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.174649][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.186045][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.723921][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.202399][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.652785][ T8416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.242390][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.843142][ T8416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.282479][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.403025][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.326756][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.602994][ T8416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.242461][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.522674][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.282449][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.362402][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.370582][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.652825][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.402574][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.122659][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.442380][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.402525][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.322342][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.243631][ T8417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.366339][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.162682][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.816125][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.083706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.282578][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.845273][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.922515][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.882402][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.204904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211283][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.222177][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.482426][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.242406][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.404240][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.682760][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.442412][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.242615][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.485616][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.445207][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.453479][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.013711][ T8420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.482399][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.564032][ T31] INFO: task kworker/0:2:945 blocked for more than 143 seconds. [ 332.571764][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 332.583787][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.599708][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.609444][ T31] task:kworker/0:2 state:D stack:22048 pid:945 tgid:945 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 332.627151][ T31] Workqueue: events rfkill_sync_work [ 332.632846][ T31] Call Trace: [ 332.636157][ T31] [ 332.639127][ T31] __schedule+0x1b18/0x50e0 [ 332.649186][ T31] ? do_raw_spin_lock+0x151/0x370 [ 332.655740][ T31] ? __pfx___schedule+0x10/0x10 [ 332.660660][ T31] ? schedule+0x90/0x360 [ 332.665693][ T31] ? schedule+0x90/0x360 [ 332.669984][ T31] schedule+0x163/0x360 [ 332.674724][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.680243][ T31] __mutex_lock+0x7fa/0x1000 [ 332.685468][ T31] ? __mutex_lock+0x5ed/0x1000 [ 332.690290][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 332.696051][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.701248][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 332.707747][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.714424][ T31] ? __lock_acquire+0xad5/0xd80 [ 332.719331][ T31] nfc_rfkill_set_block+0x50/0x310 [ 332.725101][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 332.730870][ T31] rfkill_set_block+0x1f1/0x440 [ 332.736515][ T31] rfkill_sync_work+0x12c/0x220 [ 332.741424][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 332.747650][ T31] process_scheduled_works+0xac3/0x18e0 [ 332.753576][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.759620][ T31] ? assign_work+0x367/0x3d0 [ 332.766032][ T31] worker_thread+0x870/0xd30 [ 332.770677][ T31] ? __kthread_parkme+0x169/0x1d0 [ 332.776372][ T31] ? __pfx_worker_thread+0x10/0x10 [ 332.781553][ T31] kthread+0x7a9/0x920 [ 332.788302][ T31] ? __pfx_worker_thread+0x10/0x10 [ 332.796018][ T31] ? __pfx_kthread+0x10/0x10 [ 332.800669][ T31] ? __pfx_kthread+0x10/0x10 [ 332.805869][ T31] ? __pfx_kthread+0x10/0x10 [ 332.810509][ T31] ? __pfx_kthread+0x10/0x10 [ 332.815722][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.820968][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 332.826631][ T31] ? __pfx_kthread+0x10/0x10 [ 332.831358][ T31] ret_from_fork+0x4b/0x80 [ 332.838378][ T31] ? __pfx_kthread+0x10/0x10 [ 332.845662][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.850486][ T31] [ 332.855154][ T31] INFO: task udevd:5208 blocked for more than 143 seconds. [ 332.863120][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 332.870433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.879652][ T31] task:udevd state:D stack:22440 pid:5208 tgid:5208 ppid:1 task_flags:0x400140 flags:0x00004002 [ 332.892214][ T31] Call Trace: [ 332.895544][ T31] [ 332.898674][ T31] __schedule+0x1b18/0x50e0 [ 332.903674][ T31] ? register_lock_class+0x54/0x330 [ 332.908921][ T31] ? __lock_acquire+0xad5/0xd80 [ 332.914336][ T31] ? __pfx___schedule+0x10/0x10 [ 332.919241][ T31] ? schedule+0x90/0x360 [ 332.923966][ T31] ? schedule+0x90/0x360 [ 332.928249][ T31] schedule+0x163/0x360 [ 332.933064][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.938560][ T31] __mutex_lock+0x7fa/0x1000 [ 332.943594][ T31] ? __mutex_lock+0x5ed/0x1000 [ 332.948410][ T31] ? uevent_show+0x17d/0x340 [ 332.953616][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.958695][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 332.969812][ T31] ? uevent_show+0x163/0x340 [ 332.975242][ T31] uevent_show+0x17d/0x340 [ 332.979705][ T31] dev_attr_show+0x55/0xc0 [ 332.984711][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 332.989860][ T31] sysfs_kf_seq_show+0x331/0x4c0 [ 332.995859][ T31] seq_read_iter+0x471/0xda0 [ 333.000509][ T31] vfs_read+0x9a0/0xb90 [ 333.006531][ T31] ? __pfx_vfs_read+0x10/0x10 [ 333.011259][ T31] ksys_read+0x19d/0x2d0 [ 333.017455][ T31] ? __pfx_ksys_read+0x10/0x10 [ 333.022633][ T31] ? do_syscall_64+0xb6/0x230 [ 333.027349][ T31] do_syscall_64+0xf3/0x230 [ 333.031863][ T31] ? clear_bhb_loop+0x45/0xa0 [ 333.036689][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.042721][ T31] RIP: 0033:0x7f2482f16b6a [ 333.047160][ T31] RSP: 002b:00007ffc359b0638 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.055715][ T31] RAX: ffffffffffffffda RBX: 000055fa96e78340 RCX: 00007f2482f16b6a [ 333.063800][ T31] RDX: 0000000000001000 RSI: 000055fa96e6d700 RDI: 000000000000000c [ 333.072138][ T31] RBP: 000055fa96e78340 R08: 000000000000000c R09: 0000000000000020 [ 333.080223][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 333.088272][ T31] R13: 0000000000003fff R14: 00007ffc359b0b18 R15: 000000000000000a [ 333.096448][ T31] [ 333.099517][ T31] INFO: task kworker/0:3:5882 blocked for more than 143 seconds. [ 333.107404][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 333.114779][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.123612][ T31] task:kworker/0:3 state:D stack:20736 pid:5882 tgid:5882 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 333.135891][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 333.142657][ T31] Call Trace: [ 333.145971][ T31] [ 333.148923][ T31] __schedule+0x1b18/0x50e0 [ 333.153523][ T31] ? do_raw_spin_lock+0x151/0x370 [ 333.158599][ T31] ? __pfx___schedule+0x10/0x10 [ 333.163533][ T31] ? schedule+0x90/0x360 [ 333.167805][ T31] ? schedule+0x90/0x360 [ 333.172095][ T31] schedule+0x163/0x360 [ 333.176379][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.181892][ T31] __mutex_lock+0x7fa/0x1000 [ 333.186566][ T31] ? look_up_lock_class+0x7b/0x170 [ 333.191819][ T31] ? __mutex_lock+0x5ed/0x1000 [ 333.196657][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.203012][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.208071][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.213369][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 333.219124][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.225292][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 333.231043][ T31] process_scheduled_works+0xac3/0x18e0 [ 333.236709][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.242773][ T31] ? assign_work+0x367/0x3d0 [ 333.247424][ T31] worker_thread+0x870/0xd30 [ 333.252112][ T31] ? __kthread_parkme+0x169/0x1d0 [ 333.257160][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.262372][ T31] kthread+0x7a9/0x920 [ 333.266464][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.271588][ T31] ? __pfx_kthread+0x10/0x10 [ 333.276272][ T31] ? __pfx_kthread+0x10/0x10 [ 333.280892][ T31] ? __pfx_kthread+0x10/0x10 [ 333.285682][ T31] ? __pfx_kthread+0x10/0x10 [ 333.290310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.295597][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.300825][ T31] ? __pfx_kthread+0x10/0x10 [ 333.305533][ T31] ret_from_fork+0x4b/0x80 [ 333.309972][ T31] ? __pfx_kthread+0x10/0x10 [ 333.314644][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.319447][ T31] [ 333.322550][ T31] INFO: task kworker/1:5:5884 blocked for more than 144 seconds. [ 333.330322][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 333.337682][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.346402][ T31] task:kworker/1:5 state:D stack:20672 pid:5884 tgid:5884 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 333.358509][ T31] Workqueue: usb_hub_wq hub_event [ 333.363593][ T31] Call Trace: [ 333.366871][ T31] [ 333.369799][ T31] __schedule+0x1b18/0x50e0 [ 333.374375][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 333.380294][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.385683][ T31] ? __pfx___schedule+0x10/0x10 [ 333.390576][ T31] ? schedule+0x90/0x360 [ 333.394910][ T31] ? schedule+0x90/0x360 [ 333.399180][ T31] schedule+0x163/0x360 [ 333.403444][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.408948][ T31] __mutex_lock+0x7fa/0x1000 [ 333.413658][ T31] ? __mutex_lock+0x5ed/0x1000 [ 333.418573][ T31] ? rfkill_register+0x34/0x8c0 [ 333.423614][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.428669][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 333.434055][ T31] ? __init_waitqueue_head+0xae/0x150 [ 333.439477][ T31] ? device_initialize+0x266/0x460 [ 333.444745][ T31] rfkill_register+0x34/0x8c0 [ 333.449543][ T31] hso_create_net_device+0xbcd/0xcf0 [ 333.455084][ T31] hso_probe+0x93c/0x1790 [ 333.459470][ T31] ? usb_disable_lpm+0x77/0x380 [ 333.464388][ T31] usb_probe_interface+0x650/0xbc0 [ 333.469536][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 333.475320][ T31] really_probe+0x2b9/0xad0 [ 333.480037][ T31] __driver_probe_device+0x1a2/0x390 [ 333.485422][ T31] driver_probe_device+0x50/0x430 [ 333.490484][ T31] __device_attach_driver+0x2d6/0x530 [ 333.496030][ T31] bus_for_each_drv+0x258/0x2e0 [ 333.501009][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 333.506992][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 333.512461][ T31] __device_attach+0x341/0x530 [ 333.517266][ T31] ? __pfx___device_attach+0x10/0x10 [ 333.522824][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.525969][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.536588][ T31] bus_probe_device+0x189/0x260 [ 333.541509][ T31] device_add+0x856/0xbf0 [ 333.546126][ T31] usb_set_configuration+0x1999/0x1fe0 [ 333.551732][ T31] usb_generic_driver_probe+0x88/0x140 [ 333.557433][ T31] usb_probe_device+0x1b8/0x380 [ 333.562530][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 333.567932][ T31] really_probe+0x2b9/0xad0 [ 333.572746][ T31] __driver_probe_device+0x1a2/0x390 [ 333.578075][ T31] driver_probe_device+0x50/0x430 [ 333.583186][ T31] __device_attach_driver+0x2d6/0x530 [ 333.588599][ T31] bus_for_each_drv+0x258/0x2e0 [ 333.593526][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 333.599451][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 333.604950][ T31] __device_attach+0x341/0x530 [ 333.609754][ T31] ? __pfx___device_attach+0x10/0x10 [ 333.615138][ T31] bus_probe_device+0x189/0x260 [ 333.620037][ T31] device_add+0x856/0xbf0 [ 333.624477][ T31] usb_new_device+0x1052/0x19a0 [ 333.629469][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 333.634744][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.639980][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.645258][ T31] hub_event+0x2bfd/0x50f0 [ 333.649729][ T31] ? __pfx_hub_event+0x10/0x10 [ 333.654583][ T31] ? __lock_acquire+0xad5/0xd80 [ 333.659498][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 333.665445][ T31] process_scheduled_works+0xac3/0x18e0 [ 333.671586][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.677714][ T31] ? assign_work+0x367/0x3d0 [ 333.682492][ T31] worker_thread+0x870/0xd30 [ 333.687122][ T31] ? __kthread_parkme+0x169/0x1d0 [ 333.692244][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.697390][ T31] kthread+0x7a9/0x920 [ 333.701492][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.706727][ T31] ? __pfx_kthread+0x10/0x10 [ 333.711367][ T31] ? __pfx_kthread+0x10/0x10 [ 333.716231][ T31] ? __pfx_kthread+0x10/0x10 [ 333.720854][ T31] ? __pfx_kthread+0x10/0x10 [ 333.725538][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.730768][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.736062][ T31] ? __pfx_kthread+0x10/0x10 [ 333.740686][ T31] ret_from_fork+0x4b/0x80 [ 333.745333][ T31] ? __pfx_kthread+0x10/0x10 [ 333.750047][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.754886][ T31] [ 333.757946][ T31] INFO: task kworker/1:8:5923 blocked for more than 144 seconds. [ 333.765826][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 333.773298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.782166][ T31] task:kworker/1:8 state:D stack:18944 pid:5923 tgid:5923 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 333.794394][ T31] Workqueue: usb_hub_wq hub_event [ 333.799471][ T31] Call Trace: [ 333.803150][ T31] [ 333.806219][ T31] __schedule+0x1b18/0x50e0 [ 333.810786][ T31] ? __lock_acquire+0xad5/0xd80 [ 333.815852][ T31] ? __pfx___schedule+0x10/0x10 [ 333.820767][ T31] ? schedule+0x90/0x360 [ 333.825448][ T31] ? schedule+0x90/0x360 [ 333.829746][ T31] schedule+0x163/0x360 [ 333.833993][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.839577][ T31] __mutex_lock+0x7fa/0x1000 [ 333.844427][ T31] ? __mutex_lock+0x5ed/0x1000 [ 333.849540][ T31] ? rfkill_register+0x34/0x8c0 [ 333.854486][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.859552][ T31] rfkill_register+0x34/0x8c0 [ 333.864301][ T31] hci_register_dev+0x407/0x8b0 [ 333.869208][ T31] btusb_probe+0x2cd8/0x30a0 [ 333.873906][ T31] ? __pfx_btusb_probe+0x10/0x10 [ 333.878869][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 333.884836][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.891198][ T31] ? usb_disable_lpm+0x77/0x380 [ 333.896134][ T31] usb_probe_interface+0x650/0xbc0 [ 333.901293][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 333.907036][ T31] really_probe+0x2b9/0xad0 [ 333.911575][ T31] __driver_probe_device+0x1a2/0x390 [ 333.917045][ T31] driver_probe_device+0x50/0x430 [ 333.922202][ T31] __device_attach_driver+0x2d6/0x530 [ 333.927623][ T31] bus_for_each_drv+0x258/0x2e0 [ 333.932613][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 333.938553][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 333.944014][ T31] __device_attach+0x341/0x530 [ 333.948810][ T31] ? __pfx___device_attach+0x10/0x10 [ 333.954238][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.959494][ T31] bus_probe_device+0x189/0x260 [ 333.964408][ T31] device_add+0x856/0xbf0 [ 333.968767][ T31] usb_set_configuration+0x1999/0x1fe0 [ 333.974342][ T31] usb_generic_driver_probe+0x88/0x140 [ 333.979841][ T31] usb_probe_device+0x1b8/0x380 [ 333.984752][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 333.990156][ T31] really_probe+0x2b9/0xad0 [ 333.994733][ T31] __driver_probe_device+0x1a2/0x390 [ 334.000056][ T31] driver_probe_device+0x50/0x430 [ 334.005277][ T31] __device_attach_driver+0x2d6/0x530 [ 334.010788][ T31] bus_for_each_drv+0x258/0x2e0 [ 334.015739][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 334.021670][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 334.027128][ T31] __device_attach+0x341/0x530 [ 334.032040][ T31] ? __pfx___device_attach+0x10/0x10 [ 334.037391][ T31] bus_probe_device+0x189/0x260 [ 334.042328][ T31] device_add+0x856/0xbf0 [ 334.046706][ T31] usb_new_device+0x1052/0x19a0 [ 334.051587][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 334.056906][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.062246][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.067492][ T31] hub_event+0x2bfd/0x50f0 [ 334.072037][ T31] ? __pfx_hub_event+0x10/0x10 [ 334.076840][ T31] ? __lock_acquire+0xad5/0xd80 [ 334.081751][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 334.087578][ T31] process_scheduled_works+0xac3/0x18e0 [ 334.093255][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.099284][ T31] ? assign_work+0x367/0x3d0 [ 334.103962][ T31] worker_thread+0x870/0xd30 [ 334.108599][ T31] ? __kthread_parkme+0x169/0x1d0 [ 334.113733][ T31] ? __pfx_worker_thread+0x10/0x10 [ 334.118879][ T31] kthread+0x7a9/0x920 [ 334.123036][ T31] ? __pfx_worker_thread+0x10/0x10 [ 334.128213][ T31] ? __pfx_kthread+0x10/0x10 [ 334.132896][ T31] ? __pfx_kthread+0x10/0x10 [ 334.137562][ T31] ? __pfx_kthread+0x10/0x10 [ 334.142241][ T31] ? __pfx_kthread+0x10/0x10 [ 334.147133][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.152435][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.157709][ T31] ? __pfx_kthread+0x10/0x10 [ 334.162414][ T31] ret_from_fork+0x4b/0x80 [ 334.166968][ T31] ? __pfx_kthread+0x10/0x10 [ 334.171604][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.176481][ T31] [ 334.179530][ T31] INFO: task syz.1.518:7715 blocked for more than 144 seconds. [ 334.187221][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 334.194787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.203528][ T31] task:syz.1.518 state:D stack:25248 pid:7715 tgid:7714 ppid:5851 task_flags:0x400040 flags:0x00024004 [ 334.216000][ T31] Call Trace: [ 334.219328][ T31] [ 334.222393][ T31] __schedule+0x1b18/0x50e0 [ 334.226936][ T31] ? lockdep_unlock+0x8d/0x120 [ 334.231709][ T31] ? validate_chain+0x8a7/0x24e0 [ 334.236900][ T31] ? __pfx___schedule+0x10/0x10 [ 334.241796][ T31] ? register_lock_class+0x54/0x330 [ 334.247117][ T31] ? schedule+0x90/0x360 [ 334.251388][ T31] ? schedule+0x90/0x360 [ 334.255765][ T31] schedule+0x163/0x360 [ 334.259984][ T31] schedule_timeout+0xb1/0x290 [ 334.264933][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 334.270378][ T31] ? wait_for_completion+0x30e/0x630 [ 334.275834][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.281083][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 334.286389][ T31] ? wait_for_completion+0x30e/0x630 [ 334.291710][ T31] wait_for_completion+0x360/0x630 [ 334.297125][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 334.302871][ T31] ? __flush_work+0xee/0xc60 [ 334.307493][ T31] __flush_work+0xa48/0xc60 [ 334.312192][ T31] ? __flush_work+0xee/0xc60 [ 334.316817][ T31] ? __pfx___flush_work+0x10/0x10 [ 334.321850][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 334.327412][ T31] ? __pfx___cancel_work+0x10/0x10 [ 334.332658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.337961][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 334.345208][ T31] __cancel_work_sync+0xbc/0x110 [ 334.350200][ T31] rfkill_unregister+0x96/0x230 [ 334.355137][ T31] nfc_unregister_device+0x96/0x2a0 [ 334.360390][ T31] virtual_ncidev_close+0x56/0x90 [ 334.365561][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 334.371319][ T31] __fput+0x3e9/0x9f0 [ 334.375437][ T31] task_work_run+0x251/0x310 [ 334.380162][ T31] ? __pfx_task_work_run+0x10/0x10 [ 334.385411][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 334.391169][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 334.396883][ T31] do_syscall_64+0x100/0x230 [ 334.401509][ T31] ? clear_bhb_loop+0x45/0xa0 [ 334.406608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.412644][ T31] RIP: 0033:0x7f9135b8d169 [ 334.417085][ T31] RSP: 002b:00007f91369aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.426005][ T31] RAX: ffffffffffffffea RBX: 00007f9135da5fa0 RCX: 00007f9135b8d169 [ 334.434063][ T31] RDX: 0000000000005400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 334.442214][ T31] RBP: 00007f9135c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 334.450306][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.458479][ T31] R13: 0000000000000000 R14: 00007f9135da5fa0 R15: 00007f9135ecfa28 [ 334.466670][ T31] [ 334.469748][ T31] INFO: task syz-executor:7926 blocked for more than 145 seconds. [ 334.478528][ T31] Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 [ 334.486247][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.486483][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.503187][ T31] task:syz-executor state:D stack:23720 pid:7926 tgid:7926 ppid:5820 task_flags:0x400000 flags:0x00000004 [ 334.515215][ T31] Call Trace: [ 334.518548][ T31] [ 334.521502][ T31] __schedule+0x1b18/0x50e0 [ 334.526135][ T31] ? __lock_acquire+0xad5/0xd80 [ 334.531042][ T31] ? __pfx___schedule+0x10/0x10 [ 334.536224][ T31] ? schedule+0x90/0x360 [ 334.540559][ T31] ? schedule+0x90/0x360 [ 334.544877][ T31] schedule+0x163/0x360 [ 334.549076][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.554616][ T31] __mutex_lock+0x7fa/0x1000 [ 334.559265][ T31] ? __mutex_lock+0x5ed/0x1000 [ 334.564204][ T31] ? rfkill_register+0x34/0x8c0 [ 334.569132][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.574320][ T31] ? device_initialize+0x266/0x460 [ 334.579490][ T31] rfkill_register+0x34/0x8c0 [ 334.584280][ T31] hci_register_dev+0x407/0x8b0 [ 334.589178][ T31] vhci_create_device+0x35b/0x6b0 [ 334.594342][ T31] vhci_write+0x3d5/0x4a0 [ 334.598718][ T31] vfs_write+0x70f/0xd10 [ 334.603052][ T31] ? __pfx_vhci_write+0x10/0x10 [ 334.607949][ T31] ? __pfx_vfs_write+0x10/0x10 [ 334.612825][ T31] ksys_write+0x19d/0x2d0 [ 334.617198][ T31] ? __pfx_ksys_write+0x10/0x10 [ 334.622214][ T31] ? do_syscall_64+0xb6/0x230 [ 334.626987][ T31] do_syscall_64+0xf3/0x230 [ 334.631538][ T31] ? clear_bhb_loop+0x45/0xa0 [ 334.636425][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.642438][ T31] RIP: 0033:0x7f5bbad8bbe0 [ 334.646883][ T31] RSP: 002b:00007ffc5772fd18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 334.655374][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5bbad8bbe0 [ 334.663447][ T31] RDX: 0000000000000002 RSI: 00007ffc5772fd2a RDI: 00000000000000ca [ 334.672991][ T31] RBP: 00007f5bbafa6738 R08: 00000000000000d7 R09: 0000000000000000 [ 334.681007][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 334.689086][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 334.697181][ T31] [ 334.700256][ T31] [ 334.700256][ T31] Showing all locks held in the system: [ 334.708125][ T31] 1 lock held by khungtaskd/31: [ 334.713036][ T31] #0: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 334.723107][ T31] 2 locks held by kworker/u8:2/36: [ 334.728249][ T31] #0: ffff88801d316148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.739523][ T31] #1: ffffc90000ac7c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 334.751762][ T31] 4 locks held by kworker/0:2/945: [ 334.756933][ T31] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.768097][ T31] #1: ffffc90003d17c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 334.780572][ T31] #2: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 334.790764][ T31] #3: ffff88805de68100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 334.800550][ T31] 4 locks held by udevd/5208: [ 334.805310][ T31] #0: ffff88805b011d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 334.814211][ T31] #1: ffff8880256e6088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 334.823747][ T31] #2: ffff888079dc72d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 334.833282][ T31] #3: ffff88805de68100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 334.842516][ T31] 2 locks held by getty/5591: [ 334.847218][ T31] #0: ffff8880316cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.857117][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 334.867332][ T31] 3 locks held by kworker/0:3/5882: [ 334.872667][ T31] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.883874][ T31] #1: ffffc900041bfc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 334.897539][ T31] #2: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 334.909657][ T31] 6 locks held by kworker/1:5/5884: [ 334.915022][ T31] #0: ffff8880216df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.926497][ T31] #1: ffffc900041dfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 334.938414][ T31] #2: ffff888144b78190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 334.947387][ T31] #3: ffff888054f9e190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 334.956735][ T31] #4: ffff88805ea3f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 334.966240][ T31] #5: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 334.976324][ T31] 6 locks held by kworker/1:8/5923: [ 334.981545][ T31] #0: ffff8880216df548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 334.993192][ T31] #1: ffffc90004347c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 335.005151][ T31] #2: ffff888144b98190 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 335.014365][ T31] #3: ffff88802505d190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 335.023725][ T31] #4: ffff888012766160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x90/0x530 [ 335.033179][ T31] #5: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 335.043956][ T31] 2 locks held by kworker/u8:14/6714: [ 335.049375][ T31] #0: ffff88801d316148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 335.060651][ T31] #1: ffffc9000241fc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 335.072886][ T31] 1 lock held by syz.1.518/7715: [ 335.077848][ T31] #0: ffff88805de68100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 335.087730][ T31] 2 locks held by syz-executor/7926: [ 335.093097][ T31] #0: ffff88805bfb4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6b0 [ 335.103319][ T31] #1: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 335.113646][ T31] 3 locks held by syz.2.843/8718: [ 335.118703][ T31] #0: ffffffff8ff3a410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.127154][ T31] #1: ffffffff8ff3a2c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 335.136667][ T31] #2: ffffffff901afaa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 335.146720][ T31] 2 locks held by syz.3.846/8725: [ 335.151763][ T31] #0: ffffffff8ff3a410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.160086][ T31] #1: ffffffff8ff3a2c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 335.169345][ T31] 2 locks held by syz.4.855/8756: [ 335.174428][ T31] #0: ffffffff8ff3a410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.182830][ T31] #1: ffffffff8ff3a2c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 335.191860][ T31] [ 335.194275][ T31] ============================================= [ 335.194275][ T31] [ 335.202861][ T31] NMI backtrace for cpu 0 [ 335.202880][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 335.202904][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.202916][ T31] Call Trace: [ 335.202923][ T31] [ 335.202931][ T31] dump_stack_lvl+0x241/0x360 [ 335.202962][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.202988][ T31] ? __pfx__printk+0x10/0x10 [ 335.203018][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 335.203054][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 335.203073][ T31] ? _printk+0xd5/0x120 [ 335.203096][ T31] ? __wake_up_klogd+0xcc/0x110 [ 335.203121][ T31] ? __pfx__printk+0x10/0x10 [ 335.203147][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.203177][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 335.203201][ T31] watchdog+0x1058/0x10a0 [ 335.203230][ T31] ? watchdog+0x1ea/0x10a0 [ 335.203260][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.203287][ T31] kthread+0x7a9/0x920 [ 335.203312][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.203339][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203361][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203383][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203406][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203429][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.203450][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 335.203476][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203500][ T31] ret_from_fork+0x4b/0x80 [ 335.203518][ T31] ? __pfx_kthread+0x10/0x10 [ 335.203541][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.203579][ T31] [ 335.203587][ T31] Sending NMI from CPU 0 to CPUs 1: [ 335.364538][ C1] NMI backtrace for cpu 1 [ 335.364556][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 335.364577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.364589][ C1] Workqueue: 0x0 (bat_events) [ 335.364614][ C1] RIP: 0010:lock_is_held_type+0x6e/0x1a0 [ 335.364639][ C1] Code: 65 4c 8b 24 25 08 c0 3f 93 41 83 bc 24 ec 0a 00 00 00 0f 85 e7 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 2c 24 fa 48 c7 c7 f4 5d 52 8e e8 41 1b 00 00 65 ff 05 6a 58 [ 335.364655][ C1] RSP: 0018:ffffc900001276b8 EFLAGS: 00000046 [ 335.364668][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000002 [ 335.364680][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8eb3a6e0 [ 335.364691][ C1] RBP: ffffffff933fc020 R08: ffffffff903cfd77 R09: 1ffffffff2079fae [ 335.364705][ C1] R10: dffffc0000000000 R11: fffffbfff2079faf R12: ffff88801c280000 [ 335.364718][ C1] R13: ffffffff8eb73620 R14: 00000000ffffffff R15: ffffffff8eb3a6e0 [ 335.364730][ C1] FS: 0000000000000000(0000) GS:ffff888125324000(0000) knlGS:0000000000000000 [ 335.364744][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.364756][ C1] CR2: 0000559876b5fa48 CR3: 000000000e938000 CR4: 00000000003526f0 [ 335.364771][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000d8 [ 335.364781][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 335.364791][ C1] Call Trace: [ 335.364798][ C1] [ 335.364804][ C1] ? nmi_cpu_backtrace+0x3d1/0x4e0 [ 335.364825][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 335.364842][ C1] ? look_up_lock_class+0x7b/0x170 [ 335.364865][ C1] ? lock_acquire+0x1fc/0x2f0 [ 335.364892][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 335.364917][ C1] ? nmi_handle+0x196/0x5e0 [ 335.364934][ C1] ? nmi_handle+0x7e/0x5e0 [ 335.364952][ C1] ? lock_is_held_type+0x6e/0x1a0 [ 335.364972][ C1] ? default_do_nmi+0x63/0x160 [ 335.364989][ C1] ? exc_nmi+0x123/0x1f0 [ 335.365004][ C1] ? end_repeat_nmi+0xf/0x53 [ 335.365026][ C1] ? lock_is_held_type+0x6e/0x1a0 [ 335.365048][ C1] ? lock_is_held_type+0x6e/0x1a0 [ 335.365069][ C1] ? lock_is_held_type+0x6e/0x1a0 [ 335.365090][ C1] [ 335.365095][ C1] [ 335.365104][ C1] rcu_read_lock_sched_held+0x91/0x140 [ 335.365122][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 335.365139][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 335.365162][ C1] cpuacct_charge+0x12f/0x330 [ 335.365179][ C1] update_curr_task+0xf0/0x330 [ 335.365205][ C1] update_curr+0x42c/0xbd0 [ 335.365226][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 335.365251][ C1] dequeue_entity+0x27/0x14b0 [ 335.365274][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 335.365294][ C1] ? sched_clock+0x4a/0x70 [ 335.365317][ C1] dequeue_entities+0x262/0x13a0 [ 335.365343][ C1] dequeue_task_fair+0x293/0x6a0 [ 335.365364][ C1] __schedule+0x6ac/0x50e0 [ 335.365394][ C1] ? __pfx___schedule+0x10/0x10 [ 335.365418][ C1] ? schedule+0x90/0x360 [ 335.365437][ C1] ? schedule+0x90/0x360 [ 335.365454][ C1] schedule+0x163/0x360 [ 335.365474][ C1] worker_thread+0xa30/0xd30 [ 335.365496][ C1] ? __kthread_parkme+0x169/0x1d0 [ 335.365514][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.365530][ C1] kthread+0x7a9/0x920 [ 335.365550][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.365566][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365584][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365602][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365621][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365639][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.365658][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 335.365678][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365697][ C1] ret_from_fork+0x4b/0x80 [ 335.365711][ C1] ? __pfx_kthread+0x10/0x10 [ 335.365730][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.365759][ C1] [ 335.747321][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 335.754206][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 335.765699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.775794][ T31] Call Trace: [ 335.779109][ T31] [ 335.782084][ T31] dump_stack_lvl+0x241/0x360 [ 335.786778][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.791988][ T31] ? __pfx__printk+0x10/0x10 [ 335.796600][ T31] ? vscnprintf+0x5d/0x90 [ 335.800935][ T31] panic+0x349/0x880 [ 335.804926][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 335.810309][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 335.816480][ T31] ? __pfx_panic+0x10/0x10 [ 335.820907][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 335.826287][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 335.832467][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 335.838632][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 335.844911][ T31] watchdog+0x1097/0x10a0 [ 335.849256][ T31] ? watchdog+0x1ea/0x10a0 [ 335.853719][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.858430][ T31] kthread+0x7a9/0x920 [ 335.862545][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.867357][ T31] ? __pfx_kthread+0x10/0x10 [ 335.872031][ T31] ? __pfx_kthread+0x10/0x10 [ 335.876652][ T31] ? __pfx_kthread+0x10/0x10 [ 335.881269][ T31] ? __pfx_kthread+0x10/0x10 [ 335.885868][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.891076][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 335.896319][ T31] ? __pfx_kthread+0x10/0x10 [ 335.900918][ T31] ret_from_fork+0x4b/0x80 [ 335.905339][ T31] ? __pfx_kthread+0x10/0x10 [ 335.909938][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.914725][ T31] [ 335.918067][ T31] Kernel Offset: disabled [ 335.922417][ T31] Rebooting in 86400 seconds..