last executing test programs: 9.100205098s ago: executing program 3 (id=678): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b000100627269646765"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600a9a7bd250a9d4990bdfe1d7", @ANYRES32=r8, @ANYRES16=0x0], 0x20}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r9}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000) 6.619984078s ago: executing program 3 (id=683): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x3, 0x30}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r4, 0x7c7b912c}, &(0x7f0000000340)=0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x1d3, "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"}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000007f0000000000000000"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000008500000005000000bf09000000000000550901000000000a950000000000000503000000000000007baaf8ff00000000b5090808000000007baaf0ff00000000bf8700000000000007070000bc830000000000000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0dc6552069bd07e4452821317131b7a76887fd792c431e6c07d770926c4e60243d198372482b911d29daac57d", 0x5a5, 0xfffffffffffffffb) keyctl$update(0x2, r8, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) 5.200038802s ago: executing program 1 (id=687): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000980)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.stat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8a\xc4#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdbK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbxz9p\x01o\x1bm'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x8e\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xed8R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2a3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x5dd]}}) 5.016084793s ago: executing program 4 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000090) sendto$inet6(r1, &(0x7f00000005c0)="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", 0x11a, 0x80, &(0x7f000005ffe4)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/22, 0x16}, 0x7}], 0x1, 0x40000043, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a320000000005000100070000001400078008001340000000000800124009"], 0x64}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r5 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000140)=0x1) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="40e99af6c755c31f56aa1b36f80ceb297062bd32a7334df5fe8e64ef41c2d372fb14bf052a6f3b7fe4fafd6c35d369cca3da8922e0cdf52a08b3fbe1651078139ac3c99bbc218cb20f3a75a3aaa8e1919a9dae2d6553001951c3f92ae1a8a3ec5908f38a836432101a75ecfa7f2bef90ee36ddd8406ec73ab20fb29206e2041a", 0x80}], 0x1, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x18}, 0x4004) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "c8d62851503efd1e", "1e50d361d6960041b6d7cbc9f4cb1582", "5429edf9", "1f7095110f08c2ee"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) 4.918341468s ago: executing program 3 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.835936175s ago: executing program 1 (id=690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) pause() r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x7, 0x4, 0x80000001, r4}) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000005) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.671469653s ago: executing program 3 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000140)="05632aa4f8b4e5a3789a8ddb7eb038083844", 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000d90100000000000001"]) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000040)={@local, @multicast1}) 3.993099598s ago: executing program 2 (id=694): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24000045}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) (async) fcntl$notify(r0, 0x402, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24000045}, 0xc000) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) 3.929286109s ago: executing program 4 (id=695): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x7, 0x6, "edf79b034725"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='@\a('], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000240)={0x0, 0x7, 0x28, "22a855198e1f9e8f7f28b587692aff7f985dac765205aaf0ba511d2e5d8bc716e0530444003e4319"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bbbbbbbbbb00ffffffffffff86dd6455d759004800fffc01000000000000000000000000000020010000000000000000000000000289030005"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0xd, "4335798a8d31740d8c71cdb144"}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x3a, {0x3a, 0xe, "6c24ddafa540df934cd65b095fabe471547c1a9e46bb50dc727ae958940b3405914b37f3b4e9a6753c0a4e19f72ec6695c467bc66eb0638d"}}, &(0x7f0000000080)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "2f87cb7b4a94fd709a65a4d9b1d94048ea21fd0f0237c10c7b7e125a8d2288755f063c88e769aaf87d97eef817617f31139190b2afcc4503013b2fef192d391c32a5f2fe50b077203c06d45438298b3b3532c80112f08085333bcbd87695ba71ff5b5abcdd18fac5bbc7423f69cc3c94a79bd0dbaf43b60e5bd5f830a857067e3d71f53b3aad1111ed4b9cdda4cdb6ebae5d5a0bddb48ea7e7d176543493e6f882288a9dd2198810"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x6f, "58875766a3097a25425a02dbeeebea57418908a963cf7301cf0d0cdaedb5332af31cbc91531ba7cf6dc3f5ef3a75bad4f272c4648230e8e58efff6e4ca633dfbc6543fc1670192ed6222231eeb6f4be22c3e4d9a7b49958f321b66ae52e3394005eca8b7e628cdcee2303ba1cca9a3"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000280)={0x20, 0x81, 0x1, "ca"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "7994e9"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "152c88"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "1e39"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "0a86a7"}}) 3.824094407s ago: executing program 1 (id=696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x2}, 0x8) 3.626711146s ago: executing program 1 (id=697): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000004340)={0xb0000019}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x4008031, 0xffffffffffffffff, 0x20000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x3000) rmdir(&(0x7f0000000000)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="669e1b983f97e2023d", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000004000000100000,user_id=', @ANYRES8=r4, @ANYBLOB="2c67726f75709c2f1167", @ANYRESDEC=0x0]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x208440, 0x106) fstatfs(r7, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="cb61e1e5544b9da9905eee37e2253362873698", @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB="0a000200aaaaaaaaaa150000"], 0x50}, 0x1, 0xba01}, 0x0) sendmmsg$unix(r10, &(0x7f000000c3c0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000003140)="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", 0x1000}, {&(0x7f00000001c0)="241993e722af42fe59f21c42baffe279e036b6180e8613e577c8ac2de1022d", 0x1f}, {&(0x7f0000000340)="9b9fe31d245b23df94446686d321bb119313c3f7fb18546ab8ade5ce7e4505342cd6800416daaa2e113df84613b633862db9a4c1be4d47431a08217d661c26b6c569f7de8ea5b58816c86199bdfed4391730d9d2b87da69bd52e32", 0x5b}, {&(0x7f00000003c0)="200e4cdbb97b0a3a8fb945bcd637cae170bd5af9465da62d461a91e2354500305742a86a8962539cac9a5f14d36f3041588c1d5b", 0x34}, {&(0x7f0000002140)="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", 0x1000}], 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001cefffffff0000000000209180240000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x40002}}, {{&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001a40)="5cdd", 0x2}, {&(0x7f0000001c00)="5ebbced0145264152eee4152d6c76320938237a5e91972e9142ff612133c7d4dbde2bd3a3cb8fba1a7903038bfa0ebd2b919274f8fc8eafbb686c8cc9bc797f4a1e0860d483df8985fa22d7402633a9b1e9f74acb16c44ed63caa83c2c4b83033b81210055d9d372fb65f316fb4b4d2f6873b627ee2661b3cb03186e97028076edc4997409cb4f6962a8bbd7e377aa782f68f6e0865a8036412299", 0x9b}, {&(0x7f0000001cc0)="d5fc91307a3c779a3b880b8c6086f463da93a2631c64fde05a1c40a4a31cf4f02b67ae1996696af3b47d224e4798a3edb525a365071c7b110d7a9fe1414def4e072c9bbe65fbd50f7abcac10beea55ce13e338a3c8f213740fa1a09bc155892bfb2328bb3838097f4f6abb1d7caa4ab879f7ba6e06226a06294b39996bfd1d53611231ee32e7cb9d84d2f43fe8b581306ba82d2f1e9f196e18a3ef6c6f2d45d0100bdd1d103658be5b06cfa1902dc8dba1ac92176d0c25343ef15525f0a650fb3e3f15204a9198b4e60ab3480a61daf896fc", 0xd2}, {&(0x7f00000000c0)="7fed44bf", 0x4}], 0x4, &(0x7f0000001f40)=[@rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r8, r9, r11, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r8, r2, r5, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r8, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r7, r10, r5, 0xffffffffffffffff]}}], 0xe0, 0x40080}}, {{&(0x7f0000005180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005380)=[{&(0x7f0000005200)="2331ed260bbf322b91a1c9c25ad91826f81283e15a415b6aaf7079631f02a3e52d943a31818b13389a58baabbb5b0c186c2097793e6e743ea51817d8bccb97854b93", 0x42}, {&(0x7f0000002040)="908d490413", 0x5}, {&(0x7f0000005280)="7df1a45dccf2ff23022a3b7f21db01b28fed63ff5d48ef41c6adeb2f98f3cbb3c667a8bd1173088d5ef1558867675f292e044399d640261954ccd3e87b48274d96326e6e83538988d584064a939519cfc64dbff43491d02edd913b225fdb4d0a017382fde7a4af508dd5d4f8905a4507af91e1d707adfa3fc5fef8a0a585cd0000f0803d5f654b37c8704e9c3d21819c56b271846908d0cd4a1ac25204b410ce700435e8ae0240670786c702641295cd73c0178379f7182bd648631daf66122b06fe2811df1071f014298faf8c7ecaf5f63cdc90720efdf7d83bf8569c62ef0c81", 0xe1}], 0x3, &(0x7f00000054c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r8, r5, r5, r7, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0x68, 0x4008090}}, {{&(0x7f0000005540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0), 0x0, 0x0, 0x0, 0x40}}, {{&(0x7f0000005600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000005680)="0f0eba7093d5516828d8e78c19c1c05f34ea95674731144cac594f647120ded16e", 0x21}, {&(0x7f00000056c0)="f1643ecc86a3de6f0ab7b4b1a6d497b766f35f2af55b581693c9865af96ac603d97d788558cd5a445fb5f9f9f7111d55dac5773524c5003d75d6c7a322738ae3b74b6fda60c825d70b269bd76c24351642808243d9d03433b06605058f49b496e11b2ec139602de31f", 0x69}, {&(0x7f0000005740)="68af8a1e66304aaed65bbdde3e1d937acefff08759d7600c7bc33c617ff67dd8ccebb185e3b7b4a25799f4c0f260dc4e1a8de79425d2ab0457a5ebedd7ca1a4c3e36c6bc766ed6d5bb4847c519aaf29a5d7c7b9dea2c0c33c888", 0x5a}], 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000e59cb1bd00000000000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x890}}], 0x5, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r14 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000001ac0)={r13, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x3, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) 3.438769554s ago: executing program 2 (id=698): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000020000000200000000001f0074aa17e038940095ad11437f7be629e6574fde6e373b822dd56fa3b04253e21476a951cb7c89554da6a15fb88dd44739dc4996b19dc8b7fffbb8a5541c15ed233154d2569e8d36c446e2fd07ad0a8cab0d2b38c62ec88c2b911972e69fb15fe878684ecd3ed7bab817f83eeb64eb7a13b3416f3dde95f64ef863eb498df15be28f6b9dea252f8d4ef4db1516f60b1c12fedd7ee479d388808614fc8e571b99a8b58deea6355544a6e86de343", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r4}, 0x38) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2.928968116s ago: executing program 4 (id=699): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) 2.744035181s ago: executing program 3 (id=701): r0 = socket(0x2b, 0x80801, 0x1) socket(0x26, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.742014444s ago: executing program 4 (id=702): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0xede}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x58, {"0f017903d1993bf8000066450fd4f0410f06450fc35380b91c0900000f323e660f28f3c441c4c29d990000004648b816dcc89505590b760f23c80f21f8350000e0000f23f80f07"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x65, {"48b800000000000000000f23d00f21f835300000040f23f866ba410066b836b066ef660f388142090f01c2b8010000000f01c136640fc79cec461d0000c441ef11ea0fa7c0410f00980e0000006766490f7e5819"}}, @cpuid={0x2, 0x18, {0x0, 0xc}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x71, {"c744240074000000c7442402dd000000ff1c24b9e7080000b86a000000ba000000000f30470f01f8b966030000b800000000ba000000000f30440f20c0350e000000440f22c0c4c37bf03207f33e470fc70bc421345eccc4038d69cc000f01c2"}}, @cpuid={0x2, 0x18, {0x3, 0x6}}], 0x1be}) ioctl$KVM_NMI(r1, 0xae9a) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000300)) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x2a400, 0x0) write$rfkill(r2, &(0x7f0000000380)={0x1, 0x6, 0x3, 0x0, 0x1}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x10201, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "88a284800250ace8d16bbb621d3188bfe4443f97690132400a6aff0983c46cb3ce6a239acb602e4ffaf614825ea2605d00a87042b9cba9a48ec011c1e044f99c", 0x3b}, 0x48, r3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000580)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000005c0)={r4, 0x0, 0xfffffffffffffff9, 0x3ff, 0x6}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newtclass={0x3c, 0x28, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0xffff, 0xfff2}, {0x0, 0xf}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x2008000) r5 = io_uring_setup(0x55b, &(0x7f0000000700)={0x0, 0x7f76, 0x4000, 0x1, 0xcd, 0x0, r2}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000780)={r1}, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000840)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000880)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000008c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000900)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000940)={r6, 0x1, 0x1, 0x121aeee0, 0x1, [r7, r8, r9, r10], [0x1733, 0x759000, 0x8, 0x9], [0x7, 0x7fffffff, 0x7, 0x5f8], [0x5, 0x1ff, 0x4, 0x4]}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) close(r2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x40010, r1, 0x64ffd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48015}, 0x410) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000ac0)={0x9, 0x0, 0x3}) 2.588494141s ago: executing program 0 (id=703): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)={0x3b}, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@RTM_NEWNSID={0x14, 0x58, 0x4837deceb25b88bb, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.485344709s ago: executing program 4 (id=704): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000300)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet6(0xa, 0x5, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000340)={0x8, 'nicvf0\x00', {'caif0\x00'}, 0xfff9}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$pagemap(r3, &(0x7f0000000400)) r6 = syz_io_uring_setup(0x1e5, &(0x7f0000000440)={0x0, 0x4c21, 0x2, 0x3, 0x231, 0x0, r1}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000600)={&(0x7f0000000540)=""/132, 0x84}) fsetxattr$security_ima(r6, &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "f3bb035dd41a15a958c3514e837c53f5"}, 0x11, 0x3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x4}, 0x68) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000740)={0x0, 0x2, 0x83, 0xe, 0x0, 0x7fff, "1cf297233a54c89dee934bb4e5fe6b67", 0x6, 0xc4, 0x36, 0xf3, 0x1, 0x1, 0x8}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000800)) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f00000008c0)={0xf000000, 0x1ff, 0x100, r1, 0x0, &(0x7f0000000880)={0x9b0908, 0xc1fe, '\x00', @string=&(0x7f0000000840)=0xf1}}) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x181001, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x114, r6, 0xf0428000) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x58040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f0000000980)) write$P9_RSTATu(r9, &(0x7f0000000a00)={0x54, 0x7d, 0x2, {{0x0, 0x35, 0x3, 0x7f, {0x2, 0x0, 0x4}, 0x14000000, 0x929, 0x0, 0x866, 0x1, '\x00', 0x0, '', 0x1, '^'}, 0xa, '/dev/vcsu\x00', r4, r5, r4}}, 0x54) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000a80), 0x40080, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x810, r9, 0x10000000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000b40)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x625781fe, 0x2, &(0x7f0000000ac0)="beb96b155ccf1e665a860b8fee4dbfd6893e7b50ec977e873c1874500df8a4f7ef61c75cb7a0862b76feb2261dbca662bf6a84faf6a37c0b55a119c66735c1ff16c65a457cdaf1b380d812ed17d7104989874fb18077b8ff", 0x1ff, 0x0, 0x1, {0x3, r12}}) sendmsg$nl_route(r9, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)=@can_delroute={0x134, 0x19, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4d, 0x5c, 0x3d, 0x1, 0x60, "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", 0x0, "8c77e4745c43b48abd335ef78906e8efa5625b10"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 2.439860281s ago: executing program 3 (id=705): r0 = gettid() r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) r6 = socket(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}, 0x2020) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x5}, {0x6, 0x8}], r1}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r4, &(0x7f00000001c0)=0x10, 0x8) tee(r3, r2, 0x8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.737691887s ago: executing program 1 (id=707): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x2}, 0x8) 1.467997108s ago: executing program 2 (id=708): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x380000, @loopback, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x4000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)=@arm64) 1.412512184s ago: executing program 0 (id=709): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fspick(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = dup(0xffffffffffffffff) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 1.396432123s ago: executing program 1 (id=710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x7ffffffe, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="a0"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r2, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)={0x40, 0x9, 0x2, "5ee4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x4, 0x10, 0x1, 0xe}, 0x9c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x0, 0xfd, 0x1, 0xff, 0x1, 0x2300}}, 0x1c}, 0x1, 0x0, 0x0, 0x4020000}, 0x2000c080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @empty, 0x2}}, 0xc, 0x3}, 0x90) sendto$inet6(r0, &(0x7f0000000080)="49a5ae34", 0x4, 0xc0, &(0x7f0000000000)={0xa, 0x4e20, 0xd5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) 1.219860612s ago: executing program 2 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x8, 0x3, 0x40, 0x40, 0x9ae, 0x80, 0x200, 0x6f, 0xfffffffffffffff7, 0x100000000, 0x9, 0x8, 0x7ff, 0x8, 0x7]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={0x4}) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = request_key(&(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='*\x00', r4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0xa000, 0x0) sendto$inet(r6, &(0x7f0000000440)="7aad46fcf246bb7e147560b3f9459a5bd3f7f7d7d3389572297aeda66a3a8bbfb5c863ea3b0493d10f5829fbc0d75a86a20b1c87db7faaf9da1dfad00e5a7fd431354e2ff2bb131253e30d90a10d14f4ec791b50a382a091be5204fa9fb8b83c9530ae1b9b4bf7012fc575eac1126776109bf481c665dd8e246384604b63293788ae1dbcd73a4dfd25cde93e9ed7789d9edde7af87a123677fb5db1f0ad9b68b8970f877f541f41ddba1fa3a315267658a61187a617e6b", 0xb7, 0x80, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) connect$inet(r6, &(0x7f0000000500)={0x2, 0x4e22, @broadcast}, 0x10) read$FUSE(r6, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) pipe2(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r10 = syz_open_dev$dri(&(0x7f00000025c0), 0x8000000000000000, 0x4880) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002640)=@generic={&(0x7f0000002600)='./file0\x00', r6}, 0x18) write$FUSE_INIT(r9, &(0x7f0000002680)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x408808, 0x1, 0x2, 0xfffffff8, 0x101, 0x0, 0x0, 0x20, 0x7}}, 0x50) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000002700)={0x2, @vbi={0x3, 0x7, 0x2, 0x33524742, [0x5, 0x2765bb0b], [0x7, 0x7], 0x1}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000002840)={0xccb7, 0x0, &(0x7f0000002800)=[r8, r10]}, 0x2) write$UHID_INPUT(r9, &(0x7f0000002880)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000038c0)={r3, 0xff, "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"}, &(0x7f0000003a00)=0x107) connect$rxrpc(r9, &(0x7f0000003a40)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x24) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000003a80)={r3, 0x0, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000003ac0), &(0x7f0000003b00)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000003b40)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x3, @local, 0xe}], 0x2c) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004d40)={&(0x7f0000003b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19e, 0x19e, 0x5, [@datasec={0x10, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x18, 0x2}, {0x1, 0xffffff26, 0x2}, {0x4, 0x7, 0x80000000}, {0x4, 0x0, 0x6}, {0x1, 0x57, 0xfffff801}, {0x4, 0x6, 0x4}], "e048"}, @struct={0xa, 0x3, 0x0, 0x4, 0x1, 0xb4017a59, [{0x9, 0x4, 0x9121}, {0x2, 0x2, 0x151b0792}, {0xa, 0x5, 0x6}]}, @func={0xf, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc}, {0x1, 0x2}]}, @struct={0x4, 0xa, 0x0, 0x4, 0x1, 0x32423e13, [{0xf, 0x5}, {0x3, 0x5, 0xfffffffb}, {0x3, 0x5}, {0xf, 0x0, 0x3}, {0x8}, {0x9, 0x3, 0x1ff}, {0xb, 0x2, 0x7}, {0x2, 0x3, 0x2}, {0x0, 0x3}, {0xe, 0x0, 0x2}]}, @struct={0xe, 0x4, 0x0, 0x4, 0x0, 0xffffc547, [{0xd, 0x1, 0xf}, {0x1, 0x5}, {0xf, 0x4, 0x10}, {0xc, 0x2, 0xc}]}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @fwd={0x7}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x5f, 0x61]}}, &(0x7f0000003d40)=""/4096, 0x1bd, 0x1000, 0x1, 0xc644}, 0x28) close_range(r2, r11, 0x2) add_key$user(&(0x7f0000004d80), &(0x7f0000004dc0)={'syz', 0x3}, &(0x7f0000004e00)="4c555e3e60ddc9d0e2172b3025eb1067fdd70d77f308dcc16f0883d932d9985618951a04f52ebc6f5b5310d78662be6e40c395b9b727a0b6b439b4eea6f7a190ad346bef7bf8a186fbc66661a8a35eeaad20823f5ca7516263f96a1906642ec5ae3176ec08dc26fa051f6299915ba0ea711b3e0b81fbb2111be081c96dd65d5257d035b79de1c0235d2bbcd66bffa72a922f54ce4229ec143a3c133ba61250e752b5a2aeb5373906fd994aba8f8009a9f41328e0b3aefd96461e3c4aaf175dca4385113583c2ad1ef89d5a2cd399423d14ce2bdbcb24848a6792e831b37283a663db067e95be", 0xe6, r5) 1.161754528s ago: executing program 0 (id=712): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) (async) r1 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) read(r1, &(0x7f0000000000)=""/269, 0xfffffdef) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r4, 0x402, 0x5) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) (async) fcntl$notify(r5, 0x402, 0x8000001f) creat(&(0x7f0000000080)='./file0\x00', 0x86) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.154393253s ago: executing program 2 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc0080, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000067c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006bbf4751a8dc2590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, [{0x0, 0xb88, 0x8, 0x0, '/,\x00\x04\x00\x000\xbc'}]}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 863.891365ms ago: executing program 0 (id=714): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x18510af, 0x0) (async) r2 = syz_clone(0x41800000, &(0x7f0000000680)="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", 0x1000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="04aec7fbb3730c5b455af4c26f72f0a80f5d") sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x0, 0x67, 0x6f, 0x8000, 0x8, 0x7, 0x7, 0xffffff00, 0x7ad2}, 0x0) 832.38606ms ago: executing program 2 (id=715): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000007b00000000000000bf91000000000000b702000000000000850000000c000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x8}, 0x94) (rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) (async) keyctl$read(0xb, r1, &(0x7f0000000000)=""/147, 0x93) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 508.520511ms ago: executing program 0 (id=716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x15, 0x20}, 0x20) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd29, 0x0}, 0x240408a0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(0x0, &(0x7f0000000540)=""/211, 0xd3) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xb, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x800) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) 0s ago: executing program 0 (id=717): r0 = socket$alg(0x26, 0x5, 0x0) getpeername(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @none}, &(0x7f0000000100)=0x80) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)=""/144, 0x90}], 0x5}}], 0x1, 0x20, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) kernel console output (not intermixed with test programs): 165.766487][ T5919] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 165.937147][ T5943] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 165.948712][ T5919] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 165.968526][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.013976][ T5919] usb 2-1: config 0 has no interface number 0 [ 166.027132][ T5919] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 166.040223][ T5919] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 166.065985][ T5919] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.082918][ T5919] usb 2-1: config 0 interface 52 has no altsetting 0 [ 166.092753][ T5919] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 166.108833][ T5919] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 166.120598][ T5919] usb 2-1: Manufacturer: syz [ 166.125717][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 166.139265][ T5943] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 166.151449][ T5919] usb 2-1: config 0 descriptor?? [ 166.156633][ T5943] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 166.165350][ T5943] usb 5-1: config 166 has no interface number 0 [ 166.179982][ T5943] usb 5-1: config 166 has no interface number 1 [ 166.281426][ T5943] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 166.371662][ T5943] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 166.402043][ T5919] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 166.412020][ T5919] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 166.421472][ T5943] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 166.479200][ T5943] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 166.530178][ T5943] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 166.548708][ T5943] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 166.561411][ T5943] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 166.583515][ T5919] usb 2-1: USB disconnect, device number 31 [ 166.618281][ T5943] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 166.631518][ T5943] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 166.645026][ T5943] usb 5-1: config 166 interface 177 has no altsetting 0 [ 166.665324][ T5943] usb 5-1: config 166 interface 34 has no altsetting 0 [ 166.855704][ T5943] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 166.868056][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.876389][ T5943] usb 5-1: Product: syz [ 166.880865][ T5943] usb 5-1: Manufacturer: syz [ 166.885705][ T5943] usb 5-1: SerialNumber: syz [ 167.116749][ T7203] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 167.492215][ T5943] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 167.499586][ T1207] usb 3-1: USB disconnect, device number 20 [ 167.585074][ T7298] input: syz0 as /devices/virtual/input/input9 [ 167.729408][ T5943] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 167.822811][ T7304] loop4: detected capacity change from 0 to 1 [ 167.871625][ T7304] Dev loop4: unable to read RDB block 1 [ 167.883262][ T7304] loop4: unable to read partition table [ 167.894164][ T7304] loop4: partition table beyond EOD, truncated [ 167.900522][ T7304] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 167.941815][ T7310] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 167.998853][ T7310] netlink: 'syz.2.350': attribute type 8 has an invalid length. [ 168.051099][ T5943] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 168.124440][ T7314] loop2: detected capacity change from 0 to 7 [ 168.132461][ T5943] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 168.162792][ T5943] usb 5-1: No valid video chain found. [ 168.172106][ T5855] loop2: p1 [ 168.175363][ T5855] loop2: partition table partially beyond EOD, truncated [ 168.200727][ T5855] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 168.252789][ T7314] loop2: p1 [ 168.258146][ T7314] loop2: partition table partially beyond EOD, truncated [ 168.265502][ T7314] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 168.342444][ T7278] fuse: Unknown parameter 'roltmode' [ 168.379342][ T5943] usb 5-1: USB disconnect, device number 25 [ 168.465850][ T1207] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 168.481889][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 168.582663][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 168.617578][ T1207] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 168.642786][ T1207] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 168.652886][ T1207] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 168.675225][ T1207] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 168.749254][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 168.762507][ T7328] fuse: Bad value for 'user_id' [ 168.767718][ T30] audit: type=1326 audit(1752040098.228:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 168.790341][ T7328] fuse: Bad value for 'user_id' [ 168.799574][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.829011][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 168.850191][ T30] audit: type=1326 audit(1752040098.228:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 168.855766][ T5919] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.893684][ T1207] usb 1-1: string descriptor 0 read error: -22 [ 168.900097][ T1207] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 168.913926][ T30] audit: type=1326 audit(1752040098.238:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 168.945703][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.992672][ T1207] usb 1-1: config 0 descriptor?? [ 169.013584][ T30] audit: type=1326 audit(1752040098.238:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.047005][ T1207] hub 1-1:0.0: bad descriptor, ignoring hub [ 169.080562][ T1207] hub 1-1:0.0: probe with driver hub failed with error -5 [ 169.113847][ T1207] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 169.116127][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 169.142246][ T30] audit: type=1326 audit(1752040098.238:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.164319][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.241269][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.306011][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.340466][ T30] audit: type=1326 audit(1752040098.238:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.362533][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.378206][ T30] audit: type=1326 audit(1752040098.238:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.401438][ T30] audit: type=1326 audit(1752040098.248:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.401494][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 169.513433][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.556676][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 169.570274][ T7340] input: syz0 as /devices/virtual/input/input11 [ 169.586269][ T30] audit: type=1326 audit(1752040098.278:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d258e929 code=0x7ffc0000 [ 169.632586][ T5943] usb 1-1: USB disconnect, device number 20 [ 169.682518][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.777646][ T5919] usb 3-1: Product: syz [ 169.799561][ T5919] usb 3-1: Manufacturer: syz [ 169.810380][ T5919] usb 3-1: SerialNumber: syz [ 169.861773][ T5919] usb 3-1: config 0 descriptor?? [ 169.871668][ T5919] ipheth 3-1:0.0: Unable to find endpoints [ 170.236209][ T7320] bond0: entered promiscuous mode [ 170.248699][ T7320] bond_slave_0: entered promiscuous mode [ 170.288888][ T7320] bond_slave_1: entered promiscuous mode [ 170.441124][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 170.834358][ T7347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.359'. [ 171.459177][ T7359] loop4: detected capacity change from 0 to 1 [ 171.470937][ T5855] Dev loop4: unable to read RDB block 1 [ 171.495670][ T5855] loop4: unable to read partition table [ 171.514179][ T5855] loop4: partition table beyond EOD, truncated [ 171.555472][ T7359] Dev loop4: unable to read RDB block 1 [ 171.561282][ T7359] loop4: unable to read partition table [ 171.569084][ T7359] loop4: partition table beyond EOD, truncated [ 171.579514][ T7359] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 172.208144][ T1207] usb 3-1: USB disconnect, device number 21 [ 172.296775][ T5919] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 172.478320][ T5919] usb 5-1: config 0 has too many interfaces: 78, using maximum allowed: 32 [ 172.506081][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 78 [ 172.525170][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 172.543482][ T5919] usb 5-1: New USB device found, idVendor=7823, idProduct=0001, bcdDevice= 3.eb [ 172.562933][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.590408][ T5919] usb 5-1: Product: syz [ 172.610437][ T5919] usb 5-1: Manufacturer: syz [ 172.641783][ T5919] usb 5-1: SerialNumber: syz [ 172.671137][ T5919] usb 5-1: config 0 descriptor?? [ 172.751427][ T7384] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000 [ 172.892624][ T5919] usb 5-1: USB disconnect, device number 26 [ 173.640477][ T7403] dvmrp0: entered allmulticast mode [ 174.045879][ T1207] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 174.319780][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 174.344183][ T1207] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 174.383500][ T1207] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.416833][ T1207] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.436813][ T1207] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 174.452091][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.472752][ T1207] usb 1-1: Product: syz [ 174.480628][ T1207] usb 1-1: Manufacturer: syz [ 174.493301][ T1207] usb 1-1: SerialNumber: syz [ 174.520723][ T1207] usb 1-1: config 0 descriptor?? [ 174.543485][ T1207] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 174.742729][ T1207] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 174.759616][ T1207] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 174.817137][ T1207] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 175.112933][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.126350][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.176489][ T7419] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 175.224403][ T7426] capability: warning: `syz.4.380' uses 32-bit capabilities (legacy support in use) [ 175.285892][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 175.308988][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.376'. [ 176.372774][ T5841] usb 1-1: USB disconnect, device number 21 [ 176.478686][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 176.478704][ T30] audit: type=1326 audit(1752040105.958:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.551903][ T30] audit: type=1326 audit(1752040105.958:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.575077][ T30] audit: type=1326 audit(1752040105.958:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.599805][ T30] audit: type=1326 audit(1752040105.958:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.790647][ T7455] netlink: 'syz.1.386': attribute type 6 has an invalid length. [ 176.814028][ T1207] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 176.843935][ T30] audit: type=1326 audit(1752040105.958:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.874963][ T30] audit: type=1326 audit(1752040105.998:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.898106][ T30] audit: type=1326 audit(1752040106.018:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 176.922784][ T30] audit: type=1326 audit(1752040106.028:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 177.074806][ T30] audit: type=1326 audit(1752040106.028:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503d18e929 code=0x7ffc0000 [ 177.125995][ T5943] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 177.128763][ T1207] usb 3-1: not running at top speed; connect to a high speed hub [ 177.164229][ T1207] usb 3-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 177.194916][ T1207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.224682][ T1207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.241655][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.370449][ T5943] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 177.394558][ T5943] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.430866][ T5943] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.440445][ T1207] usb 3-1: Product: syz [ 177.444652][ T1207] usb 3-1: Manufacturer: syz [ 177.450060][ T1207] usb 3-1: SerialNumber: syz [ 177.485727][ T5845] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 177.568805][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.687648][ T1207] usb 3-1: 0:2 : does not exist [ 177.731045][ T5845] usb 4-1: config 0 has no interfaces? [ 177.758028][ T5845] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.767311][ T1207] usb 3-1: USB disconnect, device number 22 [ 177.786182][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 177.801333][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.835158][ T5845] usb 4-1: Product: syz [ 177.846857][ T5845] usb 4-1: Manufacturer: syz [ 177.869697][ T5845] usb 4-1: SerialNumber: syz [ 177.909497][ T5943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.931491][ T5845] usb 4-1: config 0 descriptor?? [ 177.999615][ T10] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 178.009608][ T10] usb 5-1: config 0 has no interface number 0 [ 178.030730][ T10] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 178.049714][ T10] usb 5-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 178.093104][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 178.105276][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.119732][ T5943] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 178.140143][ T10] usb 5-1: Product: syz [ 178.241091][ T10] usb 5-1: Manufacturer: syz [ 178.356175][ T10] usb 5-1: SerialNumber: syz [ 178.422732][ T10] usb 5-1: config 0 descriptor?? [ 178.449128][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 178.486399][ T5943] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 178.636055][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 178.651655][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.664743][ T5943] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 178.704034][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 178.731355][ T5943] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 178.749719][ T10] gspca_pac7302 5-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 178.827568][ T5943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.889263][ T10] usb 5-1: USB disconnect, device number 27 [ 178.904053][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.990031][ T5943] usb 1-1: SerialNumber: syz [ 179.253148][ T5943] usb 1-1: USB disconnect, device number 22 [ 179.686261][ T5845] usb 2-1: USB disconnect, device number 32 [ 179.722728][ T10] usb 4-1: USB disconnect, device number 20 [ 180.216881][ T43] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 180.355941][ T43] usb 1-1: device descriptor read/64, error -71 [ 180.596025][ T43] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 180.725683][ T43] usb 1-1: device descriptor read/64, error -71 [ 180.766210][ T5841] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 180.838620][ T43] usb usb1-port1: attempt power cycle [ 180.999412][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.013460][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.029545][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.039410][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.055541][ T5841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.070289][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.105985][ T5943] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 181.127341][ T5841] usb 5-1: config 0 descriptor?? [ 181.255840][ T43] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 181.265264][ T5943] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.274340][ T5943] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.285834][ T43] usb 1-1: device descriptor read/8, error -71 [ 181.302548][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.344963][ T5943] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.364507][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.376089][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.426962][ T5943] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.458962][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.476172][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.507263][ T5943] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.527089][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.546191][ T43] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 181.554273][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.557013][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.646944][ T5943] usb 2-1: Product: syz [ 181.667495][ T43] usb 1-1: device descriptor read/8, error -71 [ 181.683656][ T5943] usb 2-1: Manufacturer: syz [ 181.706522][ T5943] cdc_wdm 2-1:1.0: skipping garbage [ 181.723572][ T5943] cdc_wdm 2-1:1.0: skipping garbage [ 181.745238][ T5943] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 181.779126][ T5943] cdc_wdm 2-1:1.0: Unknown control protocol [ 181.800937][ T43] usb usb1-port1: unable to enumerate USB device [ 181.822669][ T7521] xt_CT: No such helper "snmp" [ 181.947843][ T43] usb 2-1: USB disconnect, device number 33 [ 182.109230][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 182.141618][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.165770][ T5841] usb 5-1: USB disconnect, device number 28 [ 182.201054][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 182.727827][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.905882][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 182.912926][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 182.921594][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 182.930408][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 182.955610][ T10] usb 3-1: config 1 has no interface number 0 [ 182.961774][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.984133][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.001534][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.010811][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.035658][ T5845] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 183.050950][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 183.205891][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 183.217177][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.236868][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 183.276926][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 183.280026][ T7561] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.296968][ T7561] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.305719][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.305782][ T5845] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.305851][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.309268][ T5845] usb 5-1: config 0 descriptor?? [ 183.317227][ T7561] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.339027][ T7570] netlink: 27 bytes leftover after parsing attributes in process `syz.0.414'. [ 183.339563][ T7561] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.392267][ T7551] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 183.416464][ T5845] hub 5-1:0.0: USB hub found [ 183.646799][ T10] usb 3-1: USB disconnect, device number 23 [ 183.675532][ T5845] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 183.699478][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 183.789589][ T5845] usbhid 5-1:0.0: can't add hid device: -71 [ 183.802398][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.846835][ T5841] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 183.849665][ T5845] usb 5-1: USB disconnect, device number 29 [ 183.916340][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 184.016125][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 184.029416][ T5841] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 184.039366][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.049201][ T5841] usb 4-1: Product: syz [ 184.053408][ T5841] usb 4-1: Manufacturer: syz [ 184.058556][ T5841] usb 4-1: SerialNumber: syz [ 184.076006][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 184.084114][ T5841] usb 4-1: config 0 descriptor?? [ 184.096562][ T43] usb 2-1: config 0 has no interfaces? [ 184.102082][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 184.115432][ T5841] (null): radio-mr800 - initialization failed [ 184.122196][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.130800][ T5841] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22 [ 184.147100][ T5841] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.157491][ T43] usb 2-1: config 0 descriptor?? [ 184.275686][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 184.431854][ T7581] warning: `syz.1.417' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.496013][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.507967][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.524881][ T10] usb 1-1: config 220 has no interface number 2 [ 184.586858][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.621110][ T5845] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 184.739443][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 184.797852][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 184.813151][ T5845] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 184.858254][ T5845] usb 3-1: config 0 has no interface number 0 [ 184.864408][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 184.871413][ T5845] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 184.908278][ T5845] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 184.921558][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.931020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.944300][ T5841] usb 4-1: USB disconnect, device number 21 [ 184.944876][ T5845] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 185.024028][ T10] usb 1-1: Product: syz [ 185.090139][ T10] usb 1-1: Manufacturer: syz [ 185.097280][ T10] usb 1-1: SerialNumber: syz [ 185.113471][ T5845] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 185.125392][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.136802][ T5845] usb 3-1: Product: syz [ 185.286448][ T5845] usb 3-1: Manufacturer: syz [ 185.301278][ T5845] usb 3-1: SerialNumber: syz [ 185.406856][ T5845] usb 3-1: config 0 descriptor?? [ 185.456687][ T10] usb 1-1: selecting invalid altsetting 0 [ 185.469273][ T7588] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 185.476938][ T7588] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 185.492002][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 185.578387][ T10] usb 1-1: No valid video chain found. [ 185.660814][ T10] usb 1-1: selecting invalid altsetting 0 [ 185.714154][ T7588] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 185.722179][ T7588] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 185.763872][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 185.781248][ T5845] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 185.836857][ T10] usb 1-1: USB disconnect, device number 27 [ 185.948233][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.956160][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.026952][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.080146][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.165657][ T5919] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 186.171041][ T5845] usb 3-1: USB disconnect, device number 24 [ 186.355961][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 186.371692][ T5919] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 186.405933][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.480798][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.497156][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.540123][ T5919] usb 5-1: config 0 descriptor?? [ 186.648104][ T5919] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 186.680330][ T7598] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.690490][ T7598] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.700049][ T7598] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.709113][ T7598] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.582971][ T24] usb 2-1: USB disconnect, device number 34 [ 188.195897][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 188.373536][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.394790][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.415030][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.439672][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 188.449621][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.495047][ T10] usb 2-1: config 0 descriptor?? [ 188.511005][ T7598] syz.3.423 (7598) used greatest stack depth: 19752 bytes left [ 188.720710][ T7643] syz_tun: entered promiscuous mode [ 188.744569][ T10] kye 0003:0458:5011.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 188.774216][ T10] kye 0003:0458:5011.0005: unbalanced collection at end of report description [ 188.806103][ T10] kye 0003:0458:5011.0005: parse failed [ 188.815349][ T10] kye 0003:0458:5011.0005: probe with driver kye failed with error -22 [ 188.908843][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.439'. [ 189.076057][ T5845] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 189.226217][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 189.266439][ T5845] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 189.277359][ T5845] usb 4-1: config 0 has no interface number 0 [ 189.293163][ T5845] usb 4-1: config 0 interface 85 has no altsetting 0 [ 189.319261][ T5845] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 189.340084][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.369261][ T5845] usb 4-1: Product: syz [ 189.383418][ T5845] usb 4-1: Manufacturer: syz [ 189.399649][ T5845] usb 4-1: SerialNumber: syz [ 189.440705][ T5845] usb 4-1: config 0 descriptor?? [ 189.460475][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 189.468495][ T5845] appletouch 4-1:0.85: Could not find int-in endpoint [ 189.485877][ T5845] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 189.520204][ T5845] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 189.676434][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.713224][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.766192][ T5919] gspca_sonixj: reg_w err -110 [ 189.771129][ T5919] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 189.960318][ T5845] usb 5-1: USB disconnect, device number 30 [ 190.285708][ T1207] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 190.448523][ T1207] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.478824][ T1207] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 190.527564][ T1207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.552744][ T1207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 190.586034][ T1207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 190.608734][ T1207] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.619373][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.628479][ T1207] usb 1-1: Product: syz [ 190.632827][ T1207] usb 1-1: Manufacturer: syz [ 190.689747][ T1207] cdc_wdm 1-1:1.0: skipping garbage [ 190.706305][ T1207] cdc_wdm 1-1:1.0: skipping garbage [ 190.718160][ T1207] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 190.725396][ T1207] cdc_wdm 1-1:1.0: Unknown control protocol [ 190.912361][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.951830][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.964633][ T1207] usb 2-1: USB disconnect, device number 35 [ 191.001718][ T5919] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.256137][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 191.335213][ T5919] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 191.355708][ T5919] usb 3-1: config 0 has no interface number 0 [ 191.367919][ T5919] usb 3-1: config 0 interface 12 has no altsetting 0 [ 191.421190][ T5919] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 191.430617][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.447378][ T5919] usb 3-1: Product: syz [ 191.452787][ T5919] usb 3-1: Manufacturer: syz [ 191.457809][ T5919] usb 3-1: SerialNumber: syz [ 191.476404][ T5919] usb 3-1: config 0 descriptor?? [ 191.647668][ T30] audit: type=1326 audit(1752040121.138:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.4.449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f503d18e929 code=0x0 [ 191.676891][ T1207] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 191.823620][ T5845] usb 4-1: USB disconnect, device number 22 [ 191.840822][ T1207] usb 2-1: Using ep0 maxpacket: 8 [ 191.865355][ T1207] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 191.874738][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.884016][ T1207] usb 2-1: Product: syz [ 191.889752][ T1207] usb 2-1: Manufacturer: syz [ 191.894492][ T1207] usb 2-1: SerialNumber: syz [ 191.895206][ T7694] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 191.903201][ T1207] usb 2-1: config 0 descriptor?? [ 191.916889][ T7694] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 191.929747][ T1207] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 191.991788][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 192.105492][ T7701] syzkaller1: entered promiscuous mode [ 192.111273][ T7701] syzkaller1: entered allmulticast mode [ 192.123783][ T7701] syzkaller1: left promiscuous mode [ 192.131953][ T1207] gspca_vc032x: reg_r err -71 [ 192.140132][ T1207] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 192.148451][ T7701] syzkaller1: left allmulticast mode [ 192.160503][ T1207] usb 2-1: USB disconnect, device number 36 [ 192.575786][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 192.711143][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 192.721307][ T7709] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 192.731959][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 192.736159][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 192.754672][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 192.770934][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 192.784328][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.819467][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 192.829392][ T24] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 192.838898][ T24] usb 4-1: Product: syz [ 192.845252][ T24] usb 4-1: Manufacturer: syz [ 192.850310][ T24] usb 4-1: SerialNumber: syz [ 192.889078][ T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 192.909848][ T1207] usb 1-1: USB disconnect, device number 28 [ 193.099365][ T7711] tipc: Started in network mode [ 193.104502][ T7711] tipc: Node identity 76229f2cfe57, cluster identity 4711 [ 193.136831][ T7711] tipc: Enabled bearer , priority 0 [ 193.148427][ T1207] usb 4-1: USB disconnect, device number 23 [ 193.169897][ T7717] syzkaller0: entered promiscuous mode [ 193.179348][ T7717] syzkaller0: entered allmulticast mode [ 193.200020][ T1207] appletouch 4-1:1.0: input: appletouch disconnected [ 193.234914][ T7711] tipc: Resetting bearer [ 193.249771][ T7710] tipc: Resetting bearer [ 193.294407][ T7710] tipc: Disabling bearer [ 193.563706][ T7729] ipip0: entered allmulticast mode [ 193.747416][ T1207] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 193.855797][ T5845] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 193.905776][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 193.948360][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.964294][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 193.981606][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.993661][ T1207] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.009665][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.029052][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 194.037794][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.052650][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.068581][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.077401][ T5845] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 194.091536][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.095651][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101565][ T1207] usb 1-1: config 0 descriptor?? [ 194.114410][ T7725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.153083][ T1207] hub 1-1:0.0: USB hub found [ 194.164597][ T5845] usb 5-1: Product: syz [ 194.180576][ T5845] usb 5-1: Manufacturer: syz [ 194.213524][ T5919] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 194.219022][ T5845] usb 5-1: SerialNumber: syz [ 194.262476][ T5845] usb 5-1: config 0 descriptor?? [ 194.277302][ T7732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.303943][ T7732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.334804][ T1207] hub 1-1:0.0: 2 ports detected [ 194.440911][ T5919] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 194.448655][ T5919] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 194.456852][ T5919] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 194.474884][ T5919] usb 3-1: USB disconnect, device number 25 [ 194.527588][ T7732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.534979][ T7732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.776730][ T7732] IPv6: Can't replace route, no match found [ 194.793945][ T7732] netlink: 'syz.4.464': attribute type 11 has an invalid length. [ 194.823582][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.832841][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.845720][ T5845] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 194.900890][ T5845] asix 5-1:0.0: probe with driver asix failed with error -71 [ 194.941946][ T5845] usb 5-1: USB disconnect, device number 31 [ 195.246287][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.258051][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.455756][ T5943] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.631095][ T7773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 195.670201][ T7775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 195.676751][ T7775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.690633][ T7775] vhci_hcd vhci_hcd.0: Device attached [ 195.866192][ T5919] vhci_hcd: vhci_device speed not set [ 195.925710][ T5943] usb 3-1: device descriptor read/64, error -71 [ 195.932143][ T5919] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 195.955801][ T5845] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 196.110774][ T5845] usb 2-1: device descriptor read/64, error -71 [ 196.136677][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 196.175773][ T5943] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 196.305982][ T5943] usb 3-1: device descriptor read/64, error -71 [ 196.357124][ T5845] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 196.358156][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.406845][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.421487][ T5943] usb usb3-port1: attempt power cycle [ 196.432011][ T24] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 196.455792][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.485273][ T5848] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 196.493041][ T5845] usb 2-1: device descriptor read/64, error -71 [ 196.498243][ T24] usb 5-1: config 0 descriptor?? [ 196.606106][ T5845] usb usb2-port1: attempt power cycle [ 196.687177][ T1207] hub 1-1:0.0: set hub depth failed [ 196.698475][ T1207] usb 1-1: USB disconnect, device number 29 [ 196.766843][ T5943] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 196.769057][ T5848] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 196.787142][ T5943] usb 3-1: device descriptor read/8, error -71 [ 196.817002][ T5848] usb 4-1: config 0 has no interface number 0 [ 196.823148][ T5848] usb 4-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 196.910332][ T5848] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.946798][ T5845] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 196.962279][ T7785] capability: warning: `syz.0.478' uses deprecated v2 capabilities in a way that may be insecure [ 196.976380][ T5845] usb 2-1: device descriptor read/8, error -71 [ 196.998176][ T5848] usb 4-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 197.025828][ T5943] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 197.044376][ T5848] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 197.053946][ T5943] usb 3-1: device descriptor read/8, error -71 [ 197.094966][ T5848] usb 4-1: Manufacturer: syz [ 197.126013][ T5848] usb 4-1: config 0 descriptor?? [ 197.152123][ T5848] cxacru 4-1:0.109: cxacru_bind: interface has incorrect endpoints [ 197.167678][ T5848] cxacru 4-1:0.109: usbatm_usb_probe: bind failed: -19! [ 197.180215][ T5943] usb usb3-port1: unable to enumerate USB device [ 197.286667][ T5845] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 197.339270][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.357281][ T5845] usb 2-1: device descriptor read/8, error -71 [ 197.386141][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.402445][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.424611][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.459306][ T24] usb 4-1: USB disconnect, device number 24 [ 197.476332][ T5845] usb usb2-port1: unable to enumerate USB device [ 198.704395][ T7798] fuse: Unknown parameter '9ŠÝñÅùf' [ 198.851455][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.921283][ T1207] usb 5-1: USB disconnect, device number 32 [ 199.022152][ T7776] vhci_hcd: connection reset by peer [ 199.059219][ T7189] vhci_hcd: stop threads [ 199.063524][ T7189] vhci_hcd: release socket [ 199.095145][ T7189] vhci_hcd: disconnect device [ 199.127547][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 199.414065][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 199.430241][ T24] usb 2-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 199.451801][ T5845] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 199.463865][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.512262][ T7817] Cannot find add_set index 0 as target [ 199.531073][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.542301][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.570058][ T24] usb 2-1: config 0 descriptor?? [ 199.605889][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 199.615214][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.626583][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.825685][ T5845] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.061243][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.080911][ T5845] usb 1-1: config 0 descriptor?? [ 200.099311][ T5845] hub 1-1:0.0: USB hub found [ 200.236050][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 200.273571][ T30] audit: type=1326 audit(1752040129.758:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.303171][ T5845] hub 1-1:0.0: 20 ports detected [ 200.326184][ T5845] hub 1-1:0.0: insufficient power available to use all downstream ports [ 200.337446][ T30] audit: type=1326 audit(1752040129.758:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.383463][ T30] audit: type=1326 audit(1752040129.758:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.397958][ T7821] raw_sendmsg: syz.3.488 forgot to set AF_INET. Fix it! [ 200.411681][ T30] audit: type=1326 audit(1752040129.758:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e53b8d290 code=0x7ffc0000 [ 200.443023][ T30] audit: type=1326 audit(1752040129.758:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e53b8d290 code=0x7ffc0000 [ 200.471282][ T30] audit: type=1326 audit(1752040129.758:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.498914][ T30] audit: type=1326 audit(1752040129.758:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.528319][ T7827] program syz.4.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.597288][ T30] audit: type=1326 audit(1752040129.758:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.640383][ T30] audit: type=1326 audit(1752040129.758:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.665820][ T30] audit: type=1326 audit(1752040129.758:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 200.691074][ T7821] xt_cgroup: invalid path, errno=-2 [ 200.799983][ T7835] netlink: 104 bytes leftover after parsing attributes in process `syz.4.491'. [ 200.963257][ T7839] loop2: detected capacity change from 0 to 7 [ 200.973601][ T7839] loop2: p1 [ 200.978026][ T7839] loop2: partition table partially beyond EOD, truncated [ 200.995515][ T7839] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 201.079280][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 201.091768][ T5919] vhci_hcd: vhci_device speed not set [ 201.156526][ T5845] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 201.163814][ T5845] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 201.210441][ T5845] usbhid 1-1:0.0: can't add hid device: -71 [ 201.223339][ T5845] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 201.257279][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 201.269848][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 201.276911][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 201.283302][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 201.291054][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 201.298198][ T5845] usb 1-1: USB disconnect, device number 30 [ 201.371774][ T7848] netlink: 224 bytes leftover after parsing attributes in process `syz.3.496'. [ 201.398639][ T1207] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 201.406914][ T7848] openvswitch: netlink: Flow key attr not present in new flow. [ 201.452717][ T7848] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 201.463178][ T7848] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 201.496588][ T7848] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 201.589329][ T1207] usb 3-1: config index 0 descriptor too short (expected 52391, got 18) [ 201.605604][ T1207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.625211][ T1207] usb 3-1: config 0 has no interfaces? [ 201.636754][ T1207] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 201.655917][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.663943][ T1207] usb 3-1: Product: syz [ 201.678671][ T1207] usb 3-1: Manufacturer: syz [ 201.692744][ T1207] usb 3-1: SerialNumber: syz [ 201.721729][ T1207] usb 3-1: config 0 descriptor?? [ 201.735155][ T24] usb 2-1: USB disconnect, device number 41 [ 201.774107][ T7863] loop2: detected capacity change from 0 to 7 [ 201.800575][ T5855] loop2: p1 [ 201.803825][ T5855] loop2: partition table partially beyond EOD, truncated [ 201.826079][ T5855] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 201.843294][ T7863] loop2: p1 [ 201.846838][ T7863] loop2: partition table partially beyond EOD, truncated [ 201.877206][ T7863] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 201.904135][ T7868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.976329][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 202.019727][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 202.075653][ T5926] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 202.235680][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 202.242358][ T5926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.250722][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 202.258354][ T5919] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 202.265975][ T5926] usb 4-1: config 0 has no interface number 0 [ 202.274779][ T5926] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 202.284140][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.292189][ T5926] usb 4-1: Product: syz [ 202.297685][ T5926] usb 4-1: Manufacturer: syz [ 202.302318][ T5926] usb 4-1: SerialNumber: syz [ 202.309342][ T5926] usb 4-1: config 0 descriptor?? [ 202.317367][ T5926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 202.396451][ T5919] usb 5-1: device descriptor read/64, error -71 [ 202.415705][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 202.424905][ T24] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 202.434424][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.442493][ T24] usb 2-1: Product: syz [ 202.446788][ T24] usb 2-1: Manufacturer: syz [ 202.451426][ T24] usb 2-1: SerialNumber: syz [ 202.460300][ T24] usb 2-1: config 0 descriptor?? [ 202.470911][ T24] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 202.535684][ T1207] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 202.541914][ T5926] gspca_spca1528: reg_w err -71 [ 202.565749][ T5926] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 202.579148][ T5926] usb 4-1: USB disconnect, device number 25 [ 202.594093][ T7884] loop2: detected capacity change from 0 to 7 [ 202.601691][ T7884] loop2: p1 [ 202.608004][ T7884] loop2: partition table partially beyond EOD, truncated [ 202.615335][ T7884] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 202.637280][ T5919] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 202.662749][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 202.679361][ T1207] usb 1-1: device descriptor read/64, error -71 [ 202.855637][ T5919] usb 5-1: device descriptor read/64, error -71 [ 202.970615][ T5919] usb usb5-port1: attempt power cycle [ 203.005823][ T1207] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 203.178126][ T1207] usb 1-1: device descriptor read/64, error -71 [ 203.285932][ T1207] usb usb1-port1: attempt power cycle [ 203.317216][ T5919] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 203.348314][ T5919] usb 5-1: device descriptor read/8, error -71 [ 203.585725][ T5919] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 203.606218][ T5919] usb 5-1: device descriptor read/8, error -71 [ 203.636120][ T1207] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 203.666930][ T1207] usb 1-1: device descriptor read/8, error -71 [ 203.716198][ T5919] usb usb5-port1: unable to enumerate USB device [ 203.921539][ T1207] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 203.946707][ T1207] usb 1-1: device descriptor read/8, error -71 [ 204.066621][ T1207] usb usb1-port1: unable to enumerate USB device [ 204.175680][ T5919] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 204.326558][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 204.334112][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.343946][ T5919] usb 4-1: config 1 has an invalid interface number: 249 but max is 0 [ 204.352635][ T5919] usb 4-1: config 1 has no interface number 0 [ 204.358779][ T5919] usb 4-1: config 1 interface 249 altsetting 64 bulk endpoint 0x2 has invalid maxpacket 16 [ 204.369903][ T5919] usb 4-1: config 1 interface 249 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 204.381353][ T5919] usb 4-1: config 1 interface 249 has no altsetting 0 [ 204.390587][ T5919] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 204.399967][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.408363][ T5919] usb 4-1: Product: syz [ 204.412573][ T5919] usb 4-1: Manufacturer: syz [ 204.417354][ T5919] usb 4-1: SerialNumber: syz [ 204.432560][ T7904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.653192][ T5919] kvaser_usb 4-1:1.249: error -ENODEV: Cannot get usb endpoint(s) [ 204.669382][ T5919] usb 4-1: USB disconnect, device number 26 [ 204.911458][ T1207] usb 2-1: USB disconnect, device number 42 [ 205.099257][ T7910] sctp: [Deprecated]: syz.4.513 (pid 7910) Use of int in maxseg socket option. [ 205.099257][ T7910] Use struct sctp_assoc_value instead [ 205.264115][ T5845] usb 3-1: USB disconnect, device number 30 [ 205.308657][ T1207] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 205.389719][ T7923] loop2: detected capacity change from 0 to 7 [ 205.397860][ T5855] loop2: p1 [ 205.401084][ T5855] loop2: partition table partially beyond EOD, truncated [ 205.408864][ T5855] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 205.416319][ T5848] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 205.478381][ T1207] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 205.493174][ T7923] loop2: p1 [ 205.500480][ T7923] loop2: partition table partially beyond EOD, truncated [ 205.508720][ T7923] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 205.520347][ T1207] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 205.610711][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.640237][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.657051][ T1207] usb 2-1: Product: syz [ 205.676518][ T1207] usb 2-1: Manufacturer: syz [ 205.694961][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.714792][ T1207] usb 2-1: SerialNumber: syz [ 205.716019][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 205.728754][ T5848] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 205.742230][ T5845] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 205.760484][ T1207] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 205.761446][ T7930] mmap: syz.3.519 (7930) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 205.783553][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.789368][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 205.795914][ T5848] usb 5-1: config 0 descriptor?? [ 205.955659][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 205.962922][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 205.973907][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 205.991559][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 206.011726][ T5845] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 206.025787][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.040439][ T5845] usb 3-1: Product: syz [ 206.050163][ T5845] usb 3-1: Manufacturer: syz [ 206.058528][ T5845] usb 3-1: SerialNumber: syz [ 206.073274][ T5845] usb 3-1: config 0 descriptor?? [ 206.106340][ T5848] usbhid 5-1:0.0: can't add hid device: -71 [ 206.118467][ T5848] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.194811][ T5848] usb 5-1: USB disconnect, device number 37 [ 206.571491][ T1207] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 206.776677][ T7947] fuse: Unknown parameter 'ÏßUr—€Ðà¿ÛÑÓÂ`€A™Icîçœ' [ 206.842885][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.864670][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.970966][ T7949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.523'. [ 207.210988][ T7954] syz_tun: entered allmulticast mode [ 207.251435][ T7953] syz_tun: left allmulticast mode [ 207.591556][ T43] IPVS: starting estimator thread 0... [ 207.653335][ T7968] loop2: detected capacity change from 0 to 7 [ 207.662075][ T7968] loop2: p1 [ 207.665329][ T7968] loop2: partition table partially beyond EOD, truncated [ 207.673376][ T7968] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 207.686089][ T7964] IPVS: using max 43 ests per chain, 103200 per kthread [ 207.695650][ T5919] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 207.747335][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 207.857721][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.874059][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.883627][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.895896][ T5919] usb 5-1: Product: syz [ 207.902020][ T5919] usb 5-1: Manufacturer: syz [ 207.909428][ T5919] usb 5-1: SerialNumber: syz [ 207.918185][ T5919] usb 5-1: config 0 descriptor?? [ 207.943630][ T5919] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 207.998706][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.034885][ T5919] usb 2-1: USB disconnect, device number 43 [ 208.085929][ T1207] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 208.139984][ T43] usb 5-1: USB disconnect, device number 38 [ 208.255683][ T5848] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 208.265718][ T1207] usb 1-1: Invalid ep0 maxpacket: 16 [ 208.308362][ T7982] xt_limit: Overflow, try lower: 184549376/256 [ 208.395402][ T43] usb 3-1: USB disconnect, device number 31 [ 208.405678][ T1207] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 208.416877][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.427141][ T5848] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.463839][ T7984] netlink: 76 bytes leftover after parsing attributes in process `syz.2.534'. [ 208.488148][ T5848] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 208.497523][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.508340][ T5848] usb 4-1: config 0 descriptor?? [ 208.585769][ T1207] usb 1-1: Invalid ep0 maxpacket: 16 [ 208.591497][ T1207] usb usb1-port1: attempt power cycle [ 208.946041][ T1207] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 209.020071][ T1207] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.096136][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.532'. [ 209.165929][ T1207] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 209.196269][ T1207] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.201870][ T1207] usb usb1-port1: unable to enumerate USB device [ 210.575726][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 210.747619][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.784292][ T43] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 210.861082][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.868968][ T8007] loop2: detected capacity change from 0 to 7 [ 210.889847][ T5963] usb 4-1: USB disconnect, device number 28 [ 210.915083][ T6229] loop2: p1 [ 210.918741][ T6229] loop2: partition table partially beyond EOD, truncated [ 210.931120][ T6229] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 210.949142][ T8007] loop2: p1 [ 210.952383][ T8007] loop2: partition table partially beyond EOD, truncated [ 210.963339][ T8007] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 210.981916][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.076156][ T43] usb 2-1: Product: syz [ 211.080371][ T43] usb 2-1: Manufacturer: syz [ 211.084999][ T43] usb 2-1: SerialNumber: syz [ 211.104717][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 211.232278][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 211.242877][ T8011] loop2: detected capacity change from 0 to 7 [ 211.272407][ T8011] Dev loop2: unable to read RDB block 7 [ 211.278697][ T8011] loop2: unable to read partition table [ 211.286121][ T8011] loop2: partition table beyond EOD, truncated [ 211.292917][ T8011] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 211.706277][ T5848] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 211.724511][ T5963] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 211.893183][ T5963] usb 4-1: config 1 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 211.904791][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 211.910180][ T5963] usb 4-1: config 1 interface 0 altsetting 222 bulk endpoint 0x82 has invalid maxpacket 1023 [ 211.935085][ T5848] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 211.972302][ T5848] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 211.987207][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 211.997017][ T5848] usb 1-1: Product: syz [ 212.001362][ T5963] usb 4-1: config 1 interface 0 altsetting 222 bulk endpoint 0x3 has invalid maxpacket 64 [ 212.011761][ T5848] usb 1-1: Manufacturer: syz [ 212.016643][ T5848] usb 1-1: SerialNumber: syz [ 212.021332][ T5963] usb 4-1: config 1 interface 0 has no altsetting 0 [ 212.202555][ T5848] usb 1-1: config 0 descriptor?? [ 212.265528][ T5963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.293658][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.317320][ T8018] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 212.825783][ T43] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 212.832289][ T43] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 212.891742][ T43] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 212.944042][ T5963] usb 4-1: Product: ëº€î»”á¬‰î¥¹æ¸°ïº¥å¢œ×£å¢µë„“æ¼¾ë·²ë» â¤²ëŸ´ã‡ºå’¶é ¤àª¢ä¾Œæ§³â¨ºåž°ç˜¢å©æ½€ä¼¯î­¥ì´ì©†çŸ‡è†½ç¯‰äŸ¦ç ¼ã«›æ®«æšã´™Ý é‹½æ¾¹áµ è‡ î€ªè‘‘Ôツ譭嚞ཧå‰å°œï‚³í‡½êƒ“ᄖ覢分梧Rꂦモừ⅃노ࢱⰜ앪꛰ྔ蘚﫩ꯘ풆⹳兆뀭㮱躭↶ [ 212.946053][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 212.969245][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.073204][ T43] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 213.110472][ T43] usb 2-1: USB disconnect, device number 44 [ 213.144650][ T5963] usb 4-1: Manufacturer: ч [ 213.156860][ T5963] usb 4-1: SerialNumber: àµ°â¹Šì†Žë‘¾à¾˜ãž¬â‡‡å‰šêµŒã®‡ë±Œâ¨·â²‰âŽ‰å’½å©¼íŠ¹ãª·çµžà¾æ®…æ››é´—àºŒÄ¤ê¸¸ë±²ìµ§å©«ä‚¹ç½±ì…‚å½´î®æ‡°ë«±êœ…穹똳퓿눮枿뽿䊳ç­î¯‚蔘îŽêƒ­çš°ä´´â°­ï„Œáˆ‹î¾¸ï©ê· ê‹‘{雋éˆä³ë·¿ï…›ç´¿ [ 213.167523][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 213.197294][ T43] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 213.207220][ T24] usb 1-1: USB disconnect, device number 39 [ 213.229980][ T5919] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.298462][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.334681][ T5963] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 213.344309][ T5963] usb 4-1: no configuration chosen from 1 choice [ 213.346238][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.784843][ T5919] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.865004][ T5919] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.892122][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.630222][ T5919] usb 3-1: GET_CAPABILITIES returned 0 [ 214.694903][ T5848] usb 4-1: USB disconnect, device number 29 [ 214.907601][ T5919] usbtmc 3-1:16.0: can't read capabilities [ 215.781056][ T5919] usb 3-1: USB disconnect, device number 32 [ 216.073177][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 216.101833][ T8052] loop2: detected capacity change from 0 to 7 [ 216.145091][ T5855] loop2: p1 [ 216.150153][ T5855] loop2: partition table partially beyond EOD, truncated [ 216.197080][ T5855] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 216.211071][ T8052] loop2: p1 [ 216.215866][ T8052] loop2: partition table partially beyond EOD, truncated [ 216.237708][ T8052] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 216.425771][ T5848] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 216.469034][ T8066] sg_write: data in/out 1037/16 bytes for SCSI command 0x22-- guessing data in; [ 216.469034][ T8066] program syz.1.557 not setting count and/or reply_len properly [ 216.597127][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.624352][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.641229][ T5848] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 216.660159][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.685963][ T5848] usb 4-1: config 0 descriptor?? [ 216.755658][ T43] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 216.796090][ T5919] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 216.909961][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 216.923255][ T5943] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 216.953871][ T43] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 216.973920][ T43] usb 5-1: config 0 has no interface number 0 [ 216.985864][ T5919] usb 3-1: config 0 has no interfaces? [ 216.999188][ T43] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 217.009063][ T5919] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 217.025623][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.040341][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.054034][ T5919] usb 3-1: Product: syz [ 217.067398][ T5919] usb 3-1: Manufacturer: syz [ 217.072019][ T5919] usb 3-1: SerialNumber: syz [ 217.084205][ T43] usb 5-1: config 0 descriptor?? [ 217.101791][ T43] gspca_main: spca561-2.14.0 probing abcd:cdee [ 217.115980][ T5919] usb 3-1: config 0 descriptor?? [ 217.133732][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.171898][ T5943] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.203610][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.228040][ T5848] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 217.240315][ T5943] usb 2-1: config 0 descriptor?? [ 217.329870][ T5848] kye 0003:0458:5015.0007: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 217.351027][ T5848] kye 0003:0458:5015.0007: tablet-enabling feature report not found [ 217.384422][ T5848] kye 0003:0458:5015.0007: tablet enabling failed [ 217.423505][ T43] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 217.453112][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.477512][ T43] usb 5-1: MIDIStreaming interface descriptor not found [ 217.592929][ T43] usb 5-1: USB disconnect, device number 39 [ 217.682710][ T5943] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 217.724377][ T5943] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input14 [ 217.781808][ T5963] usb 4-1: USB disconnect, device number 30 [ 217.881689][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.903096][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.966510][ T5943] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 218.179943][ T5943] usb 2-1: USB disconnect, device number 45 [ 218.254633][ T8109] input: syz0 as /devices/virtual/input/input15 [ 218.405636][ T5963] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 218.580692][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.295958][ T5963] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 219.314725][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.393588][ T5963] usb 1-1: Product: syz [ 219.418817][ T5963] usb 1-1: Manufacturer: syz [ 219.444335][ T5848] usb 3-1: USB disconnect, device number 33 [ 219.469349][ T5963] usb 1-1: SerialNumber: syz [ 219.500131][ T5963] usb 1-1: config 0 descriptor?? [ 219.528976][ T5963] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 219.550224][ T8120] loop2: detected capacity change from 0 to 7 [ 219.577107][ T8120] loop2: p1 [ 219.580442][ T8120] loop2: partition table partially beyond EOD, truncated [ 219.593839][ T8120] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 219.687208][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.733199][ T5845] usb 1-1: USB disconnect, device number 40 [ 219.740799][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 219.754658][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 219.754675][ T30] audit: type=1326 audit(1752040149.238:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 219.859448][ T8127] bridge_slave_0: left allmulticast mode [ 219.875486][ T8127] bridge_slave_0: left promiscuous mode [ 219.878283][ T30] audit: type=1326 audit(1752040149.238:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 219.903663][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.914312][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.929308][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 219.930413][ T30] audit: type=1326 audit(1752040149.238:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 219.958848][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 219.964475][ T30] audit: type=1326 audit(1752040149.238:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 219.968953][ T5848] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 220.000403][ T8127] bridge_slave_1: left allmulticast mode [ 220.006338][ T30] audit: type=1326 audit(1752040149.238:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.006382][ T30] audit: type=1326 audit(1752040149.248:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.006424][ T30] audit: type=1326 audit(1752040149.248:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.006464][ T30] audit: type=1326 audit(1752040149.248:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.006505][ T30] audit: type=1326 audit(1752040149.248:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.006546][ T30] audit: type=1326 audit(1752040149.248:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4e53b8e929 code=0x7ffc0000 [ 220.055941][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.105734][ T8127] bridge_slave_1: left promiscuous mode [ 220.165159][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.182940][ T8127] bond0: (slave bond_slave_0): Releasing backup interface [ 220.191067][ T10] usb 2-1: config 1 has no interface number 1 [ 220.220105][ T8127] bond0: (slave bond_slave_1): Releasing backup interface [ 220.223212][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.249456][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.259160][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.270811][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 220.276926][ T8127] team0: Port device team_slave_0 removed [ 220.285596][ T10] usb 2-1: Product: syz [ 220.285617][ T10] usb 2-1: Manufacturer: syz [ 220.285634][ T10] usb 2-1: SerialNumber: syz [ 220.309515][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 220.330741][ T5848] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 220.340237][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.354281][ T8127] team0: Port device team_slave_1 removed [ 220.356668][ T5848] usb 3-1: Product: syz [ 220.361197][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.364416][ T5848] usb 3-1: Manufacturer: syz [ 220.383350][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.414718][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.433141][ T5848] usb 3-1: SerialNumber: syz [ 220.442948][ T8127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.452833][ T5848] usb 3-1: config 0 descriptor?? [ 220.501176][ T8128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 220.591219][ T8118] netlink: 80 bytes leftover after parsing attributes in process `syz.1.566'. [ 220.602846][ T8118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (10 ns). Using initial count to start timer. [ 220.630962][ T8118] kvm: pic: non byte write [ 220.660028][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 220.792295][ T8143] loop2: detected capacity change from 0 to 7 [ 220.814974][ T8143] loop2: p1 [ 220.825965][ T8143] loop2: partition table partially beyond EOD, truncated [ 220.834172][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 220.842779][ T10] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 220.857309][ T8143] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 220.866829][ T10] usb 2-1: failed to enable PITCH for EP 0x82 [ 220.938209][ T10] usb 2-1: USB disconnect, device number 46 [ 220.969204][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 221.040273][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.562639][ T8153] netlink: 'syz.4.575': attribute type 2 has an invalid length. [ 221.694712][ T8153] $Hÿ: renamed from bond0 (while UP) [ 221.779713][ T8153] $Hÿ: entered promiscuous mode [ 222.995816][ T5848] usb_8dev 3-1:0.0 can0: sending command message failed [ 223.013678][ T5848] usb_8dev 3-1:0.0 can0: can't get firmware version [ 223.063499][ T8171] binder: 8170:8171 ioctl 400c620e 0 returned -14 [ 223.129443][ T8169] loop2: detected capacity change from 0 to 7 [ 223.170550][ T5855] loop2: p1 [ 223.180483][ T5855] loop2: partition table partially beyond EOD, truncated [ 223.230400][ T5848] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 223.248895][ T5855] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 223.419384][ T8169] loop2: p1 [ 223.422715][ T8169] loop2: partition table partially beyond EOD, truncated [ 223.430546][ T5848] usb 3-1: USB disconnect, device number 34 [ 223.436842][ T8169] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 223.712621][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 223.771803][ T8177] loop2: detected capacity change from 0 to 7 [ 223.910217][ T8177] loop2: p1 [ 223.940457][ T8177] loop2: partition table partially beyond EOD, truncated [ 223.965805][ T8177] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 224.045426][ T5848] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 224.269432][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 224.309918][ T5848] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.321986][ T5848] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 224.385929][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.450225][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 224.525478][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 224.535435][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 224.818954][ T5848] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.866037][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.126498][ T5848] usb 3-1: Product: syz [ 225.151197][ T5848] usb 3-1: Manufacturer: syz [ 225.193566][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 225.236137][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 225.256675][ T5848] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 225.262604][ T5848] cdc_wdm 3-1:1.0: Unknown control protocol [ 225.299267][ T8197] netlink: 92 bytes leftover after parsing attributes in process `syz.4.590'. [ 225.356372][ T8197] netlink: 92 bytes leftover after parsing attributes in process `syz.4.590'. [ 225.684373][ T8211] vlan0: entered promiscuous mode [ 225.766564][ T8217] loop2: detected capacity change from 0 to 7 [ 225.823569][ T8217] loop2: p1 [ 225.835650][ T8217] loop2: partition table partially beyond EOD, truncated [ 225.849683][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.856470][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.863943][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.870547][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.877114][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.883721][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.890148][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.896748][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.906220][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.912846][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.923655][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.930292][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.940465][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.947090][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.953391][ T8217] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 225.956313][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.967131][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.975474][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.982132][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 225.988920][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 225.995555][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 226.015387][ T5943] usb 3-1: USB disconnect, device number 35 [ 226.015431][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 226.245682][ T5848] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 226.250302][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.445997][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 226.458537][ T5848] usb 1-1: config 0 has no interfaces? [ 226.469460][ T5848] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.488900][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.589265][ T5848] usb 1-1: Product: syz [ 226.629711][ T5848] usb 1-1: Manufacturer: syz [ 226.634978][ T5848] usb 1-1: SerialNumber: syz [ 226.651261][ T5848] usb 1-1: config 0 descriptor?? [ 227.390605][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.459258][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.655664][ T5848] usb 1-1: USB disconnect, device number 41 [ 228.406135][ T5943] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 228.556286][ T5943] usb 3-1: device descriptor read/64, error -71 [ 228.835689][ T5943] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 229.071107][ T43] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 229.078866][ T5943] usb 3-1: device descriptor read/64, error -71 [ 229.206015][ T5943] usb usb3-port1: attempt power cycle [ 229.235807][ T43] usb 2-1: device descriptor read/64, error -71 [ 229.538636][ T43] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 229.596028][ T5943] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 229.659238][ T5943] usb 3-1: device descriptor read/8, error -71 [ 229.695903][ T43] usb 2-1: device descriptor read/64, error -71 [ 229.925942][ T43] usb usb2-port1: attempt power cycle [ 229.986248][ T5943] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 230.021527][ T5943] usb 3-1: device descriptor read/8, error -71 [ 230.299710][ T5943] usb usb3-port1: unable to enumerate USB device [ 230.347261][ T43] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 230.380073][ T43] usb 2-1: device descriptor read/8, error -71 [ 230.626455][ T43] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 230.656240][ T5943] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 230.670968][ T43] usb 2-1: device descriptor read/8, error -71 [ 230.703576][ T8269] loop2: detected capacity change from 0 to 7 [ 230.740150][ T8269] loop2: p1 [ 230.763007][ T8269] loop2: partition table partially beyond EOD, truncated [ 230.784268][ T8269] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 230.791843][ T43] usb usb2-port1: unable to enumerate USB device [ 230.819295][ T5943] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.829524][ T5943] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.873594][ T5943] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.902944][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.079590][ T5215] loop2: p1 [ 231.082861][ T5215] loop2: partition table partially beyond EOD, truncated [ 231.106342][ T5215] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 231.156203][ T5943] usb 1-1: usb_control_msg returned -32 [ 231.162850][ T5943] usbtmc 1-1:16.0: can't read capabilities [ 231.199100][ T5943] usb 1-1: USB disconnect, device number 42 [ 231.463053][ T5848] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 231.645740][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 231.654316][ T5848] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.662788][ T5848] usb 3-1: config 0 has no interface number 0 [ 231.673365][ T5848] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.686415][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.694468][ T5848] usb 3-1: Product: syz [ 231.698689][ T5848] usb 3-1: Manufacturer: syz [ 231.703518][ T5848] usb 3-1: SerialNumber: syz [ 231.710613][ T5848] usb 3-1: config 0 descriptor?? [ 231.718407][ T5848] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.826607][ T8281] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 231.946481][ T5848] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.981501][ T8281] usb 4-1: device descriptor read/64, error -71 [ 231.988338][ T5848] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 232.255692][ T8281] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 233.043147][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 233.044633][ T43] usb 3-1: USB disconnect, device number 40 [ 233.094210][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 233.105866][ T5943] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 233.125621][ T8281] usb 4-1: device descriptor read/64, error -71 [ 233.156154][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 233.182228][ T43] quatech2 3-1:0.51: device disconnected [ 233.235968][ T8281] usb usb4-port1: attempt power cycle [ 233.275733][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 233.285996][ T5943] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.313657][ T5943] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.366757][ T5943] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.395626][ T5943] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 233.415090][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.437146][ T5943] usb 5-1: config 0 descriptor?? [ 233.575871][ T8281] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 233.598215][ T8281] usb 4-1: device descriptor read/8, error -71 [ 233.765614][ T8280] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 233.835892][ T8281] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 233.879320][ T8281] usb 4-1: device descriptor read/8, error -71 [ 233.906089][ T1207] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 233.925603][ T8280] usb 1-1: Using ep0 maxpacket: 16 [ 233.960051][ T5943] kye 0003:0458:4018.0009: unknown main item tag 0x0 [ 233.971968][ T5943] kye 0003:0458:4018.0009: reserved main item tag 0xe [ 233.975853][ T8280] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 233.994606][ T8309] loop2: detected capacity change from 0 to 7 [ 234.001148][ T8281] usb usb4-port1: unable to enumerate USB device [ 234.016103][ T8309] loop2: p1 [ 234.019370][ T8309] loop2: partition table partially beyond EOD, truncated [ 234.035199][ T8309] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 234.068478][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.080599][ T5943] kye 0003:0458:4018.0009: item fetching failed at offset 15/133 [ 234.091065][ T8280] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 234.129357][ T8280] usb 1-1: can't read configurations, error -22 [ 234.140713][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.170590][ T5943] kye 0003:0458:4018.0009: parse failed [ 234.184976][ T1207] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.186145][ T5943] kye 0003:0458:4018.0009: probe with driver kye failed with error -22 [ 234.199620][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 234.229960][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.239896][ T5943] usb 5-1: USB disconnect, device number 40 [ 234.264936][ T1207] usb 3-1: config 0 descriptor?? [ 234.315612][ T8280] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 234.420366][ T8316] syzkaller1: entered promiscuous mode [ 234.426993][ T8316] syzkaller1: entered allmulticast mode [ 234.485946][ T8280] usb 1-1: Using ep0 maxpacket: 16 [ 234.503932][ T8280] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 234.517654][ T8280] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 234.527561][ T8280] usb 1-1: can't read configurations, error -22 [ 234.546118][ T8280] usb usb1-port1: attempt power cycle [ 234.945823][ T8280] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 235.106666][ T8280] usb 1-1: Using ep0 maxpacket: 16 [ 235.112825][ T8280] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 235.132812][ T8280] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 235.224214][ T8280] usb 1-1: can't read configurations, error -22 [ 235.377852][ T8280] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 235.416510][ T8280] usb 1-1: Using ep0 maxpacket: 16 [ 235.422299][ T8280] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 235.430926][ T8337] netlink: 'syz.4.624': attribute type 4 has an invalid length. [ 235.440097][ T8280] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 235.448848][ T8280] usb 1-1: can't read configurations, error -22 [ 235.456183][ T8280] usb usb1-port1: unable to enumerate USB device [ 235.514073][ T8327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.525016][ T8327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.541394][ T8327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.548512][ T8327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.589770][ T8327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.597322][ T8327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 235.610708][ T8327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.618252][ T8327] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 235.673377][ T8327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.683582][ T8327] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.721007][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 235.727553][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 235.774564][ T1207] usb 3-1: USB disconnect, device number 41 [ 235.939975][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 235.939992][ T30] audit: type=1326 audit(1752040165.428:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.4.625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f503d18e929 code=0x0 [ 235.991552][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 236.007283][ T8345] program syz.1.626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.017385][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 236.536034][ T1207] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 236.583772][ T8359] ======================================================= [ 236.583772][ T8359] WARNING: The mand mount option has been deprecated and [ 236.583772][ T8359] and is ignored by this kernel. Remove the mand [ 236.583772][ T8359] option from the mount to silence this warning. [ 236.583772][ T8359] ======================================================= [ 236.685923][ T1207] usb 2-1: device descriptor read/64, error -71 [ 236.778133][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 236.786617][ T8280] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 236.965994][ T1207] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 236.978082][ T8280] usb 4-1: Using ep0 maxpacket: 8 [ 236.993467][ T8280] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.015074][ T8280] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.035978][ T8280] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.055496][ T8280] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.059658][ T8281] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 237.087660][ T8280] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.100275][ T8280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.161124][ T1207] usb 2-1: device descriptor read/64, error -71 [ 237.275957][ T1207] usb usb2-port1: attempt power cycle [ 237.281443][ T8281] usb 1-1: Using ep0 maxpacket: 32 [ 237.293616][ T8281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.304933][ T8281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.319158][ T8281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.332210][ T8281] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 237.343071][ T8281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.351222][ T5848] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 237.358960][ T8280] usb 4-1: GET_CAPABILITIES returned 0 [ 237.364454][ T8280] usbtmc 4-1:16.0: can't read capabilities [ 237.372986][ T8281] usb 1-1: config 0 descriptor?? [ 237.515608][ T5848] usb 3-1: device descriptor read/64, error -71 [ 237.576059][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 237.585709][ T5943] usb 4-1: USB disconnect, device number 35 [ 237.629876][ T8281] usbhid 1-1:0.0: can't add hid device: -71 [ 237.642814][ T1207] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 237.652860][ T8281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.657752][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 237.667041][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 237.696999][ T1207] usb 2-1: device descriptor read/8, error -71 [ 237.707178][ T8281] usb 1-1: USB disconnect, device number 47 [ 237.737654][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 237.757447][ T5848] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 237.925609][ T5848] usb 3-1: device descriptor read/64, error -71 [ 237.955942][ T1207] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 237.996356][ T1207] usb 2-1: device descriptor read/8, error -71 [ 238.096111][ T5848] usb usb3-port1: attempt power cycle [ 238.110113][ T1207] usb usb2-port1: unable to enumerate USB device [ 238.435856][ T5848] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 238.546091][ T5848] usb 3-1: device descriptor read/8, error -71 [ 238.566618][ T8413] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.643' sets config #1 [ 238.806481][ T5848] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 238.866881][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 238.900741][ T5848] usb 3-1: device descriptor read/8, error -71 [ 239.177346][ T5848] usb usb3-port1: unable to enumerate USB device [ 239.465857][ T5848] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 239.655746][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 239.689826][ T8437] netlink: 48 bytes leftover after parsing attributes in process `syz.3.647'. [ 239.736144][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 239.742219][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 239.816201][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 239.819583][ T8439] Cannot find set identified by id 65535 to match [ 241.544536][ T8467] autofs4:pid:8467:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 241.797577][ T1207] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 242.033860][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 242.047653][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.059200][ T1207] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 242.071498][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.083635][ T1207] usb 3-1: Product: syz [ 242.089596][ T1207] usb 3-1: Manufacturer: syz [ 242.113521][ T1207] usb 3-1: SerialNumber: syz [ 242.192051][ T1207] usb 3-1: config 0 descriptor?? [ 242.208810][ T1207] gs_usb 3-1:0.0: Required endpoints not found [ 242.597482][ T8484] bridge2: entered promiscuous mode [ 243.065738][ T1207] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 243.205692][ T1207] usb 4-1: device descriptor read/64, error -71 [ 243.265739][ T5919] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 243.429601][ T5919] usb 5-1: device descriptor read/64, error -71 [ 243.506576][ T1207] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 243.675675][ T5919] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 243.685880][ T1207] usb 4-1: device descriptor read/64, error -71 [ 244.086093][ T5919] usb 5-1: device descriptor read/64, error -71 [ 244.207809][ T5919] usb usb5-port1: attempt power cycle [ 244.236032][ T1207] usb usb4-port1: attempt power cycle [ 244.545813][ T5919] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 244.587728][ T8281] usb 3-1: USB disconnect, device number 46 [ 244.588306][ T5919] usb 5-1: device descriptor read/8, error -71 [ 244.656074][ T1207] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 244.705907][ T1207] usb 4-1: device descriptor read/8, error -71 [ 244.965779][ T1207] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 244.998906][ T1207] usb 4-1: device descriptor read/8, error -71 [ 245.005709][ T8281] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 245.015979][ T5919] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 245.046728][ T5919] usb 5-1: device descriptor read/8, error -71 [ 245.216328][ T1207] usb usb4-port1: unable to enumerate USB device [ 245.296074][ T8281] usb 3-1: Using ep0 maxpacket: 8 [ 245.306989][ T8281] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.317496][ T8281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.325676][ T8281] usb 3-1: Product: syz [ 245.330023][ T8281] usb 3-1: Manufacturer: syz [ 245.334699][ T8281] usb 3-1: SerialNumber: syz [ 245.352614][ T5919] usb usb5-port1: unable to enumerate USB device [ 245.354065][ T8281] usb 3-1: config 0 descriptor?? [ 246.259148][ T8281] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 246.288609][ T8281] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.335637][ T8281] usb 3-1: USB disconnect, device number 47 [ 246.346266][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 246.507894][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.521639][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.558117][ T43] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 246.567277][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.582780][ T43] usb 5-1: config 0 descriptor?? [ 246.638845][ T1207] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 246.736254][ T8281] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 246.795707][ T8280] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 246.808387][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 246.823936][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.843532][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.865334][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.925651][ T1207] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.936301][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.951687][ T1207] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.961025][ T1207] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.969427][ T1207] usb 2-1: Manufacturer: syz [ 246.974759][ T8281] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.985865][ T8280] usb 4-1: Using ep0 maxpacket: 8 [ 246.997821][ T8280] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 247.007093][ T8280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.016158][ T1207] usb 2-1: config 0 descriptor?? [ 247.021654][ T8281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.033471][ T43] holtek_mouse 0003:04D9:A067.000A: reserved main item tag 0xd [ 247.041421][ T8280] usb 4-1: Product: syz [ 247.046872][ T8280] usb 4-1: Manufacturer: syz [ 247.052311][ T8281] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 247.066202][ T8280] usb 4-1: SerialNumber: syz [ 247.071740][ T8281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.081570][ T43] holtek_mouse 0003:04D9:A067.000A: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 247.106406][ T8281] usb 3-1: config 0 descriptor?? [ 247.116827][ T8280] usb 4-1: config 0 descriptor?? [ 247.132810][ T8280] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 247.224846][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.236118][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.263373][ T5848] usb 5-1: USB disconnect, device number 46 [ 247.422573][ T1207] rc_core: IR keymap rc-hauppauge not found [ 247.428733][ T1207] Registered IR keymap rc-empty [ 247.434263][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.456026][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.489672][ T1207] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 247.521848][ T1207] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 247.592252][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.600872][ T8281] hid-generic 0003:0463:1215.000B: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.2-1/input0 [ 247.662760][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.745799][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.765977][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.785737][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.805696][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.831089][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.847975][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.889714][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.897919][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.936789][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.968654][ T1207] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 247.999313][ T1207] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.009491][ T1207] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.046655][ T1207] usb 2-1: USB disconnect, device number 55 [ 248.136185][ T5943] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 248.285664][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 248.298319][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.318566][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.338010][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.372933][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.390344][ T5943] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.401975][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.426401][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.440962][ T5943] usb 5-1: config 0 descriptor?? [ 248.456025][ T8280] gspca_sonixj: reg_w1 err -110 [ 248.495744][ T8280] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 248.879339][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 248.925024][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 248.933421][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 248.951316][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 248.983423][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.004429][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.012251][ T8549] bridge1: entered promiscuous mode [ 249.020118][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.032210][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.045447][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.067720][ T5943] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.098212][ T5943] microsoft 0003:045E:07DA.000C: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 249.159736][ T5943] microsoft 0003:045E:07DA.000C: no inputs found [ 249.178456][ T5943] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 249.379296][ T5943] usb 3-1: USB disconnect, device number 48 [ 249.719040][ T5943] usb 4-1: USB disconnect, device number 40 [ 249.887015][ T8563] loop4: detected capacity change from 0 to 1 [ 249.894983][ T8563] Dev loop4: unable to read RDB block 1 [ 249.949452][ T8563] loop4: unable to read partition table [ 250.045916][ T8563] loop4: partition table beyond EOD, truncated [ 250.052256][ T8563] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 250.385847][ T8567] netlink: 'syz.1.675': attribute type 3 has an invalid length. [ 250.736041][ T5919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 250.885911][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 250.908458][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.922498][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 250.931966][ T5919] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.945461][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.957053][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.678'. [ 250.977748][ T5919] usb 2-1: Product: syz [ 250.988182][ T8578] bridge3: entered promiscuous mode [ 250.993697][ T5919] usb 2-1: Manufacturer: syz [ 251.001971][ T5919] usb 2-1: SerialNumber: syz [ 251.313498][ T5919] usbhid 2-1:1.0: can't add hid device: -71 [ 251.328257][ T5919] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 251.358960][ T5919] usb 2-1: USB disconnect, device number 56 [ 253.966174][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.975072][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.039756][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 254.118219][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.143382][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.615820][ T5848] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 254.778635][ T5848] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 254.797392][ T5848] usb 3-1: config 127 has no interface number 0 [ 254.807891][ T5848] usb 3-1: config 127 interface 238 has no altsetting 0 [ 254.820226][ T8615] loop4: detected capacity change from 0 to 1 [ 254.829902][ T5848] usb 3-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 254.845365][ T8615] Dev loop4: unable to read RDB block 1 [ 254.864665][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.873414][ T8615] loop4: unable to read partition table [ 254.887402][ T8615] loop4: partition table beyond EOD, truncated [ 254.893701][ T5848] usb 3-1: Product: syz [ 254.901704][ T5848] usb 3-1: Manufacturer: syz [ 254.921595][ T8615] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 254.946116][ T5848] usb 3-1: SerialNumber: syz [ 255.097904][ T8622] ipvlan0: entered promiscuous mode [ 255.105131][ T8622] ipvlan0: left promiscuous mode [ 255.202009][ T5848] usb 3-1: USB disconnect, device number 49 [ 255.499830][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.508636][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.575980][ T1207] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 255.735888][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 255.743368][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.773690][ T1207] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.795973][ T1207] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 255.825097][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.864228][ T1207] usb 4-1: Product: syz [ 255.879694][ T1207] usb 4-1: Manufacturer: syz [ 255.895421][ T1207] usb 4-1: SerialNumber: syz [ 255.939416][ T1207] usb 4-1: config 0 descriptor?? [ 255.993242][ T1207] hub 4-1:0.0: bad descriptor, ignoring hub [ 256.027488][ T1207] hub 4-1:0.0: probe with driver hub failed with error -5 [ 256.107454][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.126695][ T1207] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 256.172141][ T7182] usb 4-1: Failed to submit usb control message: -71 [ 256.179841][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.198893][ T8666] sctp: [Deprecated]: syz.1.696 (pid 8666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.198893][ T8666] Use struct sctp_sack_info instead [ 256.215732][ T7182] usb 4-1: unable to send the bmi data to the device: -71 [ 256.215770][ T7182] usb 4-1: unable to get target info from device [ 256.215800][ T7182] usb 4-1: could not get target info (-71) [ 256.215820][ T7182] usb 4-1: could not probe fw (-71) [ 256.249762][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.291073][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.315428][ T8635] kvm_intel: kvm [8634]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x4401 [ 256.585909][ T5919] usb 4-1: USB disconnect, device number 41 [ 257.077943][ T8680] loop4: detected capacity change from 0 to 1 [ 257.118486][ T8680] Dev loop4: unable to read RDB block 1 [ 257.137727][ T8680] loop4: unable to read partition table [ 257.154963][ T8680] loop4: partition table beyond EOD, truncated [ 257.190197][ T8680] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 257.518241][ T8690] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 257.825088][ T8704] input: syz0 as /devices/virtual/input/input17 [ 258.294515][ T8711] sctp: [Deprecated]: syz.1.707 (pid 8711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.294515][ T8711] Use struct sctp_sack_info instead [ 258.412249][ T8689] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 258.711745][ T8725] dlm: non-version read from control device 8224 [ 258.865865][ T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 258.964698][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 259.178755][ T43] usb 2-1: config 0 has no interfaces? [ 259.184557][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.207588][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.242118][ T43] usb 2-1: config 0 descriptor?? [ 259.481166][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.544227][ T5919] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 259.586169][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.615308][ T5848] usb 2-1: USB disconnect, device number 57 [ 259.711944][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.752810][ T5919] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.762735][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.788532][ T5919] usb 3-1: config 0 descriptor?? [ 259.810317][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 260.062463][ T7184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.075699][ T5848] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 260.095855][ T7184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.108940][ T5919] pwc: recv_control_msg error -71 req 02 val 2b00 [ 260.135954][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 260.148006][ T8280] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.165832][ T5919] pwc: recv_control_msg error -71 req 02 val 2700 [ 260.166897][ T8280] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 260.173874][ T5919] pwc: recv_control_msg error -71 req 02 val 2c00 [ 260.198475][ T5919] pwc: recv_control_msg error -71 req 04 val 1000 [ 260.206406][ T5919] pwc: recv_control_msg error -71 req 04 val 1300 [ 260.226031][ T5919] pwc: recv_control_msg error -71 req 04 val 1400 [ 260.236345][ T5919] pwc: recv_control_msg error -71 req 02 val 2000 [ 260.254541][ T5919] pwc: recv_control_msg error -71 req 02 val 2100 [ 260.265724][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 260.274495][ T5919] pwc: recv_control_msg error -71 req 04 val 1500 [ 260.280215][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.291904][ T5919] pwc: recv_control_msg error -71 req 02 val 2500 [ 260.316072][ T5919] pwc: recv_control_msg error -71 req 02 val 2400 [ 260.319605][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.322977][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.353096][ T7184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.357660][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.380807][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 260.399160][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.407520][ T7184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.414864][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.421680][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.425786][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.453733][ T5848] usb 2-1: Product: syz [ 260.469477][ T5848] usb 2-1: Manufacturer: syz [ 260.477318][ T5919] pwc: Registered as video103. [ 260.492858][ T5848] usb 2-1: SerialNumber: syz [ 260.516412][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 260.586802][ T5919] usb 3-1: USB disconnect, device number 50 [ 260.631075][ T7184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.674294][ T7184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.793758][ T7184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.804437][ T7184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.922937][ T5848] usb 2-1: 0:2 : does not exist [ 260.961278][ T7184] bridge_slave_1: left allmulticast mode [ 260.971147][ T7184] bridge_slave_1: left promiscuous mode [ 260.979685][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.994894][ T7184] bridge_slave_0: left allmulticast mode [ 261.001548][ T7184] bridge_slave_0: left promiscuous mode [ 261.010922][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.473920][ T7184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.487428][ T7184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.501812][ T7184] bond0 (unregistering): Released all slaves [ 261.523999][ T7184] bond1 (unregistering): Released all slaves [ 261.578335][ T7184] tipc: Left network mode [ 262.054814][ T5848] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 262.079760][ T5848] usb 2-1: Warning! Unlikely big volume range (=58462), cval->res is probably wrong. [ 262.091255][ T5848] usb 2-1: [5] FU [Delay Control] ch = 1, val = 0/58462/1 [ 262.136087][ T5848] usb 2-1: USB disconnect, device number 58 [ 262.296138][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 262.303099][ T8280] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 262.311139][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 264.389520][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 264.395971][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 264.402060][ T8280] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 266.455694][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 266.455979][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 266.461812][ T8280] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 268.535914][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 268.536044][ T8280] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 268.550116][ T8280] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 316.939435][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.945941][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.379338][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.385882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.255693][ T31] INFO: task kworker/0:2:1207 blocked for more than 143 seconds. [ 421.263478][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 421.271178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.279936][ T31] task:kworker/0:2 state:D stack:21432 pid:1207 tgid:1207 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 421.292190][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 421.299194][ T31] Call Trace: [ 421.302536][ T31] [ 421.305826][ T31] __schedule+0x16f5/0x4d00 [ 421.310403][ T31] ? schedule+0x165/0x360 [ 421.314756][ T31] ? __pfx___schedule+0x10/0x10 [ 421.319679][ T31] ? schedule+0x91/0x360 [ 421.323947][ T31] schedule+0x165/0x360 [ 421.328185][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.333675][ T31] __mutex_lock+0x724/0xe80 [ 421.338283][ T31] ? look_up_lock_class+0x74/0x170 [ 421.343425][ T31] ? __mutex_lock+0x51b/0xe80 [ 421.348175][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 421.354449][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.359549][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.365303][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.371077][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 421.377210][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.382938][ T31] process_scheduled_works+0xae1/0x17b0 [ 421.388561][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.394574][ T31] worker_thread+0x8a0/0xda0 [ 421.399211][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.405623][ T31] ? __kthread_parkme+0x7b/0x200 [ 421.410614][ T31] kthread+0x70e/0x8a0 [ 421.414721][ T31] ? __pfx_worker_thread+0x10/0x10 [ 421.419924][ T31] ? __pfx_kthread+0x10/0x10 [ 421.424536][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.429798][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.435056][ T31] ? __pfx_kthread+0x10/0x10 [ 421.439774][ T31] ret_from_fork+0x3f9/0x770 [ 421.444402][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.449580][ T31] ? __switch_to_asm+0x39/0x70 [ 421.454374][ T31] ? __switch_to_asm+0x33/0x70 [ 421.459205][ T31] ? __pfx_kthread+0x10/0x10 [ 421.463829][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.468676][ T31] [ 421.471754][ T31] INFO: task syz-executor:5836 blocked for more than 143 seconds. [ 421.479613][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 421.487272][ T31] Blocked by coredump. [ 421.491849][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.500797][ T31] task:syz-executor state:D stack:24104 pid:5836 tgid:5836 ppid:5831 task_flags:0x40010c flags:0x00004002 [ 421.512785][ T31] Call Trace: [ 421.516116][ T31] [ 421.519079][ T31] __schedule+0x16f5/0x4d00 [ 421.523616][ T31] ? __lock_acquire+0x9f0/0xd20 [ 421.528546][ T31] ? schedule+0x165/0x360 [ 421.532918][ T31] ? __pfx___schedule+0x10/0x10 [ 421.537884][ T31] ? schedule+0x91/0x360 [ 421.542157][ T31] schedule+0x165/0x360 [ 421.546394][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.551894][ T31] __mutex_lock+0x724/0xe80 [ 421.556508][ T31] ? kobject_put+0x43f/0x480 [ 421.561132][ T31] ? __mutex_lock+0x51b/0xe80 [ 421.565927][ T31] ? rfkill_unregister+0xc8/0x220 [ 421.570986][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.576091][ T31] ? __pfx_device_del+0x10/0x10 [ 421.580978][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 421.586246][ T31] rfkill_unregister+0xc8/0x220 [ 421.591124][ T31] hci_unregister_dev+0x374/0x510 [ 421.596207][ T31] vhci_release+0x80/0xd0 [ 421.600562][ T31] ? __pfx_vhci_release+0x10/0x10 [ 421.605645][ T31] __fput+0x44c/0xa70 [ 421.609681][ T31] task_work_run+0x1d1/0x260 [ 421.614312][ T31] ? __pfx_task_work_run+0x10/0x10 [ 421.619491][ T31] do_exit+0x6b5/0x22e0 [ 421.623685][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 421.629117][ T31] ? __pfx_do_exit+0x10/0x10 [ 421.633734][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.638986][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.644217][ T31] do_group_exit+0x21c/0x2d0 [ 421.648880][ T31] __x64_sys_exit_group+0x3f/0x40 [ 421.653928][ T31] x64_sys_call+0x21ba/0x21c0 [ 421.658780][ T31] do_syscall_64+0xfa/0x3b0 [ 421.663312][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.668582][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.674692][ T31] ? clear_bhb_loop+0x60/0xb0 [ 421.679435][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.685362][ T31] RIP: 0033:0x7f26eb58e929 [ 421.689845][ T31] RSP: 002b:00007ffc9bca7a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 421.698322][ T31] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f26eb58e929 [ 421.706361][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 421.714360][ T31] RBP: 00007f26eb7b6738 R08: 00007ffc9bca57e7 R09: 0000000000000008 [ 421.722399][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 421.730409][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.738806][ T31] [ 421.741885][ T31] INFO: task kworker/u8:14:7184 blocked for more than 143 seconds. [ 421.749933][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 421.757721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.766464][ T31] task:kworker/u8:14 state:D stack:21160 pid:7184 tgid:7184 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 421.778527][ T31] Workqueue: netns cleanup_net [ 421.783297][ T31] Call Trace: [ 421.786615][ T31] [ 421.789563][ T31] __schedule+0x16f5/0x4d00 [ 421.794080][ T31] ? __lock_acquire+0x9f0/0xd20 [ 421.798984][ T31] ? schedule+0x165/0x360 [ 421.803339][ T31] ? __pfx___schedule+0x10/0x10 [ 421.808277][ T31] ? schedule+0x91/0x360 [ 421.812554][ T31] schedule+0x165/0x360 [ 421.816771][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.822272][ T31] __mutex_lock+0x724/0xe80 [ 421.826841][ T31] ? kobject_put+0x43f/0x480 [ 421.831449][ T31] ? __mutex_lock+0x51b/0xe80 [ 421.836183][ T31] ? rfkill_unregister+0xc8/0x220 [ 421.841246][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.846350][ T31] ? __pfx_device_del+0x10/0x10 [ 421.851245][ T31] rfkill_unregister+0xc8/0x220 [ 421.856171][ T31] wiphy_unregister+0x238/0xae0 [ 421.861045][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 421.867002][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 421.872391][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 421.877748][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.882984][ T31] ? kfree+0x18e/0x440 [ 421.887102][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 421.892587][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 421.898327][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 421.904427][ T31] hwsim_exit_net+0x584/0x640 [ 421.909154][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 421.914397][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 421.920255][ T31] ops_undo_list+0x49a/0x990 [ 421.924881][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 421.930060][ T31] cleanup_net+0x4c5/0x800 [ 421.934506][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 421.939500][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.944737][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.950520][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.956300][ T31] process_scheduled_works+0xae1/0x17b0 [ 421.961878][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.967955][ T31] worker_thread+0x8a0/0xda0 [ 421.972613][ T31] kthread+0x70e/0x8a0 [ 421.981157][ T31] ? __pfx_worker_thread+0x10/0x10 [ 421.986378][ T31] ? __pfx_kthread+0x10/0x10 [ 421.990998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.996265][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.001488][ T31] ? __pfx_kthread+0x10/0x10 [ 422.006140][ T31] ret_from_fork+0x3f9/0x770 [ 422.010749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.015937][ T31] ? __switch_to_asm+0x39/0x70 [ 422.020730][ T31] ? __switch_to_asm+0x33/0x70 [ 422.025581][ T31] ? __pfx_kthread+0x10/0x10 [ 422.030206][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.034990][ T31] [ 422.038071][ T31] INFO: task kworker/0:10:8280 blocked for more than 144 seconds. [ 422.045986][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 422.053623][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.062346][ T31] task:kworker/0:10 state:D stack:23896 pid:8280 tgid:8280 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 422.074401][ T31] Workqueue: events rfkill_op_handler [ 422.079814][ T31] Call Trace: [ 422.083106][ T31] [ 422.086093][ T31] __schedule+0x16f5/0x4d00 [ 422.090629][ T31] ? __lock_acquire+0x9f1/0xd20 [ 422.095547][ T31] ? schedule+0x165/0x360 [ 422.099922][ T31] ? __pfx___schedule+0x10/0x10 [ 422.104871][ T31] ? schedule+0x91/0x360 [ 422.109202][ T31] schedule+0x165/0x360 [ 422.113394][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.118930][ T31] __mutex_lock+0x724/0xe80 [ 422.123454][ T31] ? __lock_acquire+0xab9/0xd20 [ 422.128345][ T31] ? __mutex_lock+0x51b/0xe80 [ 422.133056][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 422.138409][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.143453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.148700][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 422.154619][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.161016][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 422.166277][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 422.172016][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 422.177184][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 422.182921][ T31] rfkill_set_block+0x1cf/0x440 [ 422.187834][ T31] rfkill_epo+0x7e/0x180 [ 422.192096][ T31] rfkill_op_handler+0x84/0x240 [ 422.197012][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 422.202748][ T31] process_scheduled_works+0xae1/0x17b0 [ 422.208378][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.214395][ T31] worker_thread+0x8a0/0xda0 [ 422.219066][ T31] kthread+0x70e/0x8a0 [ 422.223164][ T31] ? __pfx_worker_thread+0x10/0x10 [ 422.228336][ T31] ? __pfx_kthread+0x10/0x10 [ 422.232957][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.238216][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.243453][ T31] ? __pfx_kthread+0x10/0x10 [ 422.248131][ T31] ret_from_fork+0x3f9/0x770 [ 422.252750][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.257920][ T31] ? __switch_to_asm+0x39/0x70 [ 422.262724][ T31] ? __switch_to_asm+0x33/0x70 [ 422.267527][ T31] ? __pfx_kthread+0x10/0x10 [ 422.272140][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.276971][ T31] [ 422.280034][ T31] INFO: task syz.3.705:8696 blocked for more than 144 seconds. [ 422.287650][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 422.295288][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.303995][ T31] task:syz.3.705 state:D stack:25640 pid:8696 tgid:8689 ppid:5862 task_flags:0x400140 flags:0x00004006 [ 422.316004][ T31] Call Trace: [ 422.319287][ T31] [ 422.322222][ T31] __schedule+0x16f5/0x4d00 [ 422.326803][ T31] ? schedule+0x165/0x360 [ 422.331167][ T31] ? __pfx___schedule+0x10/0x10 [ 422.336070][ T31] ? schedule+0x91/0x360 [ 422.340321][ T31] schedule+0x165/0x360 [ 422.344479][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.350002][ T31] __mutex_lock+0x724/0xe80 [ 422.354622][ T31] ? kobject_put+0x43f/0x480 [ 422.359270][ T31] ? __mutex_lock+0x51b/0xe80 [ 422.363981][ T31] ? rfkill_unregister+0xc8/0x220 [ 422.369076][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.374132][ T31] ? __pfx_device_del+0x10/0x10 [ 422.379133][ T31] rfkill_unregister+0xc8/0x220 [ 422.384035][ T31] nfc_unregister_device+0x96/0x2a0 [ 422.389371][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 422.395138][ T31] virtual_ncidev_close+0x56/0x90 [ 422.400260][ T31] __fput+0x44c/0xa70 [ 422.404291][ T31] task_work_run+0x1d1/0x260 [ 422.408939][ T31] ? __pfx_task_work_run+0x10/0x10 [ 422.414085][ T31] get_signal+0x11ed/0x1340 [ 422.418650][ T31] ? task_work_add+0x377/0x420 [ 422.423448][ T31] ? __pfx_vfs_read+0x10/0x10 [ 422.428202][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 422.433787][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 422.439152][ T31] ? __fget_files+0x2a/0x420 [ 422.443777][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 422.450020][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 422.455693][ T31] exit_to_user_mode_loop+0x75/0x110 [ 422.461045][ T31] do_syscall_64+0x2bd/0x3b0 [ 422.465762][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.471012][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.477149][ T31] ? clear_bhb_loop+0x60/0xb0 [ 422.481864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.487815][ T31] RIP: 0033:0x7f4e53b8e929 [ 422.492254][ T31] RSP: 002b:00007f4e54abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.500736][ T31] RAX: fffffffffffffff2 RBX: 00007f4e53db6080 RCX: 00007f4e53b8e929 [ 422.508800][ T31] RDX: 00000000000000f0 RSI: 0000200000000300 RDI: 000000000000000a [ 422.516863][ T31] RBP: 00007f4e53c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.524885][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.532960][ T31] R13: 0000000000000000 R14: 00007f4e53db6080 R15: 00007f4e53edfa28 [ 422.541036][ T31] [ 422.544115][ T31] [ 422.544115][ T31] Showing all locks held in the system: [ 422.551882][ T31] 1 lock held by khungtaskd/31: [ 422.556849][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 422.566820][ T31] 3 locks held by kworker/0:2/1207: [ 422.572056][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.583079][ T31] #1: ffffc90003cbfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.596639][ T31] #2: ffffffff8f7f88e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 422.608042][ T31] 2 locks held by getty/5601: [ 422.612735][ T31] #0: ffff88814c2af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.622580][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 422.632766][ T31] 1 lock held by syz-executor/5836: [ 422.638001][ T31] #0: ffffffff8f7f88e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 422.648231][ T31] 4 locks held by kworker/u8:14/7184: [ 422.653616][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.664550][ T31] #1: ffffc90003f0fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.675192][ T31] #2: ffffffff8f510bd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 422.684860][ T31] #3: ffffffff8f7f88e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 422.695090][ T31] 4 locks held by kworker/0:10/8280: [ 422.700582][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.711717][ T31] #1: ffffc90003cffbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.722742][ T31] #2: ffffffff8f7f88e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 422.732289][ T31] #3: ffff888030697100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 422.742015][ T31] 2 locks held by syz.3.705/8696: [ 422.747138][ T31] #0: ffff888030697100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 422.756971][ T31] #1: ffffffff8f7f88e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 422.767308][ T31] [ 422.769644][ T31] ============================================= [ 422.769644][ T31] [ 422.778133][ T31] NMI backtrace for cpu 0 [ 422.778157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 422.778178][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.778189][ T31] Call Trace: [ 422.778197][ T31] [ 422.778204][ T31] dump_stack_lvl+0x189/0x250 [ 422.778228][ T31] ? __wake_up_klogd+0xd9/0x110 [ 422.778257][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.778279][ T31] ? __pfx__printk+0x10/0x10 [ 422.778316][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 422.778343][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.778365][ T31] ? _printk+0xcf/0x120 [ 422.778394][ T31] ? __pfx__printk+0x10/0x10 [ 422.778420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.778441][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 422.778469][ T31] watchdog+0xfee/0x1030 [ 422.778488][ T31] ? watchdog+0x1de/0x1030 [ 422.778512][ T31] kthread+0x70e/0x8a0 [ 422.778541][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.778557][ T31] ? __pfx_kthread+0x10/0x10 [ 422.778584][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.778610][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.778636][ T31] ? __pfx_kthread+0x10/0x10 [ 422.778663][ T31] ret_from_fork+0x3f9/0x770 [ 422.778685][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.778710][ T31] ? __switch_to_asm+0x39/0x70 [ 422.778734][ T31] ? __switch_to_asm+0x33/0x70 [ 422.778757][ T31] ? __pfx_kthread+0x10/0x10 [ 422.778784][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.778823][ T31] [ 422.778830][ T31] Sending NMI from CPU 0 to CPUs 1: [ 422.935622][ C1] NMI backtrace for cpu 1 [ 422.935638][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 422.935660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.935672][ C1] RIP: 0010:mark_lock+0x3/0x190 [ 422.935695][ C1] Code: 8b 2c 24 e9 b0 fd ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb [ 422.935712][ C1] RSP: 0018:ffffc90000a08988 EFLAGS: 00000002 [ 422.935729][ C1] RAX: 00000000000c2042 RBX: 0000000000000002 RCX: 0000000000000000 [ 422.935741][ C1] RDX: 0000000000000004 RSI: ffff88801d2f6540 RDI: ffff88801d2f5a00 [ 422.935754][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8190d12d [ 422.935765][ C1] R10: dffffc0000000000 R11: ffffed1003a5cbc7 R12: 0000000000000002 [ 422.935789][ C1] R13: 0000000000000002 R14: ffff88801d2f6540 R15: ffff88801d2f6560 [ 422.935802][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 422.935816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.935828][ C1] CR2: 000056495085f168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 422.935844][ C1] Call Trace: [ 422.935850][ C1] [ 422.935867][ C1] __lock_acquire+0x680/0xd20 [ 422.935892][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 422.935910][ C1] lock_acquire+0x120/0x360 [ 422.935925][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 422.935944][ C1] ? select_task_rq_fair+0x651/0x3570 [ 422.935969][ C1] _raw_spin_lock_nested+0x32/0x50 [ 422.935993][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 422.936010][ C1] raw_spin_rq_lock_nested+0xad/0x140 [ 422.936029][ C1] try_to_wake_up+0x663/0x1290 [ 422.936055][ C1] call_timer_fn+0x17b/0x5f0 [ 422.936070][ C1] ? __pfx_process_timeout+0x10/0x10 [ 422.936089][ C1] ? call_timer_fn+0xbe/0x5f0 [ 422.936103][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 422.936122][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.936144][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.936167][ C1] ? __pfx_process_timeout+0x10/0x10 [ 422.936187][ C1] __run_timer_base+0x61a/0x860 [ 422.936210][ C1] ? ktime_get+0x3e/0x1f0 [ 422.936234][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 422.936256][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 422.936284][ C1] run_timer_softirq+0xb7/0x180 [ 422.936308][ C1] handle_softirqs+0x286/0x870 [ 422.936327][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 422.936346][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 422.936365][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 422.936389][ C1] __irq_exit_rcu+0xca/0x1f0 [ 422.936406][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 422.936427][ C1] irq_exit_rcu+0x9/0x30 [ 422.936443][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 422.936466][ C1] [ 422.936470][ C1] [ 422.936476][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.936493][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 422.936516][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 2d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 422.936547][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 422.936560][ C1] RAX: bf5c057b0c68ac00 RBX: ffffffff81975c78 RCX: bf5c057b0c68ac00 [ 422.936573][ C1] RDX: 0000000000000001 RSI: ffffffff8d998685 RDI: ffffffff8be29dc0 [ 422.936584][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 422.936597][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1eef0 [ 422.936609][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5eb40 [ 422.936621][ C1] ? do_idle+0x1e8/0x510 [ 422.936644][ C1] default_idle+0x13/0x20 [ 422.936666][ C1] default_idle_call+0x74/0xb0 [ 422.936683][ C1] do_idle+0x1e8/0x510 [ 422.936704][ C1] ? __pfx_do_idle+0x10/0x10 [ 422.936730][ C1] cpu_startup_entry+0x44/0x60 [ 422.936749][ C1] start_secondary+0x101/0x110 [ 422.936763][ C1] common_startup_64+0x13e/0x147 [ 422.936792][ C1] [ 422.937635][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 423.339580][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 423.351397][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.361471][ T31] Call Trace: [ 423.364765][ T31] [ 423.367707][ T31] dump_stack_lvl+0x99/0x250 [ 423.372314][ T31] ? __asan_memcpy+0x40/0x70 [ 423.377180][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.382393][ T31] ? __pfx__printk+0x10/0x10 [ 423.387012][ T31] panic+0x2db/0x790 [ 423.390937][ T31] ? __pfx_panic+0x10/0x10 [ 423.395550][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 423.400335][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 423.406162][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 423.411540][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 423.417718][ T31] watchdog+0x102d/0x1030 [ 423.422064][ T31] ? watchdog+0x1de/0x1030 [ 423.426500][ T31] kthread+0x70e/0x8a0 [ 423.430591][ T31] ? __pfx_watchdog+0x10/0x10 [ 423.435280][ T31] ? __pfx_kthread+0x10/0x10 [ 423.439927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.445145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.450365][ T31] ? __pfx_kthread+0x10/0x10 [ 423.454972][ T31] ret_from_fork+0x3f9/0x770 [ 423.459579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 423.464738][ T31] ? __switch_to_asm+0x39/0x70 [ 423.469516][ T31] ? __switch_to_asm+0x33/0x70 [ 423.474301][ T31] ? __pfx_kthread+0x10/0x10 [ 423.478901][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.483685][ T31] [ 423.487028][ T31] Kernel Offset: disabled [ 423.491357][ T31] Rebooting in 86400 seconds..